last executing test programs: 9m10.161039674s ago: executing program 32 (id=192): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 8m54.67908663s ago: executing program 33 (id=361): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfda7, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1bcc728bbb1366e, &(0x7f0000000140)=0xb0e3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x400cc00}, 0x20080000) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x300b44ca0d77208b, &(0x7f0000000100), 0x2, 0x5ad, &(0x7f00000008c0)="$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") 7m13.972465142s ago: executing program 34 (id=1087): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xd) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1012c2, 0x148) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x3, @empty, 0x5}}, 0xffff, 0x0, 0xffff7ffe, 0x693fffd, 0x80, 0x0, 0x20}, &(0x7f0000000380)=0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3c}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x80}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f0000000500)=0xdc) 7m10.652425105s ago: executing program 35 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xd) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x0, 0x2, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3}, 0x4, 0x6, 0xe723, 0x1, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000900000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') mmap(&(0x7f00005c1000/0x1000)=nil, 0x1000, 0x2, 0x8010, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0xff, 0x0, 0x0, 0x22, 0x2640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x59}, 0x100118, 0x8000000000000, 0x0, 0x0, 0xfff, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x42) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 6m43.792681691s ago: executing program 36 (id=1328): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 6m17.505703017s ago: executing program 37 (id=1483): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56741, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x12, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031411d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m11.808722821s ago: executing program 38 (id=1424): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xb, 0x6, 0xc, 0x7fff, 0x0, 0x9}) ioprio_set$pid(0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x4004000) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x1171}, {r7, 0x4002}, {r2, 0x1000}, {r6, 0x2024}, {r1, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000540)={[0x8000000000000001]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000002000000340be92206afe72aa437fbdf6d1f4680080f0000f4aebcfdb236e22643a11e3b14cdc31008000000"], &(0x7f0000000100), 0x1400) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r10, 0x5501, &(0x7f0000000500)=0xdc) 5m58.340114242s ago: executing program 39 (id=1566): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) setrlimit(0xc, &(0x7f0000000000)={0xf9, 0x7ff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40542, 0x0) lseek(r4, 0x20000000000000, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='gre0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000070000000100001302000000030000000100000006000000000000000300000d000000000400000000000000080000000300000005000000030000000900000000000007000000000a0000000000000700000000000061e50200005f"], 0x0, 0x75, 0x0, 0x1, 0x7}, 0x28) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x3224c89, &(0x7f0000000380)=ANY=[@ANYRES32=r4], 0x1, 0x351, &(0x7f0000000bc0)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000000001a0000f70000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5m35.460498761s ago: executing program 4 (id=1687): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe0020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) (async) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m34.71814167s ago: executing program 4 (id=1691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000fff37b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 5m34.562037882s ago: executing program 4 (id=1694): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 5m34.163463252s ago: executing program 4 (id=1700): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000780)=""/234) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000700)="3674d97199", 0x5}, {&(0x7f0000000400)="8b89b215d290927e64ddecbae70920e970123a2a", 0x14}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x8, 0x9}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x25a, &(0x7f0000000240)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2801091, 0x0) chroot(&(0x7f0000000ac0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000000000000008b000000000000660e64c590ebb36bb1c0c3d61a69dd42906ea5250d2e6c68fec359c63488f18b8c4b7045d676934d897434a41ccd986c99e2099473623484d38697faa8f381540d2270a61f62cfdcd3c1cefec3a6cb9313203c1edfa99de14f6c2f7df2ed4f38895aab48f0664bae6d3197c08e8e2032ba07e47c9ecc4b40d9907f853ba6ee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12020000060000000400711b05ecc815ed930000a2f7b1a3defe63bd64599aef08d0adf9fa79520e784effa2b73ed6ea4338842003c5f15d554598b66706d68ea0de872909a2b77f187f7a611467760c0688a2d21260671ce82ccfcae6a265ac9cffd473d49ea8d930c5d516a6b1451cf3e998f88fcc28478405556e16b6e3feac58923111db5b4363d81b55e9fe170dc35aa85b2efb10ae156084e0586b669bed3756f209f736859b92fc9013d5e2f2579b6307c06c31de6c254a8d816bd4f832310a5d29a8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000580)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x400, 0x2, 0x3b9}, 0x0, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa00"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000a80)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500001c00020000fe1190782f1414aae000000100004e3000089078292edfdcc39b07119997cddc"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18a44600000000000003000000cefb68711f0ffaab2f97c4fc8809beca001898bb00a9007547ae8db950e290893150f4087334fbac5d928a5c8aa8d7f35030912835d4e5a785f9e53e9a809647ec17aa582c2ff9a263d4496817ad43601e1cbfbbc68e6fd45e9ea8133694e726fed6c0ca4d74"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 5m31.731659222s ago: executing program 4 (id=1711): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES8=r4], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e14060868bdc7f6c817b5b948000000007a0000a718", 0x2e}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000102000000000000000002000000000000bbff8925bef8c6bf"], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r9, r9, 0x0, 0xb) 5m31.238077735s ago: executing program 4 (id=1715): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f00000000c0)=0x5, 0x12) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x6) (fail_nth: 3) 5m31.236003325s ago: executing program 40 (id=1715): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f00000000c0)=0x5, 0x12) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x6) (fail_nth: 3) 4m34.518784767s ago: executing program 3 (id=2075): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x3, @multicast1}, 0x1, 0x0, 0xffffffff, 0x2}}, 0x2e) 4m34.42575086s ago: executing program 3 (id=2078): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19022bbdfbfffedbdf25210000000c0005000200aaaaaaaaaaaa09001f003068793100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 4m34.349868116s ago: executing program 3 (id=2079): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x86a, 0x0, 0x0) lseek(r0, 0xf5, 0x0) 4m34.224788274s ago: executing program 3 (id=2081): keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x33) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4000020, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) r6 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r7 = open(0x0, 0x84242, 0x46) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r6, 0xc040583f, 0x0) unshare(0x6a040c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r10, 0x1, 0x70bd28, 0x25dfdc00, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80a0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="540000000206010200000000000000000c0000000e0003006269746d61703a69700000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000780080004010000"], 0x54}}, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) 4m33.389798067s ago: executing program 3 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xd) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x0, 0x2, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3}, 0x4, 0x6, 0xe723, 0x1, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000070000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') mmap(&(0x7f00005c1000/0x1000)=nil, 0x1000, 0x2, 0x8010, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0xff, 0x0, 0x0, 0x22, 0x2640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x59}, 0x100118, 0x8000000000000, 0x0, 0x0, 0xfff, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x42) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4m33.169257778s ago: executing program 3 (id=2093): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) lseek(r0, 0xf5, 0x0) 4m33.093180075s ago: executing program 41 (id=2093): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) lseek(r0, 0xf5, 0x0) 3m58.971864407s ago: executing program 5 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000323"], 0x14}}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="f5c23b191a34161159a25dc4009bdc3c94fcc66d778abd2221a8c598a7c7bc471e07568c62c5b5ef5c473fbb6a9bd3"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4000800) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES16=r2], 0x4) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000323"], 0x14}}, 0x800) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="f5c23b191a34161159a25dc4009bdc3c94fcc66d778abd2221a8c598a7c7bc471e07568c62c5b5ef5c473fbb6a9bd3"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4000800) (async) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES16=r2], 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async) 3m57.609791937s ago: executing program 5 (id=2375): r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000759, &(0x7f0000000580)={[], [], 0x2c}, 0x0, 0x530, &(0x7f0000000840)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x100a, &(0x7f00000009c0)=""/4106, 0x40f00}, 0x94) getdents(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getdents(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0xffffffffffffff69, 0x44854, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7f}]}}}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0) iopl(0x6) creat(&(0x7f0000000240)='./file1\x00', 0x21) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 3m56.917247545s ago: executing program 5 (id=2381): syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb000000000000005700000000000000012421880b0000000000480057000086dd0800"], 0x0) 3m56.821906928s ago: executing program 5 (id=2382): keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="997d1470bc42000f2f187aa8c8e43cfbec349c4ce7a48d0bd53fce4d7bd2eeb7fa5b15a8b0512b1b1e196785d3538597afb26c8ec3d5bd57f58cae60f5f3", @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0xff, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x3714, 0x0, 0x43a1bd76, 0xe0fcb801c0ffdcf, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x40810) socket$inet(0x2, 0x1, 0x33) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, 0x0, 0x0, 0x4000020, &(0x7f0000000080)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) r9 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") open(0x0, 0x84242, 0x46) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r9, 0xc040583f, 0x0) unshare(0x6a040c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) 3m56.333368432s ago: executing program 5 (id=2391): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000100)={[{@sb={'sb', 0x3d, 0x1}}, {@nouid32}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") 3m55.001211346s ago: executing program 5 (id=2399): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@random, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x90, 0x0, 0x3e8, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xf24], "4374d9b02937807f2724373ea1bc4cb3ac44a4d778c18b918f43c1d7f29b15ad30ba87ef93e54a3b7cf6a5089c1591f9cbb0794b0069"}, {}, {0xdd86, 0x88be, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x1, {0x401}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0xff5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) 3m54.995892915s ago: executing program 42 (id=2399): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@random, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x90, 0x0, 0x3e8, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xf24], "4374d9b02937807f2724373ea1bc4cb3ac44a4d778c18b918f43c1d7f29b15ad30ba87ef93e54a3b7cf6a5089c1591f9cbb0794b0069"}, {}, {0xdd86, 0x88be, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x1, {0x401}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0xff5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) 3m46.516676018s ago: executing program 8 (id=2476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 3m45.742307951s ago: executing program 8 (id=2481): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="280000002d0001002abd70000000000008000000", @ANYRES32, @ANYBLOB="eaff9e0790ba123630b20180"], 0x28}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4008004) 3m45.493647567s ago: executing program 8 (id=2485): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="100000002104020008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r1, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000012000302000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000", @ANYRESOCT], 0x70}}, 0x0) 3m44.790310563s ago: executing program 8 (id=2493): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x2f0}]}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$eJzs3V1rHNUbAPBnNpv09f9vCqWoF1LohZXaTZP4UkGwXooWC3pfl2QbSjbdkt2UJhZsBXvjjRRBxIL4Abz3svgF/BQFLRQpQS9EWJnNbLpNdvO6dbfZ3w+mOWdnpmeenHkm5+zsMgEMrBPpP7mIFyPi6yTiSMu6fGQrT6xst/z45lS6JFGvf/xHEkn2WnP7JPt5KKu8EBG/fBlxOre+3eri0myxXC7NZ/Wx2ty1seri0pkrc8WZ0kzp6sTk5Lk3JifefuvNXUQ39FTt1Yt/fffR/ffPfXVy+dufHh69m8T5OJyta41jF261Vk4U/8lKw3F+zYbjXWisnyS9PgB2ZCjL8+FIrwFHYijLemDv+zwi6sCASuQ/DKjmOKA5t+/SPPi58ei9lQlQI/aR1vjzK++NxP7G3OjgcvLUzCid7452of20jZ9/v3c3XWLj9yEObFIH2JZbtyPibD6//vqfZNe/nTvbePN4Y2vbGLS/P9BL99Pxz2vtxn+51fFPtBn/HGqTuzuxef7nHnahmY7S8d87bce/q5eu0aGs9r/GmG84uXylXDobEf9vjAzrnW99fDHS+HFu+UG90yat4790SdtvjgWz43iY3/f0PtPFWjEiRnYTd9Oj2xEv5dvFn6z2f9Km/9Pfx8UttnG8dO/lTus2j//Zqv8Y8Urb/n/SrcnG9yfHGufDWPOsWO/PO8d/7dR+r+NP+//gxvGPJq33a6vbb+OH/X+XOq3b6fk/knzSKDeT4EaxVpsfjxhJPlz/+sSTfZv15vZp/KdObnz9a3f+p5OvT7cY/51jdzpu2g/9P92p/1dmmGv6f/uFBx989v3O40/7//VG6VT2Snb9ay87V7Z6gF34FQIAAAAAAEDfyEXE4UhyhdVyLlcorHy+41gczJUr1drpy5WFq9PR+K7saAznmne6j7R8HmI8+zxssz6xpj4ZEUcj4puhA416YapSnu518AAAAAAAAAAAAAAAAAAAANAnDnX4/n/qt6FeHx3wzDUebLCv10cB9MKmj/xf+5SmrT75B+h7m+Y/sGfJfxhc8h8Gl/yHwSX/YXDJfxhc8h8Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACArrp44UK61Jcf35xK69PXFxdmK9fPTJeqs4W5hanCVGX+WmGmUpkplwpTlbnN/r9ypXJtfCIWbozVStXaWHVx6dJcZeFq7dKVueJM6VJp+D+JCgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpX6Fh4N/riMOrJswtwxY52z++q9VxE9Ecv793C7ax7t7dXDy9KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDGvwEAAP//hkUw0Q==") chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffc, 0x2) getdents(r3, 0x0, 0x58) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRES8=r0], 0x38}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0xfffff800) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x152) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r6, 0xffffffffffffffff) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 3m43.565979226s ago: executing program 8 (id=2497): ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x45c1db821e40a11b}, 0xc, &(0x7f0000000340)={&(0x7f0000000b00)={0x5c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x8801) 3m41.43559807s ago: executing program 8 (id=2519): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_setup(0xb5c, 0x0, &(0x7f0000000dc0)=0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xd4, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ptrace(0x8, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x800, 0x20, 0x298}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r2, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}, @in6={0xa, 0x4e22, 0x3ff, @remote, 0x6}], 0x38) sendto$inet6(r3, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$inet6(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x43}, 0x8) 3m41.387840262s ago: executing program 43 (id=2519): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_setup(0xb5c, 0x0, &(0x7f0000000dc0)=0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xd4, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ptrace(0x8, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x800, 0x20, 0x298}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYRESOCT=0x0], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r2, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}, @in6={0xa, 0x4e22, 0x3ff, @remote, 0x6}], 0x38) sendto$inet6(r3, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$inet6(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x43}, 0x8) 2m9.588622067s ago: executing program 2 (id=3419): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7ff, 0x401, 0x3, 0x5, 0x0, 0xc1]}, &(0x7f0000000540)=0x78) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = getpid() (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x638802, 0x0) (rerun: 32) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000580)=""/168) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf25640101010000000000000000000000002001000000000000010000000080000100001d000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) (async) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e23}, 0x8a) (async) sendmmsg$unix(r9, 0x0, 0x0, 0x0) (async) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000240)) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x12c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000811}, 0x4000000) 2m9.396464372s ago: executing program 2 (id=3423): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000900)={0x1d, r2, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000600)=@xdp={0x2c, 0xb, r2, 0x36}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000680)="c67619b188c397ce639ae44363917af986e84c1e6d656dd8d5d1e563ab17ad6ba54d24b7f9cdeca2cd3d0349e208643d25877d453636057d331e1d41c45bb7830e0969284409558d30cbe00f3aaf8d7b88992bc5c5814fcf273f4aa55c37b3d9f4c1ed7b1dbd4c08f95aa4be69e5c33ac899c7cbd7964324304d7df6a65aefe561cd9b8ff859de73fefd259428923ae23eb43d655f63863744c8062922aea45ce93ae036d61a154806bfd91eca949570e5e0267453df5d8f5af3b790ea51ed6917569ec85b35f21029969b96f422f8ce6a5d267604e936b5b6f2c2c77e08662956811d59", 0xe4}, {&(0x7f0000000780)="5f95ab0a210060b2c4cacad176431f8582791149da64f7d54588dd7d208e6b50f556a0ebf6bf4b270493a955a736b51e41aa6029ec0607617723df", 0x3b}, {&(0x7f0000000880)="867b7490dd1f48b7936e547f9c4682b3a0437733a6967d7eaefac71e4b847e73d3c89d0d105ec31172e847d515bd6e9c4b5a9f4fb7799666603ed590e3d1bbafb43c09edd46f890d23935e7a507487b34fb570cc7b3d6e0d685815a8542aeeaf807c3cbabc712fd29909d773100cf2e6beff26abb5ec311a588ee8a6f739b9cadeadfe77725288a53c", 0x89}, {&(0x7f0000000940)="ecf9fcee1eb4311a9b29748c7303d5193bfec0e63085be0e53311d918425a388e3f0b0b0318fe9cca708f3f303d28f923b041b12bb33341099bd214ea70c5c0128ed8bd5385e1365428f8818e9257648af6f9ca7e1d3b5041df907a6014dfad8e794e17b579683d3708fc979da12f17a72d75b59989da69e8d4095ab88e7d8c47b6ffe078c9e5007118acd9da933e6d53d78595da0ad2dbee9f46936df9288478c57dd1aa0eae4bf094f28c8c557afbeefc646313419bd3933fadc27e159c4bedc023e211c8d12dbd3371aa1ba8f39ab9e076d549ff282aecfc51f", 0xdb}, {&(0x7f0000000fc0)="7d9c26996024b5feaf5ad7fd358b8a1c17e0dc3850fc3b4b2ff18cc526e1a8d41681d2bdfe3a1aadd43dc117aec05915d544c96716b93b27ae8cbe59935950aecc6fe006d5562954b60c8c4ad878816986702372e80a8fa48ee6f13c31862ee51044d0a0637f99f278fc16c3e0cff304f696e25fc3a5eb8164d33f605a1cad590b576f23c37b05712ea9bcade358936a645176b0ef176e68c0196e0783eb71a87d4fa0e8db", 0xa5}, {&(0x7f00000007c0)="53986155be9d12b23e5ae2d541ce43ec33fb12328b2d506dfdb0a6b3bc78e322263f08c459610c251a65c4ade5496b964084aaff0f74f0caeb581496fdfb4f75c31d622001e489597da484128b", 0x4d}, {&(0x7f0000001080)="1deffb1beeae0f0e0ed5f220bb0e98162529444c43ce7039c4c921a40c34ed520bc0b89b0ea773d2f22d9e4ad49c56db9ae76a222c87207e64fa538d6db376249ba9ad4b24d254b79026b9501a666eabf429c92c67fcb265572099ceb655d3660e727dbc1d718258dd967c1658a60ab54f44d323578914168c087d896b412c9769ea4e9f681cb076dfe28fde4ee2591d", 0x90}, {&(0x7f0000001140)="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", 0xfd}, {&(0x7f0000000a40)="fd60", 0x2}], 0x9, &(0x7f0000001300)=ANY=[@ANYBLOB="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"/4775], 0x12b0}}, {{&(0x7f00000025c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x2, 0x2, 0x1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000002640)="462aa6325eec49f7ad20947ef4eee0d5f4f4102c0c420323584610baae4aa24b307ba28dd1f42b0af712658302a3f5ca4f6455ad23b9bc19aedff0387b7c49a8c18e77a13766c998f788927c633bf7bcb07d449cf58a30677b36eb042dbbe63e706ae6e42655b8b9b8dc88240eb5ba", 0x6f}, {&(0x7f00000026c0)="b11d6211e217fca1515680a2a2a37e848e9337751defd9abe492bcb7892f7f5d1a6520f6abe13c71c2587d79f2bdb549c17920def003442719fef013d3fd59e57b1027a590f3363374ac69953f12ad87e9ee9de792130615d962e6e5bb7cf5db4eab1df775f122ee1ebbfe4cac48c46c260fc95ac077d11c58b61e", 0x7b}, {&(0x7f0000002740)="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", 0xfb}], 0x3}}, {{&(0x7f0000002840)=@ax25={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000002980)=[{&(0x7f00000028c0)="f18e25ac82f80777bf02c91f8d083086313fd0a8e0a73eac1cb92492f87832ca960a096ea1182f16095496b7624d9d9b65f21ef49840e5b9c435c4c12c6e30e20ad67a81199f19c094f7ac84d6d4dec91d38e86ea60362fc0f1db4eaba5da7188ba46673ad7fda12ca1f4e390b65b8d53d967282a0afd2f37740a2c9afff05bce0a8c3b7b32242fc33aff258ae9e38bca2ba411ffbe730e3307880a25304", 0x9e}], 0x1, &(0x7f00000029c0)=[{0x28, 0x1, 0x3ff, "b9a3541bc834ee41b7b7111420c0a46b3a8f2ac2b2b466eb"}, {0x58, 0x1e4, 0x5, "44efac07a51897032ee6473b2afa10c0c8918f81cae5afb23edc16e3a2354a52bb162d5f4aa4e2a40665fe38463c01f24a5a2464be2f7ff1655cea5c33941d0ae91824"}, {0x78, 0x1, 