last executing test programs: 4.44797823s ago: executing program 3 (id=1265): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504000000", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c00028005002600010000000500290000000000060009000500000005002d"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x2000000, 0x0) 3.418562973s ago: executing program 3 (id=1272): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x9, 0xffffffff, 0xffff, 0x400e0a, 0x1, "203c5e0000ff765e006690ffdfff61fffffff2", 0x80000000, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.290236829s ago: executing program 3 (id=1274): bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00001000000000000000fbdbdf2503000500000000200200fffcffffffff0000000000000000080012000000010000000000000000000600ff00000000000000000000000000000000000000000000000000000000000a0101030000000000000000000000000300060000000000020000"], 0x80}}, 0x0) 3.289674219s ago: executing program 3 (id=1275): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60) recvmsg(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/243, 0xf3}, {&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000640)=""/208, 0xd0}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000740)=""/51, 0x33}, {&(0x7f0000000780)=""/148, 0x94}], 0x9, &(0x7f0000000900)=""/180, 0xb4}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="54009bbee3000003000000000003000000000200", @ANYRES32=0x0, @ANYBLOB="fab0817dbcedf71a20001280110001006272696467655f736c617665000000000800058004001800140003006272696467655f736c6176655f300000"], 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2000}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000a40)="0446f3d9f9cd8103022e23a57720e1ea07a52cb8818af10d551e12fda6aaaac4c3158a71abf79269198f65b6d61102668b5971ebdd881b88c3356e1cf72da55b1dbacd87a0d4c984c844d84edb5e46e43e0fd0f38aa35eec25856ebf3077a07634afe09d607d3f3229edaddd4cca1a3c5b4377a4a9d7c94bb24f4bea4db7ea1be7a76b00958bc8906547fa09327ab3109a46ed852c6b6ae4b8aa0f6934d1d97e032b75a056b8723a85bc26fdbe56d52fd0a76bad211a3fcde7ff42811f970cec0a25df2ebfc9f8374dd7", 0xca}, {&(0x7f0000000b40)="d03ee97cf82e1422126398bf1c1ebb177498b2f1d0b3f953d465067a562b5be14857cfcf18a6505a0d059d341833e0febb6f3d89a8d81e06c2735e8a432b03183143", 0x42}, {&(0x7f0000000bc0)="5a038c4fd788eaab66247c2e394065e086ef09c7866ad6a63a3477079ec470191e183543a1a488705ade3d49bc4be5f46a1a1277be1829f570196c54a9f30ce7862bbe42589aa75b12432f9a4861049a7c6d5d6c85c206b74b92a472c55849cd8b56f456526c3ab89726035ade72f0454edec925f1e1e54fb78d7f5d3cb6aea0e24b2eed04c9f3c2fd280ff8d4e9e128", 0x90}, {&(0x7f0000000c80)="2ad345102c5062d756cdb2fb0c9a37fa7ce055621d9ef49f26408c142342037fafb1ea89ccbc3e4677b05c9b9a1dbef46e02e5ea09b0c76b6e91e693235819d4b958d57079955c77d5d83868457b5c25be4bc73d7c593f3f0e26791fcbf9c6fc0fad2cedb3355fd3700b97fd467a3fbc5f0de0f66a87fccdfb7317", 0x7b}], 0x4}}, {{&(0x7f0000000d40)={0xa, 0x4e21, 0x6, @mcast2, 0x5}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000d80)="2902b2e5e13e70f3f7153ad9c87c0e6c7114acf3b6b549f1e8772061c83215b6972b9c521fad39ffc07ff940455ac9ca008964118450063052fdf74f79dbe119b5f13d4f3689", 0x46}, {&(0x7f0000000e00)="364d86bf6cfba06f6d3805c069cb62302c66e4aeb416536caeba24b959707b288320f771cd0ecc11d98755dc12f8b11c7b87da16f9cb7fec80d978cc0162", 0x3e}], 0x2, &(0x7f0000000e80)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x8, 0xd, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x0, 0x39, "d5b609f630929804069ab34abcfe682de412e2411e7e2c2c80a985853e9d118080e3c92d5154db64dee6d21598f8d08463791896143df6218b"}, @generic={0x6, 0x2c, "303554f6e05c16bddc753908b4965ab8f63fc9cc0ce4ef0f84d8ff78faa3d1ba5b14ccc2c745ca85e0527379"}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000f40)="0b4b09b4b156164451223f76fc94424c6fcf1b31405d2110ef3a93bf537541bab05ddfe6b03d94034cced0c930062fef7db89e51ea308c205cc47eb950821b4d2cf8db13a7a28cec7479ef2a48dd567facb6f451a65e367c43a325fdd7a9876cd8036317c540f6a7e6c57992192820104073d0b6e1ad741e79e80c9c1db0161190f39fd116ceed329e5207a5e9c2da37fd459d2d54e01e6a9111cc29dfb4f06335", 0xa1}, {&(0x7f0000001000)="4138e652c8a04f85f22a2b0d22db160760541d6425af5984ae3dd0e2ba1ffa0450e8ff15e14ef5ee5bee2257193ed6a1521a638ff8ca93266661e86e7bcca73cf7b0db9b69a80b9a806368bdab385ef27713689eacb8d0d0134b4fb88ca19a00ad10013c7831c442e7f28fade1197183d47c50dd4161d06b63b0c9a120dfdbb32e86d760cd4e4773b5bdfc3d88abd0f63c731af99a57e06e078aba7d1e1092537d43503035ffc05dfb96ac1e0012da1a839b9aa1264d426b39b54e6a2b9f6da99a9846ae9ca46b58138e41b3092b221151c50175a0270bd45be329aa7452f820bd11ff7116c9", 0xe6}, {&(0x7f0000001100)="3665074fe02a293fea0d2480241274a18931486f030607f9b6114ad176bf814032209f1d5a1f8b57bc606a73c0121c93bf3c049478b82800117099ebffc6524f2d2951bb33ecfc662c92faca1afd00326be90d16d3a27271dee24f6a40c4f7603c17f265ac5f3f40fd4b8ee525a673c765764bfec9b78a1ff8bced23eb56", 0x7e}, {&(0x7f0000001180)="2e18e5ddf675648cf7d352102995c64a6ba744f55768a55ff56bbf7d3e659893e51e97003bf1710bfb116881e5a22cabfdc60a948fc006c14c1a7195fab228639f8640e6555dd95e95c3aab0a936936938b76909c68b709ae0ebc466c33eff7b01bd3a47d1ad07bca836e92f63bfcd5448f110e911d24fe5c84e4470f03cda8bd3a76212a3e25049325c369482b26b99849200", 0x93}, {&(0x7f0000001240)="cbcbd7819e6f4f5a51f709defe6355ac652f3354edf774972bc89ff9a28172e5cc4d63472fec532b45b4cf7d78642f99d57530ea81f89ce302653eba445b0402ca545f314dd2bfe6c30da2e753b400f6538f487461376aa4ac519f4d589792a0772750142f35ab999ef272982615d117df3d5de29d7c6f041f2076e838e0e1465e63a2d82248ff8584e9a185e61b97a98208efed3552a3a5c6800261ea3f3c32a14da765b9731c66069569a8ff688707d36f5ff8d242650dfd781b2b28dbe6036edb9a0ef46ff29028221719d1db8d9b07", 0xd1}, {&(0x7f0000001340)="4c94d127efc81d219d15fbff34df1c758430a3197cca92d09de1df4e4669de63a5", 0x21}], 0x6, &(0x7f0000001400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xa4ff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0x4, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14}}, @rthdr={{0x78, 0x29, 0x39, {0x2e, 0xc, 0x1, 0xe, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, @rand_addr=' \x01\x00', @empty, @mcast2]}}}], 0xf8}}, {{&(0x7f0000001500)={0xa, 0x4e23, 0x4, @local, 0x3}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000001540)="abd7ccf0bda87823ea5cd891c3d442513f58daf70610de3dd12950d648e163cebe314871321c24dc4873f05e6cf31f4831f06df7b858888d08876558592ef94a04e1de72680d497e7d30ecdb8c8a60e7e4cb7de06872b6f3a600905d83e42924b6a12b9000081f514a8f65aeec1e1e05b8da94ca5b0f284332fafd2c379e8af969bbd4e7b422d9076d0b30f185f76ad3d0c57a919c652ca2e60f928450f89fd7085b661c49d80c52407fbc642418052d84e882cf218e6b65b6", 0xb9}, {&(0x7f0000001600)="3164931fda04115e9d7c4f1a14abede2c7ff5c181ddc6e5e8c913697e1a8721b07745f789b3ae315c1567253d635dd311ddc36964cb49efb6db98e40500ec559174fa5ba995879d3547440062029dfb8c8", 0x51}, {&(0x7f0000001680)="e47377c6923e1a5def37c01fc1af276e97f328576f6b3f7713465a3a57417e47d1247003b58d2027a79cd221ab3fb3050b3e92544a6d597ee098d0d9ba91989ef655802ccbffa0e9f6a580000bc136fa85d63e16067d43ced2e35d72fa00532e43d61814c8e1ea66afae313ed0341da389a17c19b076a6d1c63be9ea6189422fc0eabe36d1f45f0ca9bab295abf913d0d9652e229005ec3475556f8b57935eadd48076924524be0fc01b1aca59940a9555a7ff9ba0fd1b06", 0xb8}], 0x3, &(0x7f0000001780)=[@tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @hopopts={{0x128, 0x29, 0x36, {0x21, 0x21, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x2, 0x8, 0x0]}}, @generic={0x7, 0xdf, "646c239f48fe06adb67bc328f72a2dca39bbae52c0812f4bcc07afb02161e5de51ef20ea57d0de07bcfbc48efd70d67e05516c26e0f02c23e92da1ee3a2298613a91ff9e241263157f14b2770a8614760093a43fa428522b4572ebc4db4a4476c2453dd444228a46ce3643d54e13755360ce4527e5bb14f823baa6545ecf12608c474a30edbd32d99f0c9e31ef7d4e94f69835723904af592c9443185bd346119f5d26431a72dc3d95963f1f0ce0f89c5745969447f8933406b3f26f80b7144f0010779a6475099f26c907e87899c370e9715babc8404e006aa3c10d28c0a0"}]}}}], 0x140}}, {{&(0x7f00000018c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x101}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001900)="5cb2a64e", 