last executing test programs: 42.785681526s ago: executing program 1 (id=110): r0 = fsopen(&(0x7f0000000080)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x8cff) 42.687894892s ago: executing program 1 (id=112): r0 = syz_open_dev$loop(0x0, 0x9, 0x400000) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000000000ffff0a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 42.529513409s ago: executing program 1 (id=114): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) chmod(&(0x7f0000000180)='./file0\x00', 0x355) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b"], 0x34}}, 0x0) (async, rerun: 64) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x8) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) unshare(0x2a060400) (async) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) socket(0x2b, 0x1, 0x1) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 32) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff0000000001000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800ebf}, 0x94) (rerun: 32) 42.209546311s ago: executing program 1 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYBLOB="1000018004"], 0x28}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 42.142731193s ago: executing program 1 (id=118): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x2202, 0x0) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) prctl$PR_SCHED_CORE(0x3a, 0x0, 0x0, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x1010, r2, 0x8000000) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='-'], 0x9) 41.837517874s ago: executing program 1 (id=123): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1800001800000002000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000800000046000000760000008509000000000000b6080000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 34.542452538s ago: executing program 0 (id=153): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000100)='./file1\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x25, 0x363, &(0x7f0000000580)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x3) getpid() execve(&(0x7f0000001140)='./file2\x00', 0x0, 0x0) (fail_nth: 3) 33.985292041s ago: executing program 0 (id=155): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x1c0800) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r3, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000980), &(0x7f0000000080)=0x8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x4a, "5081e7beee3f99480b65634313a5ca0bf3cfb914615505d1a4edb0e5111e334aee853b3fabf721783b0028d9f5195c684fd7a966ab8da547523bd77b970e23298ce59dd6a2ec0fbc6815"}, &(0x7f00000004c0)=0x52) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x708, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) 30.719020875s ago: executing program 0 (id=160): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a6010000040000000300000000000000010000000000001205000000040000000000001203000000060000000000001008000000005f61dd5f61"], 0x0, 0x67, 0x0, 0x1}, 0x28) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x880) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7, 0xffffffff}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x40, 0x7ff, 0x74, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x700, 0x4, 0x7f}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400000a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x24670606, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) 29.600450321s ago: executing program 0 (id=164): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c0001800600010000d28d1ff5fa40c57e0000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x48) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) getdents(r0, 0x0, 0x0) 28.076107225s ago: executing program 0 (id=172): syz_open_dev$tty1(0xc, 0x4, 0x1) setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r1) unshare(0x28040680) fsync(r0) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000440)={@private=0xa010100, @multicast1}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000480)={@loopback, @empty, @loopback}, 0xc) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1946ff8a181d1ebc4eeba79307000000fddbdf25d2617397139737d30200", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r7, 0x0, 0x40) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4, &(0x7f00000017c0)=""/133, 0x85}, 0x9}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001880)=""/191, 0xbf}, {&(0x7f0000001940)=""/223, 0xdf}, {&(0x7f0000001a40)}, {&(0x7f00000004c0)=""/7, 0x7}, {&(0x7f0000001bc0)=""/250, 0xfa}, {&(0x7f0000000440)}], 0x6, 0x0, 0xf}, 0x5}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/243, 0xf3}, {&(0x7f0000003680)=""/255, 0xff}], 0x3}, 0x3}], 0x3, 0x10000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1398, 0xf0, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0xff000000], [0xff000000], 'ip6tnl0\x00', 'macvlan1\x00', {}, {}, 0x18}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1ff, 0x7, 0x3, 'netbios-ns\x00', {0x40}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0x0, 0xff000000, 0xff], [0x0, 0x0, 0xff000000], 'pimreg1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x3b, 0x0, 0x4, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 27.581086427s ago: executing program 0 (id=175): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22a0, 0x2, @perf_bp={&(0x7f0000000500), 0x5}, 0x1a, 0xfffffffffffffffd, 0x10000, 0x2, 0x3, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100005ff0000", @ANYRES32=0x0, @ANYBLOB="7f5500000000000020001280080001006774700014000280050009000b000000080002fffe000000"], 0x40}}, 0x20004050) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000b40)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000080000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c204000000050001000502000507180000000104080500018000000000000000040000000000000000"], 0x110}}], 0x1, 0xc0c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r2], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) brk(0x800000) socket$key(0xf, 0x3, 0x2) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) brk(0xcd27) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x110170, 0x2000000000fffe, 0xb1, 0x1, 0x7, 0x3, 0xffff, 0x0, 0x17f7e833, 0x0, 0x2000000020000006}, 0x0, 0x5, r1, 0xa) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000002c0)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0xfffdfff7, 0x335, 0x8, 0x7, 0x0, "8c2a891528a2853a995200"}) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000ec0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@init_itable}, {@dioread_lock}, {@resgid}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2604be0d8b76eb7d690c1e0000008314e2d784fbd5c27145f631cffea598fc060006004e2100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x1) 27.580768907s ago: executing program 32 (id=175): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22a0, 0x2, @perf_bp={&(0x7f0000000500), 0x5}, 0x1a, 0xfffffffffffffffd, 0x10000, 0x2, 0x3, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100005ff0000", @ANYRES32=0x0, @ANYBLOB="7f5500000000000020001280080001006774700014000280050009000b000000080002fffe000000"], 0x40}}, 0x20004050) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000b40)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000080000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c204000000050001000502000507180000000104080500018000000000000000040000000000000000"], 0x110}}], 0x1, 0xc0c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r2], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) brk(0x800000) socket$key(0xf, 0x3, 0x2) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) brk(0xcd27) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x110170, 0x2000000000fffe, 0xb1, 0x1, 0x7, 0x3, 0xffff, 0x0, 0x17f7e833, 0x0, 0x2000000020000006}, 0x0, 0x5, r1, 0xa) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000002c0)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0xfffdfff7, 0x335, 0x8, 0x7, 0x0, "8c2a891528a2853a995200"}) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000ec0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@init_itable}, {@dioread_lock}, {@resgid}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2604be0d8b76eb7d690c1e0000008314e2d784fbd5c27145f631cffea598fc060006004e2100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x1) 26.835943041s ago: executing program 33 (id=123): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1800001800000002000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000800000046000000760000008509000000000000b6080000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 8.845786107s ago: executing program 5 (id=284): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a0010000000028000", 0x2b}], 0x1}, 0x24048800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 5.661847747s ago: executing program 5 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8021}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 5.614346164s ago: executing program 5 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) timer_create(0x5, &(0x7f00000006c0)={0x0, 0x7, 0x4, @thr={&(0x7f0000000240)="575b182ad00a5b41641cde85d02395797150f8abc35c", &(0x7f0000000600)="da2f3ea478e9330480673a7b271ec1c56554bf1b3d81b0d0651cdc76847bb6ad808d6a2a4709b446ec70b0a0a025c58941c7c052ccc5441d732143a27a7a209540c1d8c2d74a2c15da1e6d1c14ed7017469d49c095f302a77320204dd7dad6a6f634a92fe4b6dc430cb21c287c6b4031886687be0e4aba8d609b7e33dfc6800326ec466248a11ce0d00666c68d57a5beb1c7a75e806d6b167d9dbb"}}, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3ffffffdb}, 0x10, 0x0, 0xfffffffd, 0x3, 0x9, 0x8001, 0x7ffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) lsm_set_self_attr(0x0, 0x0, 0x20, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x10e200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 4.825411956s ago: executing program 4 (id=312): socket$nl_route(0x10, 0x3, 0x0) 4.807721219s ago: executing program 4 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) statx(0xffffffffffffffff, &(0x7f0000005e00)='./file0\x00', 0x6000, 0x4, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x8, 0x0) lstat(&(0x7f0000006080)='./file0\x00', &(0x7f00000060c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006140)={{{@in6=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000006240)=0xe8) lstat(0x0, &(0x7f00000062c0)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) writev(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close_range(0xffffffffffffffff, r3, 0x2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x0, 0x2000000}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfe00, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 4.807090569s ago: executing program 5 (id=314): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000800007910000000000000c330e0ff000000009500000000"], &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) 4.735829741s ago: executing program 5 (id=315): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x480, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xd, 0xb}, {0x0, 0xfff3}, {0xd, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x5, 0x6, 0x6, {0x1c, 0x0, 0x5, 0x8, 0xffc0, 0x8000}, {0x7, 0x0, 0x3, 0x2, 0xac, 0x4}, 0x1, 0x10, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x5c9f, 0x2, 0x5, 0x8, 0x8, 0xfff, 0xa, 0x7, 0x6, 0x3f, 0x8, 0x5, 0x4, 0x7, 0xe9, 0x3, 0xffffffa5, 0xc42c, 0x80000001, 0xed, 0x106b, 0x2b0cda7a, 0x5, 0x9, 0x1fe0, 0x6, 0x3, 0x1000, 0x80000001, 0x5, 0x1, 0x2, 0x80000000, 0x1, 0x2, 0x7, 0x5, 0xf7d, 0x2, 0x7, 0x7960, 0x2, 0x80, 0x158, 0x8, 0x9, 0x80000000, 0x0, 0xf, 0x1, 0x0, 0x8000, 0xf1, 0x0, 0x0, 0x7, 0x8, 0x82, 0x8, 0x7, 0x7a5, 0x10001, 0x5, 0x3f, 0x4, 0xfffeffff, 0x3, 0xffffffff, 0x1c00, 0x8, 0x4041, 0xcf42, 0x5, 0x2, 0x9, 0x94, 0x2, 0x6, 0x6, 0x1, 0xa8, 0x4, 0x7, 0x4, 0x3f, 0x0, 0x8, 0x7, 0x8, 0x5, 0x3ad, 0xc, 0x1, 0x5, 0xe, 0x4, 0x5, 0x7ff, 0x401, 0x10001, 0x1, 0x3, 0xfffffff8, 0x7, 0x3, 0x9, 0x5, 0x5, 0x2, 0x4, 0xfa, 0x92, 0x8, 0xa, 0x5, 0x2, 0x4, 0x7fffffff, 0x1, 0x2, 0xfffff801, 0x6b, 0x0, 0x9, 0x8, 0x2, 0xf, 0x6, 0x9, 0x0, 0x17, 0x7, 0x4, 0x0, 0x27fc, 0x6, 0x200, 0x9, 0x100, 0x80, 0x10001, 0x9, 0x3, 0x94b7, 0x7, 0xf, 0xffffff12, 0xffffff50, 0x34, 0x5, 0x9, 0x3, 0x7fffffff, 0x8, 0x5, 0x8, 0x7fffffff, 0x6, 0x5, 0x7fffffff, 0x200, 0x6, 0x4, 0x2, 0x1, 0x5, 0xc, 0x7f, 0x7f, 0x3ff, 0x7fff, 0x7fffffff, 0x0, 0x75d, 0x8, 0x62723ca2, 0x480, 0xfffff3b8, 0x9, 0x6d7f, 0x6, 0x1, 0xfffffff7, 0x8, 0x0, 0x4, 0x6, 0x8, 0x3ff, 0x6de, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x9, 0x4, 0x240c, 0x1ff, 0x7, 0x7f, 0x4, 0x10001, 0x3, 0x5, 0xfffffffd, 0x2, 0x6, 0x0, 0x7, 0xd, 0x6, 0x1, 0x4, 0x9, 0x1000, 0x4, 0x3, 0x6, 0x6, 0x80000001, 0x8, 0x1, 0x8, 0x251, 0x8, 0x1, 0x3, 0x7, 0x5, 0x2, 0x6, 0x5, 0x3, 0x8, 0xffffffff, 0x800, 0xfffffffc, 0x0, 0x10000, 0x400, 0xfffffff9, 0x6, 0xfffffff8, 0x6, 0x6, 0x8, 0x0, 0x8000, 0x5, 0x2, 0xfffff001, 0x0, 0x10000, 0x7]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x20041010}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="d9af77dc48a7867d2cbd7000fddbdf2508004b0028000000080001000000000008003e0000000000"], 0x28}}, 0x4000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r4, &(0x7f0000000140)=0x7fd, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, r4, r4, r4, r4]}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000009730cb3f005932ee29000000000000f4d404c65998c46a81bc44b959295654e4b3b69c812021d09fb1975b6b32fa5f052f4480349c4b1ebfba7d2779adbfa5eed94b1a35d688a6b9ec73b1c166402ff987b7338f0e0544a68ab77ad5b7907bd013f8fb68557923ac64f57be7ac7557815c6a64ce9600c7f12276"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000040)="c1af4e9260dca2169ced93a06dd7bbc7b27e087c2416d396d725a63263216be83fc92c983977d656ab4f9301ff75", &(0x7f0000000080)=@udp6=r7}, 0x20) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0x9) ioctl$SIOCSIFHWADDR(r8, 0x8927, &(0x7f0000000280)={'veth0_macvtap\x00'}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0xffffedb8, {0x0, 0x0, 0x0, 0x7, 0x2000000000000000, 0x0, 0x1, 0xd, 0x8, "256727b98182847eabac09625e7f53e880df458a525b6f96cca22a819dc41acf74682eae60ab35481e030b3924fc3e86a469262875bf90b3abd4cefd19ec158c", "ad8dfead7e303a89f11923e1584fb2fe533357f0336c081a67a2b2caaf44e7851c585becb1cf9ad54a52dbc771c7a5af4f770a5b6de002bff3bfa64e189bcb4d", "aa1c79b0f303f74c6f911e1f34c6d06e6a0b4dc2ed7837d49797e34e9885bbe0", [0x6, 0x29b5afa3]}}) 4.074043931s ago: executing program 2 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x800) 3.568139116s ago: executing program 3 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e000080000000000b0000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc652230"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 3.566679996s ago: executing program 5 (id=321): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x1008a2, 0x7ff, 0x8006, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) socket$kcm(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000280)={[], [{@uid_eq}]}) acct(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) 3.469265662s ago: executing program 2 (id=322): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r5, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, 0x0}, 0x44010) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[]) sendmsg$kcm(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 2.837650237s ago: executing program 3 (id=323): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x9, &(0x7f00000001c0)={0x8, 0xfb2}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8010, 0xffffffffffffffff, 0x8ba5d000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='logfs\x00', 0x7f434856103a2b9, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4, @ANYBLOB="010328bd7000fedbdf251c0000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000034) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) unshare(0x62000000) syz_emit_ethernet(0x3e, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000300)={'raw\x00', 0x0, [0x401, 0xca63, 0x205, 0xffff8001, 0x6]}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) listen(r6, 0x100) 2.836635757s ago: executing program 6 (id=324): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c034002410000002000139215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0xffffffffffffffff, 0x1, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './mnt\x00'}) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x239, &(0x7f0000000540)="$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") fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x25, &(0x7f00000002c0)={0x1, 0x3, 0x1, 0x6}, 0x8, 0x2, 0xb, 0x0, 0x9, 0xfffffff9, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40e8662e, &(0x7f0000000040)={0xae55, 0x40000000000002, 0x3, 0xa, 0x14f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) fchmodat(r4, &(0x7f0000000000)='./file0\x00', 0x6) sendto$packet(r2, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.685553472s ago: executing program 6 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) timer_create(0x5, &(0x7f00000006c0)={0x0, 0x7, 0x4, @thr={&(0x7f0000000240)="575b182ad00a5b41641cde85d02395797150f8abc35c", &(0x7f0000000600)="da2f3ea478e9330480673a7b271ec1c56554bf1b3d81b0d0651cdc76847bb6ad808d6a2a4709b446ec70b0a0a025c58941c7c052ccc5441d732143a27a7a209540c1d8c2d74a2c15da1e6d1c14ed7017469d49c095f302a77320204dd7dad6a6f634a92fe4b6dc430cb21c287c6b4031886687be0e4aba8d609b7e33dfc6800326ec466248a11ce0d00666c68d57a5beb1c7a75e806d6b167d9dbb"}}, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3ffffffdb}, 0x10, 0x0, 0xfffffffd, 0x3, 0x9, 0x8001, 0x7ffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) lsm_set_self_attr(0x0, 0x0, 0x20, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x10e200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 2.45917065s ago: executing program 6 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe78, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x50000, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x4, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe78}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 2.431668995s ago: executing program 6 (id=327): syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x4, @void}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r7, 0x4, r7}, 0x5) close(r2) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0xfff}, 0x13) listen(r8, 0x6f6) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.321514423s ago: executing program 6 (id=328): fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) unshare(0x400) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x300, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 2.152887931s ago: executing program 3 (id=329): socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000024c0), 0xfe, 0x479, &(0x7f00000027c0)="$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") ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000200)={{[0x0, 0xffffffff, 0x80000000, 0x101]}, 0x0, 0x2, 0xca8, 0x0, &(0x7f0000000100)=[{{@align, {0xb, 0x0, 0x4, 0x8}}, 0x369, 0x0, 'journal_checksum'}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x96, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x1e) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xf, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x30}, 0x4, 0x0, 0x1, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xad41, 0xf60d}, 0x0, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, r1, 0xe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) unshare(0x6c040000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) getpgid(r7) 1.460195887s ago: executing program 6 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x29, r8, {0x7}}, './file1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xde5d, 0xffffffffffffffff, 0x8, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') 1.242323232s ago: executing program 3 (id=331): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="d8d86e3762", @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x29, 0xffffffffffffffff, {0x7}}, './file1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xde5d, 0xffffffffffffffff, 0x8, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 860.479476ms ago: executing program 4 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x10000088) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0xfffff7fd, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48904}, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) prlimit64(r3, 0x8, &(0x7f0000000240)={0xa, 0x89}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @private1, 0x7177}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001e40)={r5, 0x80, 0x2}, &(0x7f0000001e80)=0x8) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x103, 0x1) (async) sendmmsg$unix(r8, &(0x7f0000002f00)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)="0de4a4b2f2e8d653584aed6b5862098ee9052dddd9963a90f46072f3f2cb4c1a3912d5f2eaedb05143a426ca93075c4e87079195e4d0c8810a69d7b763d69c1e9ad6f38842dc3c3da663b1a1d8cdf4787599a26e69a49454e6b5ca3c8e502a299245ec9aa7", 0x65}, {&(0x7f0000000600)="9743458014a716af8a3fd5530e1a84e2d2bfb55cf15264207faf483cc198d6904bc5b50d1a14a4f076975131277ae9ed1ba1dce46e3791d00236883e4f9dcff477bb87def22cf211fff1aa6b5f258845c7d287bf2b5cdc", 0x57}, {&(0x7f0000000680)="fc3bd90109bb4dfcfb57ca52565ab0630c412ccb6d2fe5195236ed0621addf2ef5f8c782352f9b8326371e32fe31504a465f45b6ada10bff07a5eb7d1ed9c4a4ddf49367e8a3572d36c7cd3e7386df6f5713c440c3381a2fcfc417e462e5", 0x5e}, {&(0x7f0000000780)="186548185f6ec115a16ccb80dfed7b6c1e01d9fd621fabf1da526f7b40a88bb31a17ca8cd0a78ca1c7eb34b9ad67ad7e1c1204d12b3843743e4da9852011c59ef6e092a4b4fb0e620c1ea589fec183f17ee08a20b22f5f7c04920f1e1a0ff17c412d69766090514feb9d58206d4bbfdd69845c018bc00b9409eebba7aec1578d82f761b2c95d849699a2502fd65213c0e873ae6c511a02f990ec0ca11a31fc26dd9fe7bf2c192ed5afa75ca16ff169b805f4bc3dbae95ce12dfd6a33c155c99ae7cfb35260772e108042958e0caf8692348a750e9ab0d3ec3aae4cf7c28bc3", 0xdf}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="2800000000000000e5fc6eba3a81f65c5f0100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00003a001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x4001}}, {{&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000000b40)="d41717d53b08bb7a9bec42bfa74a24f5b03b524bd8042d638927ab16ef96fa6f986e562d1f6c2cf178da3d9f3fc120961fb619f2f7aba4c244b0ca6a09346e5d5b2f8c48c06251e7d7af968686626773e6dd7801b85a69fe363013ab128cbefeaea15e65a2b3380e36a69db2be9de8e86c9c7b9e7fa2527a676b6a5f2db08efe0523b1a2603f48404ade505f0583205b359cd9299ab9dead3abd26903fa92957a98abbcfc84a5d63a0dd93512ea04e6f16144592bc1e9047b82f1a98736244c8464f5fbaec74411361fc7818192aac7e344019ea0f69", 0xd6}, {&(0x7f00000008c0)="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", 0xff}, {&(0x7f0000000d00)="a65feef4177954acc7099e8e3d2c5a6eef842c8dedf852b54b5b9c50e6c2fea4d81f07a1379c1db382466f095b65fa4bdd198741325811b124e9bedce59c69d0d1933f4576ad4f56bb080ad7c8a47b518271700349f06b6a6c65f7653e2f16ab5a4de996fcdd8783bf9aedee6e1e04d0c9537bcd22e72b5670b22feb6f0d425faca414d7ca62f2b65d1772b3fdb1ad62e1d15ccd7af1cbc8e9359966a573f3bf4b0dd41202b8cccdf9827c3aa4664142e3721f94eb21b76cbd8182f536e48e1087f60d1b1512", 0xc6}, {&(0x7f0000001ec0)="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", 0x1000}], 0x4, 0x0, 0x0, 0x80}}], 0x2, 0x0) (async) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 559.027296ms ago: executing program 4 (id=333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}) 503.737426ms ago: executing program 4 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0xfeff}, 0x10) 421.407509ms ago: executing program 4 (id=335): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYBLOB="83d93a56dcb27bf4931d4c9ef97548a9c4605b18254932bbbbaea73e216ee857ea6496974df1edff05ca13dfab638ecbdae1d66572dbff1991778a303d6630f502a454fcf7cbda2cf597ae6b53f6113240b5e96ab873eaf1800041d7cf59c44a7325", @ANYBLOB="0100000004000000020000000b00000000000000000000000000000009551bc269961e60c6b98715c84f6b628be4bfe0098d9bab87ff5e916d69b855d71a5150eabb750bfd84be835cdc875bf8e9d89032d86b123a88240bfb164454ed1e36c38ba1ececaf5d91387c46388975c887d891e254742e49f238d75314174519666680b3e671458561a07fe6478a601b085a0896b4f56329a1cbf25ba8e4969e23d97714ba0935361ce430a7b987bdf9dec0"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x61, 0x30, 0x61, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd6af5d4000000000000000000200000ff02000000000000000000000000000100000000000000"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x3, 0x0, 0x0, 0xfd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x7000, 0x10000, 0xfffffffc, 0x6, 0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x2}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) 421.174299ms ago: executing program 2 (id=336): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x10000000000}, 0x20000034) 290.124951ms ago: executing program 3 (id=337): r0 = syz_open_dev$loop(0x0, 0x9, 0x400000) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000001400000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 268.543725ms ago: executing program 2 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x6409}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}]}}}]}, 0x5c}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000001340)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2110000, &(0x7f0000000080), 0x1, 0x59e, &(0x7f0000001c80)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x89}) (async) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) (async) socket$inet(0x2, 0x2, 0x1) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2a, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x21221, 0x8420}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_bond\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80d0}, 0xe1) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_FSGROWFSRT(r10, 0x40105870, &(0x7f0000000180)={0x8, 0x8}) 189.628448ms ago: executing program 3 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000001f030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000007d400500000000002604000001ed00000f030000000000007c440000000000006b0a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c26fc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48) 110.602211ms ago: executing program 2 (id=340): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a0000000000950000ff"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 0s ago: executing program 2 (id=341): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000540)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001400b595feffffff000000000a0046fe", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000003ffff0000000014000100fc0100000000200000000000000000010800090002000000"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): ): Directory bread(block 66) failed [ 31.131363][ T3493] FAT-fs (loop1): Directory bread(block 67) failed [ 31.151586][ T3493] FAT-fs (loop1): Directory bread(block 68) failed [ 31.161656][ T3493] FAT-fs (loop1): Directory bread(block 69) failed [ 31.166770][ T28] audit: type=1400 audit(1776070609.276:119): avc: denied { allowed } for pid=3485 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.168205][ T3493] FAT-fs (loop1): Directory bread(block 70) failed [ 31.240408][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.240582][ T3493] FAT-fs (loop1): Directory bread(block 71) failed [ 31.256226][ T28] audit: type=1400 audit(1776070609.306:120): avc: denied { create } for pid=3485 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.293178][ T3493] FAT-fs (loop1): Directory bread(block 72) failed [ 31.312054][ T28] audit: type=1400 audit(1776070609.366:121): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.333462][ T28] audit: type=1400 audit(1776070609.396:122): avc: denied { write } for pid=3494 comm="syz.2.3" name="igmp6" dev="proc" ino=4026532815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.347460][ T3493] FAT-fs (loop1): Directory bread(block 73) failed [ 31.397792][ T28] audit: type=1400 audit(1776070609.506:123): avc: denied { create } for pid=3502 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.428622][ T28] audit: type=1400 audit(1776070609.506:124): avc: denied { append } for pid=3502 comm="syz.4.6" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.555776][ T28] audit: type=1400 audit(1776070609.666:125): avc: denied { ioctl } for pid=3502 comm="syz.4.6" path="socket:[4939]" dev="sockfs" ino=4939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.598701][ T3490] syz.0.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 31.613200][ T3490] CPU: 1 UID: 0 PID: 3490 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 31.613249][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 31.613267][ T3490] Call Trace: [ 31.613273][ T3490] [ 31.613280][ T3490] __dump_stack+0x1d/0x30 [ 31.613309][ T3490] dump_stack_lvl+0x95/0xd0 [ 31.613342][ T3490] dump_stack+0x15/0x1b [ 31.613420][ T3490] dump_header+0x80/0x240 [ 31.613543][ T3490] oom_kill_process+0x295/0x350 [ 31.613571][ T3490] out_of_memory+0x97d/0xb80 [ 31.613595][ T3490] try_charge_memcg+0x62e/0xa10 [ 31.613640][ T3490] obj_cgroup_charge_pages+0x23/0xc0 [ 31.613762][ T3490] __memcg_kmem_charge_page+0x9e/0x170 [ 31.613793][ T3490] __alloc_frozen_pages_noprof+0x18a/0x360 [ 31.613828][ T3490] alloc_pages_mpol+0xb3/0x260 [ 31.613887][ T3490] alloc_pages_noprof+0x8f/0x140 [ 31.614000][ T3490] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 31.614041][ T3490] __kvmalloc_node_noprof+0x3d4/0x650 [ 31.614069][ T3490] ? futex_hash_allocate+0x190/0x9d0 [ 31.614100][ T3490] ? futex_hash_allocate+0x190/0x9d0 [ 31.614155][ T3490] futex_hash_allocate+0x190/0x9d0 [ 31.614199][ T3490] ? cap_task_prctl+0x13f/0x6e0 [ 31.614232][ T3490] futex_hash_prctl+0xd8/0xf0 [ 31.614282][ T3490] __se_sys_prctl+0x4f4/0x1400 [ 31.614311][ T3490] __x64_sys_prctl+0x67/0x80 [ 31.614345][ T3490] x64_sys_call+0x2533/0x3020 [ 31.614376][ T3490] do_syscall_64+0x12c/0x370 [ 31.614474][ T3490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.614522][ T3490] RIP: 0033:0x7f0fb62bc819 [ 31.614546][ T3490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.614568][ T3490] RSP: 002b:00007f0fb4d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 31.614594][ T3490] RAX: ffffffffffffffda RBX: 00007f0fb6535fa0 RCX: 00007f0fb62bc819 [ 31.614610][ T3490] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 31.614626][ T3490] RBP: 00007f0fb6352c91 R08: 0000000000000000 R09: 0000000000000000 [ 31.614671][ T3490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.614687][ T3490] R13: 00007f0fb6536038 R14: 00007f0fb6535fa0 R15: 00007fff812f4938 [ 31.614709][ T3490] [ 31.614750][ T3490] memory: usage 307200kB, limit 307200kB, failcnt 170 [ 31.868741][ T3490] memory+swap: usage 249384kB, limit 9007199254740988kB, failcnt 0 [ 31.904071][ T3511] loop1: detected capacity change from 0 to 512 [ 31.938645][ T28] audit: type=1400 audit(1776070610.046:126): avc: denied { read } for pid=3512 comm="syz.4.9" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 31.972459][ T3490] kmem: usage 124444kB, limit 9007199254740988kB, failcnt 0 [ 31.997476][ T3511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.001999][ T28] audit: type=1400 audit(1776070610.046:127): avc: denied { open } for pid=3512 comm="syz.4.9" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.013133][ T3490] Memory cgroup stats for /syz0: [ 32.138623][ T3490] cache 499712 [ 32.180878][ T3490] rss 90112 [ 32.189364][ T3490] shmem 0 [ 32.192773][ T3490] mapped_file 40960 [ 32.206176][ T3519] loop4: detected capacity change from 0 to 512 [ 32.212732][ T3490] dirty 0 [ 32.220368][ T3490] writeback 0 [ 32.224558][ T3519] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 32.258362][ T3490] workingset_refault_anon 45 [ 32.280274][ T3490] workingset_refault_file 45 [ 32.297027][ T3519] EXT4-fs (loop4): 1 truncate cleaned up [ 32.307103][ T3490] swap 90112 [ 32.322391][ T3490] swapcached 368640 [ 32.343362][ T3519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.366769][ T3490] pgpgin 519 [ 32.385833][ T3490] pgpgout 374 [ 32.395032][ T3490] pgfault 161 [ 32.414378][ T3490] pgmajfault 41 [ 32.431526][ T3490] inactive_anon 0 [ 32.443842][ T3490] active_anon 94208 [ 32.457189][ T3490] inactive_file 0 [ 32.474610][ T3490] active_file 499712 [ 32.490374][ T3490] unevictable 0 [ 32.501382][ T3490] hierarchical_memory_limit 314572800 [ 32.511242][ T3490] hierarchical_memsw_limit 9223372036854771712 [ 32.519651][ T3490] total_cache 499712 [ 32.530272][ T3490] total_rss 90112 [ 32.539477][ T3490] total_shmem 0 [ 32.560734][ T3490] total_mapped_file 40960 [ 32.565336][ T3490] total_dirty 0 [ 32.569030][ T3490] total_writeback 0 [ 32.573100][ T3490] total_workingset_refault_anon 45 [ 32.578426][ T3490] total_workingset_refault_file 45 [ 32.583843][ T3490] total_swap 90112 [ 32.587665][ T3490] total_swapcached 368640 [ 32.592388][ T3490] total_pgpgin 519 [ 32.596359][ T3490] total_pgpgout 374 [ 32.600370][ T3490] total_pgfault 161 [ 32.605409][ T3490] total_pgmajfault 41 [ 32.609710][ T3490] total_inactive_anon 0 [ 32.630761][ T3490] total_active_anon 94208 [ 32.635506][ T3490] total_inactive_file 0 [ 32.654066][ T3490] total_active_file 499712 [ 32.662711][ T3490] total_unevictable 0 [ 32.666883][ T3490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1,pid=3489,uid=0 [ 32.681663][ T3490] Memory cgroup out of memory: Killed process 3490 (syz.0.1) total-vm:96272kB, anon-rss:1352kB, file-rss:22536kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 32.730899][ T3482] syz.3.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 32.754811][ T3490] syz.0.1 (3490) used greatest stack depth: 9336 bytes left [ 32.801037][ T3482] CPU: 1 UID: 0 PID: 3482 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 32.801080][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 32.801093][ T3482] Call Trace: [ 32.801099][ T3482] [ 32.801106][ T3482] __dump_stack+0x1d/0x30 [ 32.801133][ T3482] dump_stack_lvl+0x95/0xd0 [ 32.801193][ T3482] dump_stack+0x15/0x1b [ 32.801217][ T3482] dump_header+0x80/0x240 [ 32.801248][ T3482] oom_kill_process+0x295/0x350 [ 32.801297][ T3482] out_of_memory+0x97d/0xb80 [ 32.801353][ T3482] try_charge_memcg+0x62e/0xa10 [ 32.801393][ T3482] __mem_cgroup_charge+0x65/0x150 [ 32.801428][ T3482] filemap_add_folio+0x110/0x350 [ 32.801488][ T3482] __filemap_get_folio_mpol+0x326/0x680 [ 32.801517][ T3482] filemap_fault+0x486/0xb90 [ 32.801543][ T3482] ? css_rstat_updated+0xbb/0x280 [ 32.801607][ T3482] ? __rcu_read_lock+0x36/0x50 [ 32.801694][ T3482] __do_fault+0xbc/0x200 [ 32.801715][ T3482] handle_mm_fault+0xfab/0x3020 [ 32.801771][ T3482] ? vma_start_read+0x1c7/0x2c0 [ 32.801800][ T3482] do_user_addr_fault+0x62f/0x1050 [ 32.801834][ T3482] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 32.801864][ T3482] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 32.801951][ T3482] ? trace_page_fault_user+0x1f/0xe0 [ 32.802033][ T3482] exc_page_fault+0x62/0xa0 [ 32.802057][ T3482] asm_exc_page_fault+0x26/0x30 [ 32.802080][ T3482] RIP: 0033:0x7f7600bd16b2 [ 32.802153][ T3482] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 73 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 32.802168][ T3482] RSP: 002b:00007ffde82c6310 EFLAGS: 00010202 [ 32.802186][ T3482] RAX: 0000000000019008 RBX: 00007f7601aa5720 RCX: 0000000000000000 [ 32.802262][ T3482] RDX: 0000001b33e0b000 RSI: 0000000000000008 RDI: 00007f7601aa5720 [ 32.802276][ T3482] RBP: 000000000000036d R08: 00007f7600f60000 R09: 00007f7600f76128 [ 32.802289][ T3482] R10: 0000000000000001 R11: 000000000000001b R12: ffffffff85325b77 [ 32.802303][ T3482] R13: 00007f7600f76128 R14: 000000000000018d R15: fffffffffffe7000 [ 32.802319][ T3482] ? sctp_get_af_specific+0x37/0x60 [ 32.802346][ T3482] [ 32.802373][ T3482] memory: usage 307200kB, limit 307200kB, failcnt 1525 [ 33.071138][ T3482] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 33.079063][ T3482] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 33.111013][ T3482] Memory cgroup stats for /syz3: [ 33.111264][ T3482] cache 0 [ 33.151004][ T3482] rss 0 [ 33.153848][ T3482] shmem 0 [ 33.156768][ T3482] mapped_file 0 [ 33.161032][ T3482] dirty 0 [ 33.163975][ T3482] writeback 0 [ 33.167245][ T3482] workingset_refault_anon 126 [ 33.176273][ T3518] kexec: Could not allocate control_code_buffer [ 33.181028][ T3482] workingset_refault_file 30 [ 33.187135][ T3482] swap 188416 [ 33.190411][ T3482] swapcached 704512 [ 33.219463][ T3482] pgpgin 1284 [ 33.236357][ T3482] pgpgout 1284 [ 33.240002][ T3482] pgfault 287 [ 33.243386][ T3482] pgmajfault 133 [ 33.246960][ T3482] inactive_anon 0 [ 33.250589][ T3482] active_anon 0 [ 33.277080][ T3526] loop0: detected capacity change from 0 to 256 [ 33.293315][ T3526] msdos: Bad value for 'tz' [ 33.347388][ T3526] loop0: detected capacity change from 0 to 512 [ 33.359365][ T3526] EXT4-fs: Ignoring removed nobh option [ 33.372273][ T3526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.385749][ T3526] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.399560][ T3482] inactive_file 0 [ 33.403467][ T3482] active_file 0 [ 33.406988][ T3482] unevictable 0 [ 33.410716][ T3482] hierarchical_memory_limit 314572800 [ 33.416627][ T3482] hierarchical_memsw_limit 9223372036854771712 [ 33.423858][ T3482] total_cache 0 [ 33.427316][ T3482] total_rss 0 [ 33.430594][ T3482] total_shmem 0 [ 33.434914][ T3482] total_mapped_file 0 [ 33.438906][ T3482] total_dirty 0 [ 33.475767][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.514882][ T3509] syz.2.8 (3509) used greatest stack depth: 8824 bytes left [ 33.537187][ T3526] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.552054][ T3526] EXT4-fs (loop0): 1 truncate cleaned up [ 33.562102][ T3526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.639468][ T3482] total_writeback 0 [ 33.667576][ T3482] total_workingset_refault_anon 126 [ 33.712550][ T3482] total_workingset_refault_file 30 [ 33.760269][ T3482] total_swap 188416 [ 33.783068][ T3482] total_swapcached 704512 [ 33.811835][ T3482] total_pgpgin 1284 [ 33.837759][ T3482] total_pgpgout 1284 [ 33.862495][ T3482] total_pgfault 287 [ 34.046314][ T3482] total_pgmajfault 133 [ 34.060961][ T3482] total_inactive_anon 0 [ 34.073404][ T3482] total_active_anon 0 [ 34.088463][ T3482] total_inactive_file 0 [ 34.099885][ T3482] total_active_file 0 [ 34.112081][ T3482] total_unevictable 0 [ 34.123518][ T3482] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4,pid=3482,uid=0 [ 34.171012][ T3482] Memory cgroup out of memory: Killed process 3482 (syz.3.4) total-vm:96272kB, anon-rss:1236kB, file-rss:22488kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 34.240217][ T3529] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12'. [ 34.287983][ T3511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.584247][ T3511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.733204][ T3544] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 34.748863][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.840159][ T3544] loop3: detected capacity change from 0 to 1024 [ 34.847296][ T3544] EXT4-fs: Ignoring removed orlov option [ 34.873926][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.984195][ T3511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.526362][ T47] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.582105][ T47] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.617373][ T47] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.655491][ T47] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.281484][ T3572] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.291306][ T3572] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 36.310200][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 36.310220][ T28] audit: type=1400 audit(1776070614.386:153): avc: denied { create } for pid=3566 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.363651][ T3573] Zero length message leads to an empty skb [ 36.397792][ T28] audit: type=1400 audit(1776070614.386:154): avc: denied { write } for pid=3566 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.481411][ T3571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=3571 comm=syz.4.23 [ 36.612582][ T3554] syz.2.18 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 36.627124][ T3554] CPU: 1 UID: 0 PID: 3554 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 36.627157][ T3554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 36.627171][ T3554] Call Trace: [ 36.627178][ T3554] [ 36.627186][ T3554] __dump_stack+0x1d/0x30 [ 36.627274][ T3554] dump_stack_lvl+0x95/0xd0 [ 36.627299][ T3554] dump_stack+0x15/0x1b [ 36.627321][ T3554] dump_header+0x80/0x240 [ 36.627347][ T3554] oom_kill_process+0x295/0x350 [ 36.627393][ T3554] out_of_memory+0x97d/0xb80 [ 36.627428][ T3554] try_charge_memcg+0x62e/0xa10 [ 36.627470][ T3554] obj_cgroup_charge_pages+0x23/0xc0 [ 36.627647][ T3554] __memcg_kmem_charge_page+0x9e/0x170 [ 36.627684][ T3554] __alloc_frozen_pages_noprof+0x18a/0x360 [ 36.627721][ T3554] alloc_pages_mpol+0xb3/0x260 [ 36.627766][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.627813][ T3554] alloc_pages_noprof+0x8f/0x140 [ 36.627845][ T3554] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 36.627902][ T3554] __kvmalloc_node_noprof+0x3d4/0x650 [ 36.627933][ T3554] ? futex_hash_allocate+0x190/0x9d0 [ 36.628004][ T3554] ? futex_hash_allocate+0x190/0x9d0 [ 36.628065][ T3554] futex_hash_allocate+0x190/0x9d0 [ 36.628164][ T3554] ? cap_task_prctl+0x13f/0x6e0 [ 36.628257][ T3554] futex_hash_prctl+0xd8/0xf0 [ 36.628343][ T3554] __se_sys_prctl+0x4f4/0x1400 [ 36.628375][ T3554] __x64_sys_prctl+0x67/0x80 [ 36.628405][ T3554] x64_sys_call+0x2533/0x3020 [ 36.628504][ T3554] do_syscall_64+0x12c/0x370 [ 36.628577][ T3554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.628602][ T3554] RIP: 0033:0x7fccd216c819 [ 36.628620][ T3554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.628686][ T3554] RSP: 002b:00007fccd0bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 36.628708][ T3554] RAX: ffffffffffffffda RBX: 00007fccd23e5fa0 RCX: 00007fccd216c819 [ 36.628724][ T3554] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 36.628738][ T3554] RBP: 00007fccd2202c91 R08: 0000000000000000 R09: 0000000000000000 [ 36.628790][ T3554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.628804][ T3554] R13: 00007fccd23e6038 R14: 00007fccd23e5fa0 R15: 00007fffd8c25f68 [ 36.628824][ T3554] [ 36.628857][ T3554] memory: usage 307092kB, limit 307200kB, failcnt 314 [ 36.791556][ T28] audit: type=1400 audit(1776070614.896:155): avc: denied { read write } for pid=3575 comm="syz.3.24" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.805635][ T3554] memory+swap: usage 46756kB, limit 9007199254740988kB, failcnt 0 [ 36.814242][ T28] audit: type=1400 audit(1776070614.926:156): avc: denied { open } for pid=3575 comm="syz.3.24" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.822569][ T3554] kmem: usage 45992kB, limit 9007199254740988kB, failcnt 0 [ 36.927565][ T3554] Memory cgroup stats for /syz2: [ 36.930369][ T3554] cache 524288 [ 36.938748][ T3554] rss 4096 [ 36.941822][ T3554] shmem 0 [ 36.944771][ T3554] mapped_file 65536 [ 36.948606][ T3554] dirty 0 [ 36.951570][ T3554] writeback 0 [ 36.954872][ T3554] workingset_refault_anon 86 [ 36.959477][ T3554] workingset_refault_file 380 [ 36.964189][ T3554] swap 196608 [ 36.967494][ T3554] swapcached 569344 [ 36.971340][ T3554] pgpgin 1368 [ 36.974639][ T3554] pgpgout 1238 [ 36.978078][ T3554] pgfault 788 [ 36.981384][ T3554] pgmajfault 56 [ 36.984849][ T3554] inactive_anon 0 [ 36.988498][ T3554] active_anon 8192 [ 36.992241][ T3554] inactive_file 0 [ 36.995887][ T3554] active_file 524288 [ 36.999840][ T3554] unevictable 0 [ 37.005760][ T3554] hierarchical_memory_limit 314572800 [ 37.011240][ T3554] hierarchical_memsw_limit 9223372036854771712 [ 37.021001][ T3554] total_cache 524288 [ 37.025454][ T3554] total_rss 4096 [ 37.029105][ T3554] total_shmem 0 [ 37.032870][ T3554] total_mapped_file 65536 [ 37.037226][ T3554] total_dirty 0 [ 37.040715][ T3554] total_writeback 0 [ 37.044801][ T3554] total_workingset_refault_anon 86 [ 37.050031][ T3554] total_workingset_refault_file 380 [ 37.055331][ T3554] total_swap 196608 [ 37.061316][ T3554] total_swapcached 569344 [ 37.065786][ T3554] total_pgpgin 1368 [ 37.069612][ T3554] total_pgpgout 1238 [ 37.073797][ T3554] total_pgfault 788 [ 37.077717][ T3554] total_pgmajfault 56 [ 37.082024][ T3554] total_inactive_anon 0 [ 37.086621][ T3554] total_active_anon 8192 [ 37.091405][ T3554] total_inactive_file 0 [ 37.095757][ T3554] total_active_file 524288 [ 37.101137][ T3554] total_unevictable 0 [ 37.111837][ T3554] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18,pid=3550,uid=0 [ 37.126742][ T3554] Memory cgroup out of memory: Killed process 3554 (syz.2.18) total-vm:96272kB, anon-rss:1256kB, file-rss:22488kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 37.166407][ T3583] loop3: detected capacity change from 0 to 1024 [ 37.238329][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 37.268294][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.295178][ T28] audit: type=1400 audit(1776070615.406:157): avc: denied { ioctl } for pid=3575 comm="syz.3.24" path="/newroot/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.338666][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.350837][ T3584] bridge_slave_1: left allmulticast mode [ 37.494866][ T3584] bridge_slave_1: left promiscuous mode [ 37.501375][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.517584][ T3584] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 37.536136][ T3585] macvlan2: entered promiscuous mode [ 37.595664][ T3591] loop2: detected capacity change from 0 to 512 [ 37.615259][ T3585] macvlan2: entered allmulticast mode [ 37.620714][ T3585] veth0_virt_wifi: entered allmulticast mode [ 37.644252][ T28] audit: type=1400 audit(1776070615.666:158): avc: denied { mount } for pid=3588 comm="syz.2.26" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.675913][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.689230][ T3591] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.702293][ T3591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.706486][ T28] audit: type=1400 audit(1776070615.716:159): avc: denied { mounton } for pid=3588 comm="syz.2.26" path="/file1" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 37.841528][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.862852][ T3602] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 37.882366][ T3602] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 37.895250][ T56] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.907214][ T3602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 37.910378][ T56] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.925093][ T56] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.936789][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 37.961036][ T3597] loop4: detected capacity change from 0 to 512 [ 38.006555][ T3605] loop4: detected capacity change from 0 to 128 [ 38.025445][ T56] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.168865][ T28] audit: type=1400 audit(1776070616.276:160): avc: denied { read write } for pid=3610 comm="syz.3.32" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.198053][ T28] audit: type=1400 audit(1776070616.276:161): avc: denied { open } for pid=3610 comm="syz.3.32" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.348219][ T28] audit: type=1400 audit(1776070616.286:162): avc: denied { ioctl } for pid=3610 comm="syz.3.32" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.782561][ T3627] netlink: 'syz.1.36': attribute type 4 has an invalid length. [ 38.813581][ T3629] loop3: detected capacity change from 0 to 512 [ 38.824309][ T3627] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 38.836028][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 38.941968][ T3629] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.981241][ T3629] EXT4-fs (loop3): mount failed [ 38.994371][ T3631] macvlan2: entered promiscuous mode [ 39.000222][ T3631] macvlan2: entered allmulticast mode [ 39.006885][ T3631] veth0_virt_wifi: entered allmulticast mode [ 39.070037][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.090901][ T3638] bridge_slave_1: left allmulticast mode [ 39.096697][ T3638] bridge_slave_1: left promiscuous mode [ 39.145677][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.176267][ T3638] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 39.188947][ T3642] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 39.205456][ T3644] loop3: detected capacity change from 0 to 256 [ 39.261022][ T3647] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 39.284879][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 39.298369][ T83] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.311312][ T83] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.319577][ T83] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.354405][ T83] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.612566][ T3654] loop2: detected capacity change from 0 to 512 [ 39.632802][ T3295] udevd[3295]: incorrect ext4 checksum on /dev/loop2 [ 39.642221][ T3654] ext4: Unknown parameter 'dont_hash' [ 39.907605][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 39.918799][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 39.940781][ T310] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.950273][ T310] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 40.050685][ T3676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=3676 comm=syz.3.51 [ 40.297462][ T3681] netlink: 'syz.1.53': attribute type 3 has an invalid length. [ 40.307492][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 40.440515][ T3693] netlink: 36 bytes leftover after parsing attributes in process `syz.3.55'. [ 40.449745][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 43.080072][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 43.088932][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 43.111449][ T28] kauditd_printk_skb: 3215 callbacks suppressed [ 43.111464][ T28] audit: type=1400 audit(1776070621.226:3377): avc: denied { ioctl } for pid=3696 comm="syz.3.57" path="socket:[6336]" dev="sockfs" ino=6336 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.189210][ T3703] loop2: detected capacity change from 0 to 256 [ 43.203215][ T12] bond0: (slave bond_slave_0): interface is now down [ 43.209915][ T12] bond0: (slave bond_slave_1): interface is now down [ 43.225571][ T3707] gretap0: entered promiscuous mode [ 43.228144][ T3703] msdos: Unknown parameter ':⥛F IeˋWᶎxwW1We+] [ 43.228144][ T3703] y M5`%LjE BK٠/h{س#7v|S(W0DYq_ɂFK9vI.^Ep&q99\t5 [ 43.228144][ T3703] n M'D~ZNT5ŧuvn6B<`' [ 43.241804][ T3707] macvlan1: entered promiscuous mode [ 43.261753][ T12] bond0: (slave geneve2): interface is now down [ 43.298048][ T3707] hsr1: entered promiscuous mode [ 43.308693][ T3707] hsr1: entered allmulticast mode [ 43.317278][ T3707] gretap0: entered allmulticast mode [ 43.322976][ T3707] macvlan1: entered allmulticast mode [ 43.328599][ T3707] veth1_vlan: entered allmulticast mode [ 43.335568][ T28] audit: type=1400 audit(1776070621.446:3378): avc: denied { read } for pid=3715 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.355628][ T28] audit: type=1400 audit(1776070621.446:3379): avc: denied { create } for pid=3715 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.407235][ T3722] loop1: detected capacity change from 0 to 512 [ 43.443589][ T56] bond0: (slave bond_slave_0): interface is now down [ 43.466330][ T56] bond0: (slave bond_slave_1): interface is now down [ 43.481977][ T56] bond0: (slave geneve2): interface is now down [ 43.488719][ T56] bond0: now running without any active interface! [ 43.723148][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 44.433932][ T3735] loop4: detected capacity change from 0 to 512 [ 44.453049][ T3735] ======================================================= [ 44.453049][ T3735] WARNING: The mand mount option has been deprecated and [ 44.453049][ T3735] and is ignored by this kernel. Remove the mand [ 44.453049][ T3735] option from the mount to silence this warning. [ 44.453049][ T3735] ======================================================= [ 44.671677][ T3735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.741972][ T3736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'. [ 44.751209][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 45.484259][ T3735] EXT4-fs (loop4): 1 truncate cleaned up [ 45.496320][ T3735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.233936][ T3740] loop1: detected capacity change from 0 to 512 [ 46.263604][ T3718] syz.3.66 (3718) used greatest stack depth: 8744 bytes left [ 46.293147][ T3740] EXT4-fs (loop1): 1 truncate cleaned up [ 46.299415][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.520704][ T3744] loop2: detected capacity change from 0 to 4096 [ 46.568600][ T28] audit: type=1400 audit(1776070624.676:3380): avc: denied { create } for pid=3739 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.737158][ T3744] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 46.809900][ T28] audit: type=1400 audit(1776070624.676:3381): avc: denied { write } for pid=3739 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.862616][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.872109][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.897793][ T3752] loop2: detected capacity change from 0 to 512 [ 46.916137][ T3754] capability: warning: `syz.4.78' uses 32-bit capabilities (legacy support in use) [ 46.972096][ T3752] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 46.997246][ T3752] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.007471][ T3754] loop4: detected capacity change from 0 to 4096 [ 47.076769][ T3752] EXT4-fs (loop2): mount failed [ 47.114876][ T28] audit: type=1400 audit(1776070625.226:3382): avc: denied { write } for pid=3751 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.201626][ T3765] netlink: 'syz.2.82': attribute type 5 has an invalid length. [ 47.218343][ T3765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3765 comm=syz.2.82 [ 47.257938][ T28] audit: type=1400 audit(1776070625.366:3383): avc: denied { create } for pid=3764 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.318884][ T28] audit: type=1400 audit(1776070625.366:3384): avc: denied { setopt } for pid=3764 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.360050][ T28] audit: type=1400 audit(1776070625.456:3385): avc: denied { mount } for pid=3766 comm="syz.0.83" name="/" dev="autofs" ino=5670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 47.417130][ T3774] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 47.484061][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 47.515053][ T3782] program syz.4.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.519276][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 47.536598][ T3776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 47.537256][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 47.537344][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.537356][ T3317] Call Trace: [ 47.537362][ T3317] [ 47.537369][ T3317] __dump_stack+0x1d/0x30 [ 47.537396][ T3317] dump_stack_lvl+0x95/0xd0 [ 47.537472][ T3317] dump_stack+0x15/0x1b [ 47.537494][ T3317] dump_header+0x80/0x240 [ 47.537654][ T3317] oom_kill_process+0x295/0x350 [ 47.537678][ T3317] out_of_memory+0x97d/0xb80 [ 47.537701][ T3317] try_charge_memcg+0x62e/0xa10 [ 47.537739][ T3317] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 47.537827][ T3317] __swap_cache_prepare_and_add+0x67/0x460 [ 47.537864][ T3317] ? alloc_pages_mpol+0x217/0x260 [ 47.537972][ T3317] swap_cache_alloc_folio+0xa2/0x120 [ 47.538003][ T3317] swap_cluster_readahead+0x26e/0x3d0 [ 47.538093][ T3317] swapin_readahead+0xde/0x840 [ 47.538122][ T3317] ? __rcu_read_unlock+0x4e/0x70 [ 47.538144][ T3317] ? __perf_event_task_sched_in+0xa65/0xad0 [ 47.538199][ T3317] ? __list_add_valid_or_report+0x38/0xe0 [ 47.538222][ T3317] ? __rcu_read_unlock+0x4e/0x70 [ 47.538246][ T3317] ? swap_cache_get_folio+0x26f/0x280 [ 47.538316][ T3317] do_swap_page+0x2fe/0x21e0 [ 47.538346][ T3317] ? __schedule+0x93c/0xd40 [ 47.538378][ T3317] ? __rcu_read_lock+0x36/0x50 [ 47.538431][ T3317] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 47.538466][ T3317] handle_mm_fault+0xb46/0x3020 [ 47.538542][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 47.538570][ T3317] do_user_addr_fault+0x62f/0x1050 [ 47.538621][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 47.538653][ T3317] exc_page_fault+0x62/0xa0 [ 47.538675][ T3317] asm_exc_page_fault+0x26/0x30 [ 47.538720][ T3317] RIP: 0033:0x7f41698d7997 [ 47.538736][ T3317] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 47.538786][ T3317] RSP: 002b:00007ffd41ad3030 EFLAGS: 00010202 [ 47.538860][ T3317] RAX: 0000000000000000 RBX: 000055556acd9500 RCX: 00007f41698d7997 [ 47.538875][ T3317] RDX: 00007ffd41ad3070 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.538903][ T3317] RBP: 00007ffd41ad30dc R08: 0000000000000000 R09: 0000000000000000 [ 47.538921][ T3317] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 47.538988][ T3317] R13: 00000000000927c0 R14: 000000000000b7f4 R15: 00007ffd41ad3130 [ 47.539006][ T3317] [ 47.539048][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 301 [ 47.821008][ T3317] memory+swap: usage 247412kB, limit 9007199254740988kB, failcnt 0 [ 47.839074][ T3317] kmem: usage 213032kB, limit 9007199254740988kB, failcnt 0 [ 47.860032][ T3317] Memory cgroup stats for /syz1: [ 47.860191][ T3317] cache 10395648 [ 47.877073][ T3787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 47.890984][ T3317] rss 184320 [ 47.894182][ T3317] shmem 0 [ 47.910393][ T3317] mapped_file 10395648 [ 47.914868][ T3317] dirty 0 [ 47.917868][ T3317] writeback 0 [ 47.922633][ T3317] workingset_refault_anon 0 [ 47.927206][ T3317] workingset_refault_file 407 [ 47.940390][ T3317] swap 12288 [ 47.950983][ T3317] swapcached 12288 [ 47.972342][ T3317] pgpgin 9640 [ 47.977354][ T3317] pgpgout 7057 [ 47.980812][ T3317] pgfault 9592 [ 47.986562][ T3317] pgmajfault 9 [ 47.989953][ T3317] inactive_anon 0 [ 47.993964][ T3317] active_anon 0 [ 47.997587][ T3317] inactive_file 0 [ 48.001965][ T3317] active_file 0 [ 48.005515][ T3317] unevictable 10579968 [ 48.009846][ T3317] hierarchical_memory_limit 314572800 [ 48.099882][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 48.207801][ T3317] total_cache 10395648 [ 48.261813][ T3317] total_rss 184320 [ 48.273549][ T3800] loop0: detected capacity change from 0 to 512 [ 48.308514][ T3317] total_shmem 0 [ 48.364070][ T3800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.380589][ T3317] total_mapped_file 10395648 [ 48.408447][ T3317] total_dirty 0 [ 48.412138][ T3317] total_writeback 0 [ 48.416045][ T3317] total_workingset_refault_anon 0 [ 48.421088][ T3800] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.421289][ T3317] total_workingset_refault_file 407 [ 48.436976][ T3317] total_swap 12288 [ 48.440711][ T3317] total_swapcached 12288 [ 48.445157][ T3317] total_pgpgin 9640 [ 48.449093][ T3317] total_pgpgout 7057 [ 48.455798][ T3317] total_pgfault 9592 [ 48.459742][ T3317] total_pgmajfault 9 [ 48.463998][ T3317] total_inactive_anon 0 [ 48.468167][ T3317] total_active_anon 0 [ 48.472396][ T3317] total_inactive_file 0 [ 48.476622][ T3317] total_active_file 0 [ 48.480620][ T3317] total_unevictable 10579968 [ 48.485597][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.80,pid=3759,uid=0 [ 48.489122][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 48.500435][ T3317] Memory cgroup out of memory: OOM victim 3759 (syz.1.80) is already exiting. Skip killing the task [ 48.510760][ T3800] Cannot find add_set index 0 as target [ 48.557194][ T3800] netlink: 204 bytes leftover after parsing attributes in process `syz.0.94'. [ 48.595226][ T3800] netlink: 84 bytes leftover after parsing attributes in process `syz.0.94'. [ 48.597302][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.618307][ T3805] bridge_slave_1: left allmulticast mode [ 48.634582][ T3805] bridge_slave_1: left promiscuous mode [ 48.640407][ T3816] loop1: detected capacity change from 0 to 256 [ 48.647579][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 48.647591][ T28] audit: type=1400 audit(1776070626.746:3396): avc: denied { write } for pid=3799 comm="syz.0.94" path="/20/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.679743][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.700122][ T3816] FAT-fs (loop1): Directory bread(block 64) failed [ 48.713353][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.731054][ T3816] FAT-fs (loop1): Directory bread(block 65) failed [ 48.747503][ T3816] FAT-fs (loop1): Directory bread(block 66) failed [ 48.754967][ T3805] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 48.767952][ T3816] FAT-fs (loop1): Directory bread(block 67) failed [ 48.776529][ T28] audit: type=1400 audit(1776070626.886:3397): avc: denied { read } for pid=3820 comm="syz.0.99" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.780978][ T3821] program syz.0.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.817419][ T3816] FAT-fs (loop1): Directory bread(block 68) failed [ 48.831043][ T3816] FAT-fs (loop1): Directory bread(block 69) failed [ 48.845021][ T28] audit: type=1400 audit(1776070626.956:3398): avc: denied { map } for pid=3820 comm="syz.0.99" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.860619][ T3816] FAT-fs (loop1): Directory bread(block 70) failed [ 48.875629][ T3816] FAT-fs (loop1): Directory bread(block 71) failed [ 48.882189][ T3816] FAT-fs (loop1): Directory bread(block 72) failed [ 48.889490][ T3816] FAT-fs (loop1): Directory bread(block 73) failed [ 48.902645][ T28] audit: type=1400 audit(1776070626.956:3399): avc: denied { read write } for pid=3820 comm="syz.0.99" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.980813][ T3816] process 'syz.1.98' launched './file2' with NULL argv: empty string added [ 49.009362][ T3816] syz.1.98: attempt to access beyond end of device [ 49.009362][ T3816] loop1: rw=8912896, sector=1192, nr_sectors = 4 limit=256 [ 49.036777][ T3816] syz.1.98: attempt to access beyond end of device [ 49.036777][ T3816] loop1: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 49.101943][ T3836] loop0: detected capacity change from 0 to 512 [ 49.135073][ T3836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.147648][ T3836] EXT4-fs (loop0): 1 truncate cleaned up [ 49.171451][ T3836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.530387][ T3846] loop3: detected capacity change from 0 to 1024 [ 49.542386][ T3846] EXT4-fs: Ignoring removed orlov option [ 49.795873][ T3846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.137037][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.282714][ T3851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 50.294882][ T28] audit: type=1400 audit(1776070628.396:3400): avc: denied { create } for pid=3850 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 50.318071][ T3853] loop0: detected capacity change from 0 to 512 [ 50.349118][ T3853] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 50.367712][ T3853] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 50.370992][ T28] audit: type=1400 audit(1776070628.396:3401): avc: denied { write } for pid=3850 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 50.376060][ T3853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.413928][ T3853] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.108: Directory hole found for htree leaf block 0 [ 51.064740][ T28] audit: type=1400 audit(1776070628.526:3402): avc: denied { create } for pid=3852 comm="syz.0.108" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 51.102144][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.218442][ T28] audit: type=1400 audit(1776070629.136:3403): avc: denied { create } for pid=3852 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.298524][ T28] audit: type=1400 audit(1776070629.166:3404): avc: denied { getopt } for pid=3852 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.319617][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.388886][ T3871] loop0: detected capacity change from 0 to 512 [ 51.396447][ T3872] loop1: detected capacity change from 0 to 128 [ 51.417776][ T3871] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.115: missing EA_INODE flag [ 51.429995][ T3872] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.442259][ T3871] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.442353][ T3871] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.115: error while reading EA inode 12 err=-117 [ 51.451511][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 51.451526][ C1] EXT4-fs (loop0): initial error at time 1776070629: ext4_xattr_inode_iget:441: inode 12 [ 51.451551][ C1] EXT4-fs (loop0): last error at time 1776070629: ext4_xattr_inode_iget:441: inode 12 [ 51.490922][ T3872] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.611328][ T3871] loop0: lost filesystem error report for type 5 error -117 [ 51.611427][ T28] audit: type=1400 audit(1776070629.676:3405): avc: denied { sqpoll } for pid=3860 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.681428][ T3871] EXT4-fs (loop0): 1 orphan inode deleted [ 51.687831][ T3871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.727105][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.837348][ T3884] _: renamed from vlan0 (while UP) [ 51.963549][ T3889] netlink: 'syz.2.120': attribute type 4 has an invalid length. [ 52.023468][ T3893] loop4: detected capacity change from 0 to 128 [ 52.105830][ T3893] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.137248][ T3893] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.243456][ T3893] capability: warning: `syz.4.121' uses deprecated v2 capabilities in a way that may be insecure [ 52.290920][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.098860][ T3921] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 53.167552][ T3921] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 53.280346][ T3925] netlink: 'syz.4.132': attribute type 4 has an invalid length. [ 53.304782][ T3897] syz.0.124 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 53.351431][ T3897] CPU: 1 UID: 0 PID: 3897 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 53.351461][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 53.351475][ T3897] Call Trace: [ 53.351481][ T3897] [ 53.351546][ T3897] __dump_stack+0x1d/0x30 [ 53.351573][ T3897] dump_stack_lvl+0x95/0xd0 [ 53.351594][ T3897] dump_stack+0x15/0x1b [ 53.351618][ T3897] dump_header+0x80/0x240 [ 53.351644][ T3897] oom_kill_process+0x295/0x350 [ 53.351740][ T3897] out_of_memory+0x97d/0xb80 [ 53.351766][ T3897] try_charge_memcg+0x62e/0xa10 [ 53.351864][ T3897] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 53.351904][ T3897] __swap_cache_prepare_and_add+0x67/0x460 [ 53.351971][ T3897] ? alloc_pages_mpol+0x217/0x260 [ 53.352003][ T3897] swap_cache_alloc_folio+0xa2/0x120 [ 53.352035][ T3897] swap_cluster_readahead+0x36b/0x3d0 [ 53.352102][ T3897] swapin_readahead+0xde/0x840 [ 53.352137][ T3897] ? _raw_spin_unlock+0x9/0x30 [ 53.352169][ T3897] ? swap_put_entries_cluster+0x385/0x3a0 [ 53.352201][ T3897] ? swap_put_entries_cluster+0x111/0x3a0 [ 53.352299][ T3897] ? __rcu_read_unlock+0x4e/0x70 [ 53.352349][ T3897] ? swap_cache_get_folio+0x26f/0x280 [ 53.352377][ T3897] do_swap_page+0x2fe/0x21e0 [ 53.352434][ T3897] ? css_rstat_updated+0xbb/0x280 [ 53.352456][ T3897] ? __rcu_read_lock+0x36/0x50 [ 53.352479][ T3897] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 53.352511][ T3897] handle_mm_fault+0xb46/0x3020 [ 53.352583][ T3897] ? vma_start_read+0x1c7/0x2c0 [ 53.352608][ T3897] do_user_addr_fault+0x62f/0x1050 [ 53.352668][ T3897] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 53.352693][ T3897] ? trace_page_fault_user+0x1f/0xe0 [ 53.352732][ T3897] exc_page_fault+0x62/0xa0 [ 53.352751][ T3897] asm_exc_page_fault+0x26/0x30 [ 53.352770][ T3897] RIP: 0033:0x7f0fb61916cc [ 53.352785][ T3897] Code: 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 4c 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b 3c 24 89 ea <4d> 8b 65 40 44 29 f2 4c 03 24 d7 48 83 7b 68 07 77 08 48 c7 43 68 [ 53.352868][ T3897] RSP: 002b:00007fff812f49e0 EFLAGS: 00010297 [ 53.352883][ T3897] RAX: 000000000000e230 RBX: 00007f0fb7065720 RCX: 0000000000000000 [ 53.352896][ T3897] RDX: 0000000000000719 RSI: 0000000000000008 RDI: 00007f0fb591d008 [ 53.352974][ T3897] RBP: 0000000000000719 R08: 00007f0fb6520000 R09: 00007f0fb6536128 [ 53.352986][ T3897] R10: 0000000000000001 R11: 000000000000001a R12: ffffffff859d2dec [ 53.353064][ T3897] R13: 00007f0fb6536128 R14: 0000000000000002 R15: ffffffffffff1dd8 [ 53.353078][ T3897] ? xa_load+0xac/0xe0 [ 53.353102][ T3897] [ 53.353165][ T3897] memory: usage 307200kB, limit 307200kB, failcnt 850 [ 53.618245][ T3897] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 53.626232][ T3897] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 53.633977][ T3897] Memory cgroup stats for /syz0: [ 53.634146][ T3897] cache 0 [ 53.642589][ T3897] rss 0 [ 53.645406][ T3897] shmem 0 [ 53.648770][ T3897] mapped_file 0 [ 53.652487][ T3897] dirty 0 [ 53.655510][ T3897] writeback 0 [ 53.658781][ T3897] workingset_refault_anon 155 [ 53.664099][ T3897] workingset_refault_file 1070 [ 53.668894][ T3897] swap 204800 [ 53.673512][ T3897] swapcached 942080 [ 53.677849][ T3897] pgpgin 20136 [ 53.681588][ T3897] pgpgout 20134 [ 53.685183][ T3897] pgfault 22685 [ 53.688959][ T3897] pgmajfault 123 [ 53.698763][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 53.698777][ T28] audit: type=1400 audit(1776070631.806:3418): avc: denied { write } for pid=3927 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.741102][ T3897] inactive_anon 0 [ 53.766346][ T3897] active_anon 0 [ 53.769810][ T3897] inactive_file 0 [ 53.778362][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 53.789359][ T3897] active_file 8192 [ 53.795823][ T3897] unevictable 0 [ 53.799353][ T3897] hierarchical_memory_limit 314572800 [ 53.804814][ T3897] hierarchical_memsw_limit 9223372036854771712 [ 53.811053][ T3897] total_cache 0 [ 53.814527][ T3897] total_rss 0 [ 53.817825][ T3897] total_shmem 0 [ 53.821690][ T3897] total_mapped_file 0 [ 53.825706][ T3897] total_dirty 0 [ 53.829186][ T3897] total_writeback 0 [ 53.852700][ T3897] total_workingset_refault_anon 155 [ 53.857957][ T3897] total_workingset_refault_file 1070 [ 53.863524][ T3897] total_swap 204800 [ 53.867323][ T3897] total_swapcached 942080 [ 53.872072][ T3897] total_pgpgin 20136 [ 53.876742][ T3897] total_pgpgout 20134 [ 53.880709][ T3897] total_pgfault 22685 [ 53.884829][ T3897] total_pgmajfault 123 [ 53.888924][ T3897] total_inactive_anon 0 [ 53.920960][ T3897] total_active_anon 0 [ 53.925050][ T3897] total_inactive_file 0 [ 53.930773][ T3897] total_active_file 8192 [ 53.959592][ T3897] total_unevictable 0 [ 53.966204][ T3897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.124,pid=3897,uid=0 [ 53.981454][ T3897] Memory cgroup out of memory: Killed process 3897 (syz.0.124) total-vm:96344kB, anon-rss:1240kB, file-rss:22488kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 54.010395][ T3938] netlink: 'syz.4.135': attribute type 7 has an invalid length. [ 54.010969][ T28] audit: type=1400 audit(1776070632.116:3419): avc: denied { create } for pid=3934 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.028296][ T3938] netlink: 140 bytes leftover after parsing attributes in process `syz.4.135'. [ 54.121884][ T28] audit: type=1400 audit(1776070632.236:3420): avc: denied { read } for pid=3940 comm="syz.2.137" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.179555][ T28] audit: type=1400 audit(1776070632.236:3421): avc: denied { open } for pid=3940 comm="syz.2.137" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.271061][ T28] audit: type=1400 audit(1776070632.286:3422): avc: denied { setopt } for pid=3940 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.600569][ T3959] netlink: 36 bytes leftover after parsing attributes in process `syz.3.138'. [ 54.610485][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.614273][ T3964] loop4: detected capacity change from 0 to 256 [ 55.624463][ T3964] msdos: Bad value for 'tz' [ 56.019561][ T3964] loop4: detected capacity change from 0 to 512 [ 56.028461][ T3964] EXT4-fs: Ignoring removed nobh option [ 56.731079][ T3964] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.291297][ T3964] EXT4-fs (loop4): 1 truncate cleaned up [ 57.300307][ T3964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.482096][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.565768][ T3952] syz.0.139 (3952) used greatest stack depth: 8472 bytes left [ 57.655605][ T28] audit: type=1400 audit(1776070635.766:3423): avc: denied { ioctl } for pid=3975 comm="syz.4.143" path="socket:[6865]" dev="sockfs" ino=6865 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.976990][ T3983] FAULT_INJECTION: forcing a failure. [ 57.976990][ T3983] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.291030][ T3983] CPU: 1 UID: 0 PID: 3983 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 58.291060][ T3983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 58.291095][ T3983] Call Trace: [ 58.291103][ T3983] [ 58.291111][ T3983] __dump_stack+0x1d/0x30 [ 58.291140][ T3983] dump_stack_lvl+0x95/0xd0 [ 58.291166][ T3983] dump_stack+0x15/0x1b [ 58.291224][ T3983] should_fail_ex+0x263/0x280 [ 58.291255][ T3983] should_fail+0xb/0x20 [ 58.291282][ T3983] should_fail_usercopy+0x1a/0x20 [ 58.291366][ T3983] _copy_from_user+0x1c/0xb0 [ 58.291395][ T3983] autofs_dev_ioctl+0xdd/0x6a0 [ 58.291425][ T3983] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 58.291459][ T3983] __se_sys_ioctl+0xce/0x140 [ 58.291516][ T3983] __x64_sys_ioctl+0x43/0x50 [ 58.291537][ T3983] x64_sys_call+0x1563/0x3020 [ 58.291660][ T3983] do_syscall_64+0x12c/0x370 [ 58.291688][ T3983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.291708][ T3983] RIP: 0033:0x7f0fb62bc819 [ 58.291726][ T3983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.291742][ T3983] RSP: 002b:00007f0fb4d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.291834][ T3983] RAX: ffffffffffffffda RBX: 00007f0fb6535fa0 RCX: 00007f0fb62bc819 [ 58.291857][ T3983] RDX: 0000200000000280 RSI: 00000000c0189378 RDI: 000000000000000c [ 58.291872][ T3983] RBP: 00007f0fb4d17090 R08: 0000000000000000 R09: 0000000000000000 [ 58.291885][ T3983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.291897][ T3983] R13: 00007f0fb6536038 R14: 00007f0fb6535fa0 R15: 00007fff812f4938 [ 58.291913][ T3983] [ 58.804009][ T3995] loop4: detected capacity change from 0 to 512 [ 58.891316][ T3995] EXT4-fs: test_dummy_encryption option not supported [ 59.044733][ T28] audit: type=1400 audit(1776070637.156:3424): avc: denied { read write } for pid=3994 comm="syz.4.146" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.196199][ T28] audit: type=1400 audit(1776070637.156:3425): avc: denied { open } for pid=3994 comm="syz.4.146" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.280956][ T28] audit: type=1400 audit(1776070637.356:3426): avc: denied { ioctl } for pid=4005 comm="syz.2.149" path="socket:[6928]" dev="sockfs" ino=6928 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.356725][ T4008] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.409661][ T4016] loop0: detected capacity change from 0 to 256 [ 59.410960][ T28] audit: type=1400 audit(1776070637.356:3427): avc: denied { getopt } for pid=4005 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.438580][ T4008] bridge_slave_1: left allmulticast mode [ 59.445074][ T4008] bridge_slave_1: left promiscuous mode [ 59.449277][ T4016] FAT-fs (loop0): Directory bread(block 64) failed [ 59.454757][ T4008] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.465833][ T4016] FAT-fs (loop0): Directory bread(block 65) failed [ 59.476074][ T28] audit: type=1400 audit(1776070637.356:3428): avc: denied { getopt } for pid=4005 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.501701][ T4016] FAT-fs (loop0): Directory bread(block 66) failed [ 59.510999][ T4016] FAT-fs (loop0): Directory bread(block 67) failed [ 59.517557][ T4016] FAT-fs (loop0): Directory bread(block 68) failed [ 59.524297][ T4016] FAT-fs (loop0): Directory bread(block 69) failed [ 59.530862][ T4016] FAT-fs (loop0): Directory bread(block 70) failed [ 59.537594][ T4016] FAT-fs (loop0): Directory bread(block 71) failed [ 59.544252][ T4016] FAT-fs (loop0): Directory bread(block 72) failed [ 59.550894][ T4016] FAT-fs (loop0): Directory bread(block 73) failed [ 59.575062][ T4016] FAULT_INJECTION: forcing a failure. [ 59.575062][ T4016] name failslab, interval 1, probability 0, space 0, times 0 [ 59.600228][ T4016] CPU: 0 UID: 0 PID: 4016 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(full) [ 59.600256][ T4016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 59.600277][ T4016] Call Trace: [ 59.600284][ T4016] [ 59.600293][ T4016] __dump_stack+0x1d/0x30 [ 59.600322][ T4016] dump_stack_lvl+0x95/0xd0 [ 59.600391][ T4016] dump_stack+0x15/0x1b [ 59.600450][ T4016] should_fail_ex+0x263/0x280 [ 59.600477][ T4016] should_failslab+0x8c/0xb0 [ 59.600539][ T4016] kmem_cache_alloc_noprof+0x66/0x400 [ 59.600566][ T4016] ? alloc_empty_file+0x76/0x200 [ 59.600596][ T4016] alloc_empty_file+0x76/0x200 [ 59.600640][ T4016] path_openat+0x65/0x2050 [ 59.600659][ T4016] ? __rcu_read_unlock+0x4e/0x70 [ 59.600741][ T4016] ? terminate_walk+0x1e6/0x210 [ 59.600771][ T4016] ? path_openat+0x1ab2/0x2050 [ 59.600803][ T4016] ? path_openat+0x1b01/0x2050 [ 59.600822][ T4016] ? _parse_integer_limit+0x170/0x190 [ 59.600847][ T4016] do_file_open+0x16c/0x290 [ 59.600890][ T4016] do_open_execat+0xab/0x240 [ 59.600924][ T4016] alloc_bprm+0x25/0x350 [ 59.600946][ T4016] do_execveat_common+0x104/0x720 [ 59.600967][ T4016] ? do_getname+0x102/0x1c0 [ 59.601012][ T4016] __x64_sys_execve+0x5f/0x80 [ 59.601043][ T4016] x64_sys_call+0x2752/0x3020 [ 59.601073][ T4016] do_syscall_64+0x12c/0x370 [ 59.601148][ T4016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.601168][ T4016] RIP: 0033:0x7f0fb62bc819 [ 59.601185][ T4016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.601204][ T4016] RSP: 002b:00007f0fb4d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 59.601282][ T4016] RAX: ffffffffffffffda RBX: 00007f0fb6535fa0 RCX: 00007f0fb62bc819 [ 59.601298][ T4016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001140 [ 59.601313][ T4016] RBP: 00007f0fb4d17090 R08: 0000000000000000 R09: 0000000000000000 [ 59.601327][ T4016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.601340][ T4016] R13: 00007f0fb6536038 R14: 00007f0fb6535fa0 R15: 00007fff812f4938 [ 59.601415][ T4016] [ 59.893300][ T4008] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 60.058751][ T28] audit: type=1400 audit(1776070638.156:3429): avc: denied { create } for pid=4031 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.107686][ T28] audit: type=1400 audit(1776070638.186:3430): avc: denied { bind } for pid=4027 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.231278][ T28] audit: type=1400 audit(1776070638.186:3431): avc: denied { name_bind } for pid=4027 comm="syz.0.155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 60.253432][ T28] audit: type=1400 audit(1776070638.186:3432): avc: denied { node_bind } for pid=4027 comm="syz.0.155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 60.274275][ T28] audit: type=1400 audit(1776070638.186:3433): avc: denied { name_connect } for pid=4027 comm="syz.0.155" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 60.438761][ T4043] loop2: detected capacity change from 0 to 1024 [ 60.449670][ T4043] EXT4-fs: Ignoring removed orlov option [ 63.331885][ T4043] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 63.332092][ T4043] EXT4-fs: failed to create workqueue [ 63.347494][ T4043] EXT4-fs (loop2): mount failed [ 63.479435][ T4051] loop0: detected capacity change from 0 to 512 [ 63.522299][ T4051] EXT4-fs: Ignoring removed nobh option [ 63.557505][ T4051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.593506][ T4051] EXT4-fs (loop0): 1 truncate cleaned up [ 63.617219][ T4051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.903987][ T4061] loop2: detected capacity change from 0 to 512 [ 63.979462][ T3310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 64.011289][ T4061] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 64.059159][ T3310] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 64.059185][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 64.059202][ T3310] Call Trace: [ 64.059210][ T3310] [ 64.059219][ T3310] __dump_stack+0x1d/0x30 [ 64.059272][ T3310] dump_stack_lvl+0x95/0xd0 [ 64.059296][ T3310] dump_stack+0x15/0x1b [ 64.059316][ T3310] dump_header+0x80/0x240 [ 64.059382][ T3310] oom_kill_process+0x295/0x350 [ 64.059404][ T3310] out_of_memory+0x97d/0xb80 [ 64.059425][ T3310] try_charge_memcg+0x62e/0xa10 [ 64.059469][ T3310] __mem_cgroup_charge+0x65/0x150 [ 64.059538][ T3310] filemap_add_folio+0x110/0x350 [ 64.059560][ T3310] __filemap_get_folio_mpol+0x326/0x680 [ 64.059641][ T3310] filemap_fault+0x486/0xb90 [ 64.059666][ T3310] __do_fault+0xbc/0x200 [ 64.059685][ T3310] handle_mm_fault+0x11e2/0x3020 [ 64.059782][ T3310] ? vma_start_read+0x1c7/0x2c0 [ 64.059813][ T3310] do_user_addr_fault+0x62f/0x1050 [ 64.059919][ T3310] ? trace_page_fault_user+0x1f/0xe0 [ 64.059954][ T3310] exc_page_fault+0x62/0xa0 [ 64.059977][ T3310] asm_exc_page_fault+0x26/0x30 [ 64.060040][ T3310] RIP: 0033:0x7f555dfca834 [ 64.060056][ T3310] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 [ 64.060106][ T3310] RSP: 002b:00007fff5a494580 EFLAGS: 00010206 [ 64.060125][ T3310] RAX: 0000001b33924000 RBX: 0000000000000067 RCX: 000000000000f618 [ 64.060140][ T3310] RDX: 000000000ed88973 RSI: 00007fff5a494610 RDI: 0000000000000001 [ 64.060203][ T3310] RBP: 00007fff5a4945bc R08: 0000000038a1e5d6 R09: 7fffffffffffffff [ 64.060217][ T3310] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 64.060231][ T3310] R13: 00000000000927c0 R14: 000000000000f942 R15: 00007fff5a494610 [ 64.060251][ T3310] [ 64.107254][ T3310] memory: usage 127772kB, limit 307200kB, failcnt 73 [ 64.225630][ T4061] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 64.261428][ T4061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.293789][ T3310] memory+swap: usage 132800kB, limit 9007199254740988kB, failcnt 0 [ 64.322136][ T4061] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #2: comm syz.2.163: Directory hole found for htree leaf block 0 [ 64.351007][ T3310] kmem: usage 134024kB, limit 9007199254740988kB, failcnt 0 [ 64.368625][ T3310] Memory cgroup stats for /syz4: [ 64.368855][ T3310] cache 0 [ 64.401506][ T3310] rss 28672 [ 64.407946][ T3310] shmem 0 [ 64.413453][ T3310] mapped_file 0 [ 64.420955][ T3310] dirty 0 [ 64.427448][ T3310] writeback 0 [ 64.440922][ T3310] workingset_refault_anon 130 [ 64.446223][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.451006][ T3310] workingset_refault_file 0 [ 64.481240][ T3310] swap 176128 [ 64.484548][ T3310] swapcached 2732032 [ 64.540197][ T4070] lo speed is unknown, defaulting to 1000 [ 64.546085][ T4070] lo speed is unknown, defaulting to 1000 [ 64.552240][ T4070] lo speed is unknown, defaulting to 1000 [ 64.559837][ T4070] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 64.589978][ T3310] pgpgin 37305 [ 64.626478][ T4071] lo speed is unknown, defaulting to 1000 [ 64.673284][ T4070] lo speed is unknown, defaulting to 1000 [ 64.679585][ T4070] lo speed is unknown, defaulting to 1000 [ 64.686805][ T4070] lo speed is unknown, defaulting to 1000 [ 64.693562][ T4070] lo speed is unknown, defaulting to 1000 [ 64.700206][ T4070] lo speed is unknown, defaulting to 1000 [ 64.733151][ T4069] loop0: detected capacity change from 0 to 512 [ 64.783621][ T4069] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.809515][ T3310] pgpgout 37297 [ 64.893206][ T3310] pgfault 43335 [ 64.900431][ T4069] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.164: bad orphan inode 131083 [ 64.928253][ T3310] pgmajfault 12 [ 64.928615][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.931849][ T4069] loop0: lost filesystem error report for type 5 error -117 [ 64.941130][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 64.954863][ C0] EXT4-fs (loop0): initial error at time 1776070643: ext4_orphan_get:1423 [ 64.963390][ C0] EXT4-fs (loop0): last error at time 1776070643: ext4_orphan_get:1423 [ 64.993199][ T3310] inactive_anon 8192 [ 65.009009][ T4069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.090956][ T3310] active_anon 24576 [ 65.090967][ T3310] inactive_file 0 [ 65.091015][ T3310] active_file 0 [ 65.091022][ T3310] unevictable 0 [ 65.091028][ T3310] hierarchical_memory_limit 314572800 [ 65.091036][ T3310] hierarchical_memsw_limit 9223372036854771712 [ 65.091044][ T3310] total_cache 0 [ 65.091050][ T3310] total_rss 28672 [ 65.091057][ T3310] total_shmem 0 [ 65.091134][ T3310] total_mapped_file 0 [ 65.091142][ T3310] total_dirty 0 [ 65.091150][ T3310] total_writeback 0 [ 65.091157][ T3310] total_workingset_refault_anon 130 [ 65.091171][ T3310] total_workingset_refault_file 0 [ 65.091180][ T3310] total_swap 176128 [ 65.091187][ T3310] total_swapcached 2732032 [ 65.091194][ T3310] total_pgpgin 37305 [ 65.091201][ T3310] total_pgpgout 37297 [ 65.091208][ T3310] total_pgfault 43335 [ 65.091215][ T3310] total_pgmajfault 12 [ 65.091223][ T3310] total_inactive_anon 8192 [ 65.091231][ T3310] total_active_anon 24576 [ 65.091273][ T3310] total_inactive_file 0 [ 65.091281][ T3310] total_active_file 0 [ 65.091289][ T3310] total_unevictable 0 [ 65.091297][ T3310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.162,pid=4055,uid=0 [ 65.091542][ T3310] Memory cgroup out of memory: Killed process 4055 (syz.4.162) total-vm:94296kB, anon-rss:1332kB, file-rss:22512kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 65.102627][ T4069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 65.251249][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 65.251264][ T28] audit: type=1400 audit(1776070643.346:3440): avc: denied { mounton } for pid=4068 comm="syz.0.164" path="/35/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.311323][ T4077] loop0: detected capacity change from 512 to 0 [ 65.311506][ T4069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 65.318408][ C0] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 65.346443][ T4078] EXT4-fs error (device loop0): ext4_get_inode_loc:4935: inode #2: block 5: comm syz.0.164: unable to read itable block [ 65.399777][ T4078] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 65.441749][ T4076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 65.531306][ T4078] EXT4-fs (loop0): I/O error while writing superblock [ 65.541680][ T4084] loop4: detected capacity change from 0 to 256 [ 65.561051][ T4078] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: IO failure [ 65.588393][ T4084] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.614989][ T4078] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 65.641265][ T4078] EXT4-fs (loop0): I/O error while writing superblock [ 65.648578][ T4084] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.670980][ T4078] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #2: comm syz.0.164: mark_inode_dirty error [ 65.687512][ T28] audit: type=1400 audit(1776070643.796:3441): avc: denied { shutdown } for pid=4079 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.717935][ T4078] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 65.774395][ T28] audit: type=1400 audit(1776070643.886:3442): avc: denied { setopt } for pid=4083 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.776014][ T4078] EXT4-fs (loop0): I/O error while writing superblock [ 65.891777][ T56] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4920: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 65.925104][ T56] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 65.954283][ T56] EXT4-fs (loop0): I/O error while writing superblock [ 65.975273][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.005336][ T3311] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 66.040962][ T3311] EXT4-fs (loop0): I/O error while writing superblock [ 66.075203][ T4095] netlink: 'syz.4.171': attribute type 4 has an invalid length. [ 66.117548][ T4103] loop4: detected capacity change from 0 to 256 [ 66.131829][ T4103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.140373][ T4103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.331349][ T412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.404093][ T412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.485470][ T412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.537296][ T4110] lo speed is unknown, defaulting to 1000 [ 66.552944][ T412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.674555][ T412] bridge_slave_0: left allmulticast mode [ 66.688593][ T412] bridge_slave_0: left promiscuous mode [ 66.704827][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.843071][ T412] gretap0 (unregistering): left promiscuous mode [ 66.933042][ T412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.955183][ T412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.972411][ T412] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 66.990862][ T412] bond0 (unregistering): Released all slaves [ 67.020781][ T4110] chnl_net:caif_netlink_parms(): no params data found [ 67.110285][ T412] macvlan1: left promiscuous mode [ 67.181248][ T412] hsr_slave_0: left promiscuous mode [ 67.188884][ T412] hsr_slave_1: left promiscuous mode [ 67.194881][ T412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.202463][ T412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.209999][ T412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.218280][ T412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.243980][ T412] veth1_macvtap: left promiscuous mode [ 67.249580][ T412] veth0_macvtap: left promiscuous mode [ 67.255349][ T412] veth1_vlan: left allmulticast mode [ 67.260843][ T412] veth1_vlan: left promiscuous mode [ 67.266742][ T412] veth0_vlan: left promiscuous mode [ 67.347357][ T412] team0 (unregistering): Port device team_slave_1 removed [ 67.358090][ T412] team0 (unregistering): Port device team_slave_0 removed [ 67.386605][ T4129] syz.3.178 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 67.398039][ T4129] CPU: 1 UID: 0 PID: 4129 Comm: syz.3.178 Not tainted syzkaller #0 PREEMPT(full) [ 67.398064][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 67.398075][ T4129] Call Trace: [ 67.398080][ T4129] [ 67.398088][ T4129] __dump_stack+0x1d/0x30 [ 67.398115][ T4129] dump_stack_lvl+0x95/0xd0 [ 67.398136][ T4129] dump_stack+0x15/0x1b [ 67.398237][ T4129] dump_header+0x80/0x240 [ 67.398273][ T4129] oom_kill_process+0x295/0x350 [ 67.398297][ T4129] out_of_memory+0x97d/0xb80 [ 67.398324][ T4129] try_charge_memcg+0x62e/0xa10 [ 67.398364][ T4129] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 67.398473][ T4129] __swap_cache_prepare_and_add+0x67/0x460 [ 67.398503][ T4129] ? alloc_pages_mpol+0x217/0x260 [ 67.398531][ T4129] swap_cache_alloc_folio+0xa2/0x120 [ 67.398596][ T4129] swap_cluster_readahead+0x26e/0x3d0 [ 67.398632][ T4129] swapin_readahead+0xde/0x840 [ 67.398718][ T4129] ? _raw_spin_unlock+0x9/0x30 [ 67.398759][ T4129] ? swap_put_entries_cluster+0x385/0x3a0 [ 67.398787][ T4129] ? swap_put_entries_cluster+0x111/0x3a0 [ 67.398819][ T4129] ? __rcu_read_unlock+0x4e/0x70 [ 67.398880][ T4129] ? swap_cache_get_folio+0x26f/0x280 [ 67.398912][ T4129] do_swap_page+0x2fe/0x21e0 [ 67.398943][ T4129] ? css_rstat_updated+0xbb/0x280 [ 67.399033][ T4129] ? __rcu_read_lock+0x36/0x50 [ 67.399103][ T4129] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 67.399136][ T4129] handle_mm_fault+0xb46/0x3020 [ 67.399170][ T4129] ? vma_start_read+0x1c7/0x2c0 [ 67.399230][ T4129] do_user_addr_fault+0x62f/0x1050 [ 67.399259][ T4129] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 67.399348][ T4129] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 67.399372][ T4129] ? trace_page_fault_user+0x1f/0xe0 [ 67.399470][ T4129] exc_page_fault+0x62/0xa0 [ 67.399489][ T4129] asm_exc_page_fault+0x26/0x30 [ 67.399512][ T4129] RIP: 0033:0x7f7600cbd020 [ 67.399529][ T4129] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 67.399593][ T4129] RSP: 002b:00007ffde82c6348 EFLAGS: 00010246 [ 67.399610][ T4129] RAX: 0000000000000000 RBX: 000055556fa70500 RCX: 0000000000000000 [ 67.399624][ T4129] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 000055556fa70808 [ 67.399638][ T4129] RBP: 00007f7600f77da0 R08: 00007ffde82c63a0 R09: 0000000000000000 [ 67.399652][ T4129] R10: 0000000000000000 R11: 000055556fa70808 R12: 00000000000107d5 [ 67.399664][ T4129] R13: 00007f7600f7618c R14: 0000000000010544 R15: 00007f7600f76180 [ 67.399683][ T4129] [ 67.399747][ T4129] memory: usage 307200kB, limit 307200kB, failcnt 1839 [ 67.657487][ T4129] memory+swap: usage 307520kB, limit 9007199254740988kB, failcnt 0 [ 67.667150][ T4129] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 67.674625][ T4129] Memory cgroup stats for /syz3: [ 67.674854][ T4129] cache 0 [ 67.700331][ T4129] rss 0 [ 67.703191][ T4129] shmem 0 [ 67.706113][ T4129] mapped_file 0 [ 67.709553][ T4129] dirty 0 [ 67.712607][ T4129] writeback 0 [ 67.715965][ T4129] workingset_refault_anon 211 [ 67.721904][ T4129] workingset_refault_file 291 [ 67.726585][ T4129] swap 327680 [ 67.730279][ T4129] swapcached 1429504 [ 67.734831][ T4129] pgpgin 36448 [ 67.738205][ T4129] pgpgout 36445 [ 67.745323][ T4156] loop4: detected capacity change from 0 to 1024 [ 67.748059][ T4129] pgfault 45117 [ 67.755336][ T4129] pgmajfault 176 [ 67.784618][ T4129] inactive_anon 12288 [ 67.794670][ T4129] active_anon 0 [ 67.798140][ T4129] inactive_file 0 [ 67.808126][ T4129] active_file 0 [ 67.811821][ T4129] unevictable 0 [ 67.815316][ T4129] hierarchical_memory_limit 314572800 [ 67.820836][ T4129] hierarchical_memsw_limit 9223372036854771712 [ 67.828207][ T4129] total_cache 0 [ 67.831882][ T4129] total_rss 0 [ 67.835153][ T4129] total_shmem 0 [ 67.847038][ T4129] total_mapped_file 0 [ 67.851188][ T4129] total_dirty 0 [ 67.851637][ T4110] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.854642][ T4129] total_writeback 0 [ 67.854651][ T4129] total_workingset_refault_anon 211 [ 67.854661][ T4129] total_workingset_refault_file 291 [ 67.875781][ T4110] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.882979][ T4129] total_swap 327680 [ 67.886824][ T4129] total_swapcached 1429504 [ 67.898137][ T4129] total_pgpgin 36448 [ 67.902067][ T4110] bridge_slave_0: entered allmulticast mode [ 67.909657][ T4129] total_pgpgout 36445 [ 67.913737][ T4129] total_pgfault 45117 [ 67.916279][ T4110] bridge_slave_0: entered promiscuous mode [ 67.921099][ T4129] total_pgmajfault 176 [ 67.927716][ T4129] total_inactive_anon 12288 [ 67.934824][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.936853][ T4129] total_active_anon 0 [ 67.947239][ T4129] total_inactive_file 0 [ 67.959776][ T4110] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.960953][ T4129] total_active_file 0 [ 67.969900][ T4110] bridge_slave_1: entered allmulticast mode [ 67.970790][ T28] audit: type=1326 audit(1776070646.076:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.4.184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f555e0fc819 code=0x0 [ 67.977421][ T4110] bridge_slave_1: entered promiscuous mode [ 68.002619][ T4129] total_unevictable 0 [ 68.010058][ T4129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.178,pid=4129,uid=0 [ 68.026734][ T4129] Memory cgroup out of memory: Killed process 4129 (syz.3.178) total-vm:94296kB, anon-rss:1224kB, file-rss:22488kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 68.043911][ T28] audit: type=1400 audit(1776070646.136:3444): avc: denied { bind } for pid=4174 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.073264][ T4110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.080682][ T28] audit: type=1400 audit(1776070646.186:3445): avc: denied { name_bind } for pid=4174 comm="syz.4.184" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 68.102621][ T4110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.115347][ T28] audit: type=1400 audit(1776070646.186:3446): avc: denied { node_bind } for pid=4174 comm="syz.4.184" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 68.245230][ T4110] team0: Port device team_slave_0 added [ 68.254102][ T4110] team0: Port device team_slave_1 added [ 68.274041][ T4110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.281956][ T4110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.308229][ T4110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.319684][ T4110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.326873][ T4110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.353224][ T4110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.436922][ T4150] lo speed is unknown, defaulting to 1000 [ 68.605271][ T4110] hsr_slave_0: entered promiscuous mode [ 68.646438][ T4110] hsr_slave_1: entered promiscuous mode [ 68.669100][ T4198] loop3: detected capacity change from 0 to 512 [ 68.683532][ T4110] debugfs: 'hsr0' already exists in 'hsr' [ 68.704175][ T4198] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 0 [ 68.720810][ T4110] Cannot create hsr debugfs directory [ 68.969217][ T4207] loop4: detected capacity change from 0 to 256 [ 69.148677][ T4211] loop3: detected capacity change from 0 to 512 [ 69.226860][ T4211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.262677][ T4150] chnl_net:caif_netlink_parms(): no params data found [ 69.279963][ T4211] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.453887][ T4150] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.461048][ T4150] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.468188][ T4150] bridge_slave_0: entered allmulticast mode [ 69.476229][ T4150] bridge_slave_0: entered promiscuous mode [ 69.482893][ T4150] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.489997][ T4150] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.497283][ T4150] bridge_slave_1: entered allmulticast mode [ 69.506083][ T4150] bridge_slave_1: entered promiscuous mode [ 69.536724][ T4150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.549072][ T4150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.563410][ T4110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.578096][ T4150] team0: Port device team_slave_0 added [ 69.585503][ T4110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.594436][ T4110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.631199][ T4150] team0: Port device team_slave_1 added [ 69.647152][ T412] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.680730][ T412] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 69.711820][ T4110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.863531][ T412] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.877959][ T412] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 69.913671][ T4150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.920842][ T4150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.948849][ T4150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.966945][ T4150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.973989][ T4150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.004198][ T4150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.048725][ T412] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.059702][ T412] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 70.059912][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.126449][ T4150] hsr_slave_0: entered promiscuous mode [ 70.133125][ T4150] hsr_slave_1: entered promiscuous mode [ 70.139732][ T4150] debugfs: 'hsr0' already exists in 'hsr' [ 70.146237][ T4150] Cannot create hsr debugfs directory [ 70.180422][ T28] audit: type=1400 audit(1776070648.286:3447): avc: denied { ioctl } for pid=4272 comm="syz.2.195" path="/dev/usbmon3" dev="devtmpfs" ino=151 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.228569][ T412] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.264826][ T412] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 70.316040][ T4110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.328712][ T4110] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.348907][ T4282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.194'. [ 70.358266][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 70.390130][ T4278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.197'. [ 70.402659][ T4280] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 70.422147][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.429325][ T4203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.476770][ T4287] loop4: detected capacity change from 0 to 512 [ 70.516444][ T4287] EXT4-fs: Mount option(s) incompatible with ext3 [ 70.528024][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.535124][ T4203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.698855][ T4110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.764724][ T4110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.870248][ T412] bridge_slave_1: left allmulticast mode [ 70.893168][ T412] bridge_slave_1: left promiscuous mode [ 71.051283][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.069246][ T412] bridge_slave_0: left allmulticast mode [ 71.081102][ T412] bridge_slave_0: left promiscuous mode [ 71.091448][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.144164][ T412] bond0 (unregistering): (slave geneve2): Releasing backup interface [ 71.210209][ T28] audit: type=1400 audit(1776070649.316:3448): avc: denied { mount } for pid=4294 comm="syz.2.200" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.300862][ T28] audit: type=1400 audit(1776070649.346:3449): avc: denied { remount } for pid=4294 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.323116][ T412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.366373][ T412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.399131][ T412] bond0 (unregistering): Released all slaves [ 71.413186][ T28] audit: type=1400 audit(1776070649.346:3450): avc: denied { unmount } for pid=4294 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.518771][ T412] hsr_slave_0: left promiscuous mode [ 71.591506][ T412] hsr_slave_1: left promiscuous mode [ 71.597796][ T412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.617523][ T412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.637588][ T412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.666126][ T412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.699307][ T412] veth1_macvtap: left promiscuous mode [ 71.722569][ T412] veth0_macvtap: left promiscuous mode [ 71.750119][ T412] veth1_vlan: left promiscuous mode [ 71.758505][ T412] veth0_vlan: left promiscuous mode [ 71.973065][ T4317] loop3: detected capacity change from 0 to 512 [ 71.988798][ T412] team0 (unregistering): Port device team_slave_1 removed [ 72.012081][ T412] team0 (unregistering): Port device team_slave_0 removed [ 72.013095][ T4317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.035977][ T4317] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.133618][ T4150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 72.151186][ T4150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 72.163125][ T4110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.188704][ T4150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.217122][ T4150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.374687][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 72.490920][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.539827][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.550199][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.677227][ T83] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.726607][ T83] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.813439][ T83] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.841209][ T83] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.861306][ T4150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.887802][ T4150] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.901703][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.908775][ T4203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.938654][ T4110] veth0_vlan: entered promiscuous mode [ 72.952684][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.959826][ T4203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.982116][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.995044][ T4110] veth1_vlan: entered promiscuous mode [ 73.024121][ T4110] veth0_macvtap: entered promiscuous mode [ 73.042229][ T4110] veth1_macvtap: entered promiscuous mode [ 73.051158][ T4150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.062523][ T4378] program syz.3.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.071935][ T4377] program syz.3.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.081347][ T4150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.128515][ T4110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.159202][ T4110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.189827][ T83] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.226709][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.241460][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.262528][ T4394] loop3: detected capacity change from 0 to 512 [ 73.269310][ T28] audit: type=1400 audit(1776070651.366:3451): avc: denied { mounton } for pid=4110 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.299093][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.313525][ T4150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.321470][ T4394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.339690][ T4394] EXT4-fs (loop3): 1 truncate cleaned up [ 73.375432][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.397399][ T4407] loop5: detected capacity change from 0 to 512 [ 73.505348][ T4407] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.538144][ T4407] EXT4-fs (loop5): 1 truncate cleaned up [ 73.551434][ T4407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.645590][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.800393][ T4150] veth0_vlan: entered promiscuous mode [ 74.820592][ T4150] veth1_vlan: entered promiscuous mode [ 74.837638][ T4110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.866405][ T4150] veth0_macvtap: entered promiscuous mode [ 74.881775][ T4438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.211'. [ 74.901191][ T4150] veth1_macvtap: entered promiscuous mode [ 74.912625][ T4150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.921757][ T4150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.933417][ T4440] loop5: detected capacity change from 0 to 1024 [ 74.950053][ T28] audit: type=1326 audit(1776070653.056:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600cfc819 code=0x7ffc0000 [ 74.984239][ T4293] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.993740][ T28] audit: type=1326 audit(1776070653.056:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600cfc819 code=0x7ffc0000 [ 75.010980][ T4293] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.026129][ T28] audit: type=1326 audit(1776070653.056:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600cfc819 code=0x7ffc0000 [ 75.050385][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.063849][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065306][ T4440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.076175][ T28] audit: type=1326 audit(1776070653.056:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7600cfc819 code=0x7ffc0000 [ 75.108755][ T28] audit: type=1326 audit(1776070653.056:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600cfc819 code=0x7ffc0000 [ 75.138897][ T28] audit: type=1326 audit(1776070653.056:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7600cfc819 code=0x7ffc0000 [ 75.139734][ T4440] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.237438][ T4447] loop3: detected capacity change from 0 to 512 [ 75.281078][ T4447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.301162][ T4447] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.351658][ T4440] xt_hashlimit: size too large, truncated to 1048576 [ 75.404699][ T4457] : renamed from vxcan1 (while UP) [ 75.698359][ T4465] loop4: detected capacity change from 0 to 1024 [ 75.741172][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.789362][ T4465] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 76.178085][ T4110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.531204][ T4490] tipc: Invalid UDP bearer configuration [ 77.531226][ T4490] tipc: Enabling of bearer rejected, failed to enable media [ 77.573380][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.225'. [ 77.621295][ T4504] loop2: detected capacity change from 0 to 1024 [ 77.646201][ T4504] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 77.646201][ T4504] [ 77.667826][ T4508] loop6: detected capacity change from 0 to 512 [ 77.701402][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 77.701518][ T28] audit: type=1400 audit(1776070655.806:3464): avc: denied { create } for pid=4512 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.707515][ T4508] EXT4-fs (loop6): Invalid log cluster size: 34 [ 77.741068][ T28] audit: type=1400 audit(1776070655.846:3465): avc: denied { name_bind } for pid=4517 comm="syz.4.230" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.947978][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 78.018420][ T4533] loop4: detected capacity change from 0 to 512 [ 78.027972][ T4533] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.041560][ T4533] EXT4-fs (loop4): 1 truncate cleaned up [ 78.047759][ T4533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.069975][ T28] audit: type=1400 audit(1776070656.176:3466): avc: denied { add_name } for pid=4532 comm="syz.4.235" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.719573][ T4544] loop6: detected capacity change from 0 to 512 [ 78.726467][ T28] audit: type=1400 audit(1776070656.826:3467): avc: denied { read write } for pid=4543 comm="syz.6.237" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.758224][ T4544] tipc: Started in network mode [ 78.764338][ T4544] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 78.775635][ T4544] tipc: Enabled bearer , priority 10 [ 78.824694][ T28] audit: type=1400 audit(1776070656.826:3468): avc: denied { open } for pid=4543 comm="syz.6.237" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.926404][ T28] audit: type=1400 audit(1776070656.826:3469): avc: denied { ioctl } for pid=4543 comm="syz.6.237" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.946241][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.952463][ T28] audit: type=1400 audit(1776070656.836:3470): avc: denied { mounton } for pid=4543 comm="syz.6.237" path="/11/file0" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.984876][ T28] audit: type=1400 audit(1776070656.866:3471): avc: denied { mount } for pid=4543 comm="syz.6.237" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 79.107022][ T4556] netlink: 'syz.4.242': attribute type 19 has an invalid length. [ 79.114808][ T4556] netlink: 172 bytes leftover after parsing attributes in process `syz.4.242'. [ 79.132686][ T4556] lo speed is unknown, defaulting to 1000 [ 79.140883][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.243'. [ 79.158889][ T28] audit: type=1400 audit(1776070656.866:3472): avc: denied { create } for pid=4543 comm="syz.6.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.179949][ T28] audit: type=1400 audit(1776070656.866:3473): avc: denied { write } for pid=4543 comm="syz.6.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.275747][ T4567] x_tables: duplicate underflow at hook 1 [ 79.283734][ T4562] bond1 (unregistering): Released all slaves [ 79.745049][ T4589] loop4: detected capacity change from 0 to 1024 [ 79.962695][ T4589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.076534][ T4589] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.250949][ T4589] selinuxfs: Unknown parameter 'journal_ioprio' [ 80.579549][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.712145][ T10] tipc: Node number set to 10136234 [ 81.363842][ T4606] geneve2: entered promiscuous mode [ 81.638553][ T4614] loop3: detected capacity change from 0 to 512 [ 82.109623][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.120511][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.140709][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.160164][ T4614] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.203087][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.231373][ T4614] EXT4-fs (loop3): mount failed [ 82.406891][ T4627] loop2: detected capacity change from 0 to 4096 [ 82.431303][ T4627] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 82.832600][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 82.832613][ T28] audit: type=1400 audit(1776070660.946:3565): avc: denied { create } for pid=4635 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.898023][ T4638] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 82.917531][ T28] audit: type=1400 audit(1776070660.966:3566): avc: denied { read } for pid=4635 comm="syz.2.262" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 82.961470][ T28] audit: type=1400 audit(1776070660.966:3567): avc: denied { open } for pid=4635 comm="syz.2.262" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 82.986198][ T28] audit: type=1400 audit(1776070660.966:3568): avc: denied { ioctl } for pid=4635 comm="syz.2.262" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.034586][ T28] audit: type=1400 audit(1776070660.976:3569): avc: denied { read } for pid=4635 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.034656][ T28] audit: type=1400 audit(1776070660.976:3570): avc: denied { getopt } for pid=4635 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.034699][ T28] audit: type=1400 audit(1776070660.976:3571): avc: denied { bind } for pid=4635 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.034721][ T28] audit: type=1400 audit(1776070661.066:3572): avc: denied { read } for pid=4623 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.034747][ T28] audit: type=1400 audit(1776070661.066:3573): avc: denied { open } for pid=4623 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.034773][ T28] audit: type=1400 audit(1776070661.076:3574): avc: denied { write } for pid=4613 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.171838][ T4648] loop4: detected capacity change from 0 to 164 [ 83.259481][ T4648] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 83.314043][ T4662] lo speed is unknown, defaulting to 1000 [ 83.529391][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 83.776105][ T4685] netlink: 52 bytes leftover after parsing attributes in process `syz.4.267'. [ 83.943267][ T4707] macsec1: entered promiscuous mode [ 83.948579][ T4707] hsr0: entered promiscuous mode [ 83.961798][ T4707] hsr0: left promiscuous mode [ 84.296018][ T4654] loop3: detected capacity change from 0 to 65536 [ 84.635845][ T4647] syz.6.266 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 84.649913][ T4647] CPU: 0 UID: 0 PID: 4647 Comm: syz.6.266 Not tainted syzkaller #0 PREEMPT(full) [ 84.649984][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 84.649997][ T4647] Call Trace: [ 84.650009][ T4647] [ 84.650058][ T4647] __dump_stack+0x1d/0x30 [ 84.650090][ T4647] dump_stack_lvl+0x95/0xd0 [ 84.650116][ T4647] dump_stack+0x15/0x1b [ 84.650139][ T4647] dump_header+0x80/0x240 [ 84.650205][ T4647] oom_kill_process+0x295/0x350 [ 84.650286][ T4647] out_of_memory+0x97d/0xb80 [ 84.650311][ T4647] try_charge_memcg+0x62e/0xa10 [ 84.650409][ T4647] obj_cgroup_charge_pages+0x23/0xc0 [ 84.650439][ T4647] __memcg_kmem_charge_page+0x9e/0x170 [ 84.650468][ T4647] __alloc_frozen_pages_noprof+0x18a/0x360 [ 84.650570][ T4647] alloc_pages_mpol+0xb3/0x260 [ 84.650606][ T4647] alloc_pages_noprof+0x8f/0x140 [ 84.650636][ T4647] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 84.650735][ T4647] __kvmalloc_node_noprof+0x3d4/0x650 [ 84.650767][ T4647] ? futex_hash_allocate+0x190/0x9d0 [ 84.650803][ T4647] ? futex_hash_allocate+0x190/0x9d0 [ 84.650837][ T4647] futex_hash_allocate+0x190/0x9d0 [ 84.650896][ T4647] ? cap_task_prctl+0x13f/0x6e0 [ 84.650990][ T4647] futex_hash_prctl+0xd8/0xf0 [ 84.651033][ T4647] __se_sys_prctl+0x4f4/0x1400 [ 84.651068][ T4647] __x64_sys_prctl+0x67/0x80 [ 84.651104][ T4647] x64_sys_call+0x2533/0x3020 [ 84.651140][ T4647] do_syscall_64+0x12c/0x370 [ 84.651170][ T4647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.651225][ T4647] RIP: 0033:0x7efd0c89c819 [ 84.651241][ T4647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.651263][ T4647] RSP: 002b:00007efd0b2f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 84.651366][ T4647] RAX: ffffffffffffffda RBX: 00007efd0cb15fa0 RCX: 00007efd0c89c819 [ 84.651384][ T4647] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 84.651399][ T4647] RBP: 00007efd0c932c91 R08: 0000000000000000 R09: 0000000000000000 [ 84.651412][ T4647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.651437][ T4647] R13: 00007efd0cb16038 R14: 00007efd0cb15fa0 R15: 00007ffdebcd51f8 [ 84.651455][ T4647] [ 84.873545][ T4647] memory: usage 307200kB, limit 307200kB, failcnt 207 [ 84.880383][ T4647] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 84.896143][ T4647] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 84.909596][ T4654] loop3: detected capacity change from 0 to 512 [ 84.911846][ T4647] Memory cgroup stats for /syz6: [ 84.921111][ T4654] ext4: Unknown parameter 'fowner' [ 84.941465][ T4647] cache 0 [ 84.944508][ T4647] rss 12288 [ 84.947711][ T4647] shmem 0 [ 84.950700][ T4647] mapped_file 0 [ 84.954265][ T4647] dirty 0 [ 84.973168][ T4647] writeback 0 [ 84.976465][ T4647] workingset_refault_anon 59 [ 84.983172][ T4647] workingset_refault_file 0 [ 84.994727][ T4647] swap 188416 [ 84.998182][ T4647] swapcached 446464 [ 85.004795][ T4735] hsr0: entered promiscuous mode [ 85.021007][ T4647] pgpgin 8021 [ 85.024311][ T4647] pgpgout 8017 [ 85.030065][ T4647] pgfault 10518 [ 85.043012][ T4647] pgmajfault 38 [ 85.046471][ T4647] inactive_anon 8192 [ 85.050352][ T4647] active_anon 4096 [ 85.059256][ T4647] inactive_file 0 [ 85.063466][ T4647] active_file 0 [ 85.067100][ T4647] unevictable 0 [ 85.070555][ T4647] hierarchical_memory_limit 314572800 [ 85.076479][ T4647] hierarchical_memsw_limit 9223372036854771712 [ 85.101540][ T4647] total_cache 0 [ 85.105015][ T4647] total_rss 12288 [ 85.108819][ T4647] total_shmem 0 [ 85.112417][ T4647] total_mapped_file 0 [ 85.119858][ T3420] kernel read not supported for file /216/net/fib_triestat (pid: 3420 comm: kworker/0:5) [ 85.129938][ T4647] total_dirty 0 [ 85.133488][ T4647] total_writeback 0 [ 85.137458][ T4647] total_workingset_refault_anon 59 [ 85.147825][ T4647] total_workingset_refault_file 0 [ 85.151768][ T4746] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 85.163463][ T4746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.198218][ T4647] total_swap 188416 [ 85.208121][ T4647] total_swapcached 446464 [ 85.219796][ T4647] total_pgpgin 8021 [ 85.230893][ T4647] total_pgpgout 8017 [ 85.241623][ T4647] total_pgfault 10518 [ 85.258287][ T4647] total_pgmajfault 38 [ 85.262339][ T4647] total_inactive_anon 8192 [ 85.266826][ T4647] total_active_anon 4096 [ 85.277026][ T4647] total_inactive_file 0 [ 85.281225][ T4647] total_active_file 0 [ 85.287674][ T4647] total_unevictable 0 [ 85.293033][ T4647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.266,pid=4646,uid=0 [ 85.307888][ T4647] Memory cgroup out of memory: Killed process 4647 (syz.6.266) total-vm:96344kB, anon-rss:1236kB, file-rss:22584kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 85.340690][ T4750] lo speed is unknown, defaulting to 1000 [ 85.528998][ T4769] loop2: detected capacity change from 0 to 512 [ 85.619957][ T4769] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.758870][ T4778] loop3: detected capacity change from 0 to 1024 [ 85.770325][ T4778] EXT4-fs: Ignoring removed orlov option [ 85.794905][ T4777] loop6: detected capacity change from 0 to 512 [ 85.815737][ T4777] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 256)! [ 85.826391][ T4777] EXT4-fs (loop6): group descriptors corrupted! [ 85.866676][ T4778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.124061][ T4769] EXT4-fs (loop2): mount failed [ 87.430612][ T4794] loop4: detected capacity change from 0 to 256 [ 87.449527][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.481290][ T4794] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 87.516270][ T4794] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 87.580399][ T4805] FAULT_INJECTION: forcing a failure. [ 87.580399][ T4805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.644831][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 87.654294][ T4805] CPU: 0 UID: 0 PID: 4805 Comm: syz.3.298 Not tainted syzkaller #0 PREEMPT(full) [ 87.654318][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.654331][ T4805] Call Trace: [ 87.654338][ T4805] [ 87.654345][ T4805] __dump_stack+0x1d/0x30 [ 87.654404][ T4805] dump_stack_lvl+0x95/0xd0 [ 87.654429][ T4805] dump_stack+0x15/0x1b [ 87.654451][ T4805] should_fail_ex+0x263/0x280 [ 87.654571][ T4805] should_fail+0xb/0x20 [ 87.654599][ T4805] should_fail_usercopy+0x1a/0x20 [ 87.654633][ T4805] _copy_from_user+0x1c/0xb0 [ 87.654679][ T4805] __sys_bpf+0x183/0x7e0 [ 87.654703][ T4805] __x64_sys_bpf+0x41/0x50 [ 87.654729][ T4805] x64_sys_call+0x10cb/0x3020 [ 87.654761][ T4805] do_syscall_64+0x12c/0x370 [ 87.654814][ T4805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.654865][ T4805] RIP: 0033:0x7f7600cfc819 [ 87.654899][ T4805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.654917][ T4805] RSP: 002b:00007f75ff757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.654935][ T4805] RAX: ffffffffffffffda RBX: 00007f7600f75fa0 RCX: 00007f7600cfc819 [ 87.655004][ T4805] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000002 [ 87.655019][ T4805] RBP: 00007f75ff757090 R08: 0000000000000000 R09: 0000000000000000 [ 87.655032][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.655089][ T4805] R13: 00007f7600f76038 R14: 00007f7600f75fa0 R15: 00007ffde82c6268 [ 87.655106][ T4805] [ 87.936808][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 87.936878][ T28] audit: type=1400 audit(1776070666.046:3603): avc: denied { mount } for pid=4835 comm="syz.3.301" name="/" dev="autofs" ino=9670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 87.991372][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 88.003383][ T28] audit: type=1400 audit(1776070666.096:3604): avc: denied { create } for pid=4845 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.032708][ T4844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 88.044658][ T28] audit: type=1400 audit(1776070666.096:3605): avc: denied { connect } for pid=4845 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.066843][ T28] audit: type=1400 audit(1776070666.136:3606): avc: denied { read write } for pid=4843 comm="syz.4.303" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.091086][ T28] audit: type=1400 audit(1776070666.136:3607): avc: denied { open } for pid=4843 comm="syz.4.303" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.114840][ T28] audit: type=1400 audit(1776070666.206:3608): avc: denied { write } for pid=4843 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 88.134072][ T28] audit: type=1400 audit(1776070666.206:3609): avc: denied { ioctl } for pid=4843 comm="syz.4.303" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.258543][ T4869] mmap: syz.4.305 (4869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.314859][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 88.342097][ T4881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65389 sclass=netlink_route_socket pid=4881 comm=syz.4.305 [ 88.684439][ T28] audit: type=1400 audit(1776070666.796:3610): avc: denied { sqpoll } for pid=4884 comm="syz.6.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.072326][ T4869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.101566][ T4892] bridge0: Device is already in use. [ 89.172212][ T4899] loop5: detected capacity change from 0 to 512 [ 89.184621][ T4899] ------------[ cut here ]------------ [ 89.190129][ T4899] EA inode 11 i_nlink=2 [ 89.190152][ T4899] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.5.315/4899 [ 89.205050][ T4899] Modules linked in: [ 89.208951][ T4899] CPU: 1 UID: 0 PID: 4899 Comm: syz.5.315 Not tainted syzkaller #0 PREEMPT(full) [ 89.218171][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 89.228251][ T4899] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 89.234947][ T4899] Code: 84 2f 99 ff 4c 8d 2d 1d a1 5d 05 49 8d 7e 40 e8 f4 c8 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 c4 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f 03 de 03 66 66 66 66 66 66 2e [ 89.254592][ T4899] RSP: 0018:ffffc9000153b778 EFLAGS: 00010246 [ 89.260665][ T4899] RAX: ffff888101d4bd08 RBX: ffff8881079d4608 RCX: ffffffff81c02c68 [ 89.268972][ T4899] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd70 [ 89.277090][ T4899] RBP: 000000000000000b R08: 00018881079d45bb R09: 0000000000000000 [ 89.285134][ T4899] R10: ffffc9000153b6a8 R11: 0001c9000153b6a8 R12: ffff8881079d45b8 [ 89.293154][ T4899] R13: ffffffff871dcd70 R14: ffff8881079d4570 R15: 0000000000000001 [ 89.301151][ T4899] FS: 00007f5f7fee76c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 89.310142][ T4899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.316747][ T4899] CR2: 00007f7600f492f8 CR3: 0000000147f02000 CR4: 00000000003506f0 [ 89.324786][ T4899] Call Trace: [ 89.328064][ T4899] [ 89.331016][ T4899] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 89.337031][ T4899] ? errseq_check+0x2c/0x50 [ 89.341731][ T4899] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 89.347202][ T4899] ? ext4_truncate+0x92b/0xb00 [ 89.352067][ T4899] ext4_evict_inode+0xac1/0xe40 [ 89.357029][ T4899] ? __pfx_ext4_evict_inode+0x10/0x10 [ 89.362448][ T4899] evict+0x2af/0x510 [ 89.366347][ T4899] ? __dquot_initialize+0x146/0x7c0 [ 89.371691][ T4899] iput+0x41a/0x580 [ 89.375548][ T4899] ext4_process_orphan+0x1a9/0x1c0 [ 89.380672][ T4899] ext4_orphan_cleanup+0x6a8/0xa00 [ 89.385855][ T4899] ext4_fill_super+0x3414/0x37c0 [ 89.391047][ T4899] ? set_blocksize+0x14c/0x270 [ 89.395872][ T4899] ? setup_bdev_super+0x30e/0x370 [ 89.400894][ T4899] ? __pfx_ext4_fill_super+0x10/0x10 [ 89.406239][ T4899] get_tree_bdev_flags+0x291/0x300 [ 89.411377][ T4899] ? __pfx_ext4_fill_super+0x10/0x10 [ 89.416751][ T4899] get_tree_bdev+0x1f/0x30 [ 89.421187][ T4899] ext4_get_tree+0x1c/0x30 [ 89.425604][ T4899] vfs_get_tree+0x57/0x1d0 [ 89.430018][ T4899] do_new_mount+0x288/0x8d0 [ 89.434617][ T4899] path_mount+0x4d0/0xbc0 [ 89.438950][ T4899] __se_sys_mount+0x28c/0x2e0 [ 89.443649][ T4899] __x64_sys_mount+0x67/0x80 [ 89.448303][ T4899] x64_sys_call+0x2d61/0x3020 [ 89.453077][ T4899] do_syscall_64+0x12c/0x370 [ 89.457670][ T4899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.463564][ T4899] RIP: 0033:0x7f5f8148da8a [ 89.468010][ T4899] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.487655][ T4899] RSP: 002b:00007f5f7fee6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.496096][ T4899] RAX: ffffffffffffffda RBX: 00007f5f7fee6ee0 RCX: 00007f5f8148da8a [ 89.504171][ T4899] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f5f7fee6ea0 [ 89.512203][ T4899] RBP: 00002000000009c0 R08: 00007f5f7fee6ee0 R09: 0000000000800718 [ 89.520237][ T4899] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 89.528263][ T4899] R13: 00007f5f7fee6ea0 R14: 000000000000048d R15: 0000200000000200 [ 89.536258][ T4899] [ 89.539320][ T4899] ---[ end trace 0000000000000000 ]--- [ 89.544938][ T4899] EXT4-fs (loop5): 1 orphan inode deleted [ 89.551291][ T4899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.607394][ T4908] loop3: detected capacity change from 0 to 512 [ 89.620227][ T4899] tap0: tun_chr_ioctl cmd 35111 [ 89.641937][ T4908] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 89.687082][ T4908] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.743802][ T4908] EXT4-fs (loop3): mount failed [ 90.335211][ T4913] ipvlan2: entered promiscuous mode [ 90.387426][ T4110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.409022][ T28] audit: type=1400 audit(1776070668.516:3611): avc: denied { create } for pid=4914 comm="syz.6.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.441476][ T4917] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 90.481065][ T4915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.501795][ T4917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.319'. [ 90.511563][ T4917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.526038][ T4915] loop6: detected capacity change from 0 to 512 [ 90.658225][ T4925] loop2: detected capacity change from 0 to 512 [ 90.735778][ T4925] EXT4-fs (loop2): 1 orphan inode deleted [ 90.746596][ T4925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.767817][ T4925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.794172][ T4928] netlink: 52 bytes leftover after parsing attributes in process `syz.6.320'. [ 91.136153][ T4933] loop6: detected capacity change from 0 to 128 [ 91.148100][ T4933] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 91.149641][ T3295] udevd[3295]: incorrect ext4 checksum on /dev/loop6 [ 91.173769][ T4933] usb usb1: usbfs: process 4933 (syz.6.324) did not claim interface 6 before use [ 91.420868][ T4937] hsr0: entered promiscuous mode [ 91.797963][ T4945] loop3: detected capacity change from 0 to 512 [ 91.808274][ T4945] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 91.828880][ T4945] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 91.845571][ T4945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.873590][ T4945] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.329: Directory hole found for htree leaf block 0 [ 92.124466][ T4949] siw: device registration error -23 [ 92.148483][ T4949] lo speed is unknown, defaulting to 1000 [ 92.698524][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.052901][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 93.052915][ T28] audit: type=1400 audit(1776070671.166:3624): avc: denied { name_connect } for pid=4959 comm="syz.4.332" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.516183][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 93.658746][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 94.321065][ T4970] ================================================================== [ 94.329307][ T4970] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 94.339141][ T4970] [ 94.341465][ T4970] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 94.349535][ T4970] tick_do_update_jiffies64+0x113/0x1c0 [ 94.355106][ T4970] tick_nohz_handler+0x8d/0x3d0 [ 94.359980][ T4970] __hrtimer_run_queues+0x218/0x4f0 [ 94.365186][ T4970] hrtimer_interrupt+0x275/0x810 [ 94.370136][ T4970] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 94.376128][ T4970] sysvec_apic_timer_interrupt+0x6f/0x80 [ 94.381766][ T4970] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.387839][ T4970] kcsan_setup_watchpoint+0x404/0x410 [ 94.393232][ T4970] scm_recv_unix+0x3a/0x230 [ 94.397741][ T4970] __unix_dgram_recvmsg+0x777/0x870 [ 94.402948][ T4970] unix_dgram_recvmsg+0x81/0x90 [ 94.407816][ T4970] sock_recvmsg_nosec+0xc2/0xf0 [ 94.412763][ T4970] ____sys_recvmsg+0x26f/0x280 [ 94.417534][ T4970] ___sys_recvmsg+0x11f/0x3b0 [ 94.422211][ T4970] do_recvmmsg+0x1ef/0x560 [ 94.426648][ T4970] __x64_sys_recvmmsg+0xe5/0x170 [ 94.431593][ T4970] x64_sys_call+0x80f/0x3020 [ 94.436185][ T4970] do_syscall_64+0x12c/0x370 [ 94.440788][ T4970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.446690][ T4970] [ 94.449009][ T4970] read to 0xffffffff86c09a00 of 8 bytes by task 4970 on cpu 0: [ 94.456555][ T4970] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 94.462810][ T4970] count_shadow_nodes+0x6a/0x230 [ 94.467756][ T4970] do_shrink_slab+0x63/0x6a0 [ 94.472346][ T4970] shrink_slab+0x538/0x880 [ 94.476769][ T4970] shrink_node+0x6bc/0x2130 [ 94.476892][ T4995] loop2: detected capacity change from 0 to 1024 [ 94.481275][ T4970] do_try_to_free_pages+0x408/0xc80 [ 94.481309][ T4970] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 94.498671][ T4970] try_charge_memcg+0x37e/0xa10 [ 94.503544][ T4970] obj_cgroup_charge_pages+0x23/0xc0 [ 94.508845][ T4970] __memcg_kmem_charge_page+0x9e/0x170 [ 94.514322][ T4970] __alloc_frozen_pages_noprof+0x18a/0x360 [ 94.520146][ T4970] alloc_pages_mpol+0xb3/0x260 [ 94.524916][ T4970] alloc_pages_noprof+0x8f/0x140 [ 94.529870][ T4970] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 94.535769][ T4970] __kvmalloc_node_noprof+0x3d4/0x650 [ 94.541140][ T4970] futex_hash_allocate+0x190/0x9d0 [ 94.546248][ T4970] futex_hash_prctl+0xd8/0xf0 [ 94.550923][ T4970] __se_sys_prctl+0x4f4/0x1400 [ 94.555690][ T4970] __x64_sys_prctl+0x67/0x80 [ 94.560273][ T4970] x64_sys_call+0x2533/0x3020 [ 94.564947][ T4970] do_syscall_64+0x12c/0x370 [ 94.569536][ T4970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.575418][ T4970] [ 94.577731][ T4970] value changed: 0x00000000ffffaf79 -> 0x00000000ffffaf7a [ 94.584821][ T4970] [ 94.587126][ T4970] Reported by Kernel Concurrency Sanitizer on: [ 94.593261][ T4970] CPU: 0 UID: 0 PID: 4970 Comm: syz.4.335 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.604018][ T4970] Tainted: [W]=WARN [ 94.607812][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 94.617858][ T4970] ================================================================== [ 94.844167][ T4995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.856943][ T4995] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.911506][ T4995] syzkaller0: entered promiscuous mode [ 94.945585][ T4995] syzkaller0: entered allmulticast mode [ 95.353971][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.