0x9, "50859457b6b665845526d3ae562e336af55183fc69ef9103f0ee51e8a8984a040b07b4789bfe1c8ec3fc4dd152c80928d87eee983194e2ca347d7a42a28825dcf20f2f11d48210484d0e2e191aa7097a7b181cabf430e7e69b44c11f2bf03fedda7b6ccd182e71"}], 0xf8}}], 0x3, 0x4000000) r3 = socket$inet6(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x8, 0x10, 0x0, 0x3, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xb20}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="31010000", @ANYRES16=r5, @ANYBLOB="200026bd7000fcdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000c8531656834f9b5933dd0f71bdce934650fe678ebdc50d9e48dee7826e38828a7b6614a1871ca72a408e1971a07a67f0900fddd147661986a4ee7617e9f69a2c60fa9306934ec6c66d5f5af98f5a174e9678d9d38fe6eda20c3a1bbbf073fc199eb2ecb12752a2a5e67c6844a4df"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r6 = socket(0x8, 0x80805, 0x0) r7 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x152}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) sendmsg$nl_netfilter(r10, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000002d80)=ANY=[@ANYBLOB="f80000000302010128bd7000fbdbdf250000000208000e800400c88008000000", @ANYRES32=r3, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x400c080}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd=r6, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="36f0", 0x2}], 0x1, 0x18, 0x1}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r13}, &(0x7f00000010c0), &(0x7f00000002c0)=r12}, 0x20) recvfrom$inet_nvme(r1, &(0x7f0000002b80)=""/191, 0xbf, 0x57e1359506f5b6f1, &(0x7f0000002c40)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80) io_uring_enter(r7, 0x47bc, 0xf5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xb, 0xfff3}, {0x4, 0x9}}}, 0x24}}, 0x40400c0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") 2m9.187562686s ago: executing program 2 (id=3428): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000ec0)=""/236, 0xec}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0xfffff6e7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x7d08}, {{0x0, 0x0, 0x0}, 0x229}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x83}, {{0x0, 0x0, 0x0}, 0x2}], 0x9, 0x40000020, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x200000, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x8}}]}) 2m9.091401409s ago: executing program 2 (id=3429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4054}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x7ffffffe, 0x5}}]}}}]}, 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x50d, &(0x7f0000000400)="$eJzs3c9vI1cdAPCvvevEyaZNWnoABO3SFha0WifxtlG1BygnhFAlRI8gbUPijaLYcRQ7pQl7SM9ckajECY78AZx74s4FwY1LOSDxIwI1SBwGzXiculm7MU1ip/HnI41m3ryJv+/Fmvfib2y/ACbW7Yg4jIipiHgrIubz84V8i9c7W3rdh0eP146PHq8VIkne/Echq0/PRc/PpG7lj1mOiB98J+LHhSfjtvYPtlbr9dpuXl5sN3YWW/sH9zYbqxu1jdp2tbqyvLL02v1XqxfW1xcaU/nRlz/4/eE3fpo2ay4/09uPi9TpeukkTupmRHzvMoKNwY28P1PjbgifSjEino2IF7P7fz5uZM8mAHCdJcl8JPO9ZQDguitmObBCsZLnAuaiWKxUOjm852K2WG+22ncfNfe21zu5soUoFR9t1mtLea5wIUqFtLycHX9Urp4q34+IZyLi59MzWbmy1qyvj/MPHwCYYLdOzf//nu7M/wDANVcedwMAgJEz/wPA5DH/A8DkMf8DwOTpzP8z424GADBCXv8DwOQx/wPARPn+G2+kW3Kcf//1+tv7e1vNt++t11pblcbeWmWtubtT2Wg2N7Lv7Gmc9Xj1ZnNn+ZXYe2fhmzut9mJr/+Bho7m33X6Yfa/3w1opu+pwBD0DAAZ55oX3/1RIZ+QkiXjQeQtAdy2H0lhbBly24rgbAIzNjXE3ABgbq33B5Op9jd9nmc5hfxT4DDvr3i/3+4BQkiTJ5TUJuGR3vpDn/x/MZFvI/8PE6Mn/excwTBj5f5hc8v8wuZKkMOya/zHshQDA1SbHDwz4//+z+f43+T8HfrR++or3LrNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLV11/+t5GuBz0WxWKlEPBURC1EqPNqs15Yi4umI+ON0aTotL4+5zQDAeRX/WsjX/7oz//Lcx6qev3VyOBURP/nlm794Z7Xd3v1DxFThn9Pd8+338vPV0bceADhbd57O9j0v5D88erzW3UbZnr99OyLKnfjHR1NxfBL/ZtzM9uUoRcTsvwp5uaPQk7s4j8N3I+Lz/fpfiLksB9JZ+fR0/DT2UyONX/xY/GJW19mnv4vP/d+RyxfQevhsez8df17vd/8V43a273//l7MR6vzy8S99qLXjbAz8KH53/LsxYPy7PWyMV3733c7RzJN170Z88WZEN/Zxz/jTjV8YEP/lIeP/+UvPvzioLvlVxJ3oH7831mK7sbPY2j+4t9lY3aht1Lar1ZXllaXX7r9aXcxy1IuDZ4O/P7j79KC6tP+zA+KXz+j/V4fs/6//+9YPv/IJ8b/+Ur/4xXjuE+Knc+LXhoy/OvvbgYN9Gn99QP/Pev7vDhn/g78cPLFsOAAwPq39g63Ver22e40P0r9brkAzHJz/IK7wU/mtUcWaiv5VP3upc0+fqkqSTxVr0IhxEVk34Co4uekj4j/jbgwAAAAAAAAAAAAAANDXKD6xNO4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcH39LwAA///H7c7H") stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000280)={0x10000, 0x9, 0x200, 0x8, 0x1, 0x6, 0x2, 0xff80000000000000, 0xffeffffd}) (async) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r7, 0x0, &(0x7f00000001c0)) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x1, {0x2, 0xff, 0x3}, 0xfe}, 0x18) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r4, 0xbcf6267fb40b8974, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x81}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xffffffff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048095}, 0x41) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x264}, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$poke(0x4212, r9, &(0x7f0000000140), 0x200000000001) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x78, r8, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 2m8.754123119s ago: executing program 2 (id=3431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000001000ffff25bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05000400230800005800128008000100736974004c0002800800140001010000"], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) (fail_nth: 1) 2m8.505143575s ago: executing program 2 (id=3433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000001000ffff25bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05000400230800005800128008000100736974004c0002800800140001010000"], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) 2m8.447933025s ago: executing program 44 (id=3433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000001000ffff25bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05000400230800005800128008000100736974004c0002800800140001010000"], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) 22.541678861s ago: executing program 6 (id=4190): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f0000000080)={[{@errors_remount}, {@nodioread_nolock}, {@minixdf}, {@sysvgroups}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") (async) r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x1da}) 21.108641458s ago: executing program 6 (id=4200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) close(0x3) 18.606079037s ago: executing program 6 (id=4212): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000001, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000100), 0x1, 0x585, &(0x7f0000000500)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x87) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x5b2b, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=@newqdisc={0x1bc, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x18c, 0x2, {{0xffffffff, 0x3, 0x6361, 0x5, 0xffffffff, 0xd87}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3ff, 0x4}}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x7, 0x6, 0x3, 0xa}}, @NETEM_LOSS_GI={0x18, 0x1, {0xb, 0x5, 0x4, 0x3, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x80000000, 0x338a, 0xc1}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd, 0x154a, 0xb3, 0x2, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc0ea, 0x3, 0x80, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x1, 0x4, 0x7}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x100000000, 0x0, 0x664, 0x6, 0x1000, 0x7fffffffffffffff}}, @TCA_NETEM_DELAY_DIST={0x5d, 0x2, "1d62ea51b57e952e4620992c0f9bf202e79452ecfa2bd89fb9c0ea42b22808b29ab120d0bd92452492eff3c48d50120baf38ae9ade8284af7ca14e108b0412624c2df01e64c0acc2eb94b6cf4b031d860899502e6c04bf54ea"}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x8, 0x1, 0x9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x40}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0xd4, 0xf786}}]}}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.190595696s ago: executing program 6 (id=4220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) unshare(0x40600) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x2405, &(0x7f0000000540)='(pu&00\t(|') 13.79456529s ago: executing program 6 (id=4230): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000001, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000100), 0x1, 0x585, &(0x7f0000000500)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x87) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x5b2b, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=@newqdisc={0x1bc, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x18c, 0x2, {{0xffffffff, 0x3, 0x6361, 0x5, 0xffffffff, 0xd87}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3ff, 0x4}}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x7, 0x6, 0x3, 0xa}}, @NETEM_LOSS_GI={0x18, 0x1, {0xb, 0x5, 0x4, 0x3, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x80000000, 0x338a, 0xc1}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd, 0x154a, 0xb3, 0x2, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc0ea, 0x3, 0x80, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x1, 0x4, 0x7}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x100000000, 0x0, 0x664, 0x6, 0x1000, 0x7fffffffffffffff}}, @TCA_NETEM_DELAY_DIST={0x5d, 0x2, "1d62ea51b57e952e4620992c0f9bf202e79452ecfa2bd89fb9c0ea42b22808b29ab120d0bd92452492eff3c48d50120baf38ae9ade8284af7ca14e108b0412624c2df01e64c0acc2eb94b6cf4b031d860899502e6c04bf54ea"}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x8, 0x1, 0x9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x40}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0xd4, 0xf786}}]}}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.208018897s ago: executing program 7 (id=4234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0xc000) 13.072940413s ago: executing program 7 (id=4236): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x1, 0xc5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0x110c, &(0x7f0000000340)={0x0, 0x10, 0x2, 0x3, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8911}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x34, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x20, 0x144, 0x0, 0x1, [@nested={0x19, 0xf3, 0x0, 0x1, [@generic="e1f7b1012e928551a1de0963cf5437448a89fdb27e"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4000080) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x7}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWFLOWTABLE={0x1a0, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5eaf}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x234}, 0x1, 0x0, 0x0, 0x40}, 0x400c0c3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 9.560240055s ago: executing program 7 (id=4251): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0xffe0}, {0x0, 0xd}, {0x7, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x2655, 0x100, 0x11, 0xd7}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x804) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000009"], 0x5c}}, 0x4004804) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xfff, @mcast2, 0x1}}, 0x24) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000ec0)={[{@map_off}, {@block={'block', 0x3d, 0x200}}, {@hide}, {@utf8}, {@unhide}, {@uid}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x55a, &(0x7f0000000940)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xffffffffffffff08, [@ptr, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x8000001}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) 8.605941976s ago: executing program 9 (id=4255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xffffffef, &(0x7f0000000480)={&(0x7f00000000c0)={0x31, r1, 0x100, 0x70bc25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000f00)={'gretap0\x00', {0x2, 0x4e24, @loopback}}) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYBLOB="0100000a40000000000a0100000008000800ac1414370800070064010101060001005b000000080002000500000014000600000000000000000000093f55000000000000002baa62f95ac5cf17a4e03642263c8c9a90db9938a6416a4cd222e7936e6ae41b7d520b539eb4ba872342118d37700cda80afad74734d46ba6f1f5c112e1e"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) r8 = socket(0x2a, 0x4, 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3, 0xffe0}, {0xf, 0x1}, {0xfff0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400080c}, 0x4000800) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3b95ba84cddb876, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xffff, 0x2}, 0x4, 0x0, 0x1, 0x8, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_MASK={0x8}]}, 0x34}}, 0xc000) 8.495657146s ago: executing program 1 (id=4256): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x9, @remote, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="912d", 0x2}], 0x1}}], 0x2, 0x54) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) rseq(0xfffffffffffffffe, 0xfffffffffffffeb2, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x3) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x8e, 0x11, &(0x7f0000000140)="d4ea694ed05517824bbb64ee0ac5a02168e68f17c02c0c5d63dab7d6d421e71a027ace885f3708a32ca422aa90865f0cd6d600afd9865c8ca313e85be12855fa56cade065c7a2010e9f2df769011ba4a70436a944e6ef9ada6b72894fca55b65cb9e2189b399f5afb0bff704f93e08bfde9ebae4c45722982ec33502025b49d591237793ad365cfc71bad5454b90", &(0x7f00000000c0)=""/17, 0xa, 0x0, 0xbb, 0xd1, &(0x7f0000000340)="87c9ca8e90d6c5697a9ab87a62d67d8a2f4634e4255bcd9d146c0dde0969d099308c241e4d0c1971716965d746e4876ec2d2a88c9ad46af51e5b8ecd43ca0cc7b672a33d1dc52a7c5305c9243aaa76de035f36db6de74e88018660e588cc9b9a39b39a4a245840c8ead13f52b2b7d281731c1a955f933ae78dd986a3f907ecbd2b8520d6af322689f726442c029244aa140be388fbba3d84ac3303c66b45367c721590d6998f08c5ab4aadffebb685e7fba0dcaf52ebfc7f3bd635", &(0x7f0000000400)="b0265c7147e4b865376d2f2f74c3fd625073a42b48e257d83fba58387d0606c80b086274e5fc4310bef6093f77e1cae33e38dbb4dd05a8d03a3c959e93d79b3120d5aa8788209cb460dd2600d9e5b951abee376c809840de38b38f5cf23470269343d0014932220233a56b089944f0717140a88c711857cf726d222c1f758dd85f224def712fa59b96abc3ec538e21f4b94c40efd4ef06c208f5586942b813942cc803e812b66569413efc9f50dcec8ea024b256310b0a7d620d4e5fe0b0d159e1ed74e968b1262778b8234c077f215751", 0x0, 0x0, 0x3}, 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r4, 0x7716}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e21, 0x1, @private2, 0xfffffff9}}, 0xfff, 0x8}, &(0x7f0000000200)=0x90) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x7190c0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000640)={0x2, 0xa05, 0x1, 'queue0\x00', 0x4}) timerfd_create(0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') 8.245902593s ago: executing program 9 (id=4258): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e14060868bdc7f6c817b5b948000000007a0000a718", 0x2e}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000102000000000000000002000000000000bbff8925bef8c6bf"], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r8, r8, 0x0, 0xb) 8.125180972s ago: executing program 0 (id=4259): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e14060868bdc7f6c817b5b948000000007a0000a718", 0x2e}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000102000000000000000002000000000000bbff8925bef8c6bf"], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r8, r8, 0x0, 0xb) 5.058480361s ago: executing program 1 (id=4260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000bd10080001000100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_tgsigqueueinfo(0xffffffffffffffff, r2, 0x37, &(0x7f00000000c0)={0x15, 0x7, 0x80000001}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x1}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0xc000) 5.054192231s ago: executing program 9 (id=4261): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcaf}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000004}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.05240771s ago: executing program 0 (id=4262): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000a000085100000030000001800000000000000000000000000000095000000000000009500000000000000d5b2307878b6a5229917ebb4029a0bea3522c1f874a88524b8256e9616dc84ef9f539900f13815da3cbc479df45e1acd7454a155dd43645345f9a4"], &(0x7f0000000000)='GPL\x00'}, 0x94) 4.898098573s ago: executing program 1 (id=4263): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0xfe800000, 0x0, 0x8811}, 0x0) 4.535031859s ago: executing program 0 (id=4264): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xb, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) 4.507107584s ago: executing program 6 (id=4265): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a"], 0xb4}}, 0x24040810) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.390122833s ago: executing program 9 (id=4266): accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semop(r0, &(0x7f0000000340)=[{0x2, 0x8, 0x1800}, {0x2, 0xf8ab}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/2, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f00000000c0)=""/17) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000206010400000000000000000700000a05000100074a3800000005000500027d291b"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc015) 4.321428652s ago: executing program 0 (id=4267): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x2405, &(0x7f0000000540)='(pu&00\t(|') 4.079480679s ago: executing program 1 (id=4268): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') unshare(0x2c020400) r2 = syz_pidfd_open(r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)="49aed48686687978d9b96de5f5e93c5299fcfd21", 0x14}, {&(0x7f0000000300)="bec610574f7226ad04a8bf024a2b4ebda634202d2862df7c092c784deb3ca5a95b3d832b0f58cca21b230f3e4839e082dcca8edd82ed06000fff06c9d2f88e0f4c4862cbedb2ca1798af981add9a09a15619609f2e8cdbc4ce23bd89de48", 0x5e}, {&(0x7f0000000100)="299e2edeeeadf8655e755dd0b7e189cbf34bda5d10ad429a360859edd2aabe7e2fab179e37c915a75ba8730fbf067a", 0x2f}, {&(0x7f00000001c0)="5ed1a47c40906f28308918bfe33b6477042ac3fd0a3fc8fde46b5ce2eb99682c07556589df8bdb32", 0x28}], 0x4) pidfd_send_signal(r2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/16], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000203030000000000004000000000001008000540000000080800034000000009080001000100001d0800044000000000"], 0x34}}, 0xc000) sched_rr_get_interval(r1, &(0x7f0000000040)) 3.952776426s ago: executing program 7 (id=4269): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 3.478033873s ago: executing program 1 (id=4270): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 3.258044024s ago: executing program 9 (id=4271): r0 = io_uring_setup(0x22, &(0x7f0000000300)={0x0, 0xcc6e, 0x1000, 0x100, 0x271}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff80000019, 0x0, 0x0) 2.923150185s ago: executing program 7 (id=4272): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e14060868bdc7f6c817b5b948000000007a0000a718", 0x2e}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000102000000000000000002000000000000bbff8925bef8c6bf"], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r8, r8, 0x0, 0xb) 2.646253566s ago: executing program 0 (id=4273): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xd) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x0, 0x2, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3}, 0x4, 0x6, 0xe723, 0x1, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000002000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') mmap(&(0x7f00005c1000/0x1000)=nil, 0x1000, 0x2, 0x8010, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0xff, 0x0, 0x0, 0x22, 0x2640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x59}, 0x100118, 0x8000000000000, 0x0, 0x0, 0xfff, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x42) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.008513664s ago: executing program 1 (id=4274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81000000b0ff0007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 138.035095ms ago: executing program 7 (id=4275): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000001, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000100), 0x1, 0x585, &(0x7f0000000500)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x87) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x5b2b, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=@newqdisc={0x1bc, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x18c, 0x2, {{0xffffffff, 0x3, 0x6361, 0x5, 0xffffffff, 0xd87}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3ff, 0x4}}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x7, 0x6, 0x3, 0xa}}, @NETEM_LOSS_GI={0x18, 0x1, {0xb, 0x5, 0x4, 0x3, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x80000000, 0x338a, 0xc1}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd, 0x154a, 0xb3, 0x2, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc0ea, 0x3, 0x80, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x1, 0x4, 0x7}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x100000000, 0x0, 0x664, 0x6, 0x1000, 0x7fffffffffffffff}}, @TCA_NETEM_DELAY_DIST={0x5d, 0x2, "1d62ea51b57e952e4620992c0f9bf202e79452ecfa2bd89fb9c0ea42b22808b29ab120d0bd92452492eff3c48d50120baf38ae9ade8284af7ca14e108b0412624c2df01e64c0acc2eb94b6cf4b031d860899502e6c04bf54ea"}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x8, 0x1, 0x9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x40}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0xd4, 0xf786}}]}}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 32.803696ms ago: executing program 9 (id=4276): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r1, &(0x7f0000000380)) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x50040, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x21e, &(0x7f0000000400)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "2eb201", 0x1e8, 0x3a, 0x1, @private1, @dev={0xfe, 0x80, '\x00', 0x42}, {[@fragment={0x3c, 0x0, 0xf9, 0x0, 0x0, 0x3, 0x66}, @routing={0x87, 0xe, 0x1, 0x1, 0x0, [@mcast1, @private2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @private1]}, @routing={0x4, 0xa, 0x2, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}, @routing={0x16, 0x4, 0x2, 0xe, 0x0, [@private2, @rand_addr=' \x01\x00']}, @routing={0x1d, 0x8, 0x0, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}, @hopopts={0x73, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0x101, [0x80000001, 0x400]}}]}], "dd7e8e78af89d65f2dba0ad68764ea3ad2efae92cc4137c9286abdc89fc49650392604e1bc870fccc711cc3d454a44896df24e9b6a9575f6a366cb695bceca47d31b9609c7b79ba3fd29ec2c79eb98281d78bfaf70aeebebd0f0149d7f3369095cee3c57ed76492ea4114f5203ec7184691c6ffc707126b6"}}}}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0x5, 0x2, 0x0, 0xfffffffffffffeff, 0xffffff8e, 0x5}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) 0s ago: executing program 0 (id=4277): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/41, 0xfffffdd6}, {&(0x7f0000000080)=""/56, 0x41}, {&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/213, 0xec}], 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000340)=0x8) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) unshare(0x2c020400) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) move_mount(r2, &(0x7f00000000c0)='./mnt\x00', r2, 0x0, 0x177) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000380)={0x6}) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) kernel console output (not intermixed with test programs): 128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.489463][T19128] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.3709: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 523.510825][T19128] EXT4-fs (loop7): Remounting filesystem read-only [ 523.552658][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.852726][T19143] loop7: detected capacity change from 0 to 8192 [ 524.610600][T19162] netlink: 'syz.1.3723': attribute type 10 has an invalid length. [ 524.645404][T19162] team0: Port device bridge0 added [ 524.806521][T19179] SELinux: security_context_str_to_sid (ôa`yv©—-”|J+0lè8G[økT—ƒ_È×|nœÉUÓ5 [ 524.806521][T19179] M9) failed with errno=-22 [ 524.842251][T19179] set_capacity_and_notify: 1 callbacks suppressed [ 524.842271][T19179] loop0: detected capacity change from 0 to 128 [ 524.865010][T19184] loop1: detected capacity change from 0 to 256 [ 525.307388][ T28] kauditd_printk_skb: 849 callbacks suppressed [ 525.307404][ T28] audit: type=1400 audit(503.904:98445): avc: denied { execmem } for pid=19189 comm="syz.6.