0x4}, {&(0x7f0000001940)="08fe1436dcd55e9242529e61338eb10aadb419fa07ad28bb170532dc97582ba1db96db39aeceaf0c3a7ec14caf7bb220efb2877ad80338ed750c10611b13c39934c661001a4b7d25d16f4d0035feb82c656272dad92b021dc41f6cf0d4e7197fab497b0bfd3afd22942fb7ed89d87ceea212c206edf8f3fdbcaa687bb73eb0675cce5b525e11e8d2a5a036d18ffdd8511564ceacc1b8dee5f5888d274be3a3cbb8e5472a054ed5b1f9ca9b92cb2925e3046881bd96a101560666ceda6d4c14d716cb779279adf3c3aefbeb6715d95885ca24b7d0649a3c061c", 0xd9}, {&(0x7f0000001a40)="0322d2529a078aea55054b5058808a341a5bcab5e1639f0d1491476ea1a5d96931090f915c85ae03fc276b2c0dd8dc293893b16ce8c9192e003669692897fa9efdd38bcd111b2ca369a5735e7626a8530f930ba3f02a8aa49c15c65382cf66308babe924a5cefe0e4f98308c45b43e5337e8c9802eaf3e1246a8604bdbb0d3b923d546b6331219ee9e02232d4b8f59279f26a89aaff71583bbae5c5e087280a60e74304dcdaacebeca7cf564d33ab0bae7de1fa1937fb789f34c4c0b6b07dbc7d02d22eab42ae4e35f39c364f96c8920cb8b88cc1de32aba15c92920f5708ce1d09f6d486d4a36b8016cef15cb", 0xed}, {&(0x7f0000001b40)="1f9431cfec0eee3139cd0cc2d60e8833b145c715b8a4c4c46f968ab955b019fd23755bd601f3331e2e6d601f966920e85a5d763c911ef9354c349d28663dfc1f00c6500825918b61f66ca722415cd9eda0d3f8277587efe335e9ae022c99816cf9a89bcc1c1185d06577ce33ffec0b33296668c5894ba970f2f6e692c7bcdfdf3b30d3f97c383fcee61df834e8f85a8ce0e5c1d27e42e51ae7a53ba29e", 0x9d}, {&(0x7f0000001c00)="48d5dff46b4d", 0x6}, {&(0x7f0000001c40)="c6be3b327d6bf07fcac783318b30c4516bbb97ddcabf3022c0941fff5424a7c103696b71e49bcccdaa785468f580d2d471721d7ab80810c6885a874c2705bd0f61568884655c5d08e40b331599ef27f412ecbe4fad5d16ba4c8e105a305124b1f569acbf34d57edbd0fb8e9d48604c4322a0b1630ddf18318a97dc7a8650867c4d7c8042e2d764e1c64013bc481e396c041f5ae932fceb1180417a", 0x9b}, {&(0x7f0000001d00)="90d74d8aa38f3518696b149e67d39c24050fe92f561e2dc4eec6f858c24b2c58547e71efca259187848fccfb35d4a6fcdbd5b1c727b48a21258ef31b49282858be013a658837a12611e84ac2307e2b3b3bf5514a060dc42193209251aa9b9870e550500e643a98170fd9d4a3f00f97f177c60f253562dbd07b838a6eb8aebb2fcdda18bf3d6743fa4bdc0be439eefd62733ff290af20b038d2b5972ba603a607c77b35bc4dce4e722ce50c3f8e9a6515a3c0338fa117dd8dfb83b17fba2b2b1cabd65171f430d0546b8aea995bba29ee1ca0a75a3de670efbc5cfa72", 0xdc}, {&(0x7f0000001e00)="d154998f2d0bb93ed4af4653744c075e6ab0c03fb275eccb03a3f069925ef7e6023302962414ca7614cc8b7fc9afc5dbccdefcc76256fd55d237fd9ce38b75c2ce5ed21bab0665a66075348e0e106710f0c7eb082b", 0x55}], 0x8}}], 0x5, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000002040), 0x2, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000020c0)={0x4, 0x80, 0xf3, 0x80, 0x1, 0x7, 0x0, 0x3c4b, 0x20, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000002080), 0x8}, 0xa020, 0x1, 0x8, 0x7, 0x64ef, 0xe603, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x21, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, 0x0, 0x4000840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0xfffffffd, 0x9, 0x3, 0x1, 0x1, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3b5a7dd1, 0x10000, 0xa895, 0x7, 0xf, 0x20f8019b}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xaf88, 0x3, 0xffffff81}}]}]}}}]}, 0x90}}, 0x10) 3.2391876s ago: executing program 4 (id=1276): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x100, &(0x7f0000000700)=0xd, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) accept$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x50, 0x0, &(0x7f00000000c0)) 2.96410053s ago: executing program 4 (id=1278): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d0001002abd7000000000000800000050a5981cb732a375ad3bf9d0feee5916f0cd1e88b9d28b574dd009410bcbfb3583e373238ee5374442f70dba83994e2ec93afc1809fe34", @ANYRES32=r0, @ANYBLOB="0b00008000101e5738ebf7000500018088000000"], 0x2c}], 0x1}, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x7, 0x1c00, 0x2}) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x4, 0x3, 0xc4, 0x0, 0x5, "fb6928e694a8a9c5bd9db226f554f46954467d", 0x4, 0xa}) 2.930836104s ago: executing program 4 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x22, 0x80801, 0x3) close(0x3) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) syz_emit_ethernet(0x12c, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = msgget$private(0x0, 0x80) msgrcv(r5, 0x0, 0x0, 0x0, 0x2000) msgrcv(r5, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x24, 0x8}, 0x0, 0x0, 0x4, 0x9, 0xe, 0x29, 0xea51d77, 0x0, 0x9, 0x1}) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)="81", 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x2, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = msgget$private(0x0, 0x722) msgsnd(r6, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES8=r3], 0x8, 0x800) msgrcv(r6, 0x0, 0x0, 0xffffff7f00000000, 0x0) 2.914265811s ago: executing program 1 (id=1280): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000080)=""/138, 0x8a}], 0x2, 0x0, 0x1) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4) (async) getsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000001200efffffe924ffff040000000000000000040000006cf5b6af"], &(0x7f0000000140)=0x28) 2.700171782s ago: executing program 1 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000851}, 0x14000091) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$sndseq(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x40d, 0x30bd2c, 0x10000000, {0x0, 0x0, 0x0, 0x0, 0x4860}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.655425374s ago: executing program 1 (id=1282): unshare(0x6020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r1 = fsopen(&(0x7f0000000ec0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='async\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 2.613477996s ago: executing program 2 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket(0x10, 0x80002, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0xfffffffffffffffa, 0x2}) unlinkat(r5, &(0x7f0000000040)='./bus\x00', 0x200) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000020000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000041806aa13e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2.067372396s ago: executing program 4 (id=1284): socket(0x10, 0x803, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0xa0, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x4000000000000080, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a00)={'veth1_to_hsr\x00', &(0x7f0000000a40)=@ethtool_eeprom={0xc, 0x5, 0x8, 0x1000, "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"}}) 1.890671175s ago: executing program 0 (id=1285): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2042, 0x30, 0xa}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) r4 = syz_open_procfs(0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r11, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000004000000050000000100000040020100", @ANYRES32=r0, @ANYBLOB="000200"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="050000000500001d01000000000000400000000000000000", @ANYRES32=r3, @ANYBLOB], 0x50) r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000080)={0x0, 0xfdfd, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afa63530db6dd493f28fd98872219ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0db0a0000004413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466ffffffff0000000047778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fdc4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x2e, 0x0, 0xc}, 0x28) 1.655589801s ago: executing program 2 (id=1286): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x8001ff, 0x0, 0x5, 0x8, 0x23, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0xb, 0x4000, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xe4, 0x0, 0x1000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.368599549s ago: executing program 0 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18b4dd456fe35638}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000100)='{', 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000001140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x106, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}]}]}, 0x2c}, 0x1, 0x300}, 0x0) 1.368264679s ago: executing program 4 (id=1288): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c805) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.321579701s ago: executing program 3 (id=1289): r0 = socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x21, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'wg1\x00', 0x3}) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x4, 0xfff]) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x34}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0xfd91, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)={@val={0x18, 0xfbfb}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @multicast1}, {0xa008, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xb, 0x0, @void}}}}}}}}, 0x36) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 1.3211253s ago: executing program 1 (id=1290): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x8100000, 0x3}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) sched_setscheduler(0x0, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xc3000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xa, 0xffffffffffffffff, 0x9ea86c5105f65443) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r5 = getpid() syz_pidfd_open(r5, 0x0) syz_open_procfs(r5, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 1.320774461s ago: executing program 2 (id=1291): r0 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, 0x0, 0x0, 0xf9f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x5fbf, 0x300) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000006c0)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dfa5ef", 0x8, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x6558, 0x8}}}}}}, 0x0) syz_clone3(&(0x7f0000000080)={0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x1e8, 0x0, 0x408, 0x408, 0x408, 0x8000000, 0x0, {[{{@arp={@multicast2, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0x0, 0xe, 0x9, {@mac, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xb856, 0xc3c9, 0xb, 0x2, 0x4, 0x6, 'ip6erspan0\x00', 'vcan0\x00', {}, {0xff}, 0x0, 0x82}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0xc, 0xfff, 'system_u:object_r:urandom_device_t:s0\x00'}}}, {{@arp={@remote, @loopback, 0x0, 0xffffffff, 0x0, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xe, 0xd735, 0x7f, 0x7f, 0x7fff, 0x3, 'bridge_slave_0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x1, 0xffffffff}}}, {{@arp={@loopback, @local, 0xff000000, 0xffffffff, 0xd, 0xa, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff]}}, 0x3, 0x0, 0xffff, 0x200, 0xd538, 0x4, 'bond_slave_1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x0, 0x4b}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r6 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000980)=@broute={'broute\x00', 0x20, 0x1, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000800], 0x0, &(0x7f00000007c0), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0xa, 0x74, 0x6004, 'veth1_to_hsr\x00', 'syzkaller0\x00', 'syz_tun\x00', 'veth0_macvtap\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff], 0x9e, 0x9e, 0xe6, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x2}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x2, 0x6, {0x6}}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1ee) io_uring_enter(r6, 0x847ba, 0x655d, 0xe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000a0016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0x24}}, 0x80) pipe(&(0x7f0000000140)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) 1.289195675s ago: executing program 4 (id=1292): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x20000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000001140)=ANY=[@ANYRES32=r0], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2020, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x100001, 0x800000000004, @thr={&(0x7f0000001280)="4d5a4212b9e69eb76526466a45c06cbf9379b1e1349cd0cdf9c5b7236e13f261369d0c7246c32b64ab18a0fcd26861358a20f45907016133e9f04fdf145611dee3b35e839bd77a61872285e35213f08360cc6f1c48fda5d07a52f098931f858230eb15bdf64ac9e5e99d0c0a582666e327843cbca98db8461c4d32e56ccb835485ec144c3219b16aef9df6215f056f8b5ca27c3d8d288c7c146690273c6c3409d29a5f00a4939b4860d4652377794c87129c619aeb1ef3e1d15085cd2fec54db103ca9c0dc538f86537f", &(0x7f0000001180)="f7d18ac40a46bb91a17b381f2acac1baa62a407569e26c096a03cf824510ab511e85d917fde61fa3d2a363d8c4f296fde8b4a461eea9f2fd8688b9cd64b5ea496fd409d0f89d0fa1a81560a3278b1d0d3687f3fc547a9ea17ca7f72df8ed38ca18eb034a42357e4cf2f834cc68cf3b162998fa54cb19ba6991ecccac162a4f1fdd1f4ea67d9605e50c8c8c85a0099b"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = epoll_create(0x6) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000005000000000000000e00000018470000faffffff00000000000010009500000000000000b0f338fad0b58c01b704e6e5ed949d1113f64bf6d9ef960c923b71b2cce9e83af58ebacae320f3be8222ce7692e13aecc00a8c307e9ff098ffd91d09e9e41e0f2f680b428c6de147157249337979752a613a16f200000000"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0xfffffffffffffffe, 0x41100, 0x32, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x1, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r4, r0, r4, r4, r0, r4], 0x0, 0x10, 0x8}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0xb}) ppoll(&(0x7f0000000080)=[{r5, 0x522119a1964b5ac7}], 0x1, &(0x7f0000000680), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={r7, r8+60000000}, &(0x7f0000048000), 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000001380)={0x1, 0xe}) sched_getattr(r2, &(0x7f0000000080)={0x38}, 0x38, 0x0) 1.270758762s ago: executing program 0 (id=1293): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setpipe(r4, 0x407, 0x352291ea) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x3, 0x40000, {0x0, 0x0, 0x0, r5, 0x69011}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfffffffa}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) sendto$packet(r0, &(0x7f0000000040)='\a', 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) 1.264854331s ago: executing program 2 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x22, 0x80801, 0x3) close(0x3) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) syz_emit_ethernet(0x12c, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = msgget$private(0x0, 0x80) msgrcv(r5, 0x0, 0x0, 0x0, 0x2000) msgrcv(r5, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x24, 0x8}, 0x0, 0x0, 0x4, 0x9, 0xe, 0x29, 0xea51d77, 0x0, 0x9, 0x1}) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)="81", 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x2, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = msgget$private(0x0, 0x722) msgsnd(r6, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES8=r3], 0x8, 0x800) msgrcv(r6, 0x0, 0x0, 0xffffff7f00000000, 0x0) 1.025833647s ago: executing program 0 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8fffff", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0xff}, @hopopts]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 973.827118ms ago: executing program 0 (id=1296): r0 = syz_io_uring_setup(0x2afd, &(0x7f0000000380)={0x0, 0xfffffffd, 0x80, 0x10010004, 0x298}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x83, &(0x7f00000004c0)=""/131, 0x40f00, 0x41, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x10, 0xfff, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000680)=[{0x4, 0x2, 0x6}, {0x1, 0x3, 0xa, 0x3}, {0x1, 0x4, 0x2, 0xa}, {0x5, 0x1, 0xa, 0x7}, {0x0, 0x4, 0xf, 0x3}, {0x2, 0x2, 0x3, 0xb}], 0x10, 0x1000}, 0x94) poll(&(0x7f00000005c0)=[{r0, 0x88}, {r1, 0x9031}, {r0, 0x1004}, {r2, 0x1030}, {r0, 0x80}, {r1, 0xd283}], 0x6, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c66d8eac613cc5, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 673.438133ms ago: executing program 0 (id=1297): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x800000, 0x6, 0x2, 0xcb, 0x2, 0x0, 0x76, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a601000004000000030000000084b40000000000000000120500000004000000c0905cf703000000060000000000001008000000005f615f5f6100"], 0x0, 0x67, 0x0, 0x1}, 0x28) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) syz_open_dev$loop(0x0, 0x18a, 0x10400) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r4, 0xd) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8000) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x4) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x1600, 