last executing test programs: 2m33.646797803s ago: executing program 0 (id=1): socket$kcm(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x32, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b116a00000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m33.244790376s ago: executing program 0 (id=6): socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@deltaction={0x14, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x10001, 0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000002a40)='./file0\x00', 0x3) open_tree(0xffffffffffffff9c, &(0x7f0000002b40)='./file0\x00', 0x1002) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x4}, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) 2m32.789446273s ago: executing program 0 (id=9): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010000000000040000000a83b545d2000100feffffff00000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109491, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002d00)=ANY=[@ANYRES8=r4], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000004d9d1f44ed070000000000000047f5424fd8302fc2572eabe4933a1471da11efa119ee1fd7339a8e9cfcf7994cd6ed7d87890962c4edb671ae7e8abfa995babeca241045da0000d46ce8b12eeb1a688cac6b5ca7349e06545b225e78584cbcdf9c71f98f90c27e397118250921f5aab8010d1a8a9393d0a0730bb82d7f4488332f6f5af1f3acad9424b4c221a9a244588db58d897da3ff7fc339542e5d2e60e683e3f066d699ac8962c5e15396f0ba3c6e7eda08c448f74a012e9e66395fe3c0bd25231bd292dc7eb943c6b2c4887375bfb3a8285f693c8b80", @ANYRES16=r3, @ANYBLOB="000825bd7000ffdbdf2553990002000000520000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@noblock_validity}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xff05, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="d800000019008111e00212ba0d810504020a0200ffe6040b067c55a1bc000100b8000699f3ffffff15000500fe808178a800150003000140020024f89a27c8d889cb591401ba86000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbaca8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025cccb262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecba4b1583a1fc5f49af6ee5de6ccd40dd6e4edef3d93452a92387f0000", 0xd8}], 0x1}, 0x0) 2m31.64139597s ago: executing program 0 (id=13): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000280)={&(0x7f0000000040)=0x9, 0x1000, &(0x7f0000000540)=[{}, {}, {}, {}, {}], &(0x7f0000000080)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000180), &(0x7f0000000000)=r2, 0x1000000}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x9805, 0x0, 0x7fc, 0x6, 0x0, 0x2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x210, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id9c^\x02e') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 2m30.304035759s ago: executing program 0 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(0x0, 0xa2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) 2m30.303516589s ago: executing program 32 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(0x0, 0xa2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) 1m35.805307727s ago: executing program 2 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000010, 0x100010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc0, &(0x7f0000000040)=0x6, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.617878198s ago: executing program 2 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="dbbf00"/14], 0x14}}, 0x0) 1m35.475950517s ago: executing program 2 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x14, 0x21, 0x937, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r1}, 0x20) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280080000000000000008000900"], 0x44}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x9, [@datasec={0xa, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x625, 0x9}, {0x4, 0x5, 0xfffff4f8}, {0x4, 0x8, 0x4}, {0x4, 0x401f, 0xd7}, {0x5, 0x2, 0xfffffffd}], "bf"}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0xf, 0x2}, {0x1, 0x2}, {0x4, 0xb}, {0x8, 0x1}, {0x3, 0x5}, {0xb}, {0x2, 0x1}, {0x8, 0x2}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x3}]}, {0x0, [0x61, 0x61, 0x30, 0x0, 0x0, 0x61, 0x3e]}}, &(0x7f0000000580)=""/165, 0xd1, 0xa5, 0x1, 0x3, 0x10000}, 0x28) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x16, &(0x7f0000000a00)=@raw=[@ldst={0x3, 0x3, 0x1, 0x9, 0x1, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}], &(0x7f0000000280)='GPL\x00', 0x10001, 0x53, &(0x7f0000000400)=""/83, 0x40f00, 0x0, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000640)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r9, r10, r11], 0x0, 0x10, 0x8fcb}, 0x94) 1m35.336734915s ago: executing program 2 (id=479): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x1, 0x2b7, &(0x7f0000000700)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb4}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x3b}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd22, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x1, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5c1, 0x0, 0x0, 0x2, 0x3df], [0x7, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffe, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xfff1}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x100000001}, 0x41, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m34.72900973s ago: executing program 2 (id=481): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000002300)=""/4094, 0xffe}], 0x1, 0x0, 0xffffffff, 0x0) 1m34.251955249s ago: executing program 2 (id=485): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000600)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0xc, 0x3}, {0x7, 0x6}}, [@TCA_CHAIN={0x0, 0xb, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100a9bd7000fddbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x8042) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x48}}, 0x40094) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)={0x94, r8, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x42041}, 0x40d5) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r11, 0x4b47, &(0x7f00000000c0)=""/110) mkdir(&(0x7f0000000040)='./file0\x00', 0x180) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCBRADDBR(r12, 0x89a0, &(0x7f0000000480)='veth0\x00') sendmsg(r12, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="955f731122457b28eea1f737748f2b9f3824427461ee4778817229", 0x1b}, {&(0x7f0000000280)="cb39e76c06315095ae9218aea6fb86a8099cff1a8d5af25963673ed517d487729e4a904d6bc905f9bbe9bc394f14b755c14274cc2088f7a14392fcaa9235be434870551aab901f0b5582c47e3e37c48a9ef5f258cdd363e591771d3947365f401e083ece2e66a9c9cc32efc13b06ec714fdb5f56dee7c8ba801235e0d7d473c0627864db0db72001147d58ae3c165583154389775f0d7b7f194a6886d4671bd7176feaab67b28a030fb01bab057845624b955f163d6ad991ce6eb79eb237cfc106fbe5e7f9cda71d2c6d9795537edb7909ff811310ecc86ee9f71eedbd3b7f84f8e31826247fea5ddc79", 0xea}, {&(0x7f0000000380)="a9fd5a463de69b2090303a97950ee443792d97f896", 0x15}, {&(0x7f00000003c0)="cfbd28b3f805c7bb7f74d68977b607865abb0babe8cf7816682b0cecaf04974f9430a1f0ef06be39936a31b1cddf8348aec13ab43bd55d2754dfd6f6e2bd90a6186274e0f21b3faae1eb3ddb9e06a265d8de354413af4edc1d627a7dec2c06ca5d7a355d003e2e7afab68840e6aafbfdd473f1c7a553d626924472b326af86db8229ecc5e99ddf55d008b62fb11ee7ca3f4d6e57b716fe3a5051a24d6b0801388daaba83f8f15c06426137f65c8edbc39914c3b54de4", 0xb6}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="f000000000000000000000000300000092610e4a4ce53fbd6c829c38ec834528967b98eed8c16fc95e364e67438c78355f0fcc6f5d35d932fbffe59dd40e6fbd2dd39c3a7833b74f528edd1b74ec319eabcc6cc6cf0116c241ff582ce11b471e0a2358b54f7732a9d3e584c7ee4c9aa00a152c921be29ca2d56d618d164c462d53956af33d63a3dccd949be30a752e0600050706aaec616544f8acccb676c30a0dd3b66e8dc75dc2554a62c56c167d07b961bdb7de9c9cd55503026c54d3d13316c503cd2edb83dfa2eadee706b527f2d00fd2246c7fc19330151314502684ccca78e94aa3f01b355536ffdaf09800001000000000000000130100000700000060000000000000001101000000000100c4234cc705e88a2e10b33285ec7f5b65ba3c037d682468ab6a3a1a78fb8b70cef68ebcd567edfa83d81f4e2f0cbd88a3f71707232af69dc50300000077239d1199d07e0d518537744548e8696e86fa00000000000000000000000000000000c1c48aff896f95eaa5b77f6abcd45433e14ee4c5a58bd271881f46c233dca15070cacfc32fbaa2f22920c46d82552d2dca90678fc2197597d5d8bd766fb21c1a14564e915fa8cea35b0fe96d341d22b3547cc4863d8269b0e106f6cab5dee972b799e87247045f"], 0x160}, 0x40000) 1m34.177205843s ago: executing program 33 (id=485): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000600)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0xc, 0x3}, {0x7, 0x6}}, [@TCA_CHAIN={0x0, 0xb, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100a9bd7000fddbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x8042) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x48}}, 0x40094) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)={0x94, r8, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x42041}, 0x40d5) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r11, 0x4b47, &(0x7f00000000c0)=""/110) mkdir(&(0x7f0000000040)='./file0\x00', 0x180) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCBRADDBR(r12, 0x89a0, &(0x7f0000000480)='veth0\x00') sendmsg(r12, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="955f731122457b28eea1f737748f2b9f3824427461ee4778817229", 0x1b}, {&(0x7f0000000280)="cb39e76c06315095ae9218aea6fb86a8099cff1a8d5af25963673ed517d487729e4a904d6bc905f9bbe9bc394f14b755c14274cc2088f7a14392fcaa9235be434870551aab901f0b5582c47e3e37c48a9ef5f258cdd363e591771d3947365f401e083ece2e66a9c9cc32efc13b06ec714fdb5f56dee7c8ba801235e0d7d473c0627864db0db72001147d58ae3c165583154389775f0d7b7f194a6886d4671bd7176feaab67b28a030fb01bab057845624b955f163d6ad991ce6eb79eb237cfc106fbe5e7f9cda71d2c6d9795537edb7909ff811310ecc86ee9f71eedbd3b7f84f8e31826247fea5ddc79", 0xea}, {&(0x7f0000000380)="a9fd5a463de69b2090303a97950ee443792d97f896", 0x15}, {&(0x7f00000003c0)="cfbd28b3f805c7bb7f74d68977b607865abb0babe8cf7816682b0cecaf04974f9430a1f0ef06be39936a31b1cddf8348aec13ab43bd55d2754dfd6f6e2bd90a6186274e0f21b3faae1eb3ddb9e06a265d8de354413af4edc1d627a7dec2c06ca5d7a355d003e2e7afab68840e6aafbfdd473f1c7a553d626924472b326af86db8229ecc5e99ddf55d008b62fb11ee7ca3f4d6e57b716fe3a5051a24d6b0801388daaba83f8f15c06426137f65c8edbc39914c3b54de4", 0xb6}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x160}, 0x40000) 1m26.545666441s ago: executing program 4 (id=541): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x70bd25, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}}, 0x24000044) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0x4, 0x3, 0x7, 0x7, 0x8000}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dfa5ef", 0x8, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x6558, 0x8}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r5, 0x3}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x9145]}, 0x8, 0x80000) 1m26.359930851s ago: executing program 4 (id=542): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200041, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000400)=""/104, 0x68}, 0x2}, {{&(0x7f0000000480)=@l2, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/236, 0xec}, {&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/237, 0xed}, {&(0x7f0000000a00)=""/98, 0x62}], 0x7, &(0x7f0000000b00)=""/166, 0xa6}, 0x7}, {{&(0x7f0000000bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000380)=""/38, 0x26}], 0x1}, 0x6d1b}, {{&(0x7f0000000c80)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/109, 0x6d}], 0x1, &(0x7f0000000dc0)=""/99, 0x63}, 0x8}, {{&(0x7f0000000e40)=@x25={0x9, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/234, 0xea}, {&(0x7f0000000fc0)=""/119, 0x77}, {&(0x7f0000001040)=""/174, 0xae}, {&(0x7f0000001100)=""/131, 0x83}], 0x4, &(0x7f0000001200)=""/152, 0x98}, 0x1}, {{&(0x7f00000012c0)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)=""/70, 0x46}, {&(0x7f00000013c0)=""/53, 0x35}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000001400)=""/120, 0x78}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/102, 0x66}, {&(0x7f0000001540)=""/49, 0x31}], 0x7, &(0x7f0000001600)=""/173, 0xad}, 0x9}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001740)=""/57, 0x39}, {&(0x7f0000001780)=""/126, 0x7e}], 0x2, &(0x7f0000001840)=""/105, 0x69}, 0x1000}, {{&(0x7f00000018c0)=@xdp, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/233, 0xe9}], 0x2, &(0x7f0000001b00)=""/116, 0x74}, 0x4}], 0x8, 0x10122, &(0x7f0000001b80)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x88, @multicast1, 0x4e22, 0x0, 'wrr\x00', 0x0, 0x4, 0x7d}, 0x2c) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000002300)=""/4094, 0xffe}], 0x1, 0x0, 0xffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0xee01) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x6}, &(0x7f0000001480)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000002140)={r7, 0x9, 0x3, 0x7f}, 0x10) 1m24.68715963s ago: executing program 4 (id=556): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) unshare(0x20000680) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x200005, 0x0) inotify_rm_watch(r5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@auto_da_alloc}, {@nodiscard}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0xcb6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_journal}, {@nomblk_io_submit}], [{@uid_lt={'uid<', r0}}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 1m24.091038935s ago: executing program 4 (id=560): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x5, 0x5}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000500)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x1b) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m23.210328187s ago: executing program 4 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x6, 0x2ed5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000380000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.852681848s ago: executing program 4 (id=569): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@float={0x7, 0x0, 0x0, 0x10, 0x10}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x3, 0x1}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x44}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x800}, 0x8100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r3) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) 1m22.774052202s ago: executing program 34 (id=569): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@float={0x7, 0x0, 0x0, 0x10, 0x10}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x3, 0x1}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x44}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x800}, 0x8100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r3) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) 59.402279613s ago: executing program 1 (id=755): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x2, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x202, 0x0, 0x2e, 0x41, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4d68f}}, 0x20}}, 0x4) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) 59.332606508s ago: executing program 1 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000740)={[], [{@dont_appraise}, {@smackfsdef}, {@fsname={'fsname', 0x3d, 'pagemap\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x32, 0x35, 0x34, 0x61, 0x36, 0x61, 0x62], 0x2d, [0x64, 0x34, 0x33], 0x2d, [0x38, 0x39, 0x65, 0x31], 0x2d, [0x66, 0x33, 0x39, 0x38], 0x2d, [0x65, 0x39, 0x33, 0x39, 0x35, 0x36, 0x63, 0x3e]}}}, {@smackfshat={'smackfshat', 0x3d, ':/'}}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a242, 0x1a1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x7f, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dab000/0x2000)=nil, 0x2000, 0x2000001, 0x6031, r0, 0x0) fcntl$dupfd(r1, 0x406, r3) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000002, &(0x7f0000000180)=[{0x1000, 0x60d, 0xda5a}, {0x8000000000000001, 0x5, 0x1000000000000a2}], 0x2, 0x237, 0x0, 0x2, 0x0, 0x2}) fchdir(0xffffffffffffffff) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f0000000940)="6826be6c71323ff1262aabe42acf881af233303968", 0x15}], 0x1, 0x53fe, 0x3, 0x0) 59.106341031s ago: executing program 1 (id=762): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0xc85b, 0x34b, 0x2, 0x0, 0x6}, &(0x7f0000000180)={0x80000000, 0x5, 0x38000000000000, 0xfffffffffffffff7, 0xeb53, 0x2, 0x8001, 0x49e}, &(0x7f00000001c0)={0x8000000000000000, 0x4, 0x7, 0x2, 0x61f99766, 0x8, 0x80000000, 0x1}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0x7ff]}, 0x8}) 58.120857219s ago: executing program 1 (id=771): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = dup3(r0, r0, 0x0) r3 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000001580)=[@ioring_restriction_sqe_op={0x1, 0x1c}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x4}], 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, 0x0, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x15, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000700000000000000e51649cb183e000001000000000000000000000018e900000f00000000000000000000008520000001000000181b0000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000fa0e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000182a0000", @ANYRES32=0x1, @ANYBLOB="00000000070000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x3, 0xe8, &(0x7f0000000740)=""/232, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xb, 0x3, 0x401}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000008c0)=[{0x5, 0x1, 0x9, 0xa}, {0x1, 0x3, 0x10}, {0x1, 0x2, 0xb}, {0x1, 0x5, 0x5, 0x2}, {0x0, 0x2, 0x9, 0xf3ffc8fbab317986}, {0x5, 0x5, 0xe, 0xb}], 0x10, 0x4}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000229bd7000010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="05003300020000002d1c40283ce04496af3c3379f113d8a0fe5ab7d0163bbc88ec059c46fdfd3ba038d79a069d4b0eb0956a4d93849578564b6461aeeb7c3079e2674d08249cf2c4d81b9407b456392d5d075f7a8cbd52ffe5ddbe0fc12ece9aeeff04cce1006e13e3fd1180e340ba37e619028e0ccd0a03f003fae71d8ba76530e46f"], 0x24}}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@bloom_filter={0x1e, 0xd, 0x0, 0x7f, 0x2000, 0x1, 0x3, '\x00', r7, r2, 0x3, 0x2, 0x4, 0x8}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e1e, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@alu={0x0, 0x0, 0x1, 0x6, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x1020, 0xca, &(0x7f0000000580)=""/202, 0x41000, 0x43, '\x00', 0x0, @cgroup_skb=0x1, r2, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x8, 0x0, &(0x7f0000000a40)=[{0x0, 0x4, 0x6, 0x3}, {0x5, 0x5, 0x4, 0xc}, {0x1, 0x2, 0x7, 0xf}, {0x3, 0x5, 0xf, 0x9}, {0x3, 0x1, 0x10, 0xa}, {0x3, 0x2, 0x2, 0x8}, {0x0, 0x3, 0x1, 0xc}, {0x2, 0x3, 0xc, 0xa}], 0x10, 0x2d}, 0x94) ioctl$FIOCLEX(r1, 0x5451) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$poke(0x1, r9, &(0x7f0000000080), 0x4000000000004) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES16=r0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="01000000000000002012b897e3657a84fe9ef9517dd5d731c2ce6153e15cfff7b9792c8e5923b61bd150a8f63f89042ce011ccfeb24f8bcc7b979827b6e5ecbba771d75c1f17500270b8817c69796edfdda345b7ba6827cb677b31418d273772514ee72c78c1511a295a2c77839bec0f15fcf352d6c3807ac99a6778a297f365d908dcd681f8548fb66cbe51651821ea730b3cecc3e2de72c2a81eee4afb55953408191fdc66e353f05b9ba8492c41e60494ff1790"], 0x5c, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast2}], 0x20) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805d", 0x49}, {&(0x7f00000002c0)="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", 0xf26}, {&(0x7f0000002840)="d0e9f04c4439acf77fc95f5dc3b5984211aff166", 0x14}], 0x3}, 0x9cdc2384016f48f8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) chmod(&(0x7f0000000540)='./file0\x00', 0x120) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x4000002}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0x20, 0x5a, 0xffffffffffffffff, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) 57.045871172s ago: executing program 1 (id=778): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc0100001900010025bd7000fcdbdf2500000000000000000000ffffe0000001fe80000000000000000000000000003700000000000000000200000089000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000005000000002000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500200100000000000000000000000000020000000033"], 0x1bc}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 56.466976486s ago: executing program 1 (id=782): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @private2, 0x400008}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)='F', 0x1}], 0x1}}], 0x1, 0x2400e001) r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x9, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffcf800080002400000000008000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x1c, "fab254b5f5001f00000000005c000000"}, &(0x7f00000002c0)=0xff55) 56.39499293s ago: executing program 35 (id=782): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @private2, 0x400008}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)='F', 0x1}], 0x1}}], 0x1, 0x2400e001) r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x9, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffcf800080002400000000008000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x1c, "fab254b5f5001f00000000005c000000"}, &(0x7f00000002c0)=0xff55) 19.279873678s ago: executing program 7 (id=1134): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4082, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xed26}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040), 0x22, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0xffffffffffffff4e) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x81, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0xc054}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9000090}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$caif_stream(0x25, 0x1, 0x2) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0x5}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x4, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x5, 0x0, 0x46}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 18.556753021s ago: executing program 7 (id=1140): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000002340)={0x20, 0x1000f5}, 0x20) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 18.40017629s ago: executing program 7 (id=1141): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 17.758083878s ago: executing program 7 (id=1142): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000034c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000007040000000000dd4d31041e7044776d902a4fa14d8c2c7b537973b55adf96e4359ead91a6a200d73c7574d813de433fe7f570451c5403d3d29d14e075afaec4fe1d5055b8e04fab32a440"], &(0x7f00000033c0)=""/214, 0x26, 0xd6, 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[], 0xfe, 0x682, &(0x7f0000000300)="$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") utimes(&(0x7f00000009c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB="a8dd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x8100, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r9, 0x5607, 0x4) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x8, 0x0}, 0x8) r11 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x2, &(0x7f00000004c0)=@raw=[@ldst={0x2, 0x1, 0x6, 0xa, 0x1, 0x6}, @jmp={0x5, 0x1, 0x0, 0x4, 0x1, 0x6, 0x10}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x79, '\x00', r6, @fallback=0xe, r7, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x3, 0xffffff82}, 0x10, r10, r7, 0x0, &(0x7f0000000b00)=[r4, r4, r4, r7, r7, r5], &(0x7f0000000b40), 0x10, 0x2e765820}, 0x94) 16.915976927s ago: executing program 7 (id=1144): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x4000000000009) close(0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) r2 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3, 0xf]}, {}, {0x8, 0x88be, 0x81000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) accept4(r2, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x80000) 15.960019373s ago: executing program 7 (id=1147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000c80)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r5, 0x80, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88c, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00', &(0x7f0000000c40)=""/53, 0x35) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r9, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="200b2abd7002000000000000000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040002) 15.959467073s ago: executing program 36 (id=1147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000c80)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r5, 0x80, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88c, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00', &(0x7f0000000c40)=""/53, 0x35) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r9, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="200b2abd7002000000000000000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040002) 4.044553613s ago: executing program 3 (id=1259): socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000000010002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) (async) syz_clone3(&(0x7f0000000880)={0x40000100, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680), {0x26}, &(0x7f00000006c0)=""/229, 0xe5, &(0x7f00000007c0)=""/99, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) chdir(&(0x7f00000001c0)='./file0\x00') (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) (async, rerun: 32) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r3, 0x402, 0x0) r4 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x400040, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.712567282s ago: executing program 9 (id=1263): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x20}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x37, 0xc, "dd58194af450d4e46a6b5c67b1fe5d542a844fff7212de36ac3932d471a231f95f64f8d27c32cdb103a23baa08df698376860a"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008095}, 0x4000005) 3.541182122s ago: executing program 3 (id=1264): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800800000d2f1c19900000018130000", @ANYRES32=r0, @ANYRESHEX=0x0], 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e0001006970366772657461700000001a4102800600"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8d61}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b42be71d7c47752a71c75e780f15ffced2d4b4fc7301d0d8cfe25578"}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4008091) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r13, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r12}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r14, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r12}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r8}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r15, r9, 0x1a, 0x0, 0x0, @void, @value=r16, @void, @void, r12}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r6, r5, 0x38, 0x4, r16, @void, @value=r7, @void, @void, r12}, 0x20) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r17, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 3.144469495s ago: executing program 9 (id=1268): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 2.971618665s ago: executing program 9 (id=1270): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.499167493s ago: executing program 3 (id=1278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x69}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r2, 0xffffffff) futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) fcntl$setstatus(r3, 0x4, 0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.21956469s ago: executing program 3 (id=1281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = signalfd4(r0, &(0x7f0000000040), 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1802004000eeffffff0000000900000018170000040000000000000000000000186000000e0000000500000009000000181100", @ANYRES32], 0x0, 0x8000002, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sched_cls=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000600"], 0x0, 0x1e, 0x0, 0x1, 0x7}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) read$eventfd(r1, &(0x7f0000000b00), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1401006bffffff0a0000fe030000000580000000"], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000260900020073797a310000000008000a40fffffffc580100000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002080004400000000109000200"], 0x1e8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}]}, 0x24}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000840)={0x68, 0x0, &(0x7f00000009c0)=[@acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@fda={0x66646185, 0x8, 0x2, 0x9}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/242, 0xf2, 0x1, 0x9}}, &(0x7f0000000580)={0x0, 0x20, 0x38}}, 0x40}], 0x9c, 0x0, &(0x7f0000000a40)="286e792d49dbf9577e4b87c6b5209731fca0a8be9b299cab0c62410d94dccfb1134ed11ea6b4f971288066ebdb3c8fafec0b51765067b060e122fac09bdadf849e8eff40482cc1dbe6dc715618ebc2083d18154dfa1149515bae63e2a4fd0cc61257cd6074ae6864840ba16697f62a1ef7fa5d53bc607a5095054721e4edb55a65de2cbe08fa8d42059769c045a0c77c61a209cc087f650b2d894794"}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x17, "2af01c3d0040fbffffffffffffff00"}) r10 = syz_open_pts(r9, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETS(r9, 0x5402, &(0x7f00000001c0)={0xff7f, 0xe5, 0x7, 0x7fff, 0x0, "c12d416fbe35bc7202000000978ee2df365088"}) modify_ldt$write2(0x11, &(0x7f0000000b40)={0x2, 0x20000800, 0xffffffffffffefff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000280)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffdffff4}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80001804, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="a5", 0x1}], 0x1}, 0x2408c8c0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x6839f6f8}], 0x1, 0x10010, 0x0) 1.995716313s ago: executing program 5 (id=1282): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @private2, 0x400008}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)='F', 0x1}], 0x1}}], 0x1, 0x2400e001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x1c, "fab254b5f5001f00000000005c000000"}, &(0x7f00000002c0)=0xff55) 1.649408343s ago: executing program 9 (id=1283): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@barrier}]}, 0x1, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83478035", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x3, r4, 0x1, 0x4, 0x6, @local}, 0x14) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x1e01) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x103) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x1b, 0x0, @thr={&(0x7f00000009c0)="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", &(0x7f00000000c0)="4d51da6dd67a91465315490132f76c891178b502d160ebd8820b0ffae351c157a0e1b624111d2ed1d1cd5f2e05d65586a5ef"}}, &(0x7f0000000140)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001b80)={&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/219, 0xdb, 0x1, &(0x7f0000001ac0)=""/172, 0xac}, &(0x7f0000001bc0)=0x40) 1.34984429s ago: executing program 3 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b"], 0x94}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000240)=0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0), 0x6, 0x61f, &(0x7f0000000b00)="$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") 1.304207263s ago: executing program 8 (id=1290): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x4}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x35, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe834, 0x0, 0x0, 0x0, 0xfffffe00}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x96}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0xb, 0x9, 0xffffffffffffffe0}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffa}, @jmp={0x5, 0x1, 0x1, 0x6, 0x9, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1}, @tail_call, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r3, 0x20, &(0x7f0000000400)={&(0x7f0000000500)=""/90, 0x5a, 0x0, &(0x7f0000000580)=""/209, 0xd1}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @generic={0x1, 0x8, 0x7, 0x59ce, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x1df, 0x0, &(0x7f0000000340), 0x41000, 0x22db3b655755ecad, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0x3515061c, 0x1}, 0x10, r5, 0x0, 0x5, &(0x7f00000006c0)=[r1], &(0x7f0000000700)=[{0x5, 0x2, 0x5}, {0x3, 0x3, 0xb}, {0x4, 0x2, 0xc}, {0x3, 0xfff, 0xb}, {0x0, 0x3, 0xe, 0x1}], 0x10, 0xc, @value=r3}, 0x94) 1.152111492s ago: executing program 3 (id=1292): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x3, 0x800}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, 0x140d, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(r4, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) getuid() syz_clone(0x6801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.148186502s ago: executing program 8 (id=1293): newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000800)={[{@errors_remount}], [{@audit}, {@uid_lt={'uid<', r0}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@measure}]}, 0x82, 0x49c, &(0x7f00000002c0)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0x6003}, @void, @x25={0x2}}, 0x7) 1.147820822s ago: executing program 9 (id=1294): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 1.145675572s ago: executing program 6 (id=1295): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000080)="02fe3a046798d089054af21edb150fa69f76ed579cda70fc9713daf300f99990fe033254d724e770dc589a4a7ee0342ffe66e52541b2cb73aa27e47f06bf9240a2501d1cf4acfeb155ab90f1efb3b325bc30f9ed064cd5fe1beb6efdd79d37ec7eb858f6d3fc1750c8a9d62f33a66932f916ec205d0c66ad12fe2e4da04ff54d9aec58f1229a73cdd9033164e3018e45c9b7ebff3df6d305a12361b49f001983db366c7dd6725f08cb4f81b58f91233bf0b7c281e706", 0xb6, 0xfecc) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 1.094034005s ago: executing program 8 (id=1296): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001e00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000080)={[{@i_version}, {@auto_da_alloc_val}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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") r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180), 0x0, 0x2) 1.085647636s ago: executing program 9 (id=1297): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.02015472s ago: executing program 5 (id=1298): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={r2, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4, 0xffffffff}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000040000000000008002000000100000", @ANYRES32, @ANYBLOB="0400"/14, @ANYRESOCT=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r6, 0x2201, &(0x7f0000000040)=0x85) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 948.337084ms ago: executing program 6 (id=1299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974000000240002800800044000000001"], 0x118}}, 0x0) 840.68649ms ago: executing program 5 (id=1300): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc0100001900010025bd7000fcdbdf2500000000000000000000ffffe0000001fe80000000000000000000000000003700000000000000000200000089000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000200000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500200100000000000000000000000000020000000033"], 0x1bc}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 802.751363ms ago: executing program 6 (id=1301): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000002980)=ANY=[@ANYBLOB="0200000002000200000000000400000000000000100000400000000002"], 0x24, 0x3) (async) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) 703.272178ms ago: executing program 8 (id=1302): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, r0, 0xd, 0xffffffffffffffff, 0xb) pipe2(0x0, 0x0) getpid() io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") 644.212042ms ago: executing program 6 (id=1303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e09044f124c3581ca19294799ba56000010000280080005000000000004001200e17c4c633349fd52b8f42a48e75522a3b1ed935f27c40485194c41def3be719ab1bf498b8266afd1decc1c18672c0762f1fe72d7bee1d7b6"], 0x40}}, 0x0) 641.677092ms ago: executing program 5 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x3c}}, 0x44) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC], 0x1, 0x266, &(0x7f0000000700)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2a020400) socket$netlink(0x10, 0x3, 0x8000000004) io_setup(0x1, &(0x7f0000000b80)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x306}, &(0x7f0000000080), &(0x7f0000002800)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/89, 0x4c}, {&(0x7f0000000500)=""/29, 0x10}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) setitimer(0x1, &(0x7f00000001c0)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, &(0x7f0000000200)) 269.318284ms ago: executing program 6 (id=1305): syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0, 0x0, 0xfffffffe}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x100000001) 249.582175ms ago: executing program 8 (id=1306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x87c4b82ecbade701, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 88.124635ms ago: executing program 5 (id=1307): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 87.461044ms ago: executing program 8 (id=1308): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) set_mempolicy(0x4005, 0x0, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/46, 0x2c, 0x2e, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x7, 0xfffffffffffffff4, 0x2}], &(0x7f0000000040)='GPL\x00', 0x8, 0x78, &(0x7f0000000080)=""/120, 0x41100, 0x13, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 67.785116ms ago: executing program 5 (id=1309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e91b7632700664e2b1408c95431400e8093b040eee6f4fb1244741435b0e3a9e2495d9cad223706f80e7bea5ad4fffb57bf7937f747c243235feef4e2d1ab49f68147863", @ANYRES64=0x0, @ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000d4e1b03092787a704d9f39adc1784b62ac22c8f6fbf6ef868762c1fadf2f622c7e38e107e9", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x894a, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x894a, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="928e04b416f09fa7a009aee21be2", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) msgget(0x1, 0x108) 0s ago: executing program 6 (id=1310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$TCSETAW(r0, 0x5433, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000100)={r2, 0x0, 0x6, 0x200, 0x10000, 0x2}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x80000, &(0x7f0000000140)="546ab5775f", 0x5, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000440)="b7ee75b1eb698c5cb4c82eb300b60871787d2e5f11aa5dbdfb46840a23ab52fd542df9199395c828bae0c730e466f35ec16d0f") syz_open_procfs$namespace(r4, &(0x7f0000000480)='ns/pid\x00') (async) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newae={0x190, 0x1e, 0x10, 0x70bd2d, 0x25dfdbfd, {{@in=@remote, 0x4d2, 0x2, 0x32}, @in=@multicast2, 0x7fffffff, 0x3500}, [@proto={0x5, 0x19, 0x2b}, @offload={0xc, 0x1c, {r5}}, @algo_crypt={0xe8, 0x2, {{'cbc-twofish-avx\x00'}, 0x500, "75a52731bffa82257a7c476f6d45440bfcea8ef09fcc5f58d87888acd753b8267455fc2360a70a832b02240276ad6fab5467024ed65c3d0cc2bd2307e4d3535bf47e2e600ac9a348291c7e943148ccf56da8b5ad5b140502400a0f1f7bb00b71fcbac1d04b8b0b80025bf4ac8a683c62ec4ccabaa6960e458bc3ac7819e1ae6abe55e9e0d6e38aba81883a91c8efb18883a9f0c0770b8592938dff8042479bff"}}, @replay_thresh={0x8, 0xb, 0x100}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@mcast2, 0x2, 0xc0, 0x5}}, @lifetime_val={0x24, 0x9, {0xeba9, 0x9, 0x6, 0x1}}]}, 0x190}}, 0x0) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device bond1 [ 127.725444][ T50] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.793537][ T50] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.940219][ T50] bridge_slave_1: left allmulticast mode [ 127.945908][ T50] bridge_slave_1: left promiscuous mode [ 127.973149][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.997404][ T50] bridge_slave_0: left allmulticast mode [ 128.013380][ T50] bridge_slave_0: left promiscuous mode [ 128.020482][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.144060][ T6820] loop7: detected capacity change from 0 to 1024 [ 128.156880][ T6820] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 128.173019][ T6820] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.190518][ T6820] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 128.191018][ T50] erspan0 (unregistering): left promiscuous mode [ 128.199009][ T6820] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 128.199009][ T6820] [ 128.216025][ T6820] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 128.227252][ T50] gretap0 (unregistering): left promiscuous mode [ 128.229026][ T6820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.398016][ T6831] x_tables: unsorted entry at hook 2 [ 128.416312][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.790'. [ 128.431775][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.454287][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.467003][ T5799] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.487648][ T50] bond0 (unregistering): Released all slaves [ 128.577356][ T50] tipc: Left network mode [ 128.670754][ T50] hsr_slave_0: left promiscuous mode [ 128.679132][ T50] hsr_slave_1: left promiscuous mode [ 128.717410][ T50] veth1_macvtap: left promiscuous mode [ 128.728400][ T50] veth0_macvtap: left promiscuous mode [ 128.749226][ T50] veth1_vlan: left promiscuous mode [ 128.764953][ T50] veth0_vlan: left promiscuous mode [ 128.775729][ T6846] SELinux: failed to load policy [ 128.922616][ T6865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=6865 comm=syz.5.796 [ 129.056700][ T50] team0 (unregistering): Port device team_slave_1 removed [ 129.072964][ T50] team0 (unregistering): Port device team_slave_0 removed [ 129.443959][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 129.602856][ T28] kauditd_printk_skb: 1103 callbacks suppressed [ 129.602885][ T28] audit: type=1400 audit(1771093884.649:9860): avc: denied { map_create } for pid=6880 comm="syz.6.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.662827][ T6908] syzkaller0: entered promiscuous mode [ 129.668399][ T6908] syzkaller0: entered allmulticast mode [ 129.674492][ T28] audit: type=1400 audit(1771093884.649:9862): avc: denied { getattr } for pid=6905 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.703471][ T28] audit: type=1400 audit(1771093884.649:9863): avc: denied { getattr } for pid=6905 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth14.link" dev="tmpfs" ino=5199 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.740394][ T28] audit: type=1400 audit(1771093884.649:9861): avc: denied { map_read map_write } for pid=6880 comm="syz.6.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.755800][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.761856][ T28] audit: type=1400 audit(1771093884.699:9864): avc: denied { read write } for pid=5799 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.792620][ T28] audit: type=1400 audit(1771093884.699:9865): avc: denied { open } for pid=5799 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.829872][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.837555][ T6795] bridge_slave_0: entered allmulticast mode [ 129.860455][ T6795] bridge_slave_0: entered promiscuous mode [ 129.872960][ T6914] random: crng reseeded on system resumption [ 129.892761][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.900485][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.937255][ T6795] bridge_slave_1: entered allmulticast mode [ 129.961594][ T6795] bridge_slave_1: entered promiscuous mode [ 130.039886][ T28] audit: type=1400 audit(1771093884.699:9866): avc: denied { ioctl } for pid=5799 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.110409][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.142762][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.172053][ T28] audit: type=1400 audit(1771093884.729:9867): avc: denied { search } for pid=6909 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.257155][ T6795] team0: Port device team_slave_0 added [ 130.276429][ T28] audit: type=1400 audit(1771093884.729:9868): avc: denied { search } for pid=6909 comm="rm" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.316381][ T6795] team0: Port device team_slave_1 added [ 130.387018][ T28] audit: type=1400 audit(1771093884.729:9869): avc: denied { search } for pid=6909 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.426603][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.440152][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.508508][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.559973][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.567144][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.610951][ T6918] loop7: detected capacity change from 0 to 512 [ 130.621760][ T6919] SELinux: failed to load policy [ 130.660508][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.698967][ T6918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.830631][ T6918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.870866][ T6918] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.902888][ T6795] hsr_slave_0: entered promiscuous mode [ 130.908967][ T6795] hsr_slave_1: entered promiscuous mode [ 131.374974][ T6795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 131.421881][ T6795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 131.479215][ T6795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 131.538518][ T6795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 132.378884][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.393245][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.404880][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.412030][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.708773][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.823'. [ 132.718175][ T7028] loop3: detected capacity change from 0 to 2048 [ 132.757312][ T7028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.757568][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.776516][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.875320][ T3315] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 132.982644][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.051500][ T7037] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.827'. [ 133.227711][ T5799] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.359683][ T7060] netlink: 'syz.7.830': attribute type 1 has an invalid length. [ 133.366948][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.450277][ T7060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.579375][ T7072] loop7: detected capacity change from 0 to 512 [ 133.600104][ T7072] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.617679][ T7072] EXT4-fs (loop7): 1 truncate cleaned up [ 133.635123][ T7072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.640716][ T7076] loop3: detected capacity change from 0 to 512 [ 133.657387][ T7076] EXT4-fs: Ignoring removed i_version option [ 133.677382][ T7076] EXT4-fs (loop3): 1 truncate cleaned up [ 133.703137][ T7076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.856926][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.005004][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.393816][ T6795] veth0_vlan: entered promiscuous mode [ 134.436741][ T6795] veth1_vlan: entered promiscuous mode [ 134.541801][ T6795] veth0_macvtap: entered promiscuous mode [ 134.595574][ T6795] veth1_macvtap: entered promiscuous mode [ 134.640921][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.672441][ T28] kauditd_printk_skb: 824 callbacks suppressed [ 134.672460][ T28] audit: type=1400 audit(1771093889.719:10694): avc: denied { map_create } for pid=7105 comm="syz.6.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.717516][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.770964][ T2124] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.784320][ T28] audit: type=1400 audit(1771093889.809:10695): avc: denied { map_read map_write } for pid=7105 comm="syz.6.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.843396][ T2124] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.873186][ T28] audit: type=1400 audit(1771093889.919:10696): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.898867][ T2124] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.907802][ T2124] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.922691][ T28] audit: type=1400 audit(1771093889.919:10697): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.022096][ T28] audit: type=1400 audit(1771093889.919:10698): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.106359][ T28] audit: type=1400 audit(1771093890.009:10699): avc: denied { create } for pid=7109 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.149817][ T28] audit: type=1400 audit(1771093890.009:10700): avc: denied { write } for pid=7109 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.212085][ T28] audit: type=1400 audit(1771093890.009:10701): avc: denied { nlmsg_write } for pid=7109 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.270347][ T28] audit: type=1400 audit(1771093890.019:10702): avc: denied { map_create } for pid=7111 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.312635][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.441888][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 135.510799][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.783'. [ 135.711297][ T7071] Process accounting resumed [ 135.742259][ T7134] loop3: detected capacity change from 0 to 512 [ 135.761956][ T7134] EXT4-fs: Ignoring removed i_version option [ 135.832473][ T7134] EXT4-fs (loop3): 1 truncate cleaned up [ 135.846965][ T5799] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.869115][ T7134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.896621][ T7142] netlink: 56 bytes leftover after parsing attributes in process `syz.7.850'. [ 135.931380][ T7142] serio: Serial port ttyS3 [ 136.009203][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.850'. [ 136.051748][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.061843][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.339718][ T7158] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 136.351680][ T7159] loop8: detected capacity change from 0 to 1024 [ 136.418021][ T7158] syzkaller0: linktype set to 804 [ 136.430461][ T7159] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.463521][ T7159] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.479873][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 136.507630][ T7162] team1: entered promiscuous mode [ 136.521562][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.856'. [ 136.567191][ T7162] team1: entered allmulticast mode [ 136.599235][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.856'. [ 136.614550][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 136.688897][ T6795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.701347][ T7162] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 136.727579][ T7162] team2: entered promiscuous mode [ 136.733111][ T7162] team2: entered allmulticast mode [ 136.991275][ T7176] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 137.038834][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.089083][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.417374][ T7203] bridge_slave_1: left allmulticast mode [ 137.423576][ T7203] bridge_slave_1: left promiscuous mode [ 137.429450][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.481367][ T7203] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 137.593576][ T7203] bridge2: entered promiscuous mode [ 137.633485][ T7205] SELinux: failed to load policy [ 137.724433][ T83] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.922139][ T7209] __nla_validate_parse: 1 callbacks suppressed [ 137.922155][ T7209] netlink: 4596 bytes leftover after parsing attributes in process `syz.5.872'. [ 138.001109][ T7219] netlink: 'syz.3.875': attribute type 13 has an invalid length. [ 138.119363][ T7226] FAULT_INJECTION: forcing a failure. [ 138.119363][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 138.147904][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.3.877 Not tainted syzkaller #0 PREEMPT(full) [ 138.147981][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.147993][ T7226] Call Trace: [ 138.148001][ T7226] [ 138.148010][ T7226] __dump_stack+0x1d/0x30 [ 138.148036][ T7226] dump_stack_lvl+0x95/0xd0 [ 138.148082][ T7226] dump_stack+0x15/0x1b [ 138.148101][ T7226] should_fail_ex+0x263/0x280 [ 138.148124][ T7226] should_failslab+0x8c/0xb0 [ 138.148155][ T7226] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 138.148183][ T7226] ? sidtab_sid2str_get+0xa0/0x130 [ 138.148236][ T7226] kmemdup_noprof+0x2b/0x70 [ 138.148265][ T7226] sidtab_sid2str_get+0xa0/0x130 [ 138.148294][ T7226] security_sid_to_context_core+0x1eb/0x2e0 [ 138.148371][ T7226] security_sid_to_context+0x27/0x40 [ 138.148403][ T7226] avc_audit_post_callback+0x9d/0x540 [ 138.148426][ T7226] ? audit_log_lsm_data+0xb3e/0xbb0 [ 138.148497][ T7226] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.148521][ T7226] common_lsm_audit+0x1ba/0x230 [ 138.148549][ T7226] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.148629][ T7226] slow_avc_audit+0x14c/0x190 [ 138.148653][ T7226] avc_has_perm+0x144/0x190 [ 138.148720][ T7226] selinux_socket_sendmsg+0x192/0x1c0 [ 138.148749][ T7226] security_socket_sendmsg+0x44/0x80 [ 138.148853][ T7226] ____sys_sendmsg+0x361/0x600 [ 138.148886][ T7226] ___sys_sendmsg+0x195/0x1e0 [ 138.148945][ T7226] __x64_sys_sendmsg+0xd4/0x160 [ 138.148972][ T7226] x64_sys_call+0x194c/0x3020 [ 138.148998][ T7226] do_syscall_64+0x12c/0x370 [ 138.149079][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.149101][ T7226] RIP: 0033:0x7f17828dbf79 [ 138.149121][ T7226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.149173][ T7226] RSP: 002b:00007f1781337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.149194][ T7226] RAX: ffffffffffffffda RBX: 00007f1782b55fa0 RCX: 00007f17828dbf79 [ 138.149208][ T7226] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 138.149220][ T7226] RBP: 00007f1781337090 R08: 0000000000000000 R09: 0000000000000000 [ 138.149233][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.149248][ T7226] R13: 00007f1782b56038 R14: 00007f1782b55fa0 R15: 00007ffca67e7308 [ 138.149269][ T7226] [ 138.415861][ T7224] loop8: detected capacity change from 0 to 128 [ 138.437098][ T7231] loop3: detected capacity change from 0 to 512 [ 138.445431][ T7231] EXT4-fs: Ignoring removed oldalloc option [ 138.453159][ T7231] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 138.454160][ T7224] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.490418][ T7224] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.638292][ T6795] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.938865][ T7248] SELinux: failed to load policy [ 139.012881][ T7251] syzkaller0: entered promiscuous mode [ 139.018497][ T7251] syzkaller0: entered allmulticast mode [ 139.042199][ T7242] loop3: detected capacity change from 0 to 8192 [ 139.115407][ T3978] loop3: p1 p2 p4 [ 139.140054][ T3978] loop3: p4 size 262912 extends beyond EOD, truncated [ 139.155703][ T7242] loop3: p1 p2 p4 [ 139.168042][ T7242] loop3: p4 size 262912 extends beyond EOD, truncated [ 139.198267][ T7259] loop8: detected capacity change from 0 to 256 [ 139.331577][ T7259] FAT-fs (loop8): Directory bread(block 64) failed [ 139.339041][ T7259] FAT-fs (loop8): Directory bread(block 65) failed [ 139.380007][ T7259] FAT-fs (loop8): Directory bread(block 66) failed [ 139.399473][ T7259] FAT-fs (loop8): Directory bread(block 67) failed [ 139.418261][ T7259] FAT-fs (loop8): Directory bread(block 68) failed [ 139.448515][ T7259] FAT-fs (loop8): Directory bread(block 69) failed [ 139.467108][ T7259] FAT-fs (loop8): Directory bread(block 70) failed [ 139.481110][ T7259] FAT-fs (loop8): Directory bread(block 71) failed [ 139.495335][ T7259] FAT-fs (loop8): Directory bread(block 72) failed [ 139.499215][ T3978] udevd[3978]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 139.503092][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 139.514358][ T3969] udevd[3969]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 139.523087][ T7259] FAT-fs (loop8): Directory bread(block 73) failed [ 139.597953][ T3968] udevd[3968]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 139.627628][ T7272] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 139.630381][ T3978] udevd[3978]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 139.634353][ T7272] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.636350][ T7272] vhci_hcd vhci_hcd.0: Device attached [ 139.649752][ T3969] udevd[3969]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 139.675329][ T7273] vhci_hcd: connection closed [ 139.675512][ T2124] vhci_hcd vhci_hcd.3: stop threads [ 139.685908][ T2124] vhci_hcd vhci_hcd.3: release socket [ 139.692260][ T2124] vhci_hcd vhci_hcd.3: disconnect device [ 139.740105][ T7097] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.774196][ T28] kauditd_printk_skb: 795 callbacks suppressed [ 139.774213][ T28] audit: type=1400 audit(1771093894.819:11409): avc: denied { name_bind } for pid=7275 comm="syz.6.890" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.805159][ T28] audit: type=1400 audit(1771093894.849:11410): avc: denied { node_bind } for pid=7275 comm="syz.6.890" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 139.831305][ T28] audit: type=1400 audit(1771093894.879:11411): avc: denied { create } for pid=7277 comm="syz.6.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.852661][ T28] audit: type=1400 audit(1771093894.879:11412): avc: denied { write } for pid=7277 comm="syz.6.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.875914][ T28] audit: type=1400 audit(1771093894.889:11413): avc: denied { write } for pid=7277 comm="syz.6.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.931181][ T28] audit: type=1400 audit(1771093894.979:11414): avc: denied { create } for pid=7286 comm="syz.6.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.952377][ T28] audit: type=1400 audit(1771093894.979:11415): avc: denied { write } for pid=7286 comm="syz.6.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.974004][ T28] audit: type=1400 audit(1771093894.979:11416): avc: denied { nlmsg_write } for pid=7286 comm="syz.6.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.021129][ T28] audit: type=1400 audit(1771093895.069:11417): avc: denied { unmount } for pid=6795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.043535][ T28] audit: type=1400 audit(1771093895.089:11418): avc: denied { unmount } for pid=6795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 140.534156][ T7305] can: request_module (can-proto-0) failed. [ 140.540167][ T7308] xt_NFQUEUE: number of total queues is 0 [ 140.577841][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 140.615982][ T7302] loop8: detected capacity change from 0 to 512 [ 140.643499][ T7305] netlink: 92 bytes leftover after parsing attributes in process `syz.3.899'. [ 140.654203][ T7302] EXT4-fs: Ignoring removed orlov option [ 140.684149][ T7302] EXT4-fs: dax option not supported [ 140.967642][ T3978] udevd[3978]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 141.074235][ T3978] udevd[3978]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 141.148736][ T3978] udevd[3978]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 142.075972][ T7354] vlan2: entered allmulticast mode [ 142.090010][ T7354] bridge0: port 3(vlan2) entered blocking state [ 142.099966][ T7354] bridge0: port 3(vlan2) entered disabled state [ 142.147333][ T7354] vlan2: entered promiscuous mode [ 142.150566][ T7359] netlink: 'syz.5.916': attribute type 1 has an invalid length. [ 142.177497][ T7357] bond_slave_0: entered promiscuous mode [ 142.183313][ T7357] bond_slave_1: entered promiscuous mode [ 142.189852][ T7359] netlink: 'syz.5.916': attribute type 3 has an invalid length. [ 142.208338][ T7357] macvtap1: entered promiscuous mode [ 142.213182][ T7359] netlink: 132 bytes leftover after parsing attributes in process `syz.5.916'. [ 142.218379][ T7357] bond0: entered promiscuous mode [ 142.260367][ T7357] macvtap1: entered allmulticast mode [ 142.265810][ T7357] bond0: entered allmulticast mode [ 142.267090][ T7359] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 142.267090][ T7359] [ 142.279927][ T7357] bond_slave_0: entered allmulticast mode [ 142.296854][ T7357] bond_slave_1: entered allmulticast mode [ 142.318026][ T7357] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 142.344307][ T7357] bond0: left allmulticast mode [ 142.352768][ T7357] bond_slave_0: left allmulticast mode [ 142.369700][ T7357] bond_slave_1: left allmulticast mode [ 142.378833][ T7357] bond0: left promiscuous mode [ 142.393091][ T7357] bond_slave_0: left promiscuous mode [ 142.398794][ T7357] bond_slave_1: left promiscuous mode [ 142.622191][ T7379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7379 comm=syz.8.919 [ 142.682151][ T7373] syzkaller0: entered promiscuous mode [ 142.719260][ T7373] syzkaller0: entered allmulticast mode [ 142.743994][ T7377] bridge2: entered promiscuous mode [ 142.749447][ T7377] bridge2: entered allmulticast mode [ 142.881543][ T7392] loop3: detected capacity change from 0 to 512 [ 142.920322][ T7392] EXT4-fs: Ignoring removed oldalloc option [ 142.960402][ T7392] EXT4-fs (loop3): 1 truncate cleaned up [ 142.966452][ T7392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.643176][ T7412] tipc: Enabling of bearer rejected, failed to enable media [ 143.738002][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.064361][ T7441] netlink: 176 bytes leftover after parsing attributes in process `syz.6.932'. [ 144.106262][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.932'. [ 144.140320][ T7449] netlink: 'syz.5.933': attribute type 29 has an invalid length. [ 144.224497][ T7449] netlink: 604 bytes leftover after parsing attributes in process `syz.5.933'. [ 144.242396][ T7449] netlink: 'syz.5.933': attribute type 4 has an invalid length. [ 144.316083][ T7449] netlink: 17 bytes leftover after parsing attributes in process `syz.5.933'. [ 144.703452][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.729920][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.769899][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.806286][ T28] kauditd_printk_skb: 1009 callbacks suppressed [ 144.806301][ T28] audit: type=1400 audit(1771093899.849:12428): avc: denied { read write } for pid=5799 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.838927][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.865602][ T28] audit: type=1400 audit(1771093899.859:12429): avc: denied { prog_load } for pid=7483 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.886391][ T28] audit: type=1400 audit(1771093899.859:12430): avc: denied { bpf } for pid=7483 comm="syz.3.939" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.978880][ T7492] random: crng reseeded on system resumption [ 144.993854][ T28] audit: type=1400 audit(1771093899.899:12431): avc: denied { read write open } for pid=5799 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.061677][ T28] audit: type=1400 audit(1771093899.899:12432): avc: denied { ioctl } for pid=5799 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.136382][ T7500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.160057][ T7492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.168105][ T7500] audit: audit_lost=110 audit_rate_limit=0 audit_backlog_limit=64 [ 145.180057][ T7492] audit: audit_lost=111 audit_rate_limit=0 audit_backlog_limit=64 [ 145.188256][ T7500] audit: backlog limit exceeded [ 145.340672][ T7512] FAULT_INJECTION: forcing a failure. [ 145.340672][ T7512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.384144][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.946'. [ 145.425054][ T7520] netlink: 'syz.8.948': attribute type 1 has an invalid length. [ 145.429893][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.6.947 Not tainted syzkaller #0 PREEMPT(full) [ 145.429922][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 145.429948][ T7512] Call Trace: [ 145.429956][ T7512] [ 145.430017][ T7512] __dump_stack+0x1d/0x30 [ 145.430045][ T7512] dump_stack_lvl+0x95/0xd0 [ 145.430142][ T7512] dump_stack+0x15/0x1b [ 145.430163][ T7512] should_fail_ex+0x263/0x280 [ 145.430258][ T7512] should_fail+0xb/0x20 [ 145.430322][ T7512] should_fail_usercopy+0x1a/0x20 [ 145.430348][ T7512] _copy_to_user+0x20/0xa0 [ 145.430391][ T7512] simple_read_from_buffer+0xb5/0x130 [ 145.430424][ T7512] proc_fail_nth_read+0x10e/0x150 [ 145.430471][ T7512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.430493][ T7512] vfs_read+0x1ab/0x7f0 [ 145.430575][ T7512] ? __rcu_read_unlock+0x4e/0x70 [ 145.430596][ T7512] ? __fget_files+0x184/0x1c0 [ 145.430616][ T7512] ? mutex_lock+0x57/0x90 [ 145.430642][ T7512] ksys_read+0xdc/0x1a0 [ 145.430717][ T7512] __x64_sys_read+0x40/0x50 [ 145.430745][ T7512] x64_sys_call+0x2886/0x3020 [ 145.430848][ T7512] do_syscall_64+0x12c/0x370 [ 145.430880][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.430902][ T7512] RIP: 0033:0x7fe2e5ccc84e [ 145.430920][ T7512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.430970][ T7512] RSP: 002b:00007fe2e475efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.431000][ T7512] RAX: ffffffffffffffda RBX: 00007fe2e475f6c0 RCX: 00007fe2e5ccc84e [ 145.431016][ T7512] RDX: 000000000000000f RSI: 00007fe2e475f0a0 RDI: 0000000000000005 [ 145.431050][ T7512] RBP: 00007fe2e475f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.431064][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.431088][ T7512] R13: 00007fe2e5f86038 R14: 00007fe2e5f85fa0 R15: 00007ffd038d80f8 [ 145.431108][ T7512] [ 145.683723][ T7520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.749440][ T7534] TCP: TCP_TX_DELAY enabled [ 145.766453][ T7485] loop3: detected capacity change from 0 to 512 [ 145.823449][ T7485] EXT4-fs: Ignoring removed i_version option [ 145.912563][ T7485] EXT4-fs (loop3): 1 truncate cleaned up [ 145.958971][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.955'. [ 145.963395][ T7485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.985262][ T7541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.955'. [ 145.985798][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.004332][ T345] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.031552][ T345] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.050600][ T7549] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.068540][ T345] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.168429][ T345] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.178145][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.469547][ T7568] loop3: detected capacity change from 0 to 128 [ 146.485110][ T7569] vlan2: entered allmulticast mode [ 146.495056][ T7569] bond0: entered allmulticast mode [ 146.514653][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 146.521210][ T7569] bond_slave_0: entered allmulticast mode [ 146.539921][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 146.544684][ T7569] bond_slave_1: entered allmulticast mode [ 146.569029][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 146.591244][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.962'. [ 146.591625][ T7568] loop3: detected capacity change from 0 to 128 [ 146.608582][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 146.630823][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.963'. [ 146.649538][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 146.707481][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 146.777210][ T7568] loop3: detected capacity change from 0 to 128 [ 146.806354][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 146.824901][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 146.843669][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 147.061574][ T7568] loop3: detected capacity change from 0 to 128 [ 147.090282][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 147.102328][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 147.167504][ T7596] random: crng reseeded on system resumption [ 147.232367][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 147.332871][ T7597] syzkaller0: entered promiscuous mode [ 147.399937][ T7568] loop3: detected capacity change from 0 to 128 [ 147.474037][ T7597] syzkaller0: entered allmulticast mode [ 147.494922][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 147.566585][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 147.628046][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 147.714315][ T7568] loop3: detected capacity change from 0 to 128 [ 147.766901][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 147.783755][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 147.804886][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 147.823393][ T7568] loop3: detected capacity change from 0 to 128 [ 147.849903][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 147.868799][ T55] tipc: Subscription rejected, illegal request [ 147.869796][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 147.926901][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 147.963044][ T7568] loop3: detected capacity change from 0 to 128 [ 148.011453][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 148.018213][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 148.064406][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.178450][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.232441][ T7568] loop3: detected capacity change from 0 to 128 [ 148.273618][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 148.302734][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 148.314161][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.337488][ T7568] loop3: detected capacity change from 0 to 128 [ 148.359947][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 148.403177][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 148.419745][ T7603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7603 comm=syz.6.970 [ 148.445452][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 148.458854][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.975'. [ 148.469853][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.536855][ T7568] loop3: detected capacity change from 0 to 128 [ 148.568945][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 148.596277][ T7633] openvswitch: netlink: Missing key (keys=40, expected=100) [ 148.603716][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 148.628332][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.649506][ T7568] loop3: detected capacity change from 0 to 128 [ 148.685766][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 148.709935][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 148.744327][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.762690][ T7568] loop3: detected capacity change from 0 to 128 [ 148.881185][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 148.888061][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 148.909244][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.927950][ T7568] loop3: detected capacity change from 0 to 128 [ 148.948984][ T7568] FAT-fs (loop3): bogus number of reserved sectors [ 148.977975][ T7568] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 149.069856][ T7568] FAT-fs (loop3): Can't find a valid FAT filesystem [ 149.672653][ T7656] delete_channel: no stack [ 149.811183][ T7666] mmap: syz.3.992 (7666): VmData 167485440 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 149.838124][ T28] kauditd_printk_skb: 829 callbacks suppressed [ 149.838143][ T28] audit: type=1400 audit(1771093904.879:13207): avc: denied { write } for pid=7660 comm="syz.8.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.871233][ T7666] syzkaller0: entered promiscuous mode [ 149.884468][ T28] audit: type=1400 audit(1771093904.879:13208): avc: denied { map_create } for pid=7647 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.939266][ T28] audit: type=1400 audit(1771093904.879:13209): avc: denied { map_read map_write } for pid=7647 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.942511][ T7666] syzkaller0: entered allmulticast mode [ 149.994303][ T28] audit: type=1400 audit(1771093904.879:13210): avc: denied { prog_load } for pid=7647 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.058759][ T28] audit: type=1400 audit(1771093904.879:13211): avc: denied { bpf } for pid=7647 comm="syz.5.984" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.065574][ T7669] Ÿë: port 1(gretap0) entered blocking state [ 150.088432][ T7669] Ÿë: port 1(gretap0) entered disabled state [ 150.099481][ T7669] gretap0: entered allmulticast mode [ 150.107938][ T7669] gretap0: entered promiscuous mode [ 150.119857][ T28] audit: type=1400 audit(1771093904.879:13212): avc: denied { perfmon } for pid=7647 comm="syz.5.984" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.159863][ T28] audit: type=1400 audit(1771093904.879:13213): avc: denied { prog_run } for pid=7647 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.182244][ T28] audit: type=1400 audit(1771093904.889:13214): avc: denied { create } for pid=7664 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.207322][ T28] audit: type=1400 audit(1771093904.909:13215): avc: denied { create } for pid=7664 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.286275][ T28] audit: type=1400 audit(1771093904.919:13216): avc: denied { open } for pid=7665 comm="syz.6.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 150.459844][ T3608] Bluetooth: hci0: command 0x1003 tx timeout [ 150.465965][ T7097] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 150.537095][ T7691] netlink: 68 bytes leftover after parsing attributes in process `syz.3.999'. [ 150.677363][ T7699] netlink: 'syz.8.1003': attribute type 6 has an invalid length. [ 151.821288][ T35] IPVS: starting estimator thread 0... [ 151.860764][ T7752] loop3: detected capacity change from 0 to 4096 [ 151.909993][ T7754] IPVS: using max 2448 ests per chain, 122400 per kthread [ 152.180243][ T7765] loop7: detected capacity change from 0 to 8192 [ 152.211184][ T2124] IPVS: stop unused estimator thread 0... [ 152.616820][ T7787] netlink: 'syz.8.1029': attribute type 1 has an invalid length. [ 152.692871][ T7787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=7787 comm=syz.8.1029 [ 152.746490][ T7787] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1029'. [ 152.786565][ T7795] netlink: 'syz.7.1032': attribute type 58 has an invalid length. [ 152.845224][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1029'. [ 152.861296][ T7795] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1032'. [ 152.887578][ T7796] bond2: (slave geneve2): making interface the new active one [ 152.909179][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1032'. [ 152.922677][ T7796] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 152.970059][ T55] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 152.984522][ T55] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 153.009052][ T55] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 153.070008][ T55] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 153.113868][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1032'. [ 153.138999][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 153.210808][ T7811] loop3: detected capacity change from 0 to 512 [ 153.214947][ T7814] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.258508][ T7811] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1035: ea_inode with extended attributes [ 153.331322][ T7814] vhci_hcd vhci_hcd.2: invalid port number 96 [ 153.351729][ T7811] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.351878][ T7811] EXT4-fs (loop3): Remounting filesystem read-only [ 153.361297][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 153.361322][ C0] EXT4-fs (loop3): initial error at time 1771093908: ext4_xattr_inode_iget:441: inode 11 [ 153.361350][ C0] EXT4-fs (loop3): last error at time 1771093908: ext4_xattr_inode_iget:441: inode 11 [ 153.419886][ T7814] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 153.457952][ T7811] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 153.497508][ T7811] EXT4-fs (loop3): 1 orphan inode deleted [ 153.528739][ T7811] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.622278][ T7811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=7811 comm=syz.3.1035 [ 153.723283][ T3315] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 153.814233][ T7833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.851989][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1040'. [ 153.925023][ T2124] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.389416][ T7874] sctp: [Deprecated]: syz.7.1051 (pid 7874) Use of int in max_burst socket option. [ 154.389416][ T7874] Use struct sctp_assoc_value instead [ 154.515696][ T7871] loop3: detected capacity change from 0 to 136 [ 154.533740][ T7871] iso9660: Unknown parameter '³GìÐEPÓ«È›o{ì' [ 154.579059][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 154.762959][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1057'. [ 154.841818][ T28] kauditd_printk_skb: 919 callbacks suppressed [ 154.841838][ T28] audit: type=1400 audit(1771093909.889:14136): avc: denied { relabelfrom } for pid=7878 comm="syz.7.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 154.881158][ T28] audit: type=1400 audit(1771093909.889:14137): avc: denied { relabelto } for pid=7878 comm="syz.7.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 154.903428][ T28] audit: type=1400 audit(1771093909.929:14138): avc: denied { create } for pid=7888 comm="syz.8.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.976639][ T28] audit: type=1400 audit(1771093909.969:14139): avc: denied { setopt } for pid=7888 comm="syz.8.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.004803][ T28] audit: type=1400 audit(1771093909.969:14140): avc: denied { write } for pid=7888 comm="syz.8.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.044592][ T7887] syzkaller0: entered promiscuous mode [ 155.065502][ T7887] syzkaller0: entered allmulticast mode [ 155.076566][ T28] audit: type=1400 audit(1771093909.969:14141): avc: denied { connect } for pid=7888 comm="syz.8.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.103658][ T7906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 155.110356][ T7906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.123004][ T7906] vhci_hcd vhci_hcd.0: Device attached [ 155.140540][ T28] audit: type=1400 audit(1771093909.969:14142): avc: denied { name_connect } for pid=7888 comm="syz.8.1057" dest=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 155.165809][ T7900] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.173816][ T7900] audit: audit_lost=130 audit_rate_limit=0 audit_backlog_limit=64 [ 155.184660][ T7900] audit: backlog limit exceeded [ 155.192671][ T7908] vhci_hcd: connection closed [ 155.192826][ T2124] vhci_hcd vhci_hcd.3: stop threads [ 155.203302][ T2124] vhci_hcd vhci_hcd.3: release socket [ 155.208950][ T2124] vhci_hcd vhci_hcd.3: disconnect device [ 155.234705][ T7913] syzkaller0: entered promiscuous mode [ 155.241460][ T7913] syzkaller0: entered allmulticast mode [ 155.334482][ T7919] loop7: detected capacity change from 0 to 512 [ 155.354055][ T7919] EXT4-fs: Ignoring removed nobh option [ 155.360364][ T7919] ext4: Unknown parameter 'fowner>00000000000000000000' [ 155.425594][ T7921] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 155.451718][ T7921] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 155.496658][ T7924] loop7: detected capacity change from 0 to 512 [ 155.512669][ T7924] EXT4-fs: Ignoring removed oldalloc option [ 155.544306][ T7924] EXT4-fs (loop7): 1 truncate cleaned up [ 155.559532][ T7924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.806014][ T7934] loop3: detected capacity change from 0 to 1024 [ 155.821419][ T7934] EXT4-fs: Ignoring removed oldalloc option [ 155.838744][ T7934] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.858489][ T7934] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.888965][ T7934] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1069: bad orphan inode 11 [ 155.901911][ T7934] loop3: lost filesystem error report for type 5 error -117 [ 155.907861][ T7934] ext4_test_bit(bit=10, block=4) = 1 [ 155.915237][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 155.915259][ C1] EXT4-fs (loop3): initial error at time 1771093910: ext4_orphan_get:1417 [ 155.915284][ C1] EXT4-fs (loop3): last error at time 1771093910: ext4_orphan_get:1417 [ 155.944037][ T7934] is_bad_inode(inode)=0 [ 155.948824][ T7934] NEXT_ORPHAN(inode)=3254779904 [ 155.954181][ T7934] max_ino=32 [ 155.957758][ T7934] i_nlink=0 [ 155.970377][ T7934] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.1069: lblock 2 mapped to illegal pblock 2 (length 1) [ 155.984620][ T7097] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.999948][ T7934] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.000887][ T7934] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.1069: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.010055][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 156.010083][ C1] EXT4-fs (loop3): initial error at time 1771093910: ext4_orphan_get:1417 [ 156.010110][ C1] EXT4-fs (loop3): last error at time 1771093911: ext4_map_blocks:776: inode 3: block 2 [ 156.051472][ T7934] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.051649][ T7934] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1069: Failed to acquire dquot type 0 [ 156.072296][ T7934] loop3: lost filesystem error report for type 5 error -117 [ 156.072433][ T7934] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 156.089456][ T7934] loop3: lost filesystem error report for type 5 error -117 [ 156.089673][ T7934] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.1069: mark_inode_dirty error [ 156.109220][ T7934] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.109413][ T7934] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 156.129574][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.159122][ T7934] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 16: comm syz.3.1069: lblock 0 mapped to illegal pblock 16 (length 1) [ 156.181804][ T7934] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 16: comm syz.3.1069: lblock 0 mapped to illegal pblock 16 (length 1) [ 156.197945][ T7934] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 16: comm syz.3.1069: lblock 0 mapped to illegal pblock 16 (length 1) [ 156.279384][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.289399][ T3315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.303220][ T3315] loop3: lost filesystem error report for type 5 error -117 [ 156.303326][ T3315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 156.321469][ T3315] loop3: lost filesystem error report for type 5 error -117 [ 156.321648][ T3315] EXT4-fs error (device loop3): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 156.340933][ T3315] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.431738][ T5799] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.693231][ T7963] loop7: detected capacity change from 0 to 512 [ 156.752448][ T7963] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 156.793864][ T7963] EXT4-fs (loop7): 1 truncate cleaned up [ 156.819218][ T7963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.889035][ T5799] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.191575][ T7984] __nla_validate_parse: 6 callbacks suppressed [ 157.191601][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1080'. [ 157.799363][ T7982] loop7: detected capacity change from 0 to 512 [ 158.260034][ T7991] veth0: entered promiscuous mode [ 158.265293][ T7991] veth0: entered allmulticast mode [ 158.276697][ T7997] hub 8-0:1.0: USB hub found [ 158.281533][ T7997] hub 8-0:1.0: 8 ports detected [ 158.394431][ T7982] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 158.473187][ T8003] vlan3: entered allmulticast mode [ 158.498768][ T8003] team0: entered allmulticast mode [ 158.520984][ T8003] team_slave_0: entered allmulticast mode [ 158.556093][ T8003] team_slave_1: entered allmulticast mode [ 158.595061][ T8000] loop3: detected capacity change from 0 to 512 [ 158.613679][ T7982] EXT4-fs (loop7): 1 truncate cleaned up [ 158.658052][ T7982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.803224][ T8000] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1085: Failed to acquire dquot type 1 [ 158.851600][ T8000] loop3: lost filesystem error report for type 5 error -117 [ 158.851850][ T8000] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1085: Failed to acquire dquot type 1 [ 158.870653][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 158.870674][ C1] EXT4-fs (loop3): last error at time 1771093913: ext4_acquire_dquot:7003 [ 159.033422][ T8011] netlink: 'syz.7.1081': attribute type 1 has an invalid length. [ 159.059852][ T8000] loop3: lost filesystem error report for type 5 error -117 [ 159.071376][ T8000] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1085: bg 0: block 248: padding at end of block bitmap is not set [ 159.185571][ T8000] loop3: lost filesystem error report for type 5 error -117 [ 159.185804][ T8000] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 159.234923][ T8011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.237724][ T8000] loop3: lost filesystem error report for type 5 error -117 [ 159.245373][ T8000] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1085: Failed to acquire dquot type 1 [ 159.264586][ T8000] loop3: lost filesystem error report for type 5 error -117 [ 159.264833][ T8000] EXT4-fs (loop3): 1 orphan inode deleted [ 159.279547][ T8000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.293714][ T8000] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.402553][ T8022] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.423329][ T8022] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 159.461208][ T5799] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.526196][ T8022] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.536685][ T8022] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 159.572236][ T8031] tipc: New replicast peer: 255.255.255.255 [ 159.578288][ T8031] tipc: Enabled bearer , priority 10 [ 159.633645][ T8022] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.672883][ T8022] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 159.799866][ T8022] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.825114][ T8022] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 159.869844][ T28] kauditd_printk_skb: 550 callbacks suppressed [ 159.869912][ T28] audit: type=1400 audit(1771093914.889:14676): avc: denied { add_name } for pid=7993 comm="syz.3.1085" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.933309][ T8000] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.1085: deleted inode referenced: 12 [ 159.936399][ T28] audit: type=1400 audit(1771093914.899:14677): avc: denied { create } for pid=7993 comm="syz.3.1085" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 160.003454][ T30] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.016334][ T30] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 160.032935][ T8038] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.1085: deleted inode referenced: 12 [ 160.044622][ T30] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.053180][ T28] audit: type=1400 audit(1771093914.949:14678): avc: denied { write } for pid=8036 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 160.074263][ T30] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 160.089870][ T28] audit: type=1400 audit(1771093914.959:14679): avc: denied { map_create } for pid=8036 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.109586][ T30] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.138852][ T30] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 160.153641][ T30] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.162246][ T28] audit: type=1400 audit(1771093914.959:14680): avc: denied { perfmon } for pid=8036 comm="syz.5.1097" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.184001][ T30] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 160.193419][ T28] audit: type=1400 audit(1771093914.959:14681): avc: denied { map_create } for pid=8036 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.236622][ T28] audit: type=1400 audit(1771093914.959:14682): avc: denied { map_read map_write } for pid=8036 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.331879][ T28] audit: type=1400 audit(1771093914.969:14683): avc: denied { prog_load } for pid=8036 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.340809][ T8054] netlink: 'syz.6.1102': attribute type 2 has an invalid length. [ 160.415104][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 160.440608][ T28] audit: type=1400 audit(1771093914.969:14684): avc: denied { bpf } for pid=8036 comm="syz.5.1097" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.465665][ T8040] syz.5.1097 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 160.479426][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.479708][ T8056] netlink: 'syz.6.1102': attribute type 2 has an invalid length. [ 160.490601][ T28] audit: type=1400 audit(1771093914.969:14685): avc: denied { prog_load } for pid=8036 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.521085][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.5.1097 Not tainted syzkaller #0 PREEMPT(full) [ 160.521162][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 160.521174][ T8040] Call Trace: [ 160.521182][ T8040] [ 160.521192][ T8040] __dump_stack+0x1d/0x30 [ 160.521224][ T8040] dump_stack_lvl+0x95/0xd0 [ 160.521294][ T8040] dump_stack+0x15/0x1b [ 160.521319][ T8040] dump_header+0x80/0x240 [ 160.521345][ T8040] oom_kill_process+0x295/0x350 [ 160.521456][ T8040] out_of_memory+0x97d/0xb80 [ 160.521501][ T8040] try_charge_memcg+0x62e/0xa10 [ 160.521540][ T8040] obj_cgroup_charge_pages+0x23/0xc0 [ 160.521567][ T8040] obj_cgroup_charge_account+0x73/0x1a0 [ 160.521667][ T8040] __memcg_slab_post_alloc_hook+0x392/0x540 [ 160.521715][ T8040] __kmalloc_node_track_caller_noprof+0x353/0x560 [ 160.521741][ T8040] ? copy_array+0x71/0x100 [ 160.521767][ T8040] krealloc_node_align_noprof+0x123/0x2f0 [ 160.521814][ T8040] copy_array+0x71/0x100 [ 160.521837][ T8040] copy_verifier_state+0x67/0x590 [ 160.521894][ T8040] ? __kmalloc_cache_noprof+0x1e6/0x410 [ 160.521919][ T8040] do_check+0x2e96/0x9860 [ 160.521960][ T8040] do_check_common+0xd0b/0x1630 [ 160.521988][ T8040] bpf_check+0x2f6d/0xcc10 [ 160.522101][ T8040] ? skb_put+0xa9/0xf0 [ 160.522128][ T8040] ? sidtab_sid2str_put+0x1b5/0x360 [ 160.522166][ T8040] ? __rcu_read_unlock+0x4e/0x70 [ 160.522190][ T8040] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 160.522216][ T8040] ? audit_log_end+0x23d/0x250 [ 160.522287][ T8040] ? kmem_cache_free+0xc8/0x380 [ 160.522338][ T8040] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 160.522366][ T8040] ? audit_log_end+0x23d/0x250 [ 160.522389][ T8040] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 160.522465][ T8040] ? common_lsm_audit+0x1c9/0x230 [ 160.522496][ T8040] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 160.522522][ T8040] ? slow_avc_audit+0x14c/0x190 [ 160.522548][ T8040] ? avc_has_perm+0x144/0x190 [ 160.522577][ T8040] ? avc_has_perm+0x17b/0x190 [ 160.522690][ T8040] ? selinux_bpf_prog_load+0x197/0x1c0 [ 160.522801][ T8040] ? security_bpf_prog_load+0x9e/0x140 [ 160.522910][ T8040] bpf_prog_load+0xf76/0x1140 [ 160.522938][ T8040] ? security_bpf+0x2b/0x90 [ 160.523007][ T8040] __sys_bpf+0x505/0x7e0 [ 160.523049][ T8040] __x64_sys_bpf+0x41/0x50 [ 160.523088][ T8040] x64_sys_call+0x10cb/0x3020 [ 160.523116][ T8040] do_syscall_64+0x12c/0x370 [ 160.523170][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.523195][ T8040] RIP: 0033:0x7fa1fcb6bf79 [ 160.523216][ T8040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.523237][ T8040] RSP: 002b:00007fa1fb5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.523270][ T8040] RAX: ffffffffffffffda RBX: 00007fa1fcde6090 RCX: 00007fa1fcb6bf79 [ 160.523290][ T8040] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 160.523306][ T8040] RBP: 00007fa1fcc027e0 R08: 0000000000000000 R09: 0000000000000000 [ 160.523402][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.523493][ T8040] R13: 00007fa1fcde6128 R14: 00007fa1fcde6090 R15: 00007ffd946f4c48 [ 160.523515][ T8040] [ 160.523559][ T8040] memory: usage 307200kB, limit 307200kB, failcnt 11611 [ 160.593770][ T35] tipc: Node number set to 1079836672 [ 160.596704][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 160.701138][ T8040] memory+swap: usage 375388kB, limit 9007199254740988kB, failcnt 0 [ 160.945309][ T8040] kmem: usage 217536kB, limit 9007199254740988kB, failcnt 0 [ 160.983282][ T8040] Memory cgroup stats for /syz5: [ 160.983489][ T8040] cache 12288 [ 161.030012][ T8040] rss 0 [ 161.032832][ T8040] shmem 0 [ 161.045987][ T8040] mapped_file 0 [ 161.049488][ T8040] dirty 0 [ 161.079815][ T8040] writeback 0 [ 161.083206][ T8040] workingset_refault_anon 218 [ 161.118372][ T8040] workingset_refault_file 1343 [ 161.148731][ T8040] swap 69824512 [ 161.154821][ T8040] swapcached 70160384 [ 161.158877][ T8040] pgpgin 112019 [ 161.169909][ T8040] pgpgout 112016 [ 161.173563][ T8040] pgfault 80198 [ 161.177180][ T8040] pgmajfault 191 [ 161.192114][ T8040] inactive_anon 0 [ 161.211924][ T8040] active_anon 0 [ 161.229164][ T8040] inactive_file 12288 [ 161.243458][ T8040] active_file 0 [ 161.259656][ T8040] unevictable 0 [ 161.271706][ T8040] hierarchical_memory_limit 314572800 [ 161.286640][ T8040] hierarchical_memsw_limit 9223372036854771712 [ 161.304629][ T8040] total_cache 12288 [ 161.315738][ T8040] total_rss 0 [ 161.325254][ T8040] total_shmem 0 [ 161.333280][ T8040] total_mapped_file 0 [ 161.339969][ T8040] total_dirty 0 [ 161.346613][ T8040] total_writeback 0 [ 161.354174][ T8040] total_workingset_refault_anon 218 [ 161.367155][ T8040] total_workingset_refault_file 1343 [ 161.378876][ T8040] total_swap 69824512 [ 161.390476][ T8040] total_swapcached 70160384 [ 161.402252][ T8040] total_pgpgin 112019 [ 161.412632][ T8040] total_pgpgout 112016 [ 161.423984][ T8040] total_pgfault 80198 [ 161.435549][ T8040] total_pgmajfault 191 [ 161.447141][ T8040] total_inactive_anon 0 [ 161.459859][ T8040] total_active_anon 0 [ 161.477134][ T8040] total_inactive_file 12288 [ 161.493810][ T8040] total_active_file 0 [ 161.508291][ T8040] total_unevictable 0 [ 161.520987][ T8040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1097,pid=8036,uid=0 [ 161.553026][ T8040] Memory cgroup out of memory: Killed process 8036 (syz.5.1097) total-vm:96336kB, anon-rss:1224kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 161.651734][ T8062] syz.6.1105 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 161.718685][ T8062] CPU: 1 UID: 0 PID: 8062 Comm: syz.6.1105 Not tainted syzkaller #0 PREEMPT(full) [ 161.718713][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.718725][ T8062] Call Trace: [ 161.718733][ T8062] [ 161.718763][ T8062] __dump_stack+0x1d/0x30 [ 161.718795][ T8062] dump_stack_lvl+0x95/0xd0 [ 161.718833][ T8062] dump_stack+0x15/0x1b [ 161.718857][ T8062] dump_header+0x80/0x240 [ 161.718878][ T8062] oom_kill_process+0x295/0x350 [ 161.718949][ T8062] out_of_memory+0x97d/0xb80 [ 161.718987][ T8062] try_charge_memcg+0x62e/0xa10 [ 161.719068][ T8062] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 161.719101][ T8062] __swap_cache_prepare_and_add+0x386/0x530 [ 161.719136][ T8062] swap_cache_alloc_folio+0xa2/0x120 [ 161.719234][ T8062] swap_cluster_readahead+0x26e/0x3d0 [ 161.719278][ T8062] swapin_readahead+0xde/0x840 [ 161.719357][ T8062] ? _raw_spin_unlock+0x9/0x30 [ 161.719377][ T8062] ? swap_put_entries_cluster+0x385/0x3a0 [ 161.719405][ T8062] ? swap_put_entries_cluster+0x161/0x3a0 [ 161.719441][ T8062] ? __rcu_read_unlock+0x4e/0x70 [ 161.719460][ T8062] ? swap_cache_get_folio+0x26f/0x280 [ 161.719486][ T8062] do_swap_page+0x309/0x2210 [ 161.719576][ T8062] ? css_rstat_updated+0xbb/0x280 [ 161.719614][ T8062] ? __rcu_read_lock+0x36/0x50 [ 161.719731][ T8062] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 161.719783][ T8062] handle_mm_fault+0xb40/0x3020 [ 161.719935][ T8062] ? vma_start_read+0x1c7/0x2c0 [ 161.720023][ T8062] do_user_addr_fault+0x62f/0x1050 [ 161.720062][ T8062] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 161.720091][ T8062] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 161.720114][ T8062] ? trace_page_fault_user+0x1f/0xe0 [ 161.720184][ T8062] exc_page_fault+0x62/0xa0 [ 161.720293][ T8062] asm_exc_page_fault+0x26/0x30 [ 161.720370][ T8062] RIP: 0033:0x7fe2e5bd9a0c [ 161.720387][ T8062] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 161.720405][ T8062] RSP: 002b:00007ffd038d8260 EFLAGS: 00010202 [ 161.720498][ T8062] RAX: 0000000000000000 RBX: 00007fe2e5f86090 RCX: 000055556b0a4808 [ 161.720512][ T8062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.720526][ T8062] RBP: 00007fe2e5f87da0 R08: 0000000000000000 R09: 0000000000000000 [ 161.720560][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000277f3 [ 161.720585][ T8062] R13: 00007fe2e5f8618c R14: 00000000000275c9 R15: 00007ffd038d8360 [ 161.720609][ T8062] [ 161.999852][ T8062] memory: usage 215160kB, limit 307200kB, failcnt 2732 [ 162.017599][ T8062] memory+swap: usage 191068kB, limit 9007199254740988kB, failcnt 0 [ 162.072659][ T8062] kmem: usage 142432kB, limit 9007199254740988kB, failcnt 0 [ 162.110563][ T8062] Memory cgroup stats for /syz6: [ 162.110912][ T8062] cache 0 [ 162.139210][ T8062] rss 8192 [ 162.161342][ T8062] shmem 0 [ 162.164311][ T8062] mapped_file 0 [ 162.167832][ T8062] dirty 0 [ 162.171610][ T8079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8079 comm=syz.7.1111 [ 162.199926][ T8062] writeback 16384 [ 162.203620][ T8062] workingset_refault_anon 88 [ 162.208368][ T8062] workingset_refault_file 0 [ 162.247107][ T8062] swap 622592 [ 162.259210][ T8062] swapcached 778240 [ 162.268558][ T8062] pgpgin 81645 [ 162.289841][ T8062] pgpgout 81637 [ 162.293344][ T8062] pgfault 53234 [ 162.351261][ T8062] pgmajfault 59 [ 162.355107][ T8062] inactive_anon 28672 [ 162.359192][ T8062] active_anon 4096 [ 162.380106][ T8083] loop3: detected capacity change from 0 to 1024 [ 162.386719][ T8062] inactive_file 0 [ 162.394807][ T8083] EXT4-fs: Ignoring removed nobh option [ 162.410237][ T8062] active_file 0 [ 162.413729][ T8062] unevictable 0 [ 162.427266][ T8062] hierarchical_memory_limit 314572800 [ 162.439074][ T8062] hierarchical_memsw_limit 9223372036854771712 [ 162.445469][ T8083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.455090][ T8062] total_cache 0 [ 162.462331][ T8062] total_rss 8192 [ 162.465907][ T8062] total_shmem 0 [ 162.475164][ T8062] total_mapped_file 0 [ 162.479168][ T8062] total_dirty 0 [ 162.490214][ T8062] total_writeback 16384 [ 162.499879][ T8062] total_workingset_refault_anon 88 [ 162.506278][ T8062] total_workingset_refault_file 0 [ 162.541482][ T8083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.565667][ T8062] total_swap 622592 [ 162.569683][ T8062] total_swapcached 778240 [ 162.627431][ T8062] total_pgpgin 81645 [ 162.644680][ T8062] total_pgpgout 81637 [ 162.648693][ T8062] total_pgfault 53234 [ 162.705030][ T8062] total_pgmajfault 59 [ 162.709162][ T8062] total_inactive_anon 28672 [ 162.729445][ T8062] total_active_anon 4096 [ 162.759836][ T8062] total_inactive_file 0 [ 162.764367][ T8062] total_active_file 0 [ 162.768451][ T8062] total_unevictable 0 [ 162.790916][ T8062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.785,pid=6802,uid=0 [ 162.822955][ T8062] Memory cgroup out of memory: Killed process 6802 (syz.6.785) total-vm:92380kB, anon-rss:1220kB, file-rss:24896kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 162.923255][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.251946][ T8106] vlan0: entered allmulticast mode [ 163.270870][ T8104] loop3: detected capacity change from 0 to 1024 [ 163.304954][ T8104] EXT4-fs: Ignoring removed bh option [ 163.305477][ T8106] team0: entered allmulticast mode [ 163.349427][ T8104] ext4: Invalid gid '0x00000000ffffffff' [ 163.349821][ T8106] team_slave_0: entered allmulticast mode [ 163.419879][ T8106] team_slave_1: entered allmulticast mode [ 163.519336][ T8104] loop3: detected capacity change from 0 to 4096 [ 163.625456][ T8104] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.692025][ T8120] netlink: 'syz.7.1127': attribute type 29 has an invalid length. [ 163.802810][ T8119] sctp: [Deprecated]: syz.8.1123 (pid 8119) Use of int in max_burst socket option deprecated. [ 163.802810][ T8119] Use struct sctp_assoc_value instead [ 163.858928][ T8104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.340930][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1118'. [ 164.572555][ T8154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8154 comm=syz.7.1134 [ 164.607863][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.717527][ T8160] GUP no longer grows the stack in syz.6.1135 (8160): 200000004000-20000000a000 (200000002000) [ 164.770037][ T8161] loop3: detected capacity change from 0 to 512 [ 164.791477][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.6.1135 Not tainted syzkaller #0 PREEMPT(full) [ 164.791578][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.791594][ T8160] Call Trace: [ 164.791602][ T8160] [ 164.791611][ T8160] __dump_stack+0x1d/0x30 [ 164.791640][ T8160] dump_stack_lvl+0x95/0xd0 [ 164.791663][ T8160] dump_stack+0x15/0x1b [ 164.791715][ T8160] __get_user_pages+0x195b/0x1ea0 [ 164.791751][ T8160] ? xfd_validate_state+0x45/0xf0 [ 164.791837][ T8160] ? __rcu_read_unlock+0x4e/0x70 [ 164.791858][ T8160] get_user_pages_remote+0x1d5/0x6b0 [ 164.791897][ T8160] __access_remote_vm+0x15c/0x580 [ 164.791960][ T8160] access_remote_vm+0x32/0x40 [ 164.791986][ T8160] proc_pid_cmdline_read+0x32b/0x6b0 [ 164.792010][ T8160] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 164.792094][ T8160] vfs_readv+0x432/0x6e0 [ 164.792163][ T8160] ? restore_fpregs_from_fpstate+0x61/0x110 [ 164.792198][ T8160] __x64_sys_preadv+0xfd/0x1c0 [ 164.792232][ T8160] x64_sys_call+0x2915/0x3020 [ 164.792299][ T8160] do_syscall_64+0x12c/0x370 [ 164.792403][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.792428][ T8160] RIP: 0033:0x7fe2e5d0bf79 [ 164.792444][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.792543][ T8160] RSP: 002b:00007fe2e475f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 164.792565][ T8160] RAX: ffffffffffffffda RBX: 00007fe2e5f85fa0 RCX: 00007fe2e5d0bf79 [ 164.792582][ T8160] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 164.792598][ T8160] RBP: 00007fe2e5da27e0 R08: 00000000fffffff9 R09: 0000000000000000 [ 164.792613][ T8160] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 164.792749][ T8160] R13: 00007fe2e5f86038 R14: 00007fe2e5f85fa0 R15: 00007ffd038d80f8 [ 164.792769][ T8160] [ 165.025208][ T28] kauditd_printk_skb: 545 callbacks suppressed [ 165.025229][ T28] audit: type=1400 audit(1771093920.069:15231): avc: denied { read } for pid=8157 comm="syz.8.1137" dev="nsfs" ino=4026532403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.139862][ T28] audit: type=1400 audit(1771093920.069:15232): avc: denied { open } for pid=8157 comm="syz.8.1137" path="net:[4026532403]" dev="nsfs" ino=4026532403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.301930][ T8161] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 165.329829][ T28] audit: type=1400 audit(1771093920.069:15233): avc: denied { create } for pid=8157 comm="syz.8.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.390567][ T8161] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 165.419918][ T28] audit: type=1400 audit(1771093920.149:15234): avc: denied { open } for pid=8157 comm="syz.8.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.552120][ T8161] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1136: Failed to acquire dquot type 1 [ 165.570481][ T28] audit: type=1400 audit(1771093920.149:15235): avc: denied { perfmon } for pid=8157 comm="syz.8.1137" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.621999][ T28] audit: type=1400 audit(1771093920.149:15236): avc: denied { kernel } for pid=8157 comm="syz.8.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.623217][ T8161] loop3: lost filesystem error report for type 5 error -117 [ 165.682115][ T28] audit: type=1400 audit(1771093920.169:15237): avc: denied { open } for pid=8164 comm="syz.6.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.709764][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 165.716311][ C1] EXT4-fs (loop3): last error at time 1771093920: ext4_acquire_dquot:7003 [ 165.742222][ T8161] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 165.763201][ T8178] openvswitch: netlink: Key type 81 is out of range max 32 [ 165.779399][ T8165] ------------[ cut here ]------------ [ 165.786350][ T8165] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 165.812829][ T8165] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.6.1138/8165 [ 165.824739][ T8165] Modules linked in: [ 165.830030][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.6.1138 Not tainted syzkaller #0 PREEMPT(full) [ 165.834167][ T8161] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1136: Failed to acquire dquot type 1 [ 165.840440][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 165.864017][ T8165] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 165.872479][ T8165] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 165.893829][ T8165] RSP: 0018:ffffc9000149b368 EFLAGS: 00010246 [ 165.901508][ T8165] RAX: ffff888104d8bbf8 RBX: 0000000000000000 RCX: fffffffefffff630 [ 165.911398][ T8165] RDX: ffffffff86812917 RSI: ffffffff867e6ec3 RDI: ffffffff871d3750 [ 165.923499][ T8165] RBP: ffff88811b099190 R08: ffffffff00000000 R09: fffffffefffff630 [ 165.932953][ T8165] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811b099150 [ 165.941800][ T8165] R13: fffffffe00000030 R14: ffff88811b09919c R15: ffff88811b099188 [ 165.951619][ T8165] FS: 00007fe2e475f6c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 165.962299][ T8165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.970088][ T8165] CR2: 000000110c2c7c53 CR3: 000000016fd72000 CR4: 00000000003506f0 [ 165.982419][ T8165] DR0: 0000200000000440 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.991859][ T8165] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 166.001629][ T8165] Call Trace: [ 166.005867][ T8165] [ 166.020045][ T8165] reg_set_min_max+0x21c/0x260 [ 166.025678][ T8165] check_cond_jmp_op+0x13b0/0x1ab0 [ 166.032979][ T8165] do_check+0x4a9b/0x9860 [ 166.038539][ T8165] ? irqentry_exit+0x91/0x520 [ 166.050248][ T8165] do_check_common+0xd0b/0x1630 [ 166.057299][ T8165] bpf_check+0x2f6d/0xcc10 [ 166.063249][ T8165] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 166.070198][ T8165] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 166.076794][ T8165] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 166.084278][ T8165] ? pcpu_block_update+0x232/0x3b0 [ 166.090288][ T8165] ? _find_next_zero_bit+0x64/0xa0 [ 166.098659][ T8165] ? pcpu_block_update+0x24e/0x3b0 [ 166.105236][ T8165] ? pcpu_block_refresh_hint+0x157/0x170 [ 166.111458][ T8165] ? _find_next_zero_bit+0x64/0xa0 [ 166.116794][ T8165] ? pcpu_block_refresh_hint+0x157/0x170 [ 166.123867][ T8165] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 166.131678][ T8165] ? css_rstat_updated+0xbb/0x280 [ 166.138027][ T8165] ? mod_memcg_state+0x182/0x270 [ 166.143226][ T8165] ? __rcu_read_unlock+0x4e/0x70 [ 166.145495][ T8161] loop3: lost filesystem error report for type 5 error -117 [ 166.148376][ T8165] ? avc_has_perm_noaudit+0xab/0x130 [ 166.161836][ T8165] ? avc_has_perm+0x101/0x190 [ 166.166557][ T8165] ? selinux_bpf_prog_load+0x197/0x1c0 [ 166.172245][ T8165] ? security_bpf_prog_load+0x9e/0x140 [ 166.177950][ T8165] bpf_prog_load+0xf76/0x1140 [ 166.182986][ T8165] ? security_bpf+0x2b/0x90 [ 166.187605][ T8165] __sys_bpf+0x505/0x7e0 [ 166.192058][ T8165] __x64_sys_bpf+0x41/0x50 [ 166.196856][ T8165] x64_sys_call+0x10cb/0x3020 [ 166.201828][ T8165] do_syscall_64+0x12c/0x370 [ 166.206738][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.212788][ T8165] RIP: 0033:0x7fe2e5d0bf79 [ 166.217359][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.237224][ T8165] RSP: 002b:00007fe2e475f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.240131][ T8161] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1136: bg 0: block 248: padding at end of block bitmap is not set [ 166.245751][ T8165] RAX: ffffffffffffffda RBX: 00007fe2e5f85fa0 RCX: 00007fe2e5d0bf79 [ 166.245772][ T8165] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 166.245786][ T8165] RBP: 00007fe2e5da27e0 R08: 0000000000000000 R09: 0000000000000000 [ 166.285466][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.293667][ T8165] R13: 00007fe2e5f86038 R14: 00007fe2e5f85fa0 R15: 00007ffd038d80f8 [ 166.301833][ T8165] [ 166.304963][ T8165] ---[ end trace 0000000000000000 ]--- [ 166.317382][ T8183] loop7: detected capacity change from 0 to 164 [ 166.489966][ T8183] Unable to read rock-ridge attributes [ 166.495901][ T8161] loop3: lost filesystem error report for type 5 error -117 [ 166.498607][ T8161] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 166.540830][ T8182] Unable to read rock-ridge attributes [ 166.570770][ T8182] Unable to read rock-ridge attributes [ 166.620516][ T8182] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 166.628406][ T8161] loop3: lost filesystem error report for type 5 error -117 [ 166.628783][ T8161] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1136: Failed to acquire dquot type 1 [ 166.683687][ T8182] Unable to read rock-ridge attributes [ 166.689497][ T8182] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 166.709508][ T8161] loop3: lost filesystem error report for type 5 error -117 [ 166.709811][ T8161] EXT4-fs (loop3): 1 orphan inode deleted [ 166.770474][ T8161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.802903][ T5799] Unable to read rock-ridge attributes [ 166.819977][ T5799] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 166.840035][ T5799] Unable to read rock-ridge attributes [ 166.846191][ T5799] Unable to read rock-ridge attributes [ 166.863665][ T8161] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.880276][ T5799] Unable to read rock-ridge attributes [ 166.885918][ T5799] Unable to read rock-ridge attributes [ 166.935958][ T5799] ISOFS: unable to read i-node block [ 166.950009][ T5799] Unable to read rock-ridge attributes [ 166.955691][ T5799] ISOFS: unable to read i-node block [ 167.160057][ T8161] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.1136: deleted inode referenced: 12 [ 167.237099][ T8192] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.1136: deleted inode referenced: 12 [ 167.519005][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.715255][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 168.001675][ T8204] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1150'. [ 168.053818][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1150'. [ 168.327155][ T8226] loop3: detected capacity change from 0 to 1024 [ 168.341597][ T8226] EXT4-fs: Ignoring removed orlov option [ 168.466884][ T8226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.600526][ T8198] chnl_net:caif_netlink_parms(): no params data found [ 168.728491][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.735733][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.743709][ T8198] bridge_slave_0: entered allmulticast mode [ 168.751052][ T8198] bridge_slave_0: entered promiscuous mode [ 168.759263][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.767362][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.775540][ T8198] bridge_slave_1: entered allmulticast mode [ 168.783121][ T8198] bridge_slave_1: entered promiscuous mode [ 168.804485][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.816483][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.820473][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.842621][ T8198] team0: Port device team_slave_0 added [ 168.851711][ T8198] team0: Port device team_slave_1 added [ 168.871861][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.879799][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.918085][ T8198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.946578][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.961038][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.106927][ T8236] syz.8.1155 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 169.139851][ T8236] CPU: 0 UID: 0 PID: 8236 Comm: syz.8.1155 Tainted: G W syzkaller #0 PREEMPT(full) [ 169.139959][ T8236] Tainted: [W]=WARN [ 169.139966][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.139978][ T8236] Call Trace: [ 169.139986][ T8236] [ 169.139994][ T8236] __dump_stack+0x1d/0x30 [ 169.140038][ T8236] dump_stack_lvl+0x95/0xd0 [ 169.140063][ T8236] dump_stack+0x15/0x1b [ 169.140083][ T8236] dump_header+0x80/0x240 [ 169.140104][ T8236] oom_kill_process+0x295/0x350 [ 169.140154][ T8236] out_of_memory+0x97d/0xb80 [ 169.140239][ T8236] try_charge_memcg+0x62e/0xa10 [ 169.140278][ T8236] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 169.140355][ T8236] __swap_cache_prepare_and_add+0x386/0x530 [ 169.140394][ T8236] swap_cache_alloc_folio+0xa2/0x120 [ 169.140426][ T8236] swap_cluster_readahead+0x26e/0x3d0 [ 169.140515][ T8236] swapin_readahead+0xde/0x840 [ 169.140576][ T8236] ? __vmalloc_node_range_noprof+0x121d/0x12b0 [ 169.140607][ T8236] ? __rcu_read_unlock+0x4e/0x70 [ 169.140648][ T8236] ? swap_cache_get_folio+0x26f/0x280 [ 169.140672][ T8236] do_swap_page+0x309/0x2210 [ 169.140703][ T8236] ? __rcu_read_lock+0x36/0x50 [ 169.140800][ T8236] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 169.140842][ T8236] handle_mm_fault+0xb40/0x3020 [ 169.140903][ T8236] ? vma_start_read+0x1c7/0x2c0 [ 169.140932][ T8236] do_user_addr_fault+0x62f/0x1050 [ 169.140962][ T8236] ? trace_page_fault_user+0x1f/0xe0 [ 169.140992][ T8236] exc_page_fault+0x62/0xa0 [ 169.141085][ T8236] asm_exc_page_fault+0x26/0x30 [ 169.141108][ T8236] RIP: 0033:0x7f6a5090bf8b [ 169.141127][ T8236] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 2e 0f 1f [ 169.141174][ T8236] RSP: 002b:00007f6a4f367028 EFLAGS: 00010217 [ 169.141194][ T8236] RAX: 000000000000000c RBX: 00007f6a50b85fa0 RCX: ffffffffffffffe8 [ 169.141210][ T8236] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 169.141253][ T8236] RBP: 00007f6a509a27e0 R08: 0000000000000000 R09: 0000000000000000 [ 169.141268][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.141283][ T8236] R13: 00007f6a50b86038 R14: 00007f6a50b85fa0 R15: 00007ffd007ab878 [ 169.141347][ T8236] [ 169.141390][ T8236] memory: usage 281980kB, limit 307200kB, failcnt 2675 [ 169.399787][ T8198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.467264][ T8236] memory+swap: usage 208992kB, limit 9007199254740988kB, failcnt 0 [ 169.525705][ T8248] tmpfs: Unknown parameter 'nossap' [ 169.584191][ T8236] kmem: usage 172648kB, limit 9007199254740988kB, failcnt 0 [ 169.674041][ T8236] Memory cgroup stats for /syz8: [ 169.674314][ T8236] cache 0 [ 169.697652][ T8198] hsr_slave_0: entered promiscuous mode [ 169.711162][ T8251] loop3: detected capacity change from 0 to 4096 [ 169.720381][ T8198] hsr_slave_1: entered promiscuous mode [ 169.741623][ T8198] debugfs: 'hsr0' already exists in 'hsr' [ 169.747379][ T8198] Cannot create hsr debugfs directory [ 169.798024][ T8251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.816950][ T8236] rss 114688 [ 169.834075][ T8254] IPv6: sit1: Disabled Multicast RS [ 169.879840][ T8236] shmem 0 [ 169.969811][ T8236] mapped_file 0 [ 169.973484][ T8236] dirty 0 [ 170.008020][ T8236] writeback 0 [ 170.012399][ T8236] workingset_refault_anon 645 [ 170.017461][ T8236] workingset_refault_file 0 [ 170.028960][ T8236] swap 77824 [ 170.028974][ T8236] swapcached 12451840 [ 170.028983][ T8236] pgpgin 40928 [ 170.028992][ T8236] pgpgout 40896 [ 170.029000][ T8236] pgfault 27532 [ 170.029078][ T8236] pgmajfault 111 [ 170.029086][ T8236] inactive_anon 0 [ 170.029095][ T8236] active_anon 131072 [ 170.029104][ T8236] inactive_file 0 [ 170.029113][ T8236] active_file 0 [ 170.029122][ T8236] unevictable 0 [ 170.029131][ T8236] hierarchical_memory_limit 314572800 [ 170.029185][ T8236] hierarchical_memsw_limit 9223372036854771712 [ 170.029215][ T8236] total_cache 0 [ 170.029223][ T8236] total_rss 114688 [ 170.029231][ T8236] total_shmem 0 [ 170.029240][ T8236] total_mapped_file 0 [ 170.029249][ T8236] total_dirty 0 [ 170.029257][ T8236] total_writeback 0 [ 170.029266][ T8236] total_workingset_refault_anon 645 [ 170.029276][ T8236] total_workingset_refault_file 0 [ 170.029284][ T8236] total_swap 77824 [ 170.029291][ T8236] total_swapcached 12451840 [ 170.029350][ T8236] total_pgpgin 40928 [ 170.029358][ T8236] total_pgpgout 40896 [ 170.029429][ T8236] total_pgfault 27532 [ 170.029437][ T8236] total_pgmajfault 111 [ 170.029446][ T8236] total_inactive_anon 0 [ 170.029454][ T8236] total_active_anon 131072 [ 170.029461][ T8236] total_inactive_file 0 [ 170.029468][ T8236] total_active_file 0 [ 170.029476][ T8236] total_unevictable 0 [ 170.029545][ T8236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1155,pid=8233,uid=0 [ 170.029619][ T8236] Memory cgroup out of memory: Killed process 8236 (syz.8.1155) total-vm:96336kB, anon-rss:1344kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 170.069057][ T28] kauditd_printk_skb: 403 callbacks suppressed [ 170.069074][ T28] audit: type=1400 audit(1771093925.109:15638): avc: denied { read write } for pid=3567 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.074211][ T28] audit: type=1400 audit(1771093925.109:15639): avc: denied { open } for pid=3567 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.161359][ T28] audit: type=1400 audit(1771093925.209:15640): avc: denied { map_create } for pid=8258 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 170.166616][ T28] audit: type=1400 audit(1771093925.209:15641): avc: denied { open } for pid=8258 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.188867][ T8261] netlink: 340 bytes leftover after parsing attributes in process `syz.8.1160'. [ 170.189178][ T28] audit: type=1400 audit(1771093925.229:15642): avc: denied { create } for pid=8259 comm="syz.8.1160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 170.189243][ T28] audit: type=1400 audit(1771093925.229:15643): avc: denied { write } for pid=8259 comm="syz.8.1160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 170.189266][ T28] audit: type=1400 audit(1771093925.229:15644): avc: denied { nlmsg_write } for pid=8259 comm="syz.8.1160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 170.194140][ T28] audit: type=1400 audit(1771093925.239:15645): avc: denied { perfmon } for pid=8258 comm="syz.5.1159" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.194167][ T28] audit: type=1400 audit(1771093925.239:15646): avc: denied { kernel } for pid=8258 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.194192][ T28] audit: type=1400 audit(1771093925.239:15647): avc: denied { perfmon } for pid=8258 comm="syz.5.1159" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.268798][ T8198] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 170.277899][ T8260] 9pnet_fd: Insufficient options for proto=fd [ 170.308016][ T8198] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 170.323649][ T8198] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 170.332401][ T8198] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 170.521356][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.552357][ T8198] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.798729][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1166'. [ 170.818718][ T8198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.978362][ T8198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.997418][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.004523][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.015084][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.022385][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.228748][ T8198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.245319][ T8298] netlink: 'syz.6.1169': attribute type 25 has an invalid length. [ 171.259884][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1169'. [ 171.373285][ T8306] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1169'. [ 171.431203][ T8298] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1169'. [ 171.459527][ T8298] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 171.664737][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1172'. [ 171.701270][ T8333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.766015][ T8198] veth0_vlan: entered promiscuous mode [ 171.783377][ T8198] veth1_vlan: entered promiscuous mode [ 171.833441][ T8198] veth0_macvtap: entered promiscuous mode [ 171.852139][ T8198] veth1_macvtap: entered promiscuous mode [ 171.882554][ T8198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.898410][ T8198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.918484][ T30] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.933014][ T30] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.954067][ T30] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.968920][ T30] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.341615][ T8354] loop9: detected capacity change from 0 to 512 [ 172.358530][ T8354] EXT4-fs: Ignoring removed oldalloc option [ 172.381119][ T8354] EXT4-fs (loop9): 1 truncate cleaned up [ 172.410329][ T8354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.505056][ T8357] pimreg: entered allmulticast mode [ 172.525839][ T8359] netlink: 27 bytes leftover after parsing attributes in process `syz.8.1179'. [ 172.550594][ T8357] pimreg: left allmulticast mode [ 172.644778][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1181'. [ 172.761501][ T8377] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 172.998074][ T8387] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1187'. [ 173.008605][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.009135][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1187'. [ 173.201133][ T8198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.321727][ T8405] loop9: detected capacity change from 0 to 512 [ 173.360782][ T8405] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 173.377043][ T8405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c09c, mo2=0002] [ 173.385850][ T8405] EXT4-fs (loop9): orphan cleanup on readonly fs [ 173.393666][ T8405] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.1192: iget: bad i_size value: 12154761577498 [ 173.406717][ T8405] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 173.408835][ T8405] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1192: couldn't read orphan inode 13 (err -117) [ 173.418269][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 173.418292][ C1] EXT4-fs (loop9): initial error at time 1771093928: ext4_orphan_get:1391: inode 13 [ 173.418319][ C1] EXT4-fs (loop9): last error at time 1771093928: ext4_orphan_get:1391: inode 13 [ 173.448032][ T8398] xt_bpf: check failed: parse error [ 173.469915][ T8405] loop9: lost filesystem error report for type 5 error -117 [ 173.478465][ T8405] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.547640][ T8405] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1192: dx entry: limit 65535 != root limit 120 [ 173.599674][ T8405] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1192: Corrupt directory, running e2fsck is recommended [ 173.677331][ T8198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.894487][ T8423] netlink: 'syz.9.1196': attribute type 39 has an invalid length. [ 174.256097][ T8442] netlink: 'syz.6.1203': attribute type 12 has an invalid length. [ 174.411292][ T6795] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 174.420944][ T8419] loop3: detected capacity change from 0 to 512 [ 174.429615][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 174.429750][ T6795] Tainted: [W]=WARN [ 174.429760][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 174.429773][ T6795] Call Trace: [ 174.429781][ T6795] [ 174.429789][ T6795] __dump_stack+0x1d/0x30 [ 174.429867][ T6795] dump_stack_lvl+0x95/0xd0 [ 174.429916][ T6795] dump_stack+0x15/0x1b [ 174.429938][ T6795] dump_header+0x80/0x240 [ 174.429964][ T6795] oom_kill_process+0x295/0x350 [ 174.430062][ T6795] out_of_memory+0x97d/0xb80 [ 174.430097][ T6795] try_charge_memcg+0x62e/0xa10 [ 174.430275][ T6795] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 174.430309][ T6795] __swap_cache_prepare_and_add+0x386/0x530 [ 174.430342][ T6795] swap_cache_alloc_folio+0xa2/0x120 [ 174.430417][ T6795] swap_cluster_readahead+0x26e/0x3d0 [ 174.430451][ T6795] swapin_readahead+0xde/0x840 [ 174.430548][ T6795] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 174.430580][ T6795] ? __pfx_perf_pmu_nop_void+0x10/0x10 [ 174.430611][ T6795] ? __rcu_read_unlock+0x4e/0x70 [ 174.430634][ T6795] ? swap_cache_get_folio+0x26f/0x280 [ 174.430689][ T6795] do_swap_page+0x309/0x2210 [ 174.430717][ T6795] ? __schedule+0x85a/0xd40 [ 174.430738][ T6795] ? __rcu_read_lock+0x36/0x50 [ 174.430816][ T6795] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 174.430841][ T6795] handle_mm_fault+0xb40/0x3020 [ 174.430870][ T6795] ? vma_start_read+0x1c7/0x2c0 [ 174.430895][ T6795] do_user_addr_fault+0x62f/0x1050 [ 174.430956][ T6795] ? trace_page_fault_user+0x1f/0xe0 [ 174.430987][ T6795] exc_page_fault+0x62/0xa0 [ 174.431080][ T6795] asm_exc_page_fault+0x26/0x30 [ 174.431100][ T6795] RIP: 0033:0x7f6a508c7197 [ 174.431119][ T6795] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 174.431138][ T6795] RSP: 002b:00007ffd007abb70 EFLAGS: 00010202 [ 174.431164][ T6795] RAX: 0000000000000000 RBX: 00005555865d6500 RCX: 00007f6a508c7197 [ 174.431178][ T6795] RDX: 00007ffd007abbb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.431218][ T6795] RBP: 00007ffd007abc1c R08: 0000000000000000 R09: 0000000000000000 [ 174.431231][ T6795] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 174.431245][ T6795] R13: 00000000000927c0 R14: 000000000002a8bc R15: 00007ffd007abc70 [ 174.431265][ T6795] [ 174.436291][ T6795] memory: usage 307200kB, limit 307200kB, failcnt 2849 [ 174.684793][ T6795] memory+swap: usage 149736kB, limit 9007199254740988kB, failcnt 0 [ 174.692962][ T6795] kmem: usage 149392kB, limit 9007199254740988kB, failcnt 0 [ 174.700632][ T6795] Memory cgroup stats for /syz8: [ 174.700847][ T6795] cache 0 [ 174.709217][ T6795] rss 77824 [ 174.724128][ T6795] shmem 0 [ 174.727162][ T6795] mapped_file 0 [ 174.731848][ T6795] dirty 0 [ 174.735046][ T6795] writeback 24576 [ 174.769834][ T6795] workingset_refault_anon 681 [ 174.774689][ T6795] workingset_refault_file 0 [ 174.779285][ T6795] swap 98304 [ 174.806193][ T6795] swapcached 12525568 [ 174.835040][ T8457] delete_channel: no stack [ 174.848441][ T6795] pgpgin 41672 [ 174.853179][ T6795] pgpgout 41645 [ 174.856651][ T6795] pgfault 29046 [ 174.861071][ T6795] pgmajfault 123 [ 174.864816][ T6795] inactive_anon 49152 [ 174.868990][ T6795] active_anon 61440 [ 174.874315][ T6795] inactive_file 0 [ 174.878097][ T6795] active_file 0 [ 174.882898][ T6795] unevictable 0 [ 174.886554][ T6795] hierarchical_memory_limit 314572800 [ 174.915913][ T6795] hierarchical_memsw_limit 9223372036854771712 [ 174.944334][ T6795] total_cache 0 [ 174.947829][ T6795] total_rss 77824 [ 174.969801][ T6795] total_shmem 0 [ 174.977326][ T6795] total_mapped_file 0 [ 174.993645][ T6795] total_dirty 0 [ 174.998297][ T6795] total_writeback 24576 [ 175.008870][ T6795] total_workingset_refault_anon 681 [ 175.020267][ T6795] total_workingset_refault_file 0 [ 175.027694][ T6795] total_swap 98304 [ 175.035696][ T6795] total_swapcached 12525568 [ 175.040517][ T6795] total_pgpgin 41672 [ 175.044695][ T6795] total_pgpgout 41645 [ 175.048719][ T6795] total_pgfault 29046 [ 175.054096][ T6795] total_pgmajfault 123 [ 175.058190][ T6795] total_inactive_anon 49152 [ 175.062764][ T6795] total_active_anon 61440 [ 175.067338][ T6795] total_inactive_file 0 [ 175.072833][ T6795] total_active_file 0 [ 175.078507][ T28] kauditd_printk_skb: 657 callbacks suppressed [ 175.078523][ T28] audit: type=1400 audit(1771093930.119:16305): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.126579][ T6795] total_unevictable 0 [ 175.130311][ T8472] loop3: detected capacity change from 0 to 512 [ 175.133038][ T6795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1201,pid=8435,uid=0 [ 175.156427][ T8472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.157935][ T28] audit: type=1400 audit(1771093930.119:16306): avc: denied { read write open } for pid=3315 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.169248][ T6795] Memory cgroup out of memory: Killed process 8435 (syz.8.1201) total-vm:96336kB, anon-rss:1300kB, file-rss:22396kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 175.214250][ T8468] __nla_validate_parse: 1 callbacks suppressed [ 175.214281][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1210'. [ 175.232038][ T28] audit: type=1400 audit(1771093930.119:16307): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.260428][ T28] audit: type=1400 audit(1771093930.129:16308): avc: denied { create } for pid=8465 comm="syz.5.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.268174][ T8472] EXT4-fs (loop3): 1 truncate cleaned up [ 175.280907][ T28] audit: type=1400 audit(1771093930.129:16309): avc: denied { getopt } for pid=8465 comm="syz.5.1211" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.301246][ T8472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.308495][ T28] audit: type=1400 audit(1771093930.139:16310): avc: denied { module_request } for pid=8465 comm="syz.5.1211" kmod="net-pf-16-proto-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 175.348007][ T28] audit: type=1400 audit(1771093930.159:16311): avc: denied { create } for pid=8465 comm="syz.5.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.369679][ T28] audit: type=1400 audit(1771093930.169:16312): avc: denied { read write } for pid=8471 comm="syz.3.1212" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.395478][ T28] audit: type=1400 audit(1771093930.169:16313): avc: denied { read write open } for pid=8471 comm="syz.3.1212" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.421099][ T28] audit: type=1400 audit(1771093930.169:16314): avc: denied { ioctl } for pid=8471 comm="syz.3.1212" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.441446][ T8472] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.1212: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 175.497645][ T8472] EXT4-fs (loop3): Remounting filesystem read-only [ 175.506826][ T8472] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.1212: Deleting old file: nlink 5, error=-117 [ 175.559556][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.883299][ T8504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.940957][ T8501] tipc: Failed to remove unknown binding: 66,1,1/1079836672:3969132910/3969132912 [ 176.990301][ T8501] tipc: Failed to remove unknown binding: 66,1,1/1079836672:3969132910/3969132912 [ 177.031069][ T8513] batman_adv: batadv0: Adding interface: ipvlan2 [ 177.037541][ T8513] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.068016][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.099734][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.119885][ T8513] batman_adv: batadv0: Interface activated: ipvlan2 [ 177.230470][ T8499] tun0: tun_chr_ioctl cmd 1074025680 [ 177.902598][ T8540] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1233'. [ 178.352762][ T8563] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1236'. [ 178.940594][ T8579] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1243'. [ 179.132451][ T8586] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1248'. [ 179.172692][ T8592] netlink: 'syz.3.1246': attribute type 32 has an invalid length. [ 179.189335][ T8591] kernel profiling enabled (shift: 0) [ 179.808214][ T8627] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 179.868159][ T8627] netlink: 'syz.3.1259': attribute type 2 has an invalid length. [ 179.910996][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 180.018197][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1261'. [ 180.038617][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1261'. [ 180.089845][ T28] kauditd_printk_skb: 558 callbacks suppressed [ 180.089863][ T28] audit: type=1400 audit(1771093935.119:16873): avc: denied { prog_run } for pid=8635 comm="syz.8.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.103471][ T8640] loop9: detected capacity change from 0 to 256 [ 180.163303][ T28] audit: type=1400 audit(1771093935.139:16874): avc: denied { read write } for pid=8638 comm="syz.9.1263" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.259094][ T28] audit: type=1400 audit(1771093935.139:16875): avc: denied { open } for pid=8638 comm="syz.9.1263" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.308221][ T8640] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.360476][ T28] audit: type=1400 audit(1771093935.139:16876): avc: denied { ioctl } for pid=8638 comm="syz.9.1263" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.367808][ T8643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 180.388194][ T28] audit: type=1400 audit(1771093935.249:16877): avc: denied { mounton } for pid=8638 comm="syz.9.1263" path="/13/bus" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.440601][ T8643] audit: audit_lost=134 audit_rate_limit=0 audit_backlog_limit=64 [ 180.466854][ T28] audit: type=1400 audit(1771093935.259:16878): avc: denied { bpf } for pid=8600 comm="syz.5.1251" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.479853][ T8643] audit: backlog limit exceeded [ 180.492945][ T28] audit: type=1400 audit(1771093935.269:16879): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.585752][ T8651] /dev/loop8: Can't lookup blockdev [ 180.594066][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1267'. [ 180.629036][ T8645] bridge1: entered promiscuous mode [ 180.648165][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 180.657666][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1264'. [ 180.667767][ T8645] bridge1: entered allmulticast mode [ 180.675538][ T8645] team0: Port device bridge1 added [ 180.748434][ T8652] lo speed is unknown, defaulting to 1000 [ 180.773542][ T8652] lo speed is unknown, defaulting to 1000 [ 180.834822][ T8652] lo speed is unknown, defaulting to 1000 [ 180.912224][ T8652] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.961506][ T8652] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 181.046210][ T8652] lo speed is unknown, defaulting to 1000 [ 181.073909][ T8652] lo speed is unknown, defaulting to 1000 [ 181.080231][ T8652] lo speed is unknown, defaulting to 1000 [ 181.102204][ T8652] lo speed is unknown, defaulting to 1000 [ 181.112488][ T8652] lo speed is unknown, defaulting to 1000 [ 181.127200][ T8652] lo speed is unknown, defaulting to 1000 [ 181.137493][ T8652] lo speed is unknown, defaulting to 1000 [ 181.415203][ T8660] syz.9.1270 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 181.504927][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.9.1270 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.504959][ T8660] Tainted: [W]=WARN [ 181.504985][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.505053][ T8660] Call Trace: [ 181.505060][ T8660] [ 181.505088][ T8660] __dump_stack+0x1d/0x30 [ 181.505123][ T8660] dump_stack_lvl+0x95/0xd0 [ 181.505150][ T8660] dump_stack+0x15/0x1b [ 181.505170][ T8660] dump_header+0x80/0x240 [ 181.505236][ T8660] oom_kill_process+0x295/0x350 [ 181.505318][ T8660] out_of_memory+0x97d/0xb80 [ 181.505353][ T8660] try_charge_memcg+0x62e/0xa10 [ 181.505395][ T8660] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 181.505452][ T8660] __swap_cache_prepare_and_add+0x386/0x530 [ 181.505484][ T8660] swap_cache_alloc_folio+0xa2/0x120 [ 181.505521][ T8660] swap_cluster_readahead+0x26e/0x3d0 [ 181.505600][ T8660] swapin_readahead+0xde/0x840 [ 181.505675][ T8660] ? __rcu_read_unlock+0x4e/0x70 [ 181.505767][ T8660] ? __perf_event_task_sched_in+0xa65/0xad0 [ 181.505807][ T8660] ? __list_add_valid_or_report+0x38/0xe0 [ 181.505843][ T8660] ? xfd_validate_state+0x45/0xf0 [ 181.505905][ T8660] ? __rcu_read_unlock+0x4e/0x70 [ 181.505964][ T8660] ? swap_cache_get_folio+0x26f/0x280 [ 181.506036][ T8660] do_swap_page+0x309/0x2210 [ 181.506114][ T8660] ? __schedule+0x85a/0xd40 [ 181.506146][ T8660] ? __rcu_read_lock+0x36/0x50 [ 181.506169][ T8660] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 181.506198][ T8660] handle_mm_fault+0xb40/0x3020 [ 181.506308][ T8660] ? vma_start_read+0x1c7/0x2c0 [ 181.506366][ T8660] do_user_addr_fault+0x62f/0x1050 [ 181.506436][ T8660] ? trace_page_fault_user+0x1f/0xe0 [ 181.506473][ T8660] exc_page_fault+0x62/0xa0 [ 181.506500][ T8660] asm_exc_page_fault+0x26/0x30 [ 181.506569][ T8660] RIP: 0033:0x7f748cbcc84e [ 181.506610][ T8660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.506705][ T8660] RSP: 002b:00007ffefa19af08 EFLAGS: 00010246 [ 181.506727][ T8660] RAX: 0000000000000000 RBX: 0000555579bea500 RCX: 00007f748cbcc84e [ 181.506744][ T8660] RDX: 00007ffefa19af60 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.506760][ T8660] RBP: 00007f748ce87da0 R08: 0000000000000000 R09: 0000000000000000 [ 181.506774][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002c571 [ 181.506787][ T8660] R13: 00007f748ce8618c R14: 000000000002c36c R15: 00007f748ce86180 [ 181.506837][ T8660] [ 181.506921][ T8660] memory: usage 226340kB, limit 307200kB, failcnt 256 [ 181.690032][ T8691] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1281'. [ 181.771900][ T8660] memory+swap: usage 133192kB, limit 9007199254740988kB, failcnt 0 [ 181.781987][ T8660] kmem: usage 124832kB, limit 9007199254740988kB, failcnt 0 [ 181.793482][ T8660] Memory cgroup stats for /syz9: [ 181.799364][ T8660] cache 0 [ 181.820118][ T8660] rss 8192 [ 181.823194][ T8660] shmem 0 [ 181.826299][ T8660] mapped_file 0 [ 181.831351][ T8660] dirty 0 [ 181.834466][ T8660] writeback 0 [ 181.837899][ T8660] workingset_refault_anon 6 [ 181.859122][ T8660] workingset_refault_file 0 [ 181.883086][ T8660] swap 196608 [ 181.886433][ T8660] swapcached 200704 [ 181.890490][ T8660] pgpgin 849 [ 181.893753][ T8660] pgpgout 846 [ 181.897101][ T8660] pgfault 1753 [ 181.920024][ T8660] pgmajfault 6 [ 181.923521][ T8660] inactive_anon 0 [ 181.927220][ T8660] active_anon 12288 [ 181.949811][ T8660] inactive_file 0 [ 181.953580][ T8660] active_file 0 [ 181.957087][ T8660] unevictable 0 [ 181.968971][ T8660] hierarchical_memory_limit 314572800 [ 181.975080][ T8660] hierarchical_memsw_limit 9223372036854771712 [ 181.982190][ T8660] total_cache 0 [ 181.985669][ T8660] total_rss 8192 [ 181.989424][ T8660] total_shmem 0 [ 181.994029][ T8660] total_mapped_file 0 [ 181.998030][ T8660] total_dirty 0 [ 182.002521][ T8660] total_writeback 0 [ 182.006370][ T8660] total_workingset_refault_anon 6 [ 182.013628][ T8660] total_workingset_refault_file 0 [ 182.018809][ T8660] total_swap 196608 [ 182.025370][ T8660] total_swapcached 200704 [ 182.030509][ T8660] total_pgpgin 849 [ 182.034249][ T8660] total_pgpgout 846 [ 182.038118][ T8660] total_pgfault 1753 [ 182.042988][ T8660] total_pgmajfault 6 [ 182.046902][ T8660] total_inactive_anon 0 [ 182.052052][ T8660] total_active_anon 12288 [ 182.056397][ T8660] total_inactive_file 0 [ 182.060701][ T8660] total_active_file 0 [ 182.065726][ T8660] total_unevictable 0 [ 182.069893][ T8660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1270,pid=8660,uid=0 [ 182.085112][ T8660] Memory cgroup out of memory: Killed process 8660 (syz.9.1270) total-vm:96336kB, anon-rss:1232kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 182.170682][ T8701] loop9: detected capacity change from 0 to 256 [ 182.213429][ T8701] FAT-fs (loop9): Directory bread(block 64) failed [ 182.235690][ T8701] FAT-fs (loop9): Directory bread(block 65) failed [ 182.250006][ T8701] FAT-fs (loop9): Directory bread(block 66) failed [ 182.259921][ T8701] FAT-fs (loop9): Directory bread(block 67) failed [ 182.289269][ T8701] FAT-fs (loop9): Directory bread(block 68) failed [ 182.305102][ T8701] FAT-fs (loop9): Directory bread(block 69) failed [ 182.314156][ T8701] FAT-fs (loop9): Directory bread(block 70) failed [ 182.322028][ T8701] FAT-fs (loop9): Directory bread(block 71) failed [ 182.328892][ T8701] FAT-fs (loop9): Directory bread(block 72) failed [ 182.344393][ T8701] FAT-fs (loop9): Directory bread(block 73) failed [ 182.479968][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1288'. [ 182.728776][ T8733] loop3: detected capacity change from 0 to 1024 [ 182.746763][ T8733] EXT4-fs: Ignoring removed nobh option [ 182.777741][ T8733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.852122][ T8733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.891876][ T8746] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1299'. [ 183.123871][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1303'. [ 183.181876][ T8198] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 183.236345][ T8198] CPU: 1 UID: 0 PID: 8198 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 183.236382][ T8198] Tainted: [W]=WARN [ 183.236389][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 183.236401][ T8198] Call Trace: [ 183.236409][ T8198] [ 183.236420][ T8198] __dump_stack+0x1d/0x30 [ 183.236450][ T8198] dump_stack_lvl+0x95/0xd0 [ 183.236490][ T8198] dump_stack+0x15/0x1b [ 183.236516][ T8198] dump_header+0x80/0x240 [ 183.236657][ T8198] oom_kill_process+0x295/0x350 [ 183.236768][ T8198] out_of_memory+0x97d/0xb80 [ 183.236880][ T8198] try_charge_memcg+0x62e/0xa10 [ 183.236953][ T8198] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 183.237016][ T8198] __swap_cache_prepare_and_add+0x386/0x530 [ 183.237068][ T8198] swap_cache_alloc_folio+0xa2/0x120 [ 183.237094][ T8198] swap_cluster_readahead+0x36b/0x3d0 [ 183.237122][ T8198] swapin_readahead+0xde/0x840 [ 183.237144][ T8198] ? __rcu_read_unlock+0x4e/0x70 [ 183.237181][ T8198] ? __perf_event_task_sched_in+0xa65/0xad0 [ 183.237222][ T8198] ? __list_add_valid_or_report+0x38/0xe0 [ 183.237261][ T8198] ? __rcu_read_unlock+0x4e/0x70 [ 183.237356][ T8198] ? swap_cache_get_folio+0x26f/0x280 [ 183.237379][ T8198] do_swap_page+0x309/0x2210 [ 183.237417][ T8198] ? __schedule+0x85a/0xd40 [ 183.237444][ T8198] ? __rcu_read_lock+0x36/0x50 [ 183.237463][ T8198] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 183.237530][ T8198] handle_mm_fault+0xb40/0x3020 [ 183.237633][ T8198] ? vma_start_read+0x1c7/0x2c0 [ 183.237663][ T8198] do_user_addr_fault+0x62f/0x1050 [ 183.237782][ T8198] ? trace_page_fault_user+0x1f/0xe0 [ 183.237818][ T8198] exc_page_fault+0x62/0xa0 [ 183.237910][ T8198] asm_exc_page_fault+0x26/0x30 [ 183.237934][ T8198] RIP: 0033:0x7f748cbc7197 [ 183.237956][ T8198] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 183.238022][ T8198] RSP: 002b:00007ffefa19b120 EFLAGS: 00010202 [ 183.238044][ T8198] RAX: 0000000000000000 RBX: 0000555579bea500 RCX: 00007f748cbc7197 [ 183.238101][ T8198] RDX: 00007ffefa19b160 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.238113][ T8198] RBP: 00007ffefa19b1cc R08: 0000000000000000 R09: 0000000000000000 [ 183.238126][ T8198] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 183.238141][ T8198] R13: 00000000000927c0 R14: 000000000002cb2f R15: 00007ffefa19b220 [ 183.238163][ T8198] [ 183.247914][ T8198] memory: usage 305900kB, limit 307200kB, failcnt 433 [ 183.363829][ T8763] wg1: entered promiscuous mode [ 183.380049][ T8198] memory+swap: usage 214300kB, limit 9007199254740988kB, failcnt 0 [ 183.383781][ T8763] wg1: entered allmulticast mode [ 183.569686][ T8198] kmem: usage 27952kB, limit 9007199254740988kB, failcnt 0 [ 183.577172][ T8198] Memory cgroup stats for /syz9: [ 183.577696][ T8198] cache 0 [ 183.586149][ T8198] rss 24576 [ 183.589476][ T8198] shmem 0 [ 183.592564][ T8198] mapped_file 0 [ 183.596260][ T8198] dirty 0 [ 183.599241][ T8198] writeback 0 [ 183.602680][ T8198] workingset_refault_anon 32 [ 183.607613][ T8198] workingset_refault_file 0 [ 183.612279][ T8198] swap 184320 [ 183.615612][ T8198] swapcached 315392 [ 183.623198][ T8198] pgpgin 1316 [ 183.626656][ T8198] pgpgout 1310 [ 183.639957][ T8198] pgfault 2154 [ 183.643395][ T8198] pgmajfault 19 [ 183.646900][ T8198] inactive_anon 0 [ 183.657632][ T8198] active_anon 24576 [ 183.662829][ T8198] inactive_file 0 [ 183.666854][ T8198] active_file 0 [ 183.686939][ T8198] unevictable 0 [ 183.690533][ T8198] hierarchical_memory_limit 314572800 [ 183.695922][ T8198] hierarchical_memsw_limit 9223372036854771712 [ 183.702325][ T8198] total_cache 0 [ 183.705889][ T8198] total_rss 24576 [ 183.709702][ T8198] total_shmem 0 [ 183.714619][ T8198] total_mapped_file 0 [ 183.718615][ T8198] total_dirty 0 [ 183.722328][ T8198] total_writeback 0 [ 183.726230][ T8198] total_workingset_refault_anon 32 [ 183.737186][ T8198] total_workingset_refault_file 0 [ 183.743954][ T8198] total_swap 184320 [ 183.749178][ T8198] total_swapcached 315392 [ 183.768939][ T8198] total_pgpgin 1316 [ 183.773034][ T8198] total_pgpgout 1310 [ 183.776945][ T8198] total_pgfault 2154 [ 183.786167][ T5403] ================================================================== [ 183.794312][ T5403] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 183.801969][ T5403] [ 183.804311][ T5403] read-write to 0xffff88811c897558 of 8 bytes by task 8781 on cpu 0: [ 183.812669][ T5403] inode_add_bytes+0x47/0xe0 [ 183.817469][ T5403] __dquot_alloc_space+0x180/0x8a0 [ 183.822614][ T5403] shmem_inode_acct_blocks+0x125/0x230 [ 183.828103][ T5403] shmem_get_folio_gfp+0x5b2/0xd60 [ 183.833335][ T5403] shmem_write_begin+0xfc/0x1f0 [ 183.838220][ T5403] generic_perform_write+0x183/0x490 [ 183.843536][ T5403] shmem_file_write_iter+0xc5/0xf0 [ 183.848673][ T5403] __kernel_write_iter+0x319/0x590 [ 183.854106][ T5403] dump_user_range+0xa7d/0xdb0 [ 183.859157][ T5403] elf_core_dump+0x21a2/0x2330 [ 183.864038][ T5403] coredump_write+0xacf/0xdf0 [ 183.868743][ T5403] vfs_coredump+0x26c7/0x3130 [ 183.873446][ T5403] get_signal+0xd80/0xf60 [ 183.877814][ T5403] arch_do_signal_or_restart+0x96/0x450 [ 183.883383][ T5403] irqentry_exit+0xf7/0x520 [ 183.887894][ T5403] asm_exc_page_fault+0x26/0x30 [ 183.892846][ T5403] [ 183.895173][ T5403] read to 0xffff88811c897558 of 8 bytes by task 5403 on cpu 1: [ 183.902818][ T5403] generic_fillattr+0x27d/0x340 [ 183.907778][ T5403] shmem_getattr+0x181/0x200 [ 183.912504][ T5403] vfs_getattr_nosec+0x146/0x1e0 [ 183.917539][ T5403] vfs_getattr+0x48/0x60 [ 183.921791][ T5403] vfs_statx_path+0x28/0x140 [ 183.926398][ T5403] vfs_statx+0xc4/0x170 [ 183.930556][ T5403] vfs_fstatat+0x118/0x170 [ 183.934982][ T5403] __se_sys_newfstatat+0x55/0x3e0 [ 183.940021][ T5403] __x64_sys_newfstatat+0x55/0x70 [ 183.945049][ T5403] x64_sys_call+0x2c64/0x3020 [ 183.949736][ T5403] do_syscall_64+0x12c/0x370 [ 183.954348][ T5403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.960513][ T5403] [ 183.962836][ T5403] value changed: 0x0000000000000ee8 -> 0x0000000000000ef0 [ 183.969943][ T5403] [ 183.972355][ T5403] Reported by Kernel Concurrency Sanitizer on: [ 183.978524][ T5403] CPU: 1 UID: 0 PID: 5403 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 183.989641][ T5403] Tainted: [W]=WARN [ 183.993443][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.003596][ T5403] ================================================================== [ 184.012119][ T8198] total_pgmajfault 19 [ 184.016125][ T8198] total_inactive_anon 0 [ 184.020469][ T8198] total_active_anon 24576 [ 184.024814][ T8198] total_inactive_file 0 [ 184.029122][ T8198] total_active_file 0 [ 184.038152][ T8198] total_unevictable 0 [ 184.042307][ T8198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1297,pid=8735,uid=0 [ 184.067339][ T8198] Memory cgroup out of memory: Killed process 8735 (syz.9.1297) total-vm:94288kB, anon-rss:1252kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 184.177614][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.