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 526.331829][ T28] audit: type=1400 audit(504.016:98446): avc: denied { prog_load } for pid=19181 comm="syz.1.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 527.054176][T19203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.063818][T19202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.070562][T19202] audit: audit_lost=1336 audit_rate_limit=0 audit_backlog_limit=64 [ 527.097441][T12780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.130894][ T28] audit: type=1400 audit(504.016:98447): avc: denied { bpf } for pid=19181 comm="syz.1.3729" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 527.152901][ T28] audit: type=1400 audit(504.016:98448): avc: denied { perfmon } for pid=19181 comm="syz.1.3729" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 527.154533][T19203] audit: audit_lost=1337 audit_rate_limit=0 audit_backlog_limit=64 [ 527.173725][ T28] audit: type=1400 audit(504.016:98449): avc: denied { prog_load } for pid=19181 comm="syz.1.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 527.253642][T19202] lo speed is unknown, defaulting to 1000 [ 527.446559][T19222] __nla_validate_parse: 8 callbacks suppressed [ 527.446579][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3740'. [ 527.517956][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3740'. [ 527.610171][T19238] loop7: detected capacity change from 0 to 512 [ 527.642394][T19238] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 527.677387][T19238] EXT4-fs (loop7): orphan cleanup on readonly fs [ 527.690665][T19238] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3743: Failed to acquire dquot type 1 [ 527.698313][T19202] dvmrp0: entered allmulticast mode [ 527.708054][T19238] fserror_report: 1 callbacks suppressed [ 527.708071][T19238] loop7: lost filesystem error report for type 5 error -5 [ 527.715018][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 527.728795][ C1] EXT4-fs (loop7): initial error at time 506: ext4_acquire_dquot:7001 [ 527.737225][ C1] EXT4-fs (loop7): last error at time 506: ext4_acquire_dquot:7001 [ 527.740168][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3744'. [ 527.755317][T19238] EXT4-fs (loop7): Remounting filesystem read-only [ 527.763355][T19245] 8021q: VLANs not supported on nlmon0 [ 527.781005][T19238] EXT4-fs (loop7): 1 truncate cleaned up [ 527.811287][T19202] dvmrp0: left allmulticast mode [ 527.828347][T19238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 528.209036][T19260] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3750'. [ 528.330502][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3752'. [ 528.534470][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.556885][T19285] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 528.571423][T19285] bond2 (unregistering): Released all slaves [ 528.852625][T19306] loop7: detected capacity change from 0 to 512 [ 528.876681][T19309] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3768'. [ 528.895951][T19306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.915972][T19312] xt_hashlimit: size too large, truncated to 1048576 [ 528.976451][T19306] EXT4-fs error (device loop7): ext4_get_first_dir_block:3538: inode #12: comm syz.7.3766: directory missing '.' [ 529.102776][T19318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.122496][T19318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.168481][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.198001][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3770'. [ 529.273142][T19318] vlan2: entered promiscuous mode [ 529.889051][T19329] loop7: detected capacity change from 0 to 8192 [ 529.921487][T19327] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3771'. [ 530.062841][T19348] loop7: detected capacity change from 0 to 512 [ 530.081309][T19348] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 530.105235][T19348] EXT4-fs (loop7): 1 truncate cleaned up [ 530.117585][T19348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.537793][T19360] loop0: detected capacity change from 0 to 512 [ 530.552325][T19345] sctp: [Deprecated]: syz.1.3778 (pid 19345) Use of int in max_burst socket option. [ 530.552325][T19345] Use struct sctp_assoc_value instead [ 530.636820][T19360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 530.728157][ T28] kauditd_printk_skb: 770 callbacks suppressed [ 530.728181][ T28] audit: type=1400 audit(509.114:99214): avc: denied { search } for pid=19363 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.789146][ T28] audit: type=1400 audit(509.152:99215): avc: denied { search } for pid=19363 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.813688][ T28] audit: type=1400 audit(509.152:99216): avc: denied { search } for pid=19363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.816342][T19360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.837042][ T28] audit: type=1400 audit(509.152:99217): avc: denied { search } for pid=19363 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.874426][ T28] audit: type=1400 audit(509.180:99218): avc: denied { search } for pid=19364 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.901522][ T28] audit: type=1400 audit(509.180:99219): avc: denied { read } for pid=19364 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.906718][T19360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 530.931447][ T28] audit: type=1400 audit(509.180:99220): avc: denied { open } for pid=19364 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.985048][ T28] audit: type=1400 audit(509.180:99221): avc: denied { getattr } for pid=19364 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 531.010770][ T28] audit: type=1400 audit(509.199:99222): avc: denied { search } for pid=19351 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.036298][ T28] audit: type=1400 audit(509.199:99223): avc: denied { search } for pid=19351 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.051073][T19360] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 531.083859][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.143061][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.171255][T19377] loop7: detected capacity change from 0 to 512 [ 531.221598][T19377] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 531.271177][T19377] EXT4-fs (loop7): 1 truncate cleaned up [ 531.278484][T19377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.326929][T19387] syzkaller1: entered promiscuous mode [ 531.332696][T19387] syzkaller1: entered allmulticast mode [ 531.647609][T19397] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3785'. [ 531.748828][T19402] loop0: detected capacity change from 0 to 256 [ 532.005900][T19413] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3786'. [ 532.148534][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.286034][T19421] loop1: detected capacity change from 0 to 512 [ 533.291522][T19444] loop1: detected capacity change from 0 to 512 [ 533.398379][T19444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.447991][T19455] lo speed is unknown, defaulting to 1000 [ 534.281299][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.550131][T19487] loop1: detected capacity change from 0 to 512 [ 534.574338][T19487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.624383][T19487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.701611][T19487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.740003][T19487] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 534.788263][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.068908][T19509] __nla_validate_parse: 1 callbacks suppressed [ 535.068929][T19509] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3813'. [ 535.079422][T19508] loop0: detected capacity change from 0 to 2048 [ 535.092530][T19509] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3813'. [ 535.149591][T19508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.243356][T13887] Bluetooth: hci0: Frame reassembly failed (-84) [ 535.316839][T19518] team0 (unregistering): Port device team_slave_0 removed [ 535.335717][T19518] team0 (unregistering): Port device team_slave_1 removed [ 535.883305][T19541] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3825'. [ 536.022344][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3826'. [ 536.088308][ T28] kauditd_printk_skb: 871 callbacks suppressed [ 536.088326][ T28] audit: type=1400 audit(514.138:100095): avc: denied { execmem } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 536.131849][ T28] audit: type=1400 audit(514.166:100096): avc: denied { unmount } for pid=17820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 536.156499][T13868] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 345: padding at end of block bitmap is not set [ 536.182569][ T28] audit: type=1400 audit(514.212:100097): avc: denied { create } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.204345][T13868] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 536.217262][T13868] EXT4-fs (loop0): This should not happen!! Data will be lost [ 536.217262][T13868] [ 536.227373][ T28] audit: type=1400 audit(514.240:100098): avc: denied { write } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.249805][T19549] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3828'. [ 536.270027][T19549] netlink: 'syz.6.3828': attribute type 1 has an invalid length. [ 536.277960][T19549] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3828'. [ 536.330433][ T28] audit: type=1400 audit(514.240:100099): avc: denied { read } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.350992][ T28] audit: type=1400 audit(514.250:100100): avc: denied { ioctl } for pid=19548 comm="syz.6.3828" path="socket:[56801]" dev="sockfs" ino=56801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.378215][ T28] audit: type=1400 audit(514.268:100101): avc: denied { create } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.384562][T13868] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 536.417200][ T28] audit: type=1400 audit(514.287:100102): avc: denied { bind } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.443703][T13868] EXT4-fs (loop0): This should not happen!! Data will be lost [ 536.443703][T13868] [ 536.457961][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3834'. [ 536.467025][ T28] audit: type=1400 audit(514.287:100103): avc: denied { write } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.467053][ T28] audit: type=1400 audit(514.287:100104): avc: denied { setopt } for pid=19548 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.506556][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 536.550760][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.636288][T19563] lo speed is unknown, defaulting to 1000 [ 536.659384][T19573] kernel profiling enabled (shift: 63) [ 536.705889][T19573] profiling shift: 63 too large [ 536.814785][T19576] xt_hashlimit: size too large, truncated to 1048576 [ 536.846594][T19578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3839'. [ 536.945378][T19581] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 537.440167][T19586] loop1: detected capacity change from 0 to 512 [ 537.454267][ T7233] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 537.454807][T19519] Bluetooth: hci0: command 0x1003 tx timeout [ 537.468928][T19586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.547060][T19586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.616453][T19589] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3842'. [ 537.619784][T19586] tmpfs: Bad value for 'size' [ 537.634101][T19599] loop7: detected capacity change from 0 to 512 [ 537.648200][T19599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.779937][T19599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.832160][T19586] ext4: Unknown parameter 'tmpfs' [ 537.929021][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.966864][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.521212][T19566] Set syz1 is full, maxelem 65536 reached [ 538.574904][T19628] lo speed is unknown, defaulting to 1000 [ 538.586404][T19631] vlan0: entered promiscuous mode [ 538.609763][T19631] macvtap0: entered promiscuous mode [ 538.781196][T19641] loop0: detected capacity change from 0 to 512 [ 538.809350][T19641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 538.910360][T19641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.974138][T19649] netlink: 'syz.7.3861': attribute type 16 has an invalid length. [ 539.026484][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.679622][T19679] loop0: detected capacity change from 0 to 512 [ 539.769154][T19679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.052183][T19691] loop1: detected capacity change from 0 to 256 [ 540.787733][T19702] __nla_validate_parse: 6 callbacks suppressed [ 540.787825][T19702] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3877'. [ 541.078467][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.096686][T19708] loop1: detected capacity change from 0 to 256 [ 541.127389][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3880'. [ 541.171850][T19710] macvlan0: entered promiscuous mode [ 541.200823][T19710] netlink: 'syz.6.3880': attribute type 2 has an invalid length. [ 541.443319][ T28] kauditd_printk_skb: 694 callbacks suppressed [ 541.443337][ T28] audit: type=1400 audit(519.142:100799): avc: denied { prog_load } for pid=19713 comm="syz.0.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 541.667440][ T28] audit: type=1400 audit(519.207:100800): avc: denied { read write } for pid=12780 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.703951][T19724] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3882'. [ 541.823713][ T28] audit: type=1400 audit(519.207:100801): avc: denied { open } for pid=12780 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.859672][ T28] audit: type=1400 audit(519.207:100802): avc: denied { ioctl } for pid=12780 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 542.028219][ T28] audit: type=1400 audit(519.217:100803): avc: denied { perfmon } for pid=19713 comm="syz.0.3881" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 542.241461][ T28] audit: type=1400 audit(519.217:100804): avc: denied { bpf } for pid=19713 comm="syz.0.3881" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 542.295653][ T28] audit: type=1400 audit(519.235:100805): avc: denied { prog_load } for pid=19709 comm="syz.6.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 542.314642][ T28] audit: type=1400 audit(519.235:100806): avc: denied { bpf } for pid=19709 comm="syz.6.3880" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 542.372042][T19735] audit: audit_backlog=65 > audit_backlog_limit=64 [ 542.375618][ T28] audit: type=1400 audit(519.235:100807): avc: denied { perfmon } for pid=19709 comm="syz.6.3880" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 542.811741][T19745] netlink: 120 bytes leftover after parsing attributes in process `syz.7.3888'. [ 542.826703][T19745] netlink: 'syz.7.3888': attribute type 1 has an invalid length. [ 542.834617][T19745] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3888'. [ 542.929492][T19748] netlink: 120 bytes leftover after parsing attributes in process `syz.9.3889'. [ 542.993825][T19748] netlink: 'syz.9.3889': attribute type 1 has an invalid length. [ 543.002467][T19748] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3889'. [ 543.340568][T19759] loop1: detected capacity change from 0 to 512 [ 543.423819][T19762] loop7: detected capacity change from 0 to 256 [ 543.500848][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3893'. [ 543.693596][T19776] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3892'. [ 544.308373][T19784] lo speed is unknown, defaulting to 1000 [ 544.650758][T19801] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3905'. [ 544.674278][T19802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.703932][T19799] loop7: detected capacity change from 0 to 512 [ 544.711983][T19799] EXT4-fs: test_dummy_encryption option not supported [ 544.758341][T19802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.786007][T19802] vlan2: entered promiscuous mode [ 544.911895][T19808] lo speed is unknown, defaulting to 1000 [ 544.919008][T19817] loop7: detected capacity change from 0 to 512 [ 545.102522][T19823] loop1: detected capacity change from 0 to 512 [ 545.146588][T19823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 545.211771][T19823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.259061][T19823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 545.590022][T19823] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 545.630269][T19832] loop0: detected capacity change from 0 to 512 [ 545.684190][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.000897][ T28] kauditd_printk_skb: 614 callbacks suppressed [ 547.000915][ T28] audit: type=1400 audit(524.333:101342): avc: denied { read write } for pid=12780 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.643825][ T28] audit: type=1400 audit(524.333:101343): avc: denied { open } for pid=12780 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.679434][ T28] audit: type=1400 audit(524.333:101344): avc: denied { ioctl } for pid=12780 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.748014][ T28] audit: type=1400 audit(524.932:101345): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 548.183624][ T28] audit: type=1400 audit(524.932:101346): avc: denied { open } for pid=14609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 548.289865][ T28] audit: type=1400 audit(524.932:101347): avc: denied { ioctl } for pid=14609 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 548.347793][ T28] audit: type=1400 audit(524.969:101348): avc: denied { create } for pid=19856 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 548.368332][ T28] audit: type=1400 audit(524.969:101349): avc: denied { write } for pid=19856 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 548.389037][ T28] audit: type=1400 audit(525.007:101350): avc: denied { create } for pid=19856 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 548.415196][ T28] audit: type=1400 audit(525.007:101351): avc: denied { ioctl } for pid=19856 comm="syz.1.3921" path="socket:[57255]" dev="sockfs" ino=57255 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 548.466521][T19874] __nla_validate_parse: 4 callbacks suppressed [ 548.466539][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3924'. [ 548.606028][T19883] loop7: detected capacity change from 0 to 512 [ 548.626003][T19883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 548.717784][T19883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.909828][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.919504][T19890] SELinux: failed to load policy [ 549.225047][T19898] lo speed is unknown, defaulting to 1000 [ 549.488683][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'. [ 550.144514][T19929] lo speed is unknown, defaulting to 1000 [ 550.333212][T19938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3945'. [ 550.372041][T19927] loop0: detected capacity change from 0 to 32768 [ 550.399370][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3945'. [ 550.419801][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3945'. [ 550.435309][ T3303] loop0: p1 p3 < p5 p6 > [ 550.458260][T19947] loop7: detected capacity change from 0 to 1024 [ 550.492259][T19947] EXT4-fs: Ignoring removed bh option [ 550.506231][T19947] EXT4-fs: inline encryption not supported [ 550.516928][T19927] loop0: p1 p3 < p5 p6 > [ 550.522840][T19947] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 550.575444][T19947] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 550.604244][T19947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 550.624000][T19947] EXT4-fs (loop7): orphan cleanup on readonly fs [ 550.638185][T19947] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.3949: lblock 2 mapped to illegal pblock 2 (length 1) [ 550.696551][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3950'. [ 550.740352][T19947] fserror_report: 2 callbacks suppressed [ 550.740367][T19947] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 550.774773][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 550.791576][ C0] EXT4-fs (loop7): initial error at time 527: ext4_map_blocks:776: inode 3: block 2 [ 550.801509][ C0] EXT4-fs (loop7): last error at time 527: ext4_map_blocks:776: inode 3: block 2 [ 550.812159][T19947] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.3949: Invalid inode table block 1 in block_group 0 [ 550.826807][T19950] loop0: detected capacity change from 0 to 512 [ 550.835448][T19947] loop7: lost filesystem error report for type 5 error -117 [ 550.835598][T19947] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 550.855260][T19947] loop7: lost filesystem error report for type 5 error -117 [ 550.855395][T19947] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3949: mark_inode_dirty error [ 550.875200][T19947] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 550.875337][T19947] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3949: Failed to acquire dquot type 0 [ 550.897536][T19950] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.3950: corrupted xattr block 95: invalid header [ 550.913785][T19950] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 550.913892][T19947] loop7: lost filesystem error report for type 5 error -117 [ 550.923475][T19950] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3950: bg 0: block 7: invalid block bitmap [ 550.930917][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 550.930940][ C1] EXT4-fs (loop0): initial error at time 528: ext4_expand_extra_isize_ea:2808: inode 11 [ 550.930969][ C1] EXT4-fs (loop0): last error at time 528: ext4_expand_extra_isize_ea:2808: inode 11 [ 550.986314][T19950] loop0: lost filesystem error report for type 5 error -117 [ 550.995619][T19950] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 551.005668][T19947] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 551.016731][T19947] loop7: lost filesystem error report for type 5 error -117 [ 551.020440][T19947] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.3949: mark_inode_dirty error [ 551.051950][T19950] loop0: lost filesystem error report for type 5 error -117 [ 551.052122][T19950] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #11: comm syz.0.3950: corrupted xattr block 95: invalid header [ 551.075946][T19947] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 551.078365][T19947] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 551.103075][T19955] xt_hashlimit: size too large, truncated to 1048576 [ 551.117117][T19947] EXT4-fs (loop7): 1 orphan inode deleted [ 551.118333][T19950] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 551.143262][T19950] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 551.162440][T13868] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 551.196407][T19950] EXT4-fs (loop0): 1 orphan inode deleted [ 551.218905][T13868] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 551.219041][T13868] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 551.272486][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 551.298559][T13868] loop7: lost filesystem error report for type 5 error -117 [ 551.304145][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 551.306905][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 551.333723][T19950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.333994][T19947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 551.383837][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.413349][ T5495] udevd[5495]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 551.436540][T19959] lo speed is unknown, defaulting to 1000 [ 551.529112][T19963] kernel profiling enabled (shift: 63) [ 551.543537][T19963] profiling shift: 63 too large [ 551.565328][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.874147][ T4955] udevd[4955]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 551.887983][ T5495] udevd[5495]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 551.912083][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 551.923836][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 552.034344][T19978] lo speed is unknown, defaulting to 1000 [ 552.377501][ T28] kauditd_printk_skb: 506 callbacks suppressed [ 552.377518][ T28] audit: type=1400 audit(529.366:101837): avc: denied { dac_read_search } for pid=19995 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 552.445842][T19996] loop7: detected capacity change from 0 to 1024 [ 552.459065][T19996] EXT4-fs: Ignoring removed bh option [ 552.480554][T19996] EXT4-fs: inline encryption not supported [ 552.495937][ T28] audit: type=1400 audit(529.366:101838): avc: denied { dac_read_search } for pid=19995 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 552.499038][T19996] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 552.528442][ T28] audit: type=1400 audit(529.385:101839): avc: denied { module_request } for pid=19990 comm="syz-executor" kmod="netdev-nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 552.571196][ T28] audit: type=1400 audit(529.394:101840): avc: denied { dac_read_search } for pid=19997 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 552.603158][T19996] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 552.614241][ T28] audit: type=1400 audit(529.394:101841): avc: denied { dac_read_search } for pid=19997 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 552.620084][T19996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 552.638250][ T28] audit: type=1400 audit(529.403:101842): avc: denied { sys_module } for pid=19990 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.665212][ T28] audit: type=1400 audit(529.403:101843): avc: denied { module_request } for pid=19990 comm="syz-executor" kmod="nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 552.677690][T19994] loop0: detected capacity change from 0 to 4096 [ 552.687377][ T28] audit: type=1400 audit(529.431:101844): avc: denied { read write } for pid=19993 comm="syz.7.3965" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.716816][ T28] audit: type=1400 audit(529.431:101845): avc: denied { open } for pid=19993 comm="syz.7.3965" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.753149][ T28] audit: type=1400 audit(529.431:101846): avc: denied { ioctl } for pid=19993 comm="syz.7.3965" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.780541][T19996] EXT4-fs (loop7): orphan cleanup on readonly fs [ 552.794725][T19994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.809936][T19996] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.3965: lblock 2 mapped to illegal pblock 2 (length 1) [ 552.830008][T19996] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 552.837753][T19996] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.3965: Invalid inode table block 1 in block_group 0 [ 552.847307][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 552.847324][ C1] EXT4-fs (loop7): initial error at time 529: ext4_map_blocks:776: inode 3: block 2 [ 552.847353][ C1] EXT4-fs (loop7): last error at time 529: ext4_map_blocks:776: inode 3: block 2 [ 552.955490][T19990] lo speed is unknown, defaulting to 1000 [ 552.955755][T19996] loop7: lost filesystem error report for type 5 error -117 [ 552.979029][T19996] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 553.010335][T19996] loop7: lost filesystem error report for type 5 error -117 [ 553.010475][T19996] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3965: mark_inode_dirty error [ 553.062497][T19996] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 553.062628][T19996] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3965: Failed to acquire dquot type 0 [ 553.104747][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.175562][T19996] loop7: lost filesystem error report for type 5 error -117 [ 553.190569][T19996] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 553.224469][T19996] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.3965: mark_inode_dirty error [ 553.281443][T19996] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 553.285332][T19996] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 553.427298][T19996] EXT4-fs (loop7): 1 orphan inode deleted [ 553.433840][ T12] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 553.475797][ T12] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 553.475915][ T12] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 553.476005][T13877] bridge_slave_1: left allmulticast mode [ 553.508829][T20017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3968'. [ 553.576170][T19996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 553.623912][T13877] bridge_slave_1: left promiscuous mode [ 553.661299][T13877] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.738280][T20019] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3969'. [ 553.751159][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.782572][T13877] bridge_slave_0: left allmulticast mode [ 553.788428][T13877] bridge_slave_0: left promiscuous mode [ 553.795779][T20021] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 553.803690][T20021] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3969'. [ 553.859783][T13877] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.347151][T13877] bond0 (unregistering): Released all slaves [ 554.384373][T20017] ip6gre1: entered promiscuous mode [ 554.391193][T20017] ip6gre1: entered allmulticast mode [ 554.420416][T20036] loop7: detected capacity change from 0 to 1024 [ 554.434416][T19990] chnl_net:caif_netlink_parms(): no params data found [ 554.523134][T20036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.639744][T19990] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.660032][T19990] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.679259][T19990] bridge_slave_0: entered allmulticast mode [ 554.685791][T19990] bridge_slave_0: entered promiscuous mode [ 554.704288][T20064] loop1: detected capacity change from 0 to 512 [ 554.721641][T20064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 554.734520][T19990] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.743962][T19990] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.751322][T19990] bridge_slave_1: entered allmulticast mode [ 554.755931][T20063] xt_hashlimit: size too large, truncated to 1048576 [ 554.777732][T19990] bridge_slave_1: entered promiscuous mode [ 554.799540][T13877] hsr_slave_0: left promiscuous mode [ 554.808721][T13877] hsr_slave_1: left promiscuous mode [ 554.819027][T20064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.909356][T20064] FAULT_INJECTION: forcing a failure. [ 554.909356][T20064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.935895][T20064] CPU: 1 UID: 0 PID: 20064 Comm: syz.1.3978 Tainted: G W syzkaller #0 PREEMPT(full) [ 554.935927][T20064] Tainted: [W]=WARN [ 554.935936][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.935949][T20064] Call Trace: [ 554.936037][T20064] [ 554.936047][T20064] __dump_stack+0x1d/0x30 [ 554.936092][T20064] dump_stack_lvl+0x95/0xd0 [ 554.936111][T20064] dump_stack+0x15/0x1b [ 554.936193][T20064] should_fail_ex+0x263/0x280 [ 554.936218][T20064] should_fail+0xb/0x20 [ 554.936238][T20064] should_fail_usercopy+0x1a/0x20 [ 554.936258][T20064] _copy_to_user+0x20/0xa0 [ 554.936414][T20064] ext4_ioctl+0x1475/0x31b0 [ 554.936440][T20064] ? ioctl_has_perm+0x27e/0x2d0 [ 554.936517][T20064] ? do_vfs_ioctl+0x84f/0xe70 [ 554.936537][T20064] ? selinux_file_ioctl+0x5f7/0xcb0 [ 554.936559][T20064] ? __rcu_read_unlock+0x4e/0x70 [ 554.936577][T20064] ? __rcu_read_unlock+0x4e/0x70 [ 554.936632][T20064] ? __fget_files+0x184/0x1c0 [ 554.936652][T20064] ? mutex_lock+0x57/0x90 [ 554.936675][T20064] ? __pfx_ext4_ioctl+0x10/0x10 [ 554.936716][T20064] __se_sys_ioctl+0xce/0x140 [ 554.936733][T20064] __x64_sys_ioctl+0x43/0x50 [ 554.936865][T20064] x64_sys_call+0x1563/0x3020 [ 554.936889][T20064] do_syscall_64+0x12c/0x370 [ 554.936908][T20064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.936927][T20064] RIP: 0033:0x7f10af63c799 [ 554.936957][T20064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.936975][T20064] RSP: 002b:00007f10ae08f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.937073][T20064] RAX: ffffffffffffffda RBX: 00007f10af8b5fa0 RCX: 00007f10af63c799 [ 554.937089][T20064] RDX: 0000200000000080 RSI: 00000000c0185879 RDI: 0000000000000003 [ 554.937113][T20064] RBP: 00007f10ae08f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.937125][T20064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.937136][T20064] R13: 00007f10af8b6038 R14: 00007f10af8b5fa0 R15: 00007fff29dd6378 [ 554.937155][T20064] [ 555.208663][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.248883][T13877] team_slave_1 (unregistering): left allmulticast mode [ 555.289143][T13877] team0 (unregistering): Port device team_slave_1 removed [ 555.309038][T13877] team_slave_0 (unregistering): left allmulticast mode [ 555.329432][T13877] team0 (unregistering): Port device team_slave_0 removed [ 555.417817][T20065] syzkaller0: entered promiscuous mode [ 555.423824][T20065] syzkaller0: entered allmulticast mode [ 555.491559][T19990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.530901][T19990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.605218][T19990] team0: Port device team_slave_0 added [ 555.630038][T19990] team0: Port device team_slave_1 added [ 555.679727][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.729867][T20087] loop0: detected capacity change from 0 to 256 [ 555.753331][T19990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.883955][T19990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.033402][T20099] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3985'. [ 556.064745][T20101] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3983'. [ 556.103157][T20102] netlink: 'syz.6.3985': attribute type 1 has an invalid length. [ 556.111134][T20102] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3985'. [ 556.768097][T20106] loop7: detected capacity change from 0 to 512 [ 556.836398][T20106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 556.924268][T20106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.925872][T19990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.062548][T20106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 557.081379][T13877] IPVS: stop unused estimator thread 0... [ 557.098777][T19990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.135816][T20106] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 557.149776][T19990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.304757][T19990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.509942][T20125] loop1: detected capacity change from 0 to 512 [ 557.567634][T20125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 557.592064][T19990] hsr_slave_0: entered promiscuous mode [ 557.650303][T19990] hsr_slave_1: entered promiscuous mode [ 557.699810][T20125] EXT4-fs (loop1): 1 truncate cleaned up [ 557.716523][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.729541][ T28] kauditd_printk_skb: 683 callbacks suppressed [ 557.729557][ T28] audit: type=1326 audit(534.370:102527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.6.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c69c4cfce code=0x7ffc0000 [ 557.753742][T20125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.759124][T20133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3991'. [ 557.834791][ T28] audit: type=1326 audit(534.370:102528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.6.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c69c4cfce code=0x7ffc0000 [ 557.890550][T20142] loop0: detected capacity change from 0 to 512 [ 557.903370][T20129] lo speed is unknown, defaulting to 1000 [ 557.917512][T20142] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3991: inode has both inline data and extents flags [ 557.932348][T20141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.933190][T20142] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 557.939071][ T28] audit: type=1326 audit(534.370:102529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.6.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c69c4cfce code=0x7ffc0000 [ 557.970805][T20144] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.972299][T20125] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.980497][T20142] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3991: couldn't read orphan inode 15 (err -117) [ 557.984654][T20125] audit: audit_lost=1372 audit_rate_limit=0 audit_backlog_limit=64 [ 557.996820][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 557.996842][ C0] EXT4-fs (loop0): initial error at time 534: ext4_orphan_get:1391 [ 558.004871][T20125] audit: backlog limit exceeded [ 558.011467][ C0] : inode 15 [ 558.027882][ C0] EXT4-fs (loop0): last error at time 534: ext4_orphan_get:1391: inode 15 [ 558.049706][T20141] audit: audit_lost=1373 audit_rate_limit=0 audit_backlog_limit=64 [ 558.108810][T20144] audit: audit_lost=1374 audit_rate_limit=0 audit_backlog_limit=64 [ 558.118680][T20142] fserror_report: 2 callbacks suppressed [ 558.118737][T20142] loop0: lost filesystem error report for type 5 error -117 [ 558.180809][T20142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.751020][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.778071][T20153] loop7: detected capacity change from 0 to 1024 [ 558.810636][T20158] xt_hashlimit: size too large, truncated to 1048576 [ 558.868119][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3991'. [ 558.889751][T20153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.015015][T20165] loop1: detected capacity change from 0 to 1024 [ 559.082070][T20153] syzkaller0: entered promiscuous mode [ 559.087956][T20165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.098837][T20153] syzkaller0: entered allmulticast mode [ 559.161262][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.568659][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.581930][T20165] syzkaller0: entered promiscuous mode [ 559.623541][T20165] syzkaller0: entered allmulticast mode [ 559.973397][T20196] loop7: detected capacity change from 0 to 512 [ 560.012161][T20196] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 560.056662][T20196] EXT4-fs (loop7): filesystem is read-only [ 560.109530][T20196] EXT4-fs (loop7): failed to initialize system zone (-117) [ 560.171445][T20196] EXT4-fs (loop7): mount failed [ 560.307234][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.352527][T19990] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 560.417120][T19990] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 560.506488][T19990] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 560.508163][T20210] loop1: detected capacity change from 0 to 512 [ 560.560669][T19990] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 560.570778][T20210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 560.590405][T20216] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4003'. [ 560.637940][T20210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.750916][T20210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 560.829721][T20210] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 561.096763][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.211733][T19990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.464384][T19990] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.474391][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4008'. [ 561.487466][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.494998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.517823][T20251] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4008'. [ 561.532512][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.540124][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.671423][T20263] xt_hashlimit: size too large, truncated to 1048576 [ 561.690367][T20260] vlan2: entered promiscuous mode [ 561.695683][T20260] bond0: entered promiscuous mode [ 561.714214][T20260] bond_slave_0: entered promiscuous mode [ 561.757337][T20260] bond_slave_1: entered promiscuous mode [ 561.913238][T20268] loop7: detected capacity change from 0 to 4096 [ 561.969563][T20268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.134581][T20268] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.4011: corrupted inode contents [ 562.187895][T20279] EXT4-fs (loop7): shut down requested (2) [ 562.193845][T20268] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.4011: mark_inode_dirty error [ 562.230542][T20278] kernel profiling enabled (shift: 63) [ 562.257757][T20278] profiling shift: 63 too large [ 562.507160][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.529968][ T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 562.548981][T19990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.940929][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4019'. [ 562.968231][T20328] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4019'. [ 563.010811][T20324] lo speed is unknown, defaulting to 1000 [ 563.018352][T20335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.081539][ T28] kauditd_printk_skb: 1566 callbacks suppressed [ 563.081555][ T28] audit: type=1400 audit(539.384:104083): avc: denied { prog_run } for pid=20341 comm="syz.6.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 563.120217][ T28] audit: type=1400 audit(539.412:104084): avc: denied { open } for pid=20341 comm="syz.6.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 563.159712][ T28] audit: type=1400 audit(539.412:104085): avc: denied { perfmon } for pid=20341 comm="syz.6.4023" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 563.192081][ T28] audit: type=1400 audit(539.412:104086): avc: denied { kernel } for pid=20341 comm="syz.6.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 563.232769][ T28] audit: type=1400 audit(539.412:104087): avc: denied { write } for pid=20341 comm="syz.6.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 563.319371][ T28] audit: type=1400 audit(539.412:104088): avc: denied { search } for pid=20340 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.353562][ T28] audit: type=1400 audit(539.412:104089): avc: denied { read } for pid=20340 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 563.381018][ T28] audit: type=1400 audit(539.412:104090): avc: denied { open } for pid=20340 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 563.416125][T20354] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4025'. [ 563.453369][T20319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.463245][T20351] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.601552][T20365] kernel profiling enabled (shift: 63) [ 563.625563][T19990] veth0_vlan: entered promiscuous mode [ 563.635159][T20365] profiling shift: 63 too large [ 563.794489][T19990] veth1_vlan: entered promiscuous mode [ 563.812857][T20378] xt_hashlimit: size too large, truncated to 1048576 [ 564.379808][T19990] veth0_macvtap: entered promiscuous mode [ 564.402512][T19990] veth1_macvtap: entered promiscuous mode [ 564.443976][T19990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.465753][T19990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.484613][T20408] loop0: detected capacity change from 0 to 512 [ 564.563695][T20408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 564.583509][T13877] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.599534][T13877] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.611828][T13877] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.625636][T13877] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.729116][T20414] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4033'. [ 564.817794][T20408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.119062][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'. [ 565.210200][T20408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4034'. [ 565.362088][T20408] netlink: 660 bytes leftover after parsing attributes in process `syz.0.4034'. [ 566.028193][T20422] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4037'. [ 566.250321][T20426] lo speed is unknown, defaulting to 1000 [ 566.294905][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.304579][T20431] macvtap1: entered promiscuous mode [ 566.321372][T20431] bond0: entered promiscuous mode [ 566.326819][T20431] macvtap1: entered allmulticast mode [ 566.332403][T20431] bond0: entered allmulticast mode [ 566.338066][T20431] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 566.398206][T20431] bond0: left allmulticast mode [ 566.410134][T20431] bond0: left promiscuous mode [ 566.433827][T20439] loop0: detected capacity change from 0 to 512 [ 566.439509][T20437] loop9: detected capacity change from 0 to 1024 [ 566.527085][T20437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.578356][T20439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.665502][T20439] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.797777][T20461] loop7: detected capacity change from 0 to 256 [ 566.807141][T20461] FAT-fs (loop7): Directory bread(block 1285) failed [ 566.820953][T20463] xt_hashlimit: size too large, truncated to 1048576 [ 566.828229][T20461] FAT-fs (loop7): Directory bread(block 1286) failed [ 566.840023][T20461] FAT-fs (loop7): Directory bread(block 1287) failed [ 566.853013][T20461] FAT-fs (loop7): Directory bread(block 1288) failed [ 566.878680][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.902197][T20461] FAT-fs (loop7): Directory bread(block 1285) failed [ 566.918161][T20439] –: renamed from veth0_to_batadv [ 566.933102][T20461] FAT-fs (loop7): Directory bread(block 1286) failed [ 566.967388][T20465] kernel profiling enabled (shift: 63) [ 566.981240][T20461] FAT-fs (loop7): Directory bread(block 1287) failed [ 567.003740][T20461] FAT-fs (loop7): Directory bread(block 1288) failed [ 567.025498][T20466] loop1: detected capacity change from 0 to 256 [ 567.029733][T20461] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 567.044019][T20465] profiling shift: 63 too large [ 568.025154][T20473] __nla_validate_parse: 3 callbacks suppressed [ 568.025188][T20473] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4051'. [ 568.177145][T20468] xt_hashlimit: size too large, truncated to 1048576 [ 568.439499][ T28] kauditd_printk_skb: 841 callbacks suppressed [ 568.439523][ T28] audit: type=1400 audit(544.398:104829): avc: denied { prog_load } for pid=20479 comm="syz.6.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 568.589393][ T28] audit: type=1400 audit(544.426:104830): avc: denied { bpf } for pid=20479 comm="syz.6.4054" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 568.704633][ T28] audit: type=1400 audit(544.435:104831): avc: denied { prog_load } for pid=20479 comm="syz.6.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 568.855305][ T28] audit: type=1400 audit(544.454:104832): avc: denied { bpf } for pid=20479 comm="syz.6.4054" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 568.995721][ T28] audit: type=1400 audit(544.454:104833): avc: denied { perfmon } for pid=20479 comm="syz.6.4054" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.085822][ T28] audit: type=1400 audit(544.454:104834): avc: denied { prog_load } for pid=20479 comm="syz.6.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.139114][ T28] audit: type=1400 audit(544.454:104835): avc: denied { bpf } for pid=20479 comm="syz.6.4054" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.179982][T20498] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.187911][T20500] audit: audit_backlog=66 > audit_backlog_limit=64 [ 569.194505][T20498] audit: audit_lost=1413 audit_rate_limit=0 audit_backlog_limit=64 [ 569.285303][T20498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4057'. [ 569.300927][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4057'. [ 569.310260][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4057'. [ 569.394764][T20504] loop9: detected capacity change from 0 to 1024 [ 569.425243][T20504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.735752][T20509] loop0: detected capacity change from 0 to 512 [ 569.774971][T20509] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.4061: corrupted xattr block 95: invalid header [ 569.793364][T20509] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 569.806890][T20509] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4061: bg 0: block 7: invalid block bitmap [ 569.808336][T20510] lo speed is unknown, defaulting to 1000 [ 569.816328][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 569.816354][ C0] EXT4-fs (loop0): initial error at time 545: ext4_expand_extra_isize_ea:2808: inode 11 [ 569.816379][ C0] EXT4-fs (loop0): last error at time 545: ext4_expand_extra_isize_ea:2808: inode 11 [ 569.883612][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.907170][T20509] loop0: lost filesystem error report for type 5 error -117 [ 569.907878][T20509] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 569.924385][T20509] loop0: lost filesystem error report for type 5 error -117 [ 569.924601][T20509] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #11: comm syz.0.4061: corrupted xattr block 95: invalid header [ 569.945716][T20509] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 569.945891][T20509] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 569.982936][T20509] EXT4-fs (loop0): 1 orphan inode deleted [ 570.049973][T20519] loop7: detected capacity change from 0 to 1024 [ 570.063693][T20521] loop9: detected capacity change from 0 to 512 [ 570.075531][T20509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.104638][T20521] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 570.139615][T20519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.221075][T20509] bridge_slave_0: invalid flags given to default FDB implementation [ 570.323162][T20528] bridge_slave_0: invalid flags given to default FDB implementation [ 570.376045][T20519] syzkaller0: entered promiscuous mode [ 570.388744][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.398014][T20519] syzkaller0: entered allmulticast mode [ 570.750174][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.771679][T20538] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4068'. [ 570.939415][T20542] loop7: detected capacity change from 0 to 256 [ 571.284383][T20549] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4069'. [ 573.167657][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4073'. [ 573.300972][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4075'. [ 573.317064][T20557] 8021q: VLANs not supported on nlmon0 [ 573.349443][T20561] loop1: detected capacity change from 0 to 1024 [ 573.387822][T20561] EXT4-fs: inline encryption not supported [ 573.416383][T20561] EXT4-fs: Ignoring removed nobh option [ 573.424764][T20561] EXT4-fs: Ignoring removed bh option [ 573.472229][T20565] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.479722][T20565] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.489881][T20568] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4081'. [ 573.504627][T20561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.882494][T20565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.924652][T20565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.958893][ T28] kauditd_printk_skb: 494 callbacks suppressed [ 573.958911][ T28] audit: type=1400 audit(549.552:105327): avc: denied { read write } for pid=20559 comm="syz.1.4077" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.994905][ T28] audit: type=1400 audit(549.552:105328): avc: denied { open } for pid=20559 comm="syz.1.4077" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 574.032423][ T28] audit: type=1400 audit(549.589:105329): avc: denied { add_name } for pid=20559 comm="syz.1.4077" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 574.211640][ T28] audit: type=1400 audit(549.589:105330): avc: denied { create } for pid=20559 comm="syz.1.4077" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 575.252201][T20582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=20582 comm=syz.7.4083 [ 575.400253][ T28] audit: type=1400 audit(549.589:105331): avc: denied { read write } for pid=20559 comm="syz.1.4077" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 575.723451][ T28] audit: type=1400 audit(549.589:105332): avc: denied { open } for pid=20559 comm="syz.1.4077" path="/282/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 575.778250][ T8950] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.807975][T19990] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.817883][T17820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.826022][T20593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.832620][T20593] audit: audit_lost=1415 audit_rate_limit=0 audit_backlog_limit=64 [ 575.848913][ T8950] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.897716][ T8950] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.964534][ T8950] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.968483][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.032424][T20612] loop0: detected capacity change from 0 to 512 [ 577.063097][T20612] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 577.102035][T20612] EXT4-fs (loop0): 1 truncate cleaned up [ 577.115121][T20612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.119702][T20616] loop1: detected capacity change from 0 to 128 [ 577.135153][T20616] msdos: Bad value for 'dmask' [ 577.148600][T20616] netlink: 'syz.1.4089': attribute type 3 has an invalid length. [ 577.509502][T20627] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.4092: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 577.530527][T20627] EXT4-fs (loop0): Remounting filesystem read-only [ 577.728662][T20630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2584 sclass=netlink_xfrm_socket pid=20630 comm=syz.7.4095 [ 577.867658][T20630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=20630 comm=syz.7.4095 [ 577.962583][T20630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2562 sclass=netlink_xfrm_socket pid=20630 comm=syz.7.4095 [ 577.980029][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.254285][T20648] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4101'. [ 578.536208][T20663] loop7: detected capacity change from 0 to 164 [ 579.310558][ T28] kauditd_printk_skb: 469 callbacks suppressed [ 579.310574][ T28] audit: type=1400 audit(554.566:105764): avc: denied { bpf } for pid=20677 comm="syz.7.4110" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 579.404180][ T28] audit: type=1400 audit(554.612:105765): avc: denied { prog_load } for pid=20677 comm="syz.7.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.479060][ T28] audit: type=1400 audit(554.612:105766): avc: denied { perfmon } for pid=20677 comm="syz.7.4110" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 579.538672][T20680] lo speed is unknown, defaulting to 1000 [ 579.587194][ T28] audit: type=1400 audit(554.612:105767): avc: denied { bpf } for pid=20677 comm="syz.7.4110" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 579.618792][ T28] audit: type=1400 audit(554.640:105768): avc: denied { open } for pid=20681 comm="syz.9.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 579.664623][ T28] audit: type=1400 audit(554.640:105769): avc: denied { perfmon } for pid=20681 comm="syz.9.4112" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 579.687278][ T28] audit: type=1400 audit(554.640:105770): avc: denied { kernel } for pid=20681 comm="syz.9.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 579.750036][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4115'. [ 579.782002][T12780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.796300][T20700] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.806063][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4115'. [ 579.810356][T12780] audit: audit_lost=1429 audit_rate_limit=0 audit_backlog_limit=64 [ 579.855914][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4115'. [ 579.938329][T20706] SET target dimension over the limit! [ 580.007257][T20708] sd 0:0:1:0: device reset [ 580.077685][T20706] loop7: detected capacity change from 0 to 1024 [ 580.124196][T20706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.166201][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 580.307430][T20724] loop0: detected capacity change from 0 to 256 [ 580.443613][T20727] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4120'. [ 580.492264][T20727] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4120'. [ 580.656167][T20733] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4126'. [ 582.100416][T19990] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 582.134757][T19990] CPU: 1 UID: 0 PID: 19990 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 582.134856][T19990] Tainted: [W]=WARN [ 582.134863][T19990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.134876][T19990] Call Trace: [ 582.134883][T19990] [ 582.134892][T19990] __dump_stack+0x1d/0x30 [ 582.134976][T19990] dump_stack_lvl+0x95/0xd0 [ 582.135000][T19990] dump_stack+0x15/0x1b [ 582.135022][T19990] dump_header+0x80/0x240 [ 582.135108][T19990] oom_kill_process+0x295/0x350 [ 582.135132][T19990] out_of_memory+0x97d/0xb80 [ 582.135156][T19990] try_charge_memcg+0x62e/0xa10 [ 582.135192][T19990] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 582.135301][T19990] __swap_cache_prepare_and_add+0x386/0x530 [ 582.135401][T19990] swap_cache_alloc_folio+0xa2/0x120 [ 582.135436][T19990] swap_cluster_readahead+0x26e/0x3d0 [ 582.135467][T19990] swapin_readahead+0xde/0x840 [ 582.135489][T19990] ? __rcu_read_unlock+0x4e/0x70 [ 582.135508][T19990] ? __perf_event_task_sched_in+0xa65/0xad0 [ 582.135575][T19990] ? __list_add_valid_or_report+0x38/0xe0 [ 582.135604][T19990] ? __rcu_read_unlock+0x4e/0x70 [ 582.135682][T19990] ? swap_cache_get_folio+0x26f/0x280 [ 582.135765][T19990] do_swap_page+0x30d/0x2220 [ 582.135794][T19990] ? __schedule+0x93c/0xd40 [ 582.135818][T19990] ? __rcu_read_lock+0x36/0x50 [ 582.135916][T19990] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 582.135945][T19990] handle_mm_fault+0xb40/0x3020 [ 582.135977][T19990] ? vma_start_read+0x1c7/0x2c0 [ 582.136005][T19990] do_user_addr_fault+0x62f/0x1050 [ 582.136040][T19990] ? trace_page_fault_user+0x1f/0xe0 [ 582.136093][T19990] exc_page_fault+0x62/0xa0 [ 582.136120][T19990] asm_exc_page_fault+0x26/0x30 [ 582.136142][T19990] RIP: 0033:0x7fedc91e7917 [ 582.136207][T19990] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 582.136222][T19990] RSP: 002b:00007ffeb428fd50 EFLAGS: 00010202 [ 582.136240][T19990] RAX: 0000000000000000 RBX: 000055555f152500 RCX: 00007fedc91e7917 [ 582.136255][T19990] RDX: 00007ffeb428fd90 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.136269][T19990] RBP: 00007ffeb428fdfc R08: 0000000000000000 R09: 0000000000000000 [ 582.136282][T19990] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 582.136348][T19990] R13: 00000000000927c0 R14: 0000000000087e3d R15: 00007ffeb428fe50 [ 582.136364][T19990] [ 582.136371][T19990] memory: usage 307200kB, limit 307200kB, failcnt 1370 [ 582.385525][T19990] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 582.394344][T19990] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 582.404491][T19990] Memory cgroup stats for /syz9: [ 582.404727][T19990] cache 0 [ 582.429601][T19990] rss 16384 [ 582.432794][T19990] shmem 0 [ 582.435870][T19990] mapped_file 0 [ 582.445789][T19990] dirty 0 [ 582.460547][T19990] writeback 16384 [ 582.474317][T19990] workingset_refault_anon 3345 [ 582.480490][T19990] workingset_refault_file 724 [ 582.486155][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.497617][T20742] loop1: detected capacity change from 0 to 128 [ 582.572797][T19990] swap 172032 [ 582.586392][T19990] swapcached 14835712 [ 582.619162][T19990] pgpgin 332028 [ 582.634192][T19990] pgpgout 332024 [ 582.637869][T19990] pgfault 370333 [ 582.917558][T19990] pgmajfault 510 [ 582.946077][T19990] inactive_anon 16384 [ 583.021906][T19990] active_anon 0 [ 583.081740][T19990] inactive_file 0 [ 583.099448][T19990] active_file 0 [ 583.117817][T19990] unevictable 0 [ 583.121346][T19990] hierarchical_memory_limit 314572800 [ 583.149003][T19990] hierarchical_memsw_limit 9223372036854771712 [ 583.175255][T19990] total_cache 0 [ 583.185988][T19990] total_rss 16384 [ 583.187788][T20741] can0: slcan on ttyS3. [ 583.196645][T19990] total_shmem 0 [ 583.200498][T19990] total_mapped_file 0 [ 583.212627][T19990] total_dirty 0 [ 583.223556][T19990] total_writeback 16384 [ 583.239422][T19990] total_workingset_refault_anon 3345 [ 583.246214][T20758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.263478][T19990] total_workingset_refault_file 724 [ 583.272508][T19990] total_swap 172032 [ 583.277496][T20758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.295533][T19990] total_swapcached 14835712 [ 583.310906][T19990] total_pgpgin 332028 [ 583.330101][T19990] total_pgpgout 332024 [ 583.334460][T19990] total_pgfault 370333 [ 583.345296][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4136'. [ 583.362484][T19990] total_pgmajfault 510 [ 583.370242][T19990] total_inactive_anon 16384 [ 583.375964][T19990] total_active_anon 0 [ 583.384254][T20758] vlan3: entered promiscuous mode [ 583.398119][T19990] total_inactive_file 0 [ 583.414995][T19990] total_active_file 0 [ 583.426195][T19990] total_unevictable 0 [ 583.441173][T19990] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4129,pid=20736,uid=0 [ 583.518908][T19990] Memory cgroup out of memory: Killed process 20736 (syz.9.4129) total-vm:94160kB, anon-rss:1248kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 583.987334][T20776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4139'. [ 584.677951][ T28] kauditd_printk_skb: 530 callbacks suppressed [ 584.677982][ T28] audit: type=1400 audit(559.589:106295): avc: denied { search } for pid=20785 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.814230][T20783] loop9: detected capacity change from 0 to 1024 [ 584.822354][T20788] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.829753][ T28] audit: type=1400 audit(559.617:106296): avc: denied { create } for pid=20780 comm="syz.9.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 584.850397][T20790] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.850509][T20783] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.861460][T20792] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.888410][T20788] audit: audit_lost=1432 audit_rate_limit=0 audit_backlog_limit=64 [ 584.890397][T20793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.896455][T20788] audit: backlog limit exceeded [ 584.919839][T20783] audit: audit_lost=1433 audit_rate_limit=0 audit_backlog_limit=64 [ 585.025554][T20783] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.098291][T13868] Bluetooth: hci0: Frame reassembly failed (-84) [ 585.139872][T20801] loop7: detected capacity change from 0 to 1024 [ 585.199348][T20783] syzkaller0: entered promiscuous mode [ 585.200528][T20801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.204929][T20783] syzkaller0: entered allmulticast mode [ 585.497821][T20741] can0 (unregistered): slcan off ttyS3. [ 585.504365][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.511513][T20809] lo speed is unknown, defaulting to 1000 [ 585.522883][T20813] netlink: 'syz.6.4146': attribute type 5 has an invalid length. [ 585.635759][T20821] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4147'. [ 585.678952][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4147'. [ 585.748935][T20821] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4147'. [ 585.806941][T20836] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4149'. [ 585.873065][T20821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.924272][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.077473][T20856] loop7: detected capacity change from 0 to 512 [ 586.092836][T20856] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.4150: corrupted in-inode xattr: invalid ea_ino [ 586.117981][T20856] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.119127][T20856] EXT4-fs (loop7): Remounting filesystem read-only [ 586.128618][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 586.128646][ C0] EXT4-fs (loop7): initial error at time 560: ext4_iget_extra_inode:5025: inode 15 [ 586.128679][ C0] EXT4-fs (loop7): last error at time 560: ext4_iget_extra_inode:5025: inode 15 [ 586.224390][T20856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.395094][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.715234][T20878] loop7: detected capacity change from 0 to 1024 [ 586.741512][T20878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.889072][T20878] syzkaller0: entered promiscuous mode [ 586.894681][T20878] syzkaller0: entered allmulticast mode [ 587.087331][T20891] loop1: detected capacity change from 0 to 512 [ 587.149971][T20891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 587.189028][T20897] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4165'. [ 587.199658][T20891] EXT4-fs (loop1): 1 truncate cleaned up [ 587.215225][T20891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.317731][T19519] Bluetooth: hci0: command 0x1003 tx timeout [ 587.324068][ T7233] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 587.471552][T20904] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4165'. [ 588.453302][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.514115][T20910] tipc: Invalid UDP bearer configuration [ 588.514132][T20910] tipc: Enabling of bearer rejected, failed to enable media [ 588.562264][T20912] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4170'. [ 588.568162][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.688310][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4166'. [ 588.721263][T20922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=20922 comm=syz.9.4172 [ 588.849413][T20925] loop0: detected capacity change from 0 to 256 [ 588.999153][T20936] loop0: detected capacity change from 0 to 512 [ 589.043427][T20936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 589.108098][T20936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.110654][T20938] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4177'. [ 589.187062][T20936] EXT4-fs (loop0): shut down requested (1) [ 589.194570][T20946] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4180'. [ 589.234959][T20938] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 589.269370][T20938] SELinux: failed to load policy [ 589.281679][T20938] loop1: detected capacity change from 0 to 512 [ 589.289789][T20938] EXT4-fs: Ignoring removed i_version option [ 589.296236][T20938] EXT4-fs: Ignoring removed bh option [ 589.320509][T20951] loop9: detected capacity change from 0 to 512 [ 589.321549][T20938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.349680][T20951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 589.417683][T20951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.438487][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.468651][T20938] lo speed is unknown, defaulting to 1000 [ 589.540167][T20946] loop7: detected capacity change from 0 to 512 [ 589.562412][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.655567][T20946] EXT4-fs (loop7): 1 truncate cleaned up [ 589.690208][T20962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.731696][T20946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.779805][T20962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.032623][ T28] kauditd_printk_skb: 1210 callbacks suppressed [ 590.032650][ T28] audit: type=1400 audit(564.593:107494): avc: denied { read write } for pid=20971 comm="syz.9.4187" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.332344][T20962] vlan2: entered promiscuous mode [ 590.581011][ T28] audit: type=1400 audit(564.668:107495): avc: denied { read write open } for pid=20971 comm="syz.9.4187" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.682804][ T28] audit: type=1400 audit(564.668:107496): avc: denied { ioctl } for pid=20971 comm="syz.9.4187" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.715352][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.758970][ T28] audit: type=1400 audit(564.677:107497): avc: denied { ioctl } for pid=20971 comm="syz.9.4187" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.855487][ T28] audit: type=1400 audit(564.715:107498): avc: denied { read write } for pid=19990 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.881402][ T28] audit: type=1400 audit(564.715:107499): avc: denied { open } for pid=19990 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.906172][ T28] audit: type=1400 audit(564.724:107500): avc: denied { ioctl } for pid=19990 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.929422][T20986] loop7: detected capacity change from 0 to 512 [ 590.960558][T20986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 590.998597][T20986] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4189: iget: bad extended attribute block 262144 [ 591.041658][T20986] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 591.041953][T20986] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4189: couldn't read orphan inode 15 (err -117) [ 591.051177][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 591.051204][ C0] EXT4-fs (loop7): initial error at time 565: ext4_orphan_get:1391: inode 15 [ 591.051233][ C0] EXT4-fs (loop7): last error at time 565: ext4_orphan_get:1391: inode 15 [ 591.108815][ T28] audit: type=1400 audit(564.752:107501): avc: denied { create } for pid=20970 comm="syz.6.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 591.179769][T20986] loop7: lost filesystem error report for type 5 error -117 [ 591.181973][T20986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.214595][ T28] audit: type=1400 audit(564.761:107502): avc: denied { prog_load } for pid=20970 comm="syz.6.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.264676][ T28] audit: type=1400 audit(564.761:107503): avc: denied { bpf } for pid=20970 comm="syz.6.4186" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 591.495118][T21002] loop9: detected capacity change from 0 to 1024 [ 591.581052][T21002] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.613233][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.677746][T21012] __nla_validate_parse: 2 callbacks suppressed [ 591.677764][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'. [ 591.912709][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.945360][T21030] loop1: detected capacity change from 0 to 512 [ 591.968731][T21030] ext2: Unknown parameter 'fsuuid' [ 592.533666][T21036] loop0: detected capacity change from 0 to 512 [ 592.551360][T21036] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 592.605466][T21036] EXT4-fs (loop0): 1 truncate cleaned up [ 592.620238][T21036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.110070][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.463721][T21043] loop9: detected capacity change from 0 to 512 [ 593.494388][T21043] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 593.547930][T21043] EXT4-fs (loop9): 1 truncate cleaned up [ 593.581616][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'. [ 593.607981][T21043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.703090][T21050] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 593.709778][T21050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 593.726825][T21050] vhci_hcd vhci_hcd.0: Device attached [ 594.046303][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'. [ 594.061137][T21051] vhci_hcd: cannot find the pending unlink 7956 [ 594.141543][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.400627][ T5160] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 594.477895][ T5160] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 594.507392][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.800175][T21077] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4211'. [ 594.935581][T21079] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.4209'. [ 594.945765][T21079] netlink: zone id is out of range [ 594.951430][T21079] netlink: zone id is out of range [ 594.958850][T21079] netlink: zone id is out of range [ 595.046963][T21079] netlink: set zone limit has 8 unknown bytes [ 595.493795][T21086] loop0: detected capacity change from 0 to 512 [ 595.615723][ T28] kauditd_printk_skb: 327 callbacks suppressed [ 595.615751][ T28] audit: type=1400 audit(569.682:107831): avc: denied { open } for pid=21081 comm="syz.0.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 595.800841][ T28] audit: type=1400 audit(569.682:107832): avc: denied { perfmon } for pid=21081 comm="syz.0.4213" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 595.967256][ T28] audit: type=1400 audit(569.682:107833): avc: denied { kernel } for pid=21081 comm="syz.0.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 596.265455][ T28] audit: type=1400 audit(569.691:107834): avc: denied { read write } for pid=21081 comm="syz.0.4213" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.355084][ T28] audit: type=1400 audit(569.691:107835): avc: denied { open } for pid=21081 comm="syz.0.4213" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.426041][ T28] audit: type=1400 audit(569.691:107836): avc: denied { ioctl } for pid=21081 comm="syz.0.4213" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.484463][ T28] audit: type=1400 audit(569.700:107837): avc: denied { mounton } for pid=21081 comm="syz.0.4213" path="/146/file0" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 596.530016][ T28] audit: type=1400 audit(569.710:107838): avc: denied { read write } for pid=21081 comm="syz.0.4213" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.581524][ T28] audit: type=1400 audit(569.710:107839): avc: denied { open } for pid=21081 comm="syz.0.4213" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.637388][ T28] audit: type=1400 audit(569.710:107840): avc: denied { ioctl } for pid=21081 comm="syz.0.4213" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.982802][T21053] lo speed is unknown, defaulting to 1000 [ 597.245412][T21051] vhci_hcd: connection reset by peer [ 597.251573][T13862] vhci_hcd vhci_hcd.7: stop threads [ 597.257174][T13862] vhci_hcd vhci_hcd.7: release socket [ 597.289559][T13862] vhci_hcd vhci_hcd.7: disconnect device [ 597.317764][T21100] loop7: detected capacity change from 0 to 1024 [ 597.356987][T21100] EXT4-fs: Ignoring removed bh option [ 597.362525][T21100] EXT4-fs: inline encryption not supported [ 597.397192][T21100] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 597.399369][T21101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 597.428896][T21100] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 597.437391][T21100] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 597.460871][T21100] EXT4-fs (loop7): orphan cleanup on readonly fs [ 597.474772][T21100] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.4217: lblock 2 mapped to illegal pblock 2 (length 1) [ 597.528961][T21098] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 597.546331][T21100] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 597.546599][T21100] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.4217: Invalid inode table block 1 in block_group 0 [ 597.568300][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 597.568333][ C0] EXT4-fs (loop7): initial error at time 571: ext4_map_blocks:776: inode 3: block 2 [ 597.568369][ C0] EXT4-fs (loop7): last error at time 571: ext4_map_blocks:776: inode 3: block 2 [ 597.610442][T21098] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 597.617088][T21098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 597.631691][T21098] vhci_hcd vhci_hcd.0: Device attached [ 597.653175][T21100] loop7: lost filesystem error report for type 5 error -117 [ 597.653317][T21100] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 597.695803][T21100] loop7: lost filesystem error report for type 5 error -117 [ 597.695979][T21100] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.4217: mark_inode_dirty error [ 597.738611][T21100] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 597.749233][T21100] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.4217: Failed to acquire dquot type 0 [ 597.770791][T21100] loop7: lost filesystem error report for type 5 error -117 [ 597.778513][T21100] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 597.810872][T21100] loop7: lost filesystem error report for type 5 error -117 [ 597.811009][T21100] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.4217: mark_inode_dirty error [ 597.830313][T11924] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 597.858500][T21100] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 597.858629][T21100] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 597.897436][T21098] loop0: detected capacity change from 0 to 256 [ 597.898897][T11924] usb 1-3: new full-speed USB device number 2 using vhci_hcd [ 597.911971][T21100] EXT4-fs (loop7): 1 orphan inode deleted [ 597.931144][T13868] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.953579][T21098] FAT-fs (loop0): Directory bread(block 64) failed [ 597.968444][T21098] FAT-fs (loop0): Directory bread(block 65) failed [ 597.984426][T13868] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 597.984588][T13868] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 598.017499][T21098] FAT-fs (loop0): Directory bread(block 66) failed [ 598.024106][T21098] FAT-fs (loop0): Directory bread(block 67) failed [ 598.055299][T13868] loop7: lost filesystem error report for type 5 error -117 [ 598.055438][T21098] FAT-fs (loop0): Directory bread(block 68) failed [ 598.070250][T21100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 598.080623][T21098] FAT-fs (loop0): Directory bread(block 69) failed [ 598.101036][T21098] FAT-fs (loop0): Directory bread(block 70) failed [ 598.123509][T21098] FAT-fs (loop0): Directory bread(block 71) failed [ 598.130080][T21098] FAT-fs (loop0): Directory bread(block 72) failed [ 598.137913][T21098] FAT-fs (loop0): Directory bread(block 73) failed [ 598.143700][T21109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=21109 comm=syz.9.4218 [ 598.412549][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.423050][T21103] vhci_hcd: connection reset by peer [ 598.428575][ T803] vhci_hcd vhci_hcd.0: stop threads [ 598.434906][ T803] vhci_hcd vhci_hcd.0: release socket [ 598.441243][ T803] vhci_hcd vhci_hcd.0: disconnect device [ 598.662558][T21120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4223'. [ 598.957712][T21114] lo speed is unknown, defaulting to 1000 [ 599.207144][T21126] lo speed is unknown, defaulting to 1000 [ 599.340615][T21127] lo speed is unknown, defaulting to 1000 [ 599.667678][T21014] syz.6.4190 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 599.696975][T21139] loop9: detected capacity change from 0 to 1024 [ 599.805516][T21139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.831923][T21014] CPU: 1 UID: 0 PID: 21014 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 599.831958][T21014] Tainted: [W]=WARN [ 599.831966][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.832050][T21014] Call Trace: [ 599.832057][T21014] [ 599.832063][T21014] __dump_stack+0x1d/0x30 [ 599.832105][T21014] dump_stack_lvl+0x95/0xd0 [ 599.832123][T21014] dump_stack+0x15/0x1b [ 599.832141][T21014] dump_header+0x80/0x240 [ 599.832160][T21014] oom_kill_process+0x295/0x350 [ 599.832200][T21014] out_of_memory+0x97d/0xb80 [ 599.832228][T21014] try_charge_memcg+0x62e/0xa10 [ 599.832262][T21014] obj_cgroup_charge_pages+0x23/0xc0 [ 599.832335][T21014] __memcg_kmem_charge_page+0x9e/0x170 [ 599.832359][T21014] __alloc_frozen_pages_noprof+0x18a/0x360 [ 599.832395][T21014] alloc_pages_mpol+0xb3/0x260 [ 599.832421][T21014] alloc_pages_noprof+0x8f/0x130 [ 599.832445][T21014] pte_alloc_one+0x1e/0xd0 [ 599.832477][T21014] handle_mm_fault+0x15af/0x3020 [ 599.832571][T21014] ? __rcu_read_unlock+0x4e/0x70 [ 599.832602][T21014] ? check_vma_flags+0x2e0/0x330 [ 599.832644][T21014] __get_user_pages+0x1023/0x1ea0 [ 599.832739][T21014] get_dump_page+0xb4/0x240 [ 599.832769][T21014] dump_user_range+0x148/0xdb0 [ 599.832799][T21014] elf_core_dump+0x21a2/0x2330 [ 599.832842][T21014] ? 0xffffffffff600000 [ 599.832873][T21014] coredump_write+0xacc/0xdd0 [ 599.832906][T21014] vfs_coredump+0x26c7/0x3130 [ 599.832945][T21014] ? __memcg_slab_free_hook+0xc4/0x240 [ 599.832973][T21014] ? __sigqueue_free+0xf4/0x130 [ 599.833015][T21014] ? proc_coredump_connector+0x160/0x2b0 [ 599.833041][T21014] ? __sigqueue_free+0xf4/0x130 [ 599.833059][T21014] ? kmem_cache_free+0xc8/0x380 [ 599.833088][T21014] get_signal+0xd80/0xf60 [ 599.833166][T21014] arch_do_signal_or_restart+0x96/0x450 [ 599.833217][T21014] irqentry_exit+0xf7/0x520 [ 599.833269][T21014] asm_exc_page_fault+0x26/0x30 [ 599.833291][T21014] RIP: 0033:0x7f3c69b42777 [ 599.833308][T21014] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 599.833323][T21014] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 599.833339][T21014] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 599.833350][T21014] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 599.833395][T21014] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 599.833409][T21014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 599.833427][T21014] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 599.833443][T21014] [ 599.833450][T21014] memory: usage 307200kB, limit 307200kB, failcnt 9530 [ 599.892109][ T5160] usb 15-1: enqueue for inactive port 0 [ 599.901770][T21014] memory+swap: usage 430904kB, limit 9007199254740988kB, failcnt 0 [ 599.932602][ T5160] usb 15-1: enqueue for inactive port 0 [ 599.934751][T21150] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 599.991954][T21014] kmem: usage 6404kB, limit 9007199254740988kB, failcnt 0 [ 600.115645][T21149] vlan3: entered promiscuous mode [ 600.118089][ T5160] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 600.304738][T21014] Memory cgroup stats for /syz6: [ 600.304994][T21014] cache 306548736 [ 600.323457][T21014] rss 434176 [ 600.327119][T21014] shmem 306548736 [ 600.332871][T21014] mapped_file 0 [ 600.336833][T21014] dirty 0 [ 600.342488][T21014] writeback 0 [ 600.347028][T21014] workingset_refault_anon 75 [ 600.352101][T21014] workingset_refault_file 1354 [ 600.358080][T21014] swap 126672896 [ 600.361683][T21014] swapcached 140587008 [ 600.366082][T21014] pgpgin 434512 [ 600.381722][T21162] loop1: detected capacity change from 0 to 1024 [ 600.390026][T21014] pgpgout 359310 [ 600.393658][T21014] pgfault 375616 [ 600.397194][T21014] pgmajfault 39 [ 600.403044][T21162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 600.425141][T21014] inactive_anon 244867072 [ 600.429586][T21014] active_anon 63139840 [ 600.453697][T21162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.476866][T21014] inactive_file 20480 [ 600.491446][T21014] active_file 0 [ 600.501045][T21014] unevictable 0 [ 600.508503][T21014] hierarchical_memory_limit 314572800 [ 600.541349][T21014] hierarchical_memsw_limit 9223372036854771712 [ 600.547690][T21014] total_cache 306548736 [ 600.582253][T21014] total_rss 434176 [ 600.596256][T21014] total_shmem 306548736 [ 600.610125][T21014] total_mapped_file 0 [ 600.616526][T21014] total_dirty 0 [ 600.620055][T21014] total_writeback 0 [ 600.624235][T21014] total_workingset_refault_anon 75 [ 600.627250][T21172] loop0: detected capacity change from 0 to 512 [ 600.629730][T21014] total_workingset_refault_file 1354 [ 600.640960][T21014] total_swap 126672896 [ 600.648765][T21163] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4236'. [ 600.668555][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.711603][T21014] total_swapcached 140587008 [ 600.721950][T21173] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 600.738578][T21173] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.4235: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 600.763278][T21014] total_pgpgin 434512 [ 600.790823][T21014] total_pgpgout 359310 [ 600.823602][T21014] total_pgfault 375616 [ 600.852538][T21014] total_pgmajfault 39 [ 600.880609][T21014] total_inactive_anon 244867072 [ 600.923007][T21014] total_active_anon 63139840 [ 600.949120][T21014] total_inactive_file 20480 [ 600.970423][T21014] total_active_file 0 [ 600.971768][T21172] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4240: invalid indirect mapped block 256 (level 2) [ 600.974614][T21014] total_unevictable 0 [ 600.992079][T21014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=20987,uid=0 [ 601.000164][ T28] kauditd_printk_skb: 414 callbacks suppressed [ 601.000289][ T28] audit: type=1400 audit(574.845:108248): avc: denied { read write } for pid=19990 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.007205][T21014] Memory cgroup out of memory: Killed process 20987 (syz.6.4190) total-vm:90452kB, anon-rss:1256kB, file-rss:51328kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 601.055374][ T28] audit: type=1400 audit(574.845:108249): avc: denied { open } for pid=19990 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.084275][T21172] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 601.084682][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 601.101245][ C0] EXT4-fs (loop0): initial error at time 574: ext4_free_branches:1023: inode 11 [ 601.110386][ C0] EXT4-fs (loop0): last error at time 574: ext4_free_branches:1023: inode 11 [ 601.129567][T21172] EXT4-fs (loop0): 2 truncates cleaned up [ 601.144585][T21172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.148862][ T28] audit: type=1400 audit(574.845:108250): avc: denied { ioctl } for pid=19990 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.580865][T21179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.589285][T21179] audit: audit_lost=1441 audit_rate_limit=0 audit_backlog_limit=64 [ 601.598131][T21179] audit: backlog limit exceeded [ 601.634140][T21179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.641290][T21179] audit: audit_lost=1442 audit_rate_limit=0 audit_backlog_limit=64 [ 601.650155][T21179] audit: backlog limit exceeded [ 601.667589][T21179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.920685][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.180182][T21191] loop9: detected capacity change from 0 to 512 [ 602.216759][T21191] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 602.253760][T21191] EXT4-fs (loop9): 1 truncate cleaned up [ 602.264501][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.267376][T21191] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.321156][T20992] syz.6.4190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 602.331016][T20992] CPU: 1 UID: 0 PID: 20992 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 602.331049][T20992] Tainted: [W]=WARN [ 602.331055][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.331125][T20992] Call Trace: [ 602.331132][T20992] [ 602.331139][T20992] __dump_stack+0x1d/0x30 [ 602.331165][T20992] dump_stack_lvl+0x95/0xd0 [ 602.331284][T20992] dump_stack+0x15/0x1b [ 602.331306][T20992] dump_header+0x80/0x240 [ 602.331346][T20992] oom_kill_process+0x295/0x350 [ 602.331366][T20992] out_of_memory+0x97d/0xb80 [ 602.331386][T20992] try_charge_memcg+0x62e/0xa10 [ 602.331458][T20992] __mem_cgroup_charge+0x65/0x150 [ 602.331487][T20992] shmem_get_folio_gfp+0x47b/0xd60 [ 602.331519][T20992] shmem_write_begin+0xfc/0x1f0 [ 602.331562][T20992] generic_perform_write+0x183/0x490 [ 602.331588][T20992] ? current_time+0x188/0x240 [ 602.331631][T20992] shmem_file_write_iter+0xc5/0xf0 [ 602.331661][T20992] __kernel_write_iter+0x319/0x590 [ 602.331764][T20992] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 602.331820][T20992] dump_user_range+0xa7d/0xdb0 [ 602.331853][T20992] elf_core_dump+0x21a2/0x2330 [ 602.331883][T20992] ? 0xffffffffff600000 [ 602.331905][T20992] coredump_write+0xacc/0xdd0 [ 602.331974][T20992] vfs_coredump+0x26c7/0x3130 [ 602.332006][T20992] ? __memcg_slab_free_hook+0xc4/0x240 [ 602.332032][T20992] ? __sigqueue_free+0xf4/0x130 [ 602.332110][T20992] ? proc_coredump_connector+0x160/0x2b0 [ 602.332138][T20992] ? __sigqueue_free+0xf4/0x130 [ 602.332157][T20992] ? kmem_cache_free+0xc8/0x380 [ 602.332232][T20992] get_signal+0xd80/0xf60 [ 602.332336][T20992] arch_do_signal_or_restart+0x96/0x450 [ 602.332382][T20992] irqentry_exit+0xf7/0x520 [ 602.332474][T20992] asm_exc_page_fault+0x26/0x30 [ 602.332500][T20992] RIP: 0033:0x7f3c69b42777 [ 602.332514][T20992] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 602.332574][T20992] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 602.332589][T20992] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 602.332603][T20992] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 602.332628][T20992] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 602.332713][T20992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 602.332725][T20992] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 602.332745][T20992] [ 602.332753][T20992] memory: usage 307200kB, limit 307200kB, failcnt 10170 [ 602.421737][T21196] sctp: [Deprecated]: syz.1.4245 (pid 21196) Use of int in max_burst socket option deprecated. [ 602.421737][T21196] Use struct sctp_assoc_value instead [ 602.809664][T20992] memory+swap: usage 428060kB, limit 9007199254740988kB, failcnt 0 [ 603.234128][T20992] kmem: usage 6244kB, limit 9007199254740988kB, failcnt 0 [ 603.297706][T11924] usb 1-3: enqueue for inactive port 2 [ 603.303760][T11924] usb 1-3: enqueue for inactive port 2 [ 603.334716][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.353707][T20992] Memory cgroup stats for /syz6: [ 603.353977][T20992] cache 307449856 [ 603.382130][T20992] rss 385024 [ 603.383413][T11924] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 603.471548][T21205] vlan2: entered promiscuous mode [ 603.520974][T20992] shmem 307449856 [ 603.560586][T21209] loop9: detected capacity change from 0 to 1024 [ 603.617980][T21209] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.635179][T20992] mapped_file 0 [ 603.660057][T20992] dirty 0 [ 603.666616][T20992] writeback 311296 [ 603.676544][T20992] workingset_refault_anon 75 [ 603.686984][T20992] workingset_refault_file 1354 [ 603.693810][T20992] swap 127393792 [ 603.697700][T20992] swapcached 154718208 [ 603.701947][T20992] pgpgin 438176 [ 603.706195][T20992] pgpgout 362939 [ 603.709814][T20992] pgfault 375846 [ 603.713535][T20992] pgmajfault 39 [ 603.718147][T20992] inactive_anon 265646080 [ 603.722668][T20992] active_anon 40919040 [ 603.728428][T20992] inactive_file 0 [ 603.733020][T20992] active_file 20480 [ 603.737671][T20992] unevictable 0 [ 603.741194][T20992] hierarchical_memory_limit 314572800 [ 603.747555][T20992] hierarchical_memsw_limit 9223372036854771712 [ 603.753862][T20992] total_cache 307449856 [ 603.760853][T20992] total_rss 385024 [ 603.764663][T20992] total_shmem 307449856 [ 603.769926][T20992] total_mapped_file 0 [ 603.774773][T20992] total_dirty 0 [ 603.778315][T20992] total_writeback 311296 [ 603.783367][T20992] total_workingset_refault_anon 75 [ 603.788579][T20992] total_workingset_refault_file 1354 [ 603.796622][T20992] total_swap 127393792 [ 603.801704][T20992] total_swapcached 154718208 [ 603.806679][T20992] total_pgpgin 438176 [ 603.810711][T20992] total_pgpgout 362939 [ 603.815786][T20992] total_pgfault 375846 [ 603.981887][T21220] loop0: detected capacity change from 0 to 512 [ 603.984514][T19990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.072057][T21220] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4252: invalid indirect mapped block 256 (level 2) [ 604.094227][T21220] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 604.094507][T21220] EXT4-fs (loop0): 2 truncates cleaned up [ 604.103768][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 604.103798][ C0] EXT4-fs (loop0): initial error at time 577: ext4_free_branches:1023: inode 11 [ 604.103841][ C0] EXT4-fs (loop0): last error at time 577: ext4_free_branches:1023: inode 11 [ 604.145133][T21220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.617550][T20992] total_pgmajfault 39 [ 604.723278][T21231] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4251'. [ 604.821605][T20992] total_inactive_anon 265646080 [ 605.035778][T20992] total_active_anon 40919040 [ 605.090121][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.122380][T21246] loop9: detected capacity change from 0 to 256 [ 605.176279][T20992] total_inactive_file 0 [ 605.304978][T20992] total_active_file 20480 [ 605.312102][T21254] loop0: detected capacity change from 0 to 256 [ 605.424525][T21255] netlink: 10 bytes leftover after parsing attributes in process `syz.9.4258'. [ 605.533602][T20992] total_unevictable 0 [ 606.519958][ T28] kauditd_printk_skb: 443 callbacks suppressed [ 606.519975][ T28] audit: type=1400 audit(579.653:108680): avc: denied { prog_load } for pid=21253 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 607.018254][T21257] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4259'. [ 607.602478][ T28] audit: type=1400 audit(579.653:108681): avc: denied { bpf } for pid=21253 comm="syz.0.4259" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.622910][ T28] audit: type=1400 audit(579.653:108682): avc: denied { perfmon } for pid=21253 comm="syz.0.4259" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.353902][T20992] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=21023,uid=0 [ 608.369630][T20992] Memory cgroup out of memory: Killed process 21023 (syz.6.4190) total-vm:90452kB, anon-rss:1316kB, file-rss:53888kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 608.392752][ T28] audit: type=1400 audit(579.784:108683): avc: denied { prog_load } for pid=21253 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 608.397517][T21231] loop7: detected capacity change from 0 to 170 [ 608.460667][ T28] audit: type=1400 audit(579.784:108684): avc: denied { bpf } for pid=21253 comm="syz.0.4259" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.536056][ T28] audit: type=1400 audit(579.784:108685): avc: denied { perfmon } for pid=21253 comm="syz.0.4259" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.592279][T21263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=21263 comm=syz.9.4261 [ 608.606557][ T28] audit: type=1400 audit(579.887:108686): avc: denied { open } for pid=21253 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 608.638620][T21261] vlan3: entered promiscuous mode [ 608.674325][ T28] audit: type=1400 audit(579.887:108687): avc: denied { perfmon } for pid=21253 comm="syz.0.4259" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.738348][ T28] audit: type=1400 audit(579.887:108688): avc: denied { kernel } for pid=21253 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 608.821949][ T28] audit: type=1400 audit(579.980:108689): avc: denied { write } for pid=21253 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 609.062903][T21272] loop0: detected capacity change from 0 to 512 [ 609.145710][T21272] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4267: invalid indirect mapped block 256 (level 2) [ 609.191722][T21272] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 609.194485][T21272] EXT4-fs (loop0): 2 truncates cleaned up [ 609.203948][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 609.203974][ C1] EXT4-fs (loop0): initial error at time 582: ext4_free_branches:1023: inode 11 [ 609.204003][ C1] EXT4-fs (loop0): last error at time 582: ext4_free_branches:1023: inode 11 [ 609.341173][T21272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.533140][T21283] loop7: detected capacity change from 0 to 512 [ 609.542486][T21283] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 609.557786][T21283] EXT4-fs (loop7): 1 truncate cleaned up [ 609.603711][T21283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.632946][T21281] loop9: detected capacity change from 0 to 128 [ 610.282565][T21289] loop1: detected capacity change from 0 to 512 [ 610.315302][T21289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 610.470081][T21289] EXT4-fs (loop1): 1 truncate cleaned up [ 610.493511][T21289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.539088][T21015] syz.6.4190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 610.590880][T21015] CPU: 0 UID: 0 PID: 21015 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 610.590911][T21015] Tainted: [W]=WARN [ 610.590918][T21015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.590928][T21015] Call Trace: [ 610.590936][T21015] [ 610.590944][T21015] __dump_stack+0x1d/0x30 [ 610.590982][T21015] dump_stack_lvl+0x95/0xd0 [ 610.591000][T21015] dump_stack+0x15/0x1b [ 610.591137][T21015] dump_header+0x80/0x240 [ 610.591161][T21015] oom_kill_process+0x295/0x350 [ 610.591183][T21015] out_of_memory+0x97d/0xb80 [ 610.591202][T21015] try_charge_memcg+0x62e/0xa10 [ 610.591350][T21015] __mem_cgroup_charge+0x65/0x150 [ 610.591455][T21015] shmem_get_folio_gfp+0x47b/0xd60 [ 610.591486][T21015] shmem_write_begin+0xfc/0x1f0 [ 610.591513][T21015] generic_perform_write+0x183/0x490 [ 610.591575][T21015] shmem_file_write_iter+0xc5/0xf0 [ 610.591604][T21015] __kernel_write_iter+0x319/0x590 [ 610.591655][T21015] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 610.591689][T21015] dump_user_range+0xa7d/0xdb0 [ 610.591765][T21015] elf_core_dump+0x21a2/0x2330 [ 610.591830][T21015] ? 0xffffffffff600000 [ 610.591860][T21015] coredump_write+0xacc/0xdd0 [ 610.591890][T21015] vfs_coredump+0x26c7/0x3130 [ 610.591921][T21015] ? __memcg_slab_free_hook+0xc4/0x240 [ 610.592026][T21015] ? __sigqueue_free+0xf4/0x130 [ 610.592050][T21015] ? proc_coredump_connector+0x160/0x2b0 [ 610.592079][T21015] ? __sigqueue_free+0xf4/0x130 [ 610.592162][T21015] ? kmem_cache_free+0xc8/0x380 [ 610.592268][T21015] get_signal+0xd80/0xf60 [ 610.592354][T21015] arch_do_signal_or_restart+0x96/0x450 [ 610.592389][T21015] irqentry_exit+0xf7/0x520 [ 610.592495][T21015] asm_exc_page_fault+0x26/0x30 [ 610.592514][T21015] RIP: 0033:0x7f3c69b42777 [ 610.592528][T21015] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 610.592543][T21015] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 610.592558][T21015] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 610.592571][T21015] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 610.592601][T21015] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 610.592616][T21015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 610.592629][T21015] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 610.592649][T21015] [ 610.717762][T13887] kworker/u8:21: attempt to access beyond end of device [ 610.717762][T13887] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 610.738304][T21015] memory: usage 305964kB, limit 307200kB, failcnt 12625 [ 610.770410][T13887] kworker/u8:21: attempt to access beyond end of device [ 610.770410][T13887] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 610.834652][T21275] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 610.862257][T21015] memory+swap: usage 431764kB, limit 9007199254740988kB, failcnt 0 [ 610.877672][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.891054][T13887] kworker/u8:21: attempt to access beyond end of device [ 610.891054][T13887] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 610.928802][T13887] kworker/u8:21: attempt to access beyond end of device [ 610.928802][T13887] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 610.945641][T13887] kworker/u8:21: attempt to access beyond end of device [ 610.945641][T13887] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 611.298768][T13887] kworker/u8:21: attempt to access beyond end of device [ 611.298768][T13887] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 611.334365][T21298] loop7: detected capacity change from 0 to 256 [ 611.347724][T13887] kworker/u8:21: attempt to access beyond end of device [ 611.347724][T13887] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 611.466203][T17820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.494246][T13887] kworker/u8:21: attempt to access beyond end of device [ 611.494246][T13887] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 611.509633][T13887] kworker/u8:21: attempt to access beyond end of device [ 611.509633][T13887] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 611.540115][T13887] kworker/u8:21: attempt to access beyond end of device [ 611.540115][T13887] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 611.671845][T21303] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4272'. [ 611.745971][T21015] kmem: usage 6324kB, limit 9007199254740988kB, failcnt 0 [ 612.566425][ T28] kauditd_printk_skb: 199 callbacks suppressed [ 612.566451][ T28] audit: type=1400 audit(585.275:108889): avc: denied { open } for pid=21300 comm="syz.0.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 613.336284][ T28] audit: type=1400 audit(585.275:108890): avc: denied { perfmon } for pid=21300 comm="syz.0.4273" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 613.365088][ T28] audit: type=1400 audit(585.275:108891): avc: denied { kernel } for pid=21300 comm="syz.0.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 613.393709][ T28] audit: type=1400 audit(585.630:108892): avc: denied { prog_load } for pid=21300 comm="syz.0.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 613.424625][ T28] audit: type=1400 audit(585.630:108893): avc: denied { bpf } for pid=21300 comm="syz.0.4273" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 613.445419][T21005] ================================================================== [ 613.445452][T21005] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 613.463733][T21005] [ 613.466059][T21005] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 613.474549][T21005] tick_do_update_jiffies64+0x113/0x1c0 [ 613.480297][T21005] tick_nohz_handler+0x8d/0x3d0 [ 613.485157][T21005] __hrtimer_run_queues+0x218/0x4f0 [ 613.490623][T21005] hrtimer_interrupt+0x269/0x810 [ 613.495586][T21005] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 613.501766][T21005] sysvec_apic_timer_interrupt+0x6f/0x80 [ 613.507400][T21005] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 613.513415][T21005] console_flush_all+0x540/0x6c0 [ 613.518358][T21005] console_unlock+0xa1/0x280 [ 613.523024][T21005] vprintk_emit+0x3e4/0x600 [ 613.527668][T21005] vprintk_default+0x26/0x30 [ 613.532247][T21005] vprintk+0x1d/0x30 [ 613.536133][T21005] _printk+0x79/0xa0 [ 613.540016][T21005] kauditd_hold_skb+0x1b1/0x1c0 [ 613.544886][T21005] kauditd_send_queue+0x273/0x2c0 [ 613.550256][T21005] kauditd_thread+0x444/0x670 [ 613.555386][T21005] kthread+0x22a/0x280 [ 613.559658][T21005] ret_from_fork+0x150/0x360 [ 613.564248][T21005] ret_from_fork_asm+0x1a/0x30 [ 613.569016][T21005] [ 613.571334][T21005] read to 0xffffffff86c09a00 of 8 bytes by task 21005 on cpu 0: [ 613.578961][T21005] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 613.585296][T21005] count_shadow_nodes+0x6a/0x230 [ 613.590403][T21005] do_shrink_slab+0x63/0x6a0 [ 613.595101][T21005] shrink_slab+0x538/0x880 [ 613.599594][T21005] shrink_node+0x6bc/0x2130 [ 613.604260][T21005] do_try_to_free_pages+0x408/0xc80 [ 613.609481][T21005] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 613.615454][T21005] try_charge_memcg+0x37e/0xa10 [ 613.620387][T21005] __mem_cgroup_charge+0x65/0x150 [ 613.625493][T21005] shmem_get_folio_gfp+0x47b/0xd60 [ 613.630696][T21005] shmem_write_begin+0xfc/0x1f0 [ 613.635543][T21005] generic_perform_write+0x183/0x490 [ 613.640953][T21005] shmem_file_write_iter+0xc5/0xf0 [ 613.646163][T21005] __kernel_write_iter+0x319/0x590 [ 613.651530][T21005] dump_user_range+0xa7d/0xdb0 [ 613.656575][T21005] elf_core_dump+0x21a2/0x2330 [ 613.661335][T21005] coredump_write+0xacc/0xdd0 [ 613.666099][T21005] vfs_coredump+0x26c7/0x3130 [ 613.670815][T21005] get_signal+0xd80/0xf60 [ 613.675149][T21005] arch_do_signal_or_restart+0x96/0x450 [ 613.680868][T21005] irqentry_exit+0xf7/0x520 [ 613.685379][T21005] asm_exc_page_fault+0x26/0x30 [ 613.690221][T21005] [ 613.692621][T21005] value changed: 0x0000000100006fb3 -> 0x0000000100006fb5 [ 613.699973][T21005] [ 613.702321][T21005] Reported by Kernel Concurrency Sanitizer on: [ 613.708653][T21005] CPU: 0 UID: 0 PID: 21005 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 613.719950][T21005] Tainted: [W]=WARN [ 613.723834][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.734400][T21005] ================================================================== [ 613.742646][ T28] audit: type=1400 audit(585.752:108894): avc: denied { allowed } for pid=21301 comm="syz.9.4271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 613.755805][T21015] Memory cgroup stats for /syz6: [ 613.761902][T21015] cache 307666944 [ 613.770620][T21015] rss 380928 [ 613.773836][T21015] shmem 307666944 [ 613.783401][T21015] mapped_file 0 [ 613.787857][T21015] dirty 0 [ 613.790934][T21015] writeback 0 [ 613.794218][T21015] workingset_refault_anon 77 [ 613.824378][ T28] audit: type=1400 audit(585.752:108895): avc: denied { create } for pid=21301 comm="syz.9.4271" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 613.875527][T14609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.931240][T21015] workingset_refault_file 2004 [ 613.939902][ T28] audit: type=1400 audit(585.827:108896): avc: denied { prog_load } for pid=21300 comm="syz.0.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 613.947886][T21015] swap 127696896 [ 613.993602][ T28] audit: type=1400 audit(585.827:108897): avc: denied { bpf } for pid=21300 comm="syz.0.4273" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.040026][ T28] audit: type=1400 audit(585.827:108898): avc: denied { perfmon } for pid=21300 comm="syz.0.4273" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.123652][T21015] swapcached 165195776 [ 614.199184][T21015] pgpgin 448957 [ 614.216632][T21318] loop7: detected capacity change from 0 to 1024 [ 614.268197][T21318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.386882][T21015] pgpgout 373738 [ 614.390966][T21015] pgfault 376621 [ 614.396146][T21015] pgmajfault 44 [ 614.400150][T21015] inactive_anon 46346240 [ 614.404809][T21015] active_anon 261206016 [ 614.410496][T21015] inactive_file 0 [ 614.414833][T21015] active_file 20480 [ 614.419930][T21015] unevictable 0 [ 614.424104][T21015] hierarchical_memory_limit 314572800 [ 614.431083][T21015] hierarchical_memsw_limit 9223372036854771712 [ 614.438486][T21015] total_cache 307666944 [ 614.443134][T21015] total_rss 380928 [ 614.447673][T21015] total_shmem 307666944 [ 614.453611][T21015] total_mapped_file 0 [ 614.457656][T21015] total_dirty 0 [ 614.523270][T21015] total_writeback 0 [ 614.590561][T21015] total_workingset_refault_anon 77 [ 614.609425][T12780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.649833][T21015] total_workingset_refault_file 2004 [ 614.696034][T21015] total_swap 127696896 [ 614.735317][T21015] total_swapcached 165195776 [ 614.804222][T21015] total_pgpgin 448957 [ 614.831264][T21015] total_pgpgout 373738 [ 614.878635][T21015] total_pgfault 376621 [ 614.882791][T21015] total_pgmajfault 44 [ 614.913699][T21015] total_inactive_anon 46346240 [ 614.932068][T21015] total_active_anon 261206016 [ 614.944319][T21015] total_inactive_file 0 [ 614.953083][T21015] total_active_file 20480 [ 614.957464][T21015] total_unevictable 0 [ 614.961546][T21015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=20989,uid=0 [ 614.976465][T21015] Memory cgroup out of memory: Killed process 20989 (syz.6.4190) total-vm:90452kB, anon-rss:1352kB, file-rss:49536kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 615.224753][T21015] syz.6.4190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 615.318888][T21015] CPU: 0 UID: 0 PID: 21015 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 615.318946][T21015] Tainted: [W]=WARN [ 615.318973][T21015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.319051][T21015] Call Trace: [ 615.319059][T21015] [ 615.319068][T21015] __dump_stack+0x1d/0x30 [ 615.319093][T21015] dump_stack_lvl+0x95/0xd0 [ 615.319181][T21015] dump_stack+0x15/0x1b [ 615.319201][T21015] dump_header+0x80/0x240 [ 615.319224][T21015] oom_kill_process+0x295/0x350 [ 615.319248][T21015] out_of_memory+0x97d/0xb80 [ 615.319281][T21015] try_charge_memcg+0x62e/0xa10 [ 615.319317][T21015] __mem_cgroup_charge+0x65/0x150 [ 615.319343][T21015] shmem_get_folio_gfp+0x47b/0xd60 [ 615.319401][T21015] shmem_write_begin+0xfc/0x1f0 [ 615.319426][T21015] generic_perform_write+0x183/0x490 [ 615.319538][T21015] shmem_file_write_iter+0xc5/0xf0 [ 615.319568][T21015] __kernel_write_iter+0x319/0x590 [ 615.319617][T21015] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 615.319645][T21015] dump_user_range+0xa7d/0xdb0 [ 615.319848][T21015] elf_core_dump+0x21a2/0x2330 [ 615.319879][T21015] ? 0xffffffffff600000 [ 615.319932][T21015] coredump_write+0xacc/0xdd0 [ 615.319965][T21015] vfs_coredump+0x26c7/0x3130 [ 615.319991][T21015] ? __memcg_slab_free_hook+0xc4/0x240 [ 615.320016][T21015] ? __sigqueue_free+0xf4/0x130 [ 615.320115][T21015] ? proc_coredump_connector+0x160/0x2b0 [ 615.320205][T21015] ? __sigqueue_free+0xf4/0x130 [ 615.320229][T21015] ? kmem_cache_free+0xc8/0x380 [ 615.320252][T21015] get_signal+0xd80/0xf60 [ 615.320338][T21015] arch_do_signal_or_restart+0x96/0x450 [ 615.320368][T21015] irqentry_exit+0xf7/0x520 [ 615.320395][T21015] asm_exc_page_fault+0x26/0x30 [ 615.320415][T21015] RIP: 0033:0x7f3c69b42777 [ 615.320439][T21015] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 615.320458][T21015] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 615.320543][T21015] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 615.320558][T21015] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 615.320572][T21015] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 615.320585][T21015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 615.320598][T21015] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 615.320636][T21015] [ 615.320660][T21015] memory: usage 307052kB, limit 307200kB, failcnt 14698 [ 615.681116][T21015] memory+swap: usage 431904kB, limit 9007199254740988kB, failcnt 0 [ 615.750246][T21015] kmem: usage 5960kB, limit 9007199254740988kB, failcnt 0 [ 615.806978][T21015] Memory cgroup stats for /syz6: [ 615.807323][T21015] cache 308133888 [ 615.815988][T21015] rss 176128 [ 615.891683][T21015] shmem 308133888 [ 615.895346][T21015] mapped_file 0 [ 615.899059][T21015] dirty 0 [ 615.958256][T21015] writeback 0 [ 615.961698][T21015] workingset_refault_anon 77 [ 616.007698][T21015] workingset_refault_file 2004 [ 616.035953][T21015] swap 127696896 [ 616.039540][T21015] swapcached 174460928 [ 616.058710][T21015] pgpgin 457678 [ 616.063003][T21015] pgpgout 382371 [ 616.066907][T21015] pgfault 377172 [ 616.070449][T21015] pgmajfault 44 [ 616.075046][T21015] inactive_anon 214401024 [ 616.079394][T21015] active_anon 93003776 [ 616.083521][T21015] inactive_file 0 [ 616.088578][T21015] active_file 20480 [ 616.092408][T21015] unevictable 0 [ 616.097001][T21015] hierarchical_memory_limit 314572800 [ 616.102419][T21015] hierarchical_memsw_limit 9223372036854771712 [ 616.116493][T21015] total_cache 308133888 [ 616.120978][T21015] total_rss 176128 [ 616.124711][T21015] total_shmem 308133888 [ 616.150028][T21015] total_mapped_file 0 [ 616.154102][T21015] total_dirty 0 [ 616.157551][T21015] total_writeback 0 [ 616.169164][T21015] total_workingset_refault_anon 77 [ 616.174367][T21015] total_workingset_refault_file 2004 [ 616.179743][T21015] total_swap 127696896 [ 616.201188][T21015] total_swapcached 174460928 [ 616.205804][T21015] total_pgpgin 457678 [ 616.209805][T21015] total_pgpgout 382371 [ 616.233272][T21015] total_pgfault 377172 [ 616.237477][T21015] total_pgmajfault 44 [ 616.241601][T21015] total_inactive_anon 214401024 [ 616.254646][T21015] total_active_anon 93003776 [ 616.259329][T21015] total_inactive_file 0 [ 616.263464][T21015] total_active_file 20480 [ 616.286779][T21015] total_unevictable 0 [ 616.290872][T21015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=21000,uid=0 [ 616.329598][T21015] Memory cgroup out of memory: Killed process 21000 (syz.6.4190) total-vm:90452kB, anon-rss:1228kB, file-rss:50368kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 618.533144][ T29] oom_reaper: reaped process 21000 (syz.6.4190), now anon-rss:0kB, file-rss:32816kB, shmem-rss:0kB [ 618.569834][T21014] syz.6.4190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 618.612071][T21014] CPU: 1 UID: 0 PID: 21014 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 618.612132][T21014] Tainted: [W]=WARN [ 618.612139][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.612153][T21014] Call Trace: [ 618.612161][T21014] [ 618.612171][T21014] __dump_stack+0x1d/0x30 [ 618.612229][T21014] dump_stack_lvl+0x95/0xd0 [ 618.612257][T21014] dump_stack+0x15/0x1b [ 618.612329][T21014] dump_header+0x80/0x240 [ 618.612352][T21014] oom_kill_process+0x295/0x350 [ 618.612404][T21014] out_of_memory+0x97d/0xb80 [ 618.612424][T21014] try_charge_memcg+0x62e/0xa10 [ 618.612515][T21014] __mem_cgroup_charge+0x65/0x150 [ 618.612545][T21014] shmem_get_folio_gfp+0x47b/0xd60 [ 618.612575][T21014] shmem_write_begin+0xfc/0x1f0 [ 618.612597][T21014] generic_perform_write+0x183/0x490 [ 618.612665][T21014] ? current_time+0x188/0x240 [ 618.612758][T21014] shmem_file_write_iter+0xc5/0xf0 [ 618.612828][T21014] __kernel_write_iter+0x319/0x590 [ 618.612891][T21014] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 618.612995][T21014] dump_user_range+0xa7d/0xdb0 [ 618.613027][T21014] elf_core_dump+0x21a2/0x2330 [ 618.613054][T21014] ? 0xffffffffff600000 [ 618.613086][T21014] coredump_write+0xacc/0xdd0 [ 618.613115][T21014] vfs_coredump+0x26c7/0x3130 [ 618.613148][T21014] ? __memcg_slab_free_hook+0xc4/0x240 [ 618.613216][T21014] ? __sigqueue_free+0xf4/0x130 [ 618.613283][T21014] ? proc_coredump_connector+0x160/0x2b0 [ 618.613314][T21014] ? __sigqueue_free+0xf4/0x130 [ 618.613335][T21014] ? kmem_cache_free+0xc8/0x380 [ 618.613358][T21014] get_signal+0xd80/0xf60 [ 618.613390][T21014] arch_do_signal_or_restart+0x96/0x450 [ 618.613425][T21014] irqentry_exit+0xf7/0x520 [ 618.613479][T21014] asm_exc_page_fault+0x26/0x30 [ 618.613500][T21014] RIP: 0033:0x7f3c69b42777 [ 618.613518][T21014] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 618.613583][T21014] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 618.613600][T21014] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 618.613612][T21014] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 618.613625][T21014] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 618.613636][T21014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.613647][T21014] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 618.613667][T21014] [ 618.615834][T21014] memory: usage 307200kB, limit 307200kB, failcnt 20979 [ 618.877373][T21014] memory+swap: usage 421972kB, limit 9007199254740988kB, failcnt 0 [ 618.885415][T21014] kmem: usage 5808kB, limit 9007199254740988kB, failcnt 0 [ 618.892617][T21014] Memory cgroup stats for /syz6: [ 618.892925][T21014] cache 303857664 [ 618.901532][T21014] rss 176128 [ 618.904752][T21014] shmem 300187648 [ 618.908506][T21014] mapped_file 3407872 [ 618.912594][T21014] dirty 0 [ 618.915529][T21014] writeback 0 [ 618.918901][T21014] workingset_refault_anon 77 [ 618.923549][T21014] workingset_refault_file 2900 [ 618.928437][T21014] swap 123826176 [ 618.932067][T21014] swapcached 176381952 [ 618.936291][T21014] pgpgin 464617 [ 618.940221][T21014] pgpgout 390384 [ 618.944365][T21014] pgfault 377551 [ 618.947899][T21014] pgmajfault 45 [ 618.951451][T21014] inactive_anon 277307392 [ 618.955762][T21014] active_anon 22958080 [ 618.959973][T21014] inactive_file 0 [ 618.963647][T21014] active_file 3690496 [ 618.967614][T21014] unevictable 0 [ 618.971129][T21014] hierarchical_memory_limit 314572800 [ 618.976492][T21014] hierarchical_memsw_limit 9223372036854771712 [ 618.982833][T21014] total_cache 303857664 [ 618.987070][T21014] total_rss 176128 [ 618.990920][T21014] total_shmem 300187648 [ 618.995287][T21014] total_mapped_file 3407872 [ 619.000033][T21014] total_dirty 0 [ 619.003734][T21014] total_writeback 0 [ 619.007624][T21014] total_workingset_refault_anon 77 [ 619.015450][T21014] total_workingset_refault_file 2900 [ 619.023092][T21014] total_swap 123826176 [ 619.030049][T21014] total_swapcached 176381952 [ 619.037077][T21014] total_pgpgin 464617 [ 619.041326][T21014] total_pgpgout 390384 [ 619.045579][T21014] total_pgfault 377551 [ 619.049941][T21014] total_pgmajfault 45 [ 619.054309][T21014] total_inactive_anon 277307392 [ 619.059793][T21014] total_active_anon 22958080 [ 619.064385][T21014] total_inactive_file 0 [ 619.068634][T21014] total_active_file 3690496 [ 619.073475][T21014] total_unevictable 0 [ 619.077893][T21014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=21013,uid=0 [ 619.093981][T21014] Memory cgroup out of memory: Killed process 21013 (syz.6.4190) total-vm:90452kB, anon-rss:1228kB, file-rss:51328kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 619.338893][T21022] syz.6.4190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 619.422691][T21022] CPU: 1 UID: 0 PID: 21022 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 619.422784][T21022] Tainted: [W]=WARN [ 619.422792][T21022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.422860][T21022] Call Trace: [ 619.422868][T21022] [ 619.422877][T21022] __dump_stack+0x1d/0x30 [ 619.422906][T21022] dump_stack_lvl+0x95/0xd0 [ 619.423007][T21022] dump_stack+0x15/0x1b [ 619.423030][T21022] dump_header+0x80/0x240 [ 619.423068][T21022] oom_kill_process+0x295/0x350 [ 619.423093][T21022] out_of_memory+0x97d/0xb80 [ 619.423118][T21022] try_charge_memcg+0x62e/0xa10 [ 619.423150][T21022] __mem_cgroup_charge+0x65/0x150 [ 619.423182][T21022] shmem_get_folio_gfp+0x47b/0xd60 [ 619.423258][T21022] shmem_write_begin+0xfc/0x1f0 [ 619.423280][T21022] generic_perform_write+0x183/0x490 [ 619.423307][T21022] ? current_time+0x188/0x240 [ 619.423401][T21022] shmem_file_write_iter+0xc5/0xf0 [ 619.423489][T21022] __kernel_write_iter+0x319/0x590 [ 619.423516][T21022] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 619.423545][T21022] dump_user_range+0xa7d/0xdb0 [ 619.423616][T21022] elf_core_dump+0x21a2/0x2330 [ 619.423691][T21022] ? 0xffffffffff600000 [ 619.423712][T21022] coredump_write+0xacc/0xdd0 [ 619.423748][T21022] vfs_coredump+0x26c7/0x3130 [ 619.423820][T21022] ? __memcg_slab_free_hook+0xc4/0x240 [ 619.423844][T21022] ? __sigqueue_free+0xf4/0x130 [ 619.423864][T21022] ? proc_coredump_connector+0x160/0x2b0 [ 619.423960][T21022] ? __sigqueue_free+0xf4/0x130 [ 619.423978][T21022] ? kmem_cache_free+0xc8/0x380 [ 619.424004][T21022] get_signal+0xd80/0xf60 [ 619.424114][T21022] arch_do_signal_or_restart+0x96/0x450 [ 619.424149][T21022] irqentry_exit+0xf7/0x520 [ 619.424187][T21022] asm_exc_page_fault+0x26/0x30 [ 619.424241][T21022] RIP: 0033:0x7f3c69b42777 [ 619.424258][T21022] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 619.424277][T21022] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 619.424310][T21022] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 619.424339][T21022] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 619.424353][T21022] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 619.424426][T21022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 619.424498][T21022] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 619.424517][T21022] [ 619.688161][T21022] memory: usage 305988kB, limit 307200kB, failcnt 22895 [ 619.726466][T21022] memory+swap: usage 431756kB, limit 9007199254740988kB, failcnt 0 [ 619.772432][T21022] kmem: usage 5688kB, limit 9007199254740988kB, failcnt 0 [ 619.822453][T21022] Memory cgroup stats for /syz6: [ 619.822777][T21022] cache 307404800 [ 619.857291][T21022] rss 475136 [ 619.876253][T21022] shmem 307404800 [ 619.896221][T21022] mapped_file 0 [ 619.921846][T21022] dirty 0 [ 619.942674][T21022] writeback 0 [ 619.966471][T21022] workingset_refault_anon 187 [ 620.014900][T21022] workingset_refault_file 2900 [ 620.072926][T21022] swap 127504384 [ 620.076593][T21022] swapcached 186490880 [ 620.080653][T21022] pgpgin 471473 [ 620.141867][T21022] pgpgout 396257 [ 620.173548][T21022] pgfault 377953 [ 620.177216][T21022] pgmajfault 81 [ 620.222560][T21022] inactive_anon 273616896 [ 620.226940][T21022] active_anon 33341440 [ 620.263153][T21022] inactive_file 0 [ 620.277309][T21022] active_file 20480 [ 620.281530][T21022] unevictable 0 [ 620.302303][T21022] hierarchical_memory_limit 314572800 [ 620.320607][T21022] hierarchical_memsw_limit 9223372036854771712 [ 620.326841][T21022] total_cache 307404800 [ 620.348514][T21022] total_rss 475136 [ 620.357005][T21022] total_shmem 307404800 [ 620.366244][T21022] total_mapped_file 0 [ 620.370322][T21022] total_dirty 0 [ 620.378203][T21022] total_writeback 0 [ 620.382851][T21022] total_workingset_refault_anon 187 [ 620.388056][T21022] total_workingset_refault_file 2900 [ 620.402603][T21022] total_swap 127504384 [ 620.406952][T21022] total_swapcached 186490880 [ 620.411653][T21022] total_pgpgin 471473 [ 620.424108][T21022] total_pgpgout 396257 [ 620.428291][T21022] total_pgfault 377953 [ 620.432454][T21022] total_pgmajfault 81 [ 620.456137][T21022] total_inactive_anon 273616896 [ 620.461126][T21022] total_active_anon 33341440 [ 620.465741][T21022] total_inactive_file 0 [ 620.477444][T21022] total_active_file 20480 [ 620.482099][T21022] total_unevictable 0 [ 620.486083][T21022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=21021,uid=0 [ 620.530923][T21022] Memory cgroup out of memory: Killed process 21021 (syz.6.4190) total-vm:90452kB, anon-rss:1380kB, file-rss:54144kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 620.839628][T21024] syz.6.4190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 620.908107][T21024] CPU: 1 UID: 0 PID: 21024 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 620.908145][T21024] Tainted: [W]=WARN [ 620.908197][T21024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.908208][T21024] Call Trace: [ 620.908216][T21024] [ 620.908229][T21024] __dump_stack+0x1d/0x30 [ 620.908281][T21024] dump_stack_lvl+0x95/0xd0 [ 620.908302][T21024] dump_stack+0x15/0x1b [ 620.908402][T21024] dump_header+0x80/0x240 [ 620.908422][T21024] oom_kill_process+0x295/0x350 [ 620.908446][T21024] out_of_memory+0x97d/0xb80 [ 620.908469][T21024] try_charge_memcg+0x62e/0xa10 [ 620.908528][T21024] __mem_cgroup_charge+0x65/0x150 [ 620.908552][T21024] shmem_get_folio_gfp+0x47b/0xd60 [ 620.908578][T21024] shmem_write_begin+0xfc/0x1f0 [ 620.908713][T21024] generic_perform_write+0x183/0x490 [ 620.908740][T21024] ? current_time+0x188/0x240 [ 620.908827][T21024] shmem_file_write_iter+0xc5/0xf0 [ 620.908937][T21024] __kernel_write_iter+0x319/0x590 [ 620.908966][T21024] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 620.909044][T21024] dump_user_range+0xa7d/0xdb0 [ 620.909076][T21024] elf_core_dump+0x21a2/0x2330 [ 620.909115][T21024] ? 0xffffffffff600000 [ 620.909140][T21024] coredump_write+0xacc/0xdd0 [ 620.909172][T21024] vfs_coredump+0x26c7/0x3130 [ 620.909204][T21024] ? __memcg_slab_free_hook+0xc4/0x240 [ 620.909264][T21024] ? __sigqueue_free+0xf4/0x130 [ 620.909310][T21024] ? proc_coredump_connector+0x160/0x2b0 [ 620.909338][T21024] ? __sigqueue_free+0xf4/0x130 [ 620.909361][T21024] ? kmem_cache_free+0xc8/0x380 [ 620.909431][T21024] get_signal+0xd80/0xf60 [ 620.909476][T21024] arch_do_signal_or_restart+0x96/0x450 [ 620.909510][T21024] irqentry_exit+0xf7/0x520 [ 620.909590][T21024] asm_exc_page_fault+0x26/0x30 [ 620.909613][T21024] RIP: 0033:0x7f3c69b42777 [ 620.909630][T21024] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 620.909647][T21024] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 620.909663][T21024] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 620.909674][T21024] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 620.909686][T21024] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 620.909700][T21024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 620.909711][T21024] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 620.909729][T21024] [ 620.915521][T21024] memory: usage 307200kB, limit 307200kB, failcnt 25979 [ 621.175508][T21024] memory+swap: usage 431572kB, limit 9007199254740988kB, failcnt 0 [ 621.183863][T21024] kmem: usage 5504kB, limit 9007199254740988kB, failcnt 0 [ 621.191422][T21024] Memory cgroup stats for /syz6: [ 621.191695][T21024] cache 308088832 [ 621.200811][T21024] rss 323584 [ 621.204109][T21024] shmem 308084736 [ 621.207868][T21024] mapped_file 0 [ 621.211630][T21024] dirty 0 [ 621.214565][T21024] writeback 0 [ 621.217906][T21024] workingset_refault_anon 187 [ 621.222755][T21024] workingset_refault_file 2900 [ 621.227672][T21024] swap 127676416 [ 621.231403][T21024] swapcached 189042688 [ 621.235531][T21024] pgpgin 478974 [ 621.239040][T21024] pgpgout 403641 [ 621.242754][T21024] pgfault 378357 [ 621.246383][T21024] pgmajfault 81 [ 621.251449][T21024] inactive_anon 161615872 [ 621.256207][T21024] active_anon 146477056 [ 621.265704][T21024] inactive_file 0 [ 621.272935][T21024] active_file 20480 [ 621.276786][T21024] unevictable 0 [ 621.298124][T21024] hierarchical_memory_limit 314572800 [ 621.317655][T21024] hierarchical_memsw_limit 9223372036854771712 [ 621.354128][T21024] total_cache 308088832 [ 621.358488][T21024] total_rss 323584 [ 621.362201][T21024] total_shmem 308084736 [ 621.418237][T21024] total_mapped_file 0 [ 621.422312][T21024] total_dirty 0 [ 621.425947][T21024] total_writeback 0 [ 621.471740][T21024] total_workingset_refault_anon 187 [ 621.477052][T21024] total_workingset_refault_file 2900 [ 621.503765][T21024] total_swap 127676416 [ 621.520055][T21024] total_swapcached 189042688 [ 621.541896][T21024] total_pgpgin 478974 [ 621.559722][T21024] total_pgpgout 403641 [ 621.572356][T21024] total_pgfault 378357 [ 621.580153][T21024] total_pgmajfault 81 [ 621.593195][T21024] total_inactive_anon 161615872 [ 621.610649][T21024] total_active_anon 146477056 [ 621.615621][T21024] total_inactive_file 0 [ 621.619845][T21024] total_active_file 20480 [ 621.640771][T21024] total_unevictable 0 [ 621.664118][T21024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=21003,uid=0 [ 621.728267][T21024] Memory cgroup out of memory: Killed process 21003 (syz.6.4190) total-vm:90452kB, anon-rss:1344kB, file-rss:54144kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 622.229341][T21014] syz.6.4190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 622.304798][T21014] CPU: 1 UID: 0 PID: 21014 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 622.304854][T21014] Tainted: [W]=WARN [ 622.304860][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.304871][T21014] Call Trace: [ 622.304950][T21014] [ 622.304960][T21014] __dump_stack+0x1d/0x30 [ 622.304990][T21014] dump_stack_lvl+0x95/0xd0 [ 622.305056][T21014] dump_stack+0x15/0x1b [ 622.305079][T21014] dump_header+0x80/0x240 [ 622.305098][T21014] oom_kill_process+0x295/0x350 [ 622.305122][T21014] out_of_memory+0x97d/0xb80 [ 622.305165][T21014] try_charge_memcg+0x62e/0xa10 [ 622.305206][T21014] __mem_cgroup_charge+0x65/0x150 [ 622.305230][T21014] shmem_get_folio_gfp+0x47b/0xd60 [ 622.305330][T21014] shmem_write_begin+0xfc/0x1f0 [ 622.305351][T21014] generic_perform_write+0x183/0x490 [ 622.305377][T21014] ? current_time+0x188/0x240 [ 622.305405][T21014] shmem_file_write_iter+0xc5/0xf0 [ 622.305513][T21014] __kernel_write_iter+0x319/0x590 [ 622.305542][T21014] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 622.305574][T21014] dump_user_range+0xa7d/0xdb0 [ 622.305633][T21014] elf_core_dump+0x21a2/0x2330 [ 622.305667][T21014] ? 0xffffffffff600000 [ 622.305693][T21014] coredump_write+0xacc/0xdd0 [ 622.305724][T21014] vfs_coredump+0x26c7/0x3130 [ 622.305814][T21014] ? __memcg_slab_free_hook+0xc4/0x240 [ 622.305843][T21014] ? __sigqueue_free+0xf4/0x130 [ 622.305875][T21014] ? proc_coredump_connector+0x160/0x2b0 [ 622.305936][T21014] ? __sigqueue_free+0xf4/0x130 [ 622.305955][T21014] ? kmem_cache_free+0xc8/0x380 [ 622.305977][T21014] get_signal+0xd80/0xf60 [ 622.306011][T21014] arch_do_signal_or_restart+0x96/0x450 [ 622.306098][T21014] irqentry_exit+0xf7/0x520 [ 622.306142][T21014] asm_exc_page_fault+0x26/0x30 [ 622.306164][T21014] RIP: 0033:0x7f3c69b42777 [ 622.306179][T21014] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 622.306194][T21014] RSP: 002b:00007f3c686a7120 EFLAGS: 00010202 [ 622.306263][T21014] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c69c8c799 [ 622.306275][T21014] RDX: 00007f3c686a7140 RSI: 00007f3c686a7270 RDI: 000000000000000b [ 622.306330][T21014] RBP: 00007f3c69d22bd9 R08: 0000000000000000 R09: 0000000000000000 [ 622.306359][T21014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 622.306370][T21014] R13: 00007f3c69f06128 R14: 00007f3c69f06090 R15: 00007ffff6230cd8 [ 622.306388][T21014] [ 622.873665][T21014] memory: usage 307200kB, limit 307200kB, failcnt 29656 [ 622.880643][T21014] memory+swap: usage 431756kB, limit 9007199254740988kB, failcnt 0 [ 622.889550][T21014] kmem: usage 5404kB, limit 9007199254740988kB, failcnt 0 [ 622.897371][T21014] Memory cgroup stats for /syz6: [ 622.897782][T21014] cache 308305920 [ 622.907610][T21014] rss 585728 [ 622.910929][T21014] shmem 308305920 [ 622.914563][T21014] mapped_file 0 [ 622.918766][T21014] dirty 0 [ 622.921693][T21014] writeback 0 [ 622.925041][T21014] workingset_refault_anon 330 [ 622.931211][T21014] workingset_refault_file 4542 [ 622.935988][T21014] swap 127545344 [ 622.940582][T21014] swapcached 196251648 [ 622.945175][T21014] pgpgin 498604 [ 622.949238][T21014] pgpgout 423155 [ 622.952774][T21014] pgfault 379415 [ 622.956824][T21014] pgmajfault 149 [ 622.960989][T21014] inactive_anon 35123200 [ 622.965306][T21014] active_anon 273633280 [ 622.970248][T21014] inactive_file 0 [ 622.973875][T21014] active_file 20480 [ 622.977922][T21014] unevictable 0 [ 622.982555][T21014] hierarchical_memory_limit 314572800 [ 622.988047][T21014] hierarchical_memsw_limit 9223372036854771712 [ 622.995473][T21014] total_cache 308305920 [ 622.999808][T21014] total_rss 585728 [ 623.003643][T21014] total_shmem 308305920 [ 623.007839][T21014] total_mapped_file 0 [ 623.011869][T21014] total_dirty 0 [ 623.015392][T21014] total_writeback 0 [ 623.019401][T21014] total_workingset_refault_anon 330 [ 623.024674][T21014] total_workingset_refault_file 4542 [ 623.030022][T21014] total_swap 127545344 [ 623.034298][T21014] total_swapcached 196251648 [ 623.039146][T21014] total_pgpgin 498604 [ 623.043252][T21014] total_pgpgout 423155 [ 623.047673][T21014] total_pgfault 379415 [ 623.052079][T21014] total_pgmajfault 149 [ 623.056319][T21014] total_inactive_anon 35123200 [ 623.061413][T21014] total_active_anon 273633280 [ 623.066273][T21014] total_inactive_file 0 [ 623.070416][T21014] total_active_file 20480 [ 623.075297][T21014] total_unevictable 0 [ 623.079279][T21014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4190,pid=21015,uid=0 [ 623.094471][T21014] Memory cgroup out of memory: Killed process 21015 (syz.6.4190) total-vm:90452kB, anon-rss:1380kB, file-rss:54144kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 623.300318][T20994] syz.6.4190 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 623.385303][T20994] CPU: 1 UID: 0 PID: 20994 Comm: syz.6.4190 Tainted: G W syzkaller #0 PREEMPT(full) [ 623.385372][T20994] Tainted: [W]=WARN [ 623.385381][T20994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.385393][T20994] Call Trace: [ 623.385462][T20994] [ 623.385470][T20994] __dump_stack+0x1d/0x30 [ 623.385528][T20994] dump_stack_lvl+0x95/0xd0 [ 623.385554][T20994] dump_stack+0x15/0x1b [ 623.385646][T20994] dump_header+0x80/0x240 [ 623.385672][T20994] oom_kill_process+0x295/0x350 [ 623.385696][T20994] out_of_memory+0x97d/0xb80 [ 623.385720][T20994] try_charge_memcg+0x62e/0xa10 [ 623.385813][T20994] __mem_cgroup_charge+0x65/0x150 [ 623.385843][T20994] filemap_add_folio+0x110/0x350 [ 623.385869][T20994] __filemap_get_folio_mpol+0x326/0x680 [ 623.385890][T20994] filemap_fault+0x486/0xb90 [ 623.385980][T20994] ? _raw_spin_lock+0x52/0xa0 [ 623.386056][T20994] __do_fault+0xbc/0x200 [ 623.386075][T20994] handle_mm_fault+0x11d7/0x3020