0x0, 0x3) 552.831171ms ago: executing program 3 (id=1298): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x800000, 0x6, 0x2, 0xcb, 0x2, 0x0, 0x76, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a601000004000000030000000084b40000000000000000120500000004000000c0905cf703000000060000000000001008000000005f615f5f6100"], 0x0, 0x67, 0x0, 0x1}, 0x28) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2], 0xfe, 0x122e, &(0x7f0000001280)="$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") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) syz_open_dev$loop(0x0, 0x18a, 0x10400) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r4, 0xd) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8000) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x4) pwritev2(r6, &(0x7f0000000240), 0x0, 0x1600, 0x0, 0x3) 449.696312ms ago: executing program 1 (id=1299): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, &(0x7f0000000700)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r1, &(0x7f0000000a40), 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) migrate_pages(0x0, 0x80, &(0x7f0000000680)=0x8, &(0x7f00000006c0)=0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 382.030209ms ago: executing program 2 (id=1300): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_io_uring_setup(0x4408, &(0x7f00000004c0)={0x0, 0xa069, 0x0, 0x3, 0x161, 0x0, r0}, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001a00010000000000000014001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) 193.682695ms ago: executing program 2 (id=1301): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x8001ff, 0x0, 0x5, 0x8, 0x23, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0xb, 0x4000, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xe4, 0x0, 0x1000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 1 (id=1302): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$netlink(0x10, 0x3, 0xb) (async) socket$netlink(0x10, 0x3, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast1, @multicast2}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x82, &(0x7f0000000080)={0x0, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) ioctl$sock_ifreq(0xffffffffffffffff, 0x891a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x453, 0x4, 0x70bd2a, 0x25dfdbfe, '\a'}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) (async) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x453, 0x4, 0x70bd2a, 0x25dfdbfe, '\a'}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r8 = accept4$packet(r7, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x4faa, 0x5, 0x79, 0x7}, {0x1, 0x81, 0xf8, 0xffffe343}, {0x9a, 0x2, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x820a}, {0x7ff, 0xb, 0x81, 0x100}]}, 0x10) (async) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x4faa, 0x5, 0x79, 0x7}, {0x1, 0x81, 0xf8, 0xffffe343}, {0x9a, 0x2, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x820a}, {0x7ff, 0xb, 0x81, 0x100}]}, 0x10) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): r pid=5513 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.003807][ T28] audit: type=1326 audit(1772913195.782:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 106.119185][ T28] audit: type=1326 audit(1772913195.782:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 106.159457][ T28] audit: type=1326 audit(1772913195.782:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 106.185611][ T28] audit: type=1326 audit(1772913195.782:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 106.185698][ T28] audit: type=1326 audit(1772913195.782:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 106.185727][ T28] audit: type=1326 audit(1772913195.782:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 106.215547][ T5518] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.215639][ T5518] vhci_hcd vhci_hcd.1: invalid port number 96 [ 106.215673][ T5518] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 106.289198][ T5518] loop1: detected capacity change from 0 to 512 [ 106.458765][ T5518] EXT4-fs (loop1): 1 orphan inode deleted [ 106.474261][ T5518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.538328][ T5542] random: crng reseeded on system resumption [ 106.579803][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 106.627971][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 106.678864][ T5547] netlink: 'syz.2.565': attribute type 3 has an invalid length. [ 107.515486][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.831780][ T5561] can0: slcan on ttyS3. [ 108.680813][ T5571] can0 (unregistered): slcan off ttyS3. [ 109.965535][ T5591] loop4: detected capacity change from 0 to 8192 [ 110.881788][ T5591] loop4: p1 < > p2 p4 < p5 > [ 110.895625][ T5591] loop4: partition table partially beyond EOD, truncated [ 110.922674][ T5591] loop4: p1 start 134217728 is beyond EOD, truncated [ 110.970882][ T5591] loop4: p2 size 591360 extends beyond EOD, truncated [ 111.174072][ T5591] loop4: p5 size 591360 extends beyond EOD, truncated [ 111.184364][ T5620] loop1: detected capacity change from 0 to 512 [ 111.256297][ T5620] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.579: corrupted inode contents [ 111.290683][ T5620] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.290864][ T5620] EXT4-fs (loop1): Remounting filesystem read-only [ 111.306538][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 111.306558][ C0] EXT4-fs (loop1): initial error at time 1772913201: ext4_do_update_inode:5569: inode 15 [ 111.306589][ C0] EXT4-fs (loop1): last error at time 1772913201: ext4_do_update_inode:5569: inode 15 [ 111.332791][ T5620] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -30) [ 111.351031][ T5620] EXT4-fs (loop1): 1 orphan inode deleted [ 111.357443][ T5620] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.396480][ T3310] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 111.536441][ T5642] random: crng reseeded on system resumption [ 112.334851][ T5651] can0: slcan on ttyS3. [ 113.403105][ T5661] loop3: detected capacity change from 0 to 512 [ 113.467950][ T5658] netlink: 80 bytes leftover after parsing attributes in process `syz.2.589'. [ 113.500822][ T5656] can0 (unregistered): slcan off ttyS3. [ 113.506622][ T5656] Falling back ldisc for ttyS3. [ 113.634436][ T5661] EXT4-fs: dax option not supported [ 113.721281][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 113.721293][ T28] audit: type=1400 audit(1772913203.592:679): avc: denied { map } for pid=5660 comm="syz.3.590" path="socket:[11221]" dev="sockfs" ino=11221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.570639][ T5717] can0: slcan on ttyS3. [ 115.050816][ T5725] can0 (unregistered): slcan off ttyS3. [ 115.056504][ T5725] Falling back ldisc for ttyS3. [ 115.314110][ T5731] loop1: detected capacity change from 0 to 512 [ 115.542592][ T5731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.555301][ T5731] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.787539][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.812653][ T5745] loop4: detected capacity change from 0 to 1024 [ 115.852845][ T5745] EXT4-fs: Mount option(s) incompatible with ext3 [ 115.897428][ T5737] cgroup: fork rejected by pids controller in /syz2 [ 115.982814][ T28] audit: type=1400 audit(1772913461.894:680): avc: denied { write } for pid=5762 comm="syz.1.607" path="socket:[11342]" dev="sockfs" ino=11342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.036250][ T5788] loop4: detected capacity change from 0 to 4096 [ 116.062556][ T5788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.270481][ T5808] EXT4-fs (loop4): shut down requested (1) [ 116.432496][ T28] audit: type=1400 audit(1772913462.217:681): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 116.501521][ T28] audit: type=1400 audit(1772913462.217:682): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.577534][ T28] audit: type=1400 audit(1772913462.217:683): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.654082][ T28] audit: type=1400 audit(1772913462.217:684): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.728433][ T28] audit: type=1400 audit(1772913462.217:685): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.800174][ T28] audit: type=1400 audit(1772913462.217:686): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.897427][ T5808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 116.906455][ T5808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 116.923870][ T5808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 117.070749][ T28] audit: type=1400 audit(1772913462.217:687): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.161895][ T28] audit: type=1400 audit(1772913462.842:688): avc: denied { write } for pid=5785 comm="syz.4.609" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.279830][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.545989][ T5834] loop2: detected capacity change from 0 to 512 [ 117.923167][ T5834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.935688][ T5834] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.234414][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.260019][ T5842] loop1: detected capacity change from 0 to 8192 [ 118.294318][ T5842] vfat: Unknown parameter '18446744073709551615' [ 118.418822][ T5854] loop2: detected capacity change from 0 to 1024 [ 118.475302][ T5854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.824733][ T5861] random: crng reseeded on system resumption [ 119.090444][ T5863] FAULT_INJECTION: forcing a failure. [ 119.090444][ T5863] name failslab, interval 1, probability 0, space 0, times 0 [ 119.130766][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.1.626 Tainted: G W syzkaller #0 PREEMPT(full) [ 119.130829][ T5863] Tainted: [W]=WARN [ 119.130835][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.130869][ T5863] Call Trace: [ 119.130950][ T5863] [ 119.130957][ T5863] __dump_stack+0x1d/0x30 [ 119.130988][ T5863] dump_stack_lvl+0x95/0xd0 [ 119.131015][ T5863] dump_stack+0x15/0x1b [ 119.131040][ T5863] should_fail_ex+0x263/0x280 [ 119.131063][ T5863] should_failslab+0x8c/0xb0 [ 119.131081][ T5863] kmem_cache_alloc_noprof+0x66/0x400 [ 119.131101][ T5863] ? skb_clone+0x151/0x1f0 [ 119.131131][ T5863] skb_clone+0x151/0x1f0 [ 119.131277][ T5863] __netlink_deliver_tap+0x2c9/0x500 [ 119.131306][ T5863] netlink_unicast+0x66b/0x690 [ 119.131329][ T5863] netlink_sendmsg+0x5c8/0x6f0 [ 119.131367][ T5863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.131401][ T5863] ____sys_sendmsg+0x563/0x5b0 [ 119.131437][ T5863] ___sys_sendmsg+0x195/0x1e0 [ 119.131537][ T5863] __x64_sys_sendmsg+0xd4/0x160 [ 119.131580][ T5863] x64_sys_call+0x194c/0x3020 [ 119.131601][ T5863] do_syscall_64+0x12c/0x370 [ 119.131671][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.131694][ T5863] RIP: 0033:0x7f42133fc799 [ 119.131729][ T5863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.131743][ T5863] RSP: 002b:00007f4211e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.131759][ T5863] RAX: ffffffffffffffda RBX: 00007f4213675fa0 RCX: 00007f42133fc799 [ 119.131872][ T5863] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 119.131906][ T5863] RBP: 00007f4211e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.131916][ T5863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.131928][ T5863] R13: 00007f4213676038 R14: 00007f4213675fa0 R15: 00007fffb8ccb358 [ 119.131949][ T5863] [ 119.448867][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.024303][ T5880] loop4: detected capacity change from 0 to 128 [ 120.059614][ T5880] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 120.106343][ T5880] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.310442][ T5884] loop3: detected capacity change from 0 to 8192 [ 120.329882][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 120.329894][ T28] audit: type=1400 audit(1772913466.277:693): avc: denied { write } for pid=5890 comm="syz.2.629" lport=50267 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 120.371227][ T5884] vfat: Unknown parameter '18446744073709551615' [ 120.434508][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.481919][ T5893] loop2: detected capacity change from 0 to 4096 [ 120.499309][ T5884] syz.3.631 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 120.529988][ T5893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.559499][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: syz.3.631 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.559534][ T5884] Tainted: [W]=WARN [ 120.559540][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.559550][ T5884] Call Trace: [ 120.559555][ T5884] [ 120.559561][ T5884] __dump_stack+0x1d/0x30 [ 120.559642][ T5884] dump_stack_lvl+0x95/0xd0 [ 120.559669][ T5884] dump_stack+0x15/0x1b [ 120.559724][ T5884] dump_header+0x80/0x240 [ 120.559778][ T5884] oom_kill_process+0x295/0x350 [ 120.559804][ T5884] out_of_memory+0x97d/0xb80 [ 120.559830][ T5884] try_charge_memcg+0x62e/0xa10 [ 120.559930][ T5884] __mem_cgroup_charge+0x65/0x150 [ 120.559960][ T5884] shmem_get_folio_gfp+0x47b/0xd60 [ 120.560023][ T5884] shmem_fallocate+0x628/0x920 [ 120.560070][ T5884] vfs_fallocate+0x3b6/0x450 [ 120.560094][ T5884] __x64_sys_fallocate+0x7a/0xd0 [ 120.560140][ T5884] x64_sys_call+0x298e/0x3020 [ 120.560169][ T5884] do_syscall_64+0x12c/0x370 [ 120.560193][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.560215][ T5884] RIP: 0033:0x7f201023c799 [ 120.560266][ T5884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.560286][ T5884] RSP: 002b:00007f200ec76028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 120.560338][ T5884] RAX: ffffffffffffffda RBX: 00007f20104b6090 RCX: 00007f201023c799 [ 120.560353][ T5884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 120.560366][ T5884] RBP: 00007f20102d2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 120.560442][ T5884] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 120.560456][ T5884] R13: 00007f20104b6128 R14: 00007f20104b6090 R15: 00007fff5be7fae8 [ 120.560477][ T5884] [ 120.560484][ T5884] memory: usage 307156kB, limit 307200kB, failcnt 1893 [ 120.745760][ T5884] memory+swap: usage 284360kB, limit 9007199254740988kB, failcnt 0 [ 120.753783][ T5884] kmem: usage 281776kB, limit 9007199254740988kB, failcnt 0 [ 120.761231][ T5884] Memory cgroup stats for /syz3: [ 120.761568][ T5884] cache 2043904 [ 120.770287][ T5884] rss 81920 [ 120.773497][ T5884] shmem 2039808 [ 120.777390][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.787511][ T5884] mapped_file 4096 [ 120.800200][ T5884] dirty 0 [ 120.809972][ T5884] writeback 16384 [ 120.819092][ T5884] workingset_refault_anon 334 [ 120.826139][ T5884] workingset_refault_file 1325 [ 120.858757][ T5884] swap 77824 [ 120.865149][ T5884] swapcached 1499136 [ 120.873715][ T5884] pgpgin 105224 [ 120.880630][ T5884] pgpgout 104692 [ 120.888581][ T5884] pgfault 84156 [ 120.895431][ T5884] pgmajfault 248 [ 120.903700][ T5884] inactive_anon 1855488 [ 120.912121][ T5884] active_anon 61440 [ 120.919964][ T5884] inactive_file 0 [ 120.928022][ T5884] active_file 4096 [ 120.936190][ T5884] unevictable 0 [ 120.950972][ T5884] hierarchical_memory_limit 314572800 [ 120.964169][ T5884] hierarchical_memsw_limit 9223372036854771712 [ 121.048391][ T5906] random: crng reseeded on system resumption [ 121.180690][ T5908] netlink: 'syz.1.641': attribute type 7 has an invalid length. [ 121.217533][ T5908] netlink: 140 bytes leftover after parsing attributes in process `syz.1.641'. [ 121.373855][ T5911] Driver unsupported XDP return value 0 on prog (id 150) dev N/A, expect packet loss! [ 121.394135][ T5884] total_cache 2043904 [ 121.403041][ T5884] total_rss 81920 [ 121.423877][ T5884] total_shmem 2039808 [ 121.427883][ T5884] total_mapped_file 4096 [ 121.432203][ T5884] total_dirty 0 [ 121.439913][ T5884] total_writeback 16384 [ 121.450725][ T5884] total_workingset_refault_anon 334 [ 121.460980][ T5884] total_workingset_refault_file 1325 [ 121.472979][ T5884] total_swap 77824 [ 121.476716][ T5884] total_swapcached 1499136 [ 121.481142][ T5884] total_pgpgin 105224 [ 121.494688][ T5884] total_pgpgout 104692 [ 121.499020][ T5884] total_pgfault 84156 [ 121.503538][ T5884] total_pgmajfault 248 [ 121.507611][ T5884] total_inactive_anon 1855488 [ 121.512295][ T5884] total_active_anon 61440 [ 121.517008][ T5884] total_inactive_file 0 [ 121.521169][ T5884] total_active_file 4096 [ 121.535166][ T5884] total_unevictable 0 [ 121.554697][ T5884] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.631,pid=5875,uid=0 [ 121.560364][ T5920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.591640][ T5884] Memory cgroup out of memory: Killed process 5884 (syz.3.631) total-vm:94292kB, anon-rss:1340kB, file-rss:22580kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 121.640828][ T5926] loop4: detected capacity change from 0 to 4096 [ 121.804443][ T5926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.954833][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.032172][ T5947] random: crng reseeded on system resumption [ 124.028980][ T5981] loop3: detected capacity change from 0 to 4096 [ 124.175475][ T5981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.404358][ T5976] syz.2.663 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 124.452308][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.2.663 Tainted: G W syzkaller #0 PREEMPT(full) [ 124.452411][ T5976] Tainted: [W]=WARN [ 124.452420][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.452435][ T5976] Call Trace: [ 124.452443][ T5976] [ 124.452451][ T5976] __dump_stack+0x1d/0x30 [ 124.452491][ T5976] dump_stack_lvl+0x95/0xd0 [ 124.452546][ T5976] dump_stack+0x15/0x1b [ 124.452662][ T5976] dump_header+0x80/0x240 [ 124.452689][ T5976] oom_kill_process+0x295/0x350 [ 124.452716][ T5976] out_of_memory+0x97d/0xb80 [ 124.452812][ T5976] try_charge_memcg+0x62e/0xa10 [ 124.452859][ T5976] obj_cgroup_charge_pages+0x23/0xc0 [ 124.452893][ T5976] __memcg_kmem_charge_page+0x9e/0x170 [ 124.452928][ T5976] __alloc_frozen_pages_noprof+0x18a/0x360 [ 124.453039][ T5976] alloc_pages_mpol+0xb3/0x260 [ 124.453065][ T5976] alloc_pages_noprof+0x8f/0x130 [ 124.453090][ T5976] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 124.453215][ T5976] __kvmalloc_node_noprof+0x3d4/0x650 [ 124.453238][ T5976] ? ip_set_alloc+0x24/0x30 [ 124.453260][ T5976] ? ip_set_alloc+0x24/0x30 [ 124.453281][ T5976] ? __kmalloc_cache_noprof+0x18a/0x410 [ 124.453326][ T5976] ip_set_alloc+0x24/0x30 [ 124.453347][ T5976] hash_netiface_create+0x282/0x740 [ 124.453369][ T5976] ? __pfx_hash_netiface_create+0x10/0x10 [ 124.453454][ T5976] ip_set_create+0x3cf/0x970 [ 124.453488][ T5976] ? __nla_parse+0x40/0x60 [ 124.453514][ T5976] nfnetlink_rcv_msg+0x509/0x5d0 [ 124.453587][ T5976] netlink_rcv_skb+0x123/0x220 [ 124.453612][ T5976] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 124.453649][ T5976] nfnetlink_rcv+0x167/0x1720 [ 124.453671][ T5976] ? __kfree_skb+0x109/0x150 [ 124.453757][ T5976] ? nlmon_xmit+0x4f/0x60 [ 124.453786][ T5976] ? consume_skb+0x4b/0x160 [ 124.453845][ T5976] ? nlmon_xmit+0x4f/0x60 [ 124.453874][ T5976] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 124.453901][ T5976] ? __dev_queue_xmit+0x136c/0x1f20 [ 124.453926][ T5976] ? __dev_queue_xmit+0x148/0x1f20 [ 124.453996][ T5976] ? ref_tracker_free+0x37d/0x3e0 [ 124.454023][ T5976] ? __netlink_deliver_tap+0x4dc/0x500 [ 124.454052][ T5976] netlink_unicast+0x5c0/0x690 [ 124.454095][ T5976] netlink_sendmsg+0x5c8/0x6f0 [ 124.454129][ T5976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.454167][ T5976] ____sys_sendmsg+0x563/0x5b0 [ 124.454197][ T5976] ___sys_sendmsg+0x195/0x1e0 [ 124.454252][ T5976] __x64_sys_sendmsg+0xd4/0x160 [ 124.454330][ T5976] x64_sys_call+0x194c/0x3020 [ 124.454358][ T5976] do_syscall_64+0x12c/0x370 [ 124.454457][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.454479][ T5976] RIP: 0033:0x7f52f526c799 [ 124.454500][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.454518][ T5976] RSP: 002b:00007f52f3cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.454542][ T5976] RAX: ffffffffffffffda RBX: 00007f52f54e5fa0 RCX: 00007f52f526c799 [ 124.454603][ T5976] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000004 [ 124.454616][ T5976] RBP: 00007f52f5302bd9 R08: 0000000000000000 R09: 0000000000000000 [ 124.454629][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.454642][ T5976] R13: 00007f52f54e6038 R14: 00007f52f54e5fa0 R15: 00007ffee98b2838 [ 124.454662][ T5976] [ 124.454671][ T5976] memory: usage 232696kB, limit 307200kB, failcnt 1302 [ 124.599110][ T5984] loop2: detected capacity change from 0 to 8192 [ 124.605355][ T5976] memory+swap: usage 193376kB, limit 9007199254740988kB, failcnt 0 [ 124.614234][ T5984] vfat: Unknown parameter '18446744073709551615' [ 124.810442][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.057479][ T5976] kmem: usage 188412kB, limit 9007199254740988kB, failcnt 0 [ 125.065067][ T5976] Memory cgroup stats for /syz2: [ 125.065349][ T5976] cache 536576 [ 125.073845][ T5976] rss 151552 [ 125.077408][ T5976] shmem 12288 [ 125.080827][ T5976] mapped_file 16384 [ 125.084707][ T5976] dirty 4096 [ 125.088002][ T5976] writeback 0 [ 125.091298][ T5976] workingset_refault_anon 439 [ 125.096036][ T5976] workingset_refault_file 3825 [ 125.100946][ T5976] swap 32768 [ 125.104153][ T5976] swapcached 7266304 [ 125.109117][ T5976] pgpgin 96249 [ 125.112519][ T5976] pgpgout 96079 [ 125.116053][ T5976] pgfault 96929 [ 125.119707][ T5976] pgmajfault 285 [ 125.123292][ T5976] inactive_anon 8192 [ 125.127184][ T5976] active_anon 163840 [ 125.131216][ T5976] inactive_file 0 [ 125.134952][ T5976] active_file 524288 [ 125.138884][ T5976] unevictable 0 [ 125.142527][ T5976] hierarchical_memory_limit 314572800 [ 125.147981][ T5976] hierarchical_memsw_limit 9223372036854771712 [ 125.154249][ T5976] total_cache 536576 [ 125.158263][ T5976] total_rss 151552 [ 125.162009][ T5976] total_shmem 12288 [ 125.165871][ T5976] total_mapped_file 16384 [ 125.173892][ T5976] total_dirty 4096 [ 125.177833][ T5976] total_writeback 0 [ 125.181706][ T5976] total_workingset_refault_anon 439 [ 125.186902][ T5976] total_workingset_refault_file 3825 [ 125.192445][ T5976] total_swap 32768 [ 125.196235][ T5976] total_swapcached 7266304 [ 125.200838][ T5976] total_pgpgin 96249 [ 125.204741][ T5976] total_pgpgout 96079 [ 125.209278][ T5976] total_pgfault 96929 [ 125.213276][ T5976] total_pgmajfault 285 [ 125.218782][ T5976] total_inactive_anon 8192 [ 125.223296][ T5976] total_active_anon 163840 [ 125.227855][ T5976] total_inactive_file 0 [ 125.232019][ T5976] total_active_file 524288 [ 125.236438][ T5976] total_unevictable 0 [ 125.241070][ T5976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.663,pid=5974,uid=0 [ 125.255824][ T5976] Memory cgroup out of memory: Killed process 5976 (syz.2.663) total-vm:98396kB, anon-rss:1380kB, file-rss:22348kB, shmem-rss:12kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 126.380360][ T5949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.463383][ T6026] loop1: detected capacity change from 0 to 512 [ 126.481885][ T6026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.516553][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.523758][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.533397][ T6026] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.679: invalid indirect mapped block 9 (level 0) [ 126.547351][ T6026] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.547668][ T6026] EXT4-fs (loop1): 1 truncate cleaned up [ 126.556874][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 126.556896][ C0] EXT4-fs (loop1): initial error at time 1772913472: ext4_free_branches:1023: inode 11 [ 126.556917][ C0] EXT4-fs (loop1): last error at time 1772913472: ext4_free_branches:1023: inode 11 [ 126.790941][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.822901][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.847111][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.932472][ T6034] random: crng reseeded on system resumption [ 127.015131][ T1593] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.041007][ T1593] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.066082][ T1593] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.124363][ T6033] loop4: detected capacity change from 0 to 8192 [ 127.142431][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.158823][ T6033] vfat: Unknown parameter '18446744073709551615' [ 127.300691][ T1593] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.341052][ T6036] loop2: detected capacity change from 0 to 128 [ 127.370614][ T6036] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.403162][ T6044] netlink: 'syz.1.686': attribute type 29 has an invalid length. [ 127.411493][ T6044] netlink: 'syz.1.686': attribute type 29 has an invalid length. [ 127.421256][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 127.434059][ T6036] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.437473][ T6044] netlink: 500 bytes leftover after parsing attributes in process `syz.1.686'. [ 127.470222][ T6044] unsupported nla_type 58 [ 127.476749][ T28] audit: type=1400 audit(1772913473.476:694): avc: denied { listen } for pid=6043 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 127.584241][ T6058] program syz.1.690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.612490][ T6058] loop1: detected capacity change from 0 to 128 [ 127.781510][ T6061] loop2: detected capacity change from 0 to 256 [ 128.149466][ T6066] sctp: [Deprecated]: syz.4.692 (pid 6066) Use of int in maxseg socket option. [ 128.149466][ T6066] Use struct sctp_assoc_value instead [ 128.194383][ T6061] loop2: detected capacity change from 0 to 256 [ 128.319270][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 128.483025][ T6075] loop4: detected capacity change from 0 to 1024 [ 128.490899][ T6075] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.520893][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.537466][ T6075] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.550405][ T28] audit: type=1400 audit(1772913474.321:695): avc: denied { write } for pid=6070 comm="syz.4.693" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 128.579687][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.694'. [ 128.605214][ T6082] dummy0: entered promiscuous mode [ 128.610417][ T6082] vlan0: entered promiscuous mode [ 128.663518][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.715766][ T6091] loop2: detected capacity change from 0 to 256 [ 128.724551][ T6089] loop3: detected capacity change from 0 to 128 [ 128.739904][ T6097] netlink: 252 bytes leftover after parsing attributes in process `syz.1.701'. [ 128.771859][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.701'. [ 128.838890][ T6104] can0: slcan on ttyS3. [ 128.996232][ T6107] loop2: detected capacity change from 0 to 8192 [ 129.013305][ T6107] vfat: Unknown parameter '18446744073709551615' [ 129.052318][ T6104] can0 (unregistered): slcan off ttyS3. [ 129.057933][ T6104] Falling back ldisc for ttyS3. [ 129.272471][ T6138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.307247][ T6138] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.896534][ T28] audit: type=1400 audit(1772913475.901:696): avc: denied { block_suspend } for pid=6150 comm="syz.4.707" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.046742][ T6158] syzkaller0: entered promiscuous mode [ 130.078456][ T6158] syzkaller0: entered allmulticast mode [ 130.103730][ T6157] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.133059][ T6164] xt_hashlimit: size too large, truncated to 1048576 [ 130.149327][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.150018][ T28] audit: type=1400 audit(1772913476.163:697): avc: denied { create } for pid=6165 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.181886][ T6157] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.257297][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 130.315374][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 130.350007][ T28] audit: type=1400 audit(1772913476.183:698): avc: denied { ioctl } for pid=6165 comm="syz.4.711" path="socket:[11777]" dev="sockfs" ino=11777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.384916][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.391311][ T28] audit: type=1400 audit(1772913476.213:699): avc: denied { write } for pid=6165 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.510295][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.518332][ T28] audit: type=1400 audit(1772913476.213:700): avc: denied { read } for pid=6165 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.655937][ T6190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.668672][ T6190] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.926188][ T6191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.018760][ T6188] can0: slcan on ttyS3. [ 131.058852][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.067928][ T6188] can0 (unregistered): slcan off ttyS3. [ 131.073529][ T6188] Falling back ldisc for ttyS3. [ 131.547179][ T6211] random: crng reseeded on system resumption [ 132.032535][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.071776][ T6212] set_capacity_and_notify: 4 callbacks suppressed [ 132.071793][ T6212] loop1: detected capacity change from 0 to 8192 [ 132.084065][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.723'. [ 132.093693][ T6212] vfat: Unknown parameter '18446744073709551615' [ 132.102224][ T6217] loop4: detected capacity change from 0 to 1024 [ 132.223989][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 132.250285][ T6228] macvlan3: entered promiscuous mode [ 132.262341][ T6228] macvlan3: entered allmulticast mode [ 132.312874][ T6228] veth0_virt_wifi: entered allmulticast mode [ 132.419734][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.433439][ T6226] bridge_slave_1: left allmulticast mode [ 132.491821][ T6234] random: crng reseeded on system resumption [ 132.887595][ T6226] bridge_slave_1: left promiscuous mode [ 132.925973][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.986386][ T6226] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 133.293196][ T28] audit: type=1400 audit(1772913479.322:701): avc: denied { read } for pid=6243 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.047861][ T6256] random: crng reseeded on system resumption [ 134.635572][ T6268] IPv6: NLM_F_REPLACE set, but no existing node found! [ 134.651266][ T28] audit: type=1400 audit(1772913480.690:702): avc: denied { create } for pid=6263 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 134.687755][ T6268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.735'. [ 134.970253][ T6281] loop1: detected capacity change from 0 to 4096 [ 135.196263][ T6284] random: crng reseeded on system resumption [ 135.500543][ T6286] random: crng reseeded on system resumption [ 135.714655][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.939908][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.185232][ T6294] netlink: 'syz.2.746': attribute type 16 has an invalid length. [ 136.248752][ T6306] random: crng reseeded on system resumption [ 136.267827][ T6294] netlink: 'syz.2.746': attribute type 17 has an invalid length. [ 136.545857][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.750'. [ 136.970579][ T6294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.084530][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 137.220392][ T6321] loop3: detected capacity change from 0 to 512 [ 137.248123][ T6321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.275040][ T6323] loop2: detected capacity change from 0 to 1024 [ 137.303629][ T6321] EXT4-fs (loop3): 1 truncate cleaned up [ 137.326298][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.328181][ T6321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.369623][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.395564][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.461891][ T3400] IPVS: starting estimator thread 0... [ 137.471119][ T6344] tipc: Enabling of bearer rejected, failed to enable media [ 137.485735][ T6341] loop2: detected capacity change from 0 to 4096 [ 137.502623][ T6341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.566178][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.581880][ T6343] IPVS: using max 2640 ests per chain, 132000 per kthread [ 137.597476][ T6347] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.662543][ T6351] loop2: detected capacity change from 0 to 4096 [ 137.688462][ T6351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.756656][ T28] audit: type=1400 audit(1772913483.817:703): avc: denied { rename } for pid=6350 comm="syz.2.761" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.821956][ T28] audit: type=1400 audit(1772913483.878:704): avc: denied { link } for pid=6350 comm="syz.2.761" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.942773][ T5324] IPVS: starting estimator thread 0... [ 137.993282][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.039283][ T6360] IPVS: using max 2496 ests per chain, 124800 per kthread [ 139.086342][ T6374] loop1: detected capacity change from 0 to 4096 [ 139.095060][ T6374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.127150][ T6374] EXT4-fs (loop1): shut down requested (1) [ 139.133604][ T6374] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 139.142477][ T6374] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 139.152360][ T6374] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 139.195480][ T6380] tipc: Enabling of bearer rejected, failed to enable media [ 139.249245][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.810184][ T6385] loop1: detected capacity change from 0 to 4096 [ 139.916945][ T6385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.936168][ T6398] loop3: detected capacity change from 0 to 512 [ 140.000687][ T6398] EXT4-fs (loop3): invalid inodes per group: 16 [ 140.000687][ T6398] [ 140.167234][ T28] audit: type=1400 audit(1772913486.230:705): avc: denied { watch watch_reads } for pid=6388 comm="syz.0.773" path="/156/file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.247986][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.269418][ T6406] xt_hashlimit: size too large, truncated to 1048576 [ 140.424150][ T28] audit: type=1400 audit(1772913486.472:706): avc: denied { ioctl } for pid=6416 comm="syz.1.782" path="socket:[12202]" dev="sockfs" ino=12202 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.489626][ T6423] loop3: detected capacity change from 0 to 1024 [ 140.522304][ T6423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.573519][ T6428] lo speed is unknown, defaulting to 1000 [ 140.579384][ T6428] lo speed is unknown, defaulting to 1000 [ 140.585734][ T6428] lo speed is unknown, defaulting to 1000 [ 140.592988][ T6428] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 140.628268][ T6429] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 140.651684][ T6429] loop4: detected capacity change from 0 to 512 [ 140.676635][ T6428] lo speed is unknown, defaulting to 1000 [ 140.682957][ T6428] lo speed is unknown, defaulting to 1000 [ 140.689422][ T6428] lo speed is unknown, defaulting to 1000 [ 140.695866][ T6428] lo speed is unknown, defaulting to 1000 [ 140.702096][ T6428] lo speed is unknown, defaulting to 1000 [ 141.032544][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.285656][ T6444] mmap: syz.4.789 (6444) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.510386][ T6442] loop2: detected capacity change from 0 to 4096 [ 141.582725][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.776440][ T6454] FAULT_INJECTION: forcing a failure. [ 141.776440][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 141.800658][ T6442] EXT4-fs (loop2): shut down requested (1) [ 141.800636][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.1.792 Tainted: G W syzkaller #0 PREEMPT(full) [ 141.800749][ T6454] Tainted: [W]=WARN [ 141.800813][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.800858][ T6454] Call Trace: [ 141.800881][ T6454] [ 141.800900][ T6454] __dump_stack+0x1d/0x30 [ 141.801059][ T6454] dump_stack_lvl+0x95/0xd0 [ 141.801120][ T6454] dump_stack+0x15/0x1b [ 141.801251][ T6454] should_fail_ex+0x263/0x280 [ 141.801309][ T6454] should_failslab+0x8c/0xb0 [ 141.801363][ T6454] kmem_cache_alloc_noprof+0x66/0x400 [ 141.801428][ T6454] ? skb_clone+0x151/0x1f0 [ 141.801631][ T6454] skb_clone+0x151/0x1f0 [ 141.801701][ T6454] __netlink_deliver_tap+0x2c9/0x500 [ 141.801777][ T6454] netlink_unicast+0x66b/0x690 [ 141.801927][ T6454] netlink_sendmsg+0x5c8/0x6f0 [ 141.802006][ T6454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.802109][ T6454] ____sys_sendmsg+0x563/0x5b0 [ 141.802269][ T6454] ___sys_sendmsg+0x195/0x1e0 [ 141.802447][ T6454] __x64_sys_sendmsg+0xd4/0x160 [ 141.802531][ T6454] x64_sys_call+0x194c/0x3020 [ 141.802600][ T6454] do_syscall_64+0x12c/0x370 [ 141.802648][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.802716][ T6454] RIP: 0033:0x7f42133fc799 [ 141.802753][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.802797][ T6454] RSP: 002b:00007f4211e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.802849][ T6454] RAX: ffffffffffffffda RBX: 00007f4213675fa0 RCX: 00007f42133fc799 [ 141.802892][ T6454] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 141.802926][ T6454] RBP: 00007f4211e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.802961][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.802990][ T6454] R13: 00007f4213676038 R14: 00007f4213675fa0 R15: 00007fffb8ccb358 [ 141.803045][ T6454] [ 142.409570][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.434761][ T28] audit: type=1326 audit(1772913488.502:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 142.501494][ T28] audit: type=1326 audit(1772913488.502:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 142.552893][ T28] audit: type=1326 audit(1772913488.502:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 142.637961][ T28] audit: type=1326 audit(1772913488.502:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 142.686201][ T6458] loop1: detected capacity change from 0 to 8192 [ 142.779625][ T6458] loop1: p1 p3 p4 [ 142.799792][ T6458] loop1: p1 start 16777216 is beyond EOD, truncated [ 142.840112][ T6468] netlink: 220 bytes leftover after parsing attributes in process `syz.3.796'. [ 142.919650][ T6458] loop1: p4 start 16777223 is beyond EOD, truncated [ 142.949037][ T6468] netlink: 32 bytes leftover after parsing attributes in process `syz.3.796'. [ 142.971775][ T28] audit: type=1326 audit(1772913488.512:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 142.995035][ T28] audit: type=1326 audit(1772913488.512:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 143.018310][ T28] audit: type=1326 audit(1772913488.512:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 143.041625][ T28] audit: type=1326 audit(1772913488.512:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 143.395902][ T2999] loop1: p1 p3 p4 [ 143.399884][ T2999] loop1: p1 start 16777216 is beyond EOD, truncated [ 143.590521][ T2999] loop1: p4 start 16777223 is beyond EOD, truncated [ 143.603312][ T6464] syzkaller0: entered promiscuous mode [ 143.608964][ T6464] syzkaller0: entered allmulticast mode [ 144.133651][ T6479] random: crng reseeded on system resumption [ 144.441864][ T6482] loop2: detected capacity change from 0 to 512 [ 144.457685][ T6482] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 144.471218][ T6495] loop4: detected capacity change from 0 to 256 [ 144.614223][ T6502] FAULT_INJECTION: forcing a failure. [ 144.614223][ T6502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.639870][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.4.806 Tainted: G W syzkaller #0 PREEMPT(full) [ 144.639904][ T6502] Tainted: [W]=WARN [ 144.639911][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.639924][ T6502] Call Trace: [ 144.639981][ T6502] [ 144.639988][ T6502] __dump_stack+0x1d/0x30 [ 144.640030][ T6502] dump_stack_lvl+0x95/0xd0 [ 144.640070][ T6502] dump_stack+0x15/0x1b [ 144.640094][ T6502] should_fail_ex+0x263/0x280 [ 144.640113][ T6502] should_fail+0xb/0x20 [ 144.640130][ T6502] should_fail_usercopy+0x1a/0x20 [ 144.640152][ T6502] _copy_from_user+0x1c/0xb0 [ 144.640282][ T6502] do_sock_getsockopt+0xf1/0x210 [ 144.640309][ T6502] __x64_sys_getsockopt+0x11d/0x1a0 [ 144.640343][ T6502] x64_sys_call+0x2dcf/0x3020 [ 144.640374][ T6502] do_syscall_64+0x12c/0x370 [ 144.640444][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.640516][ T6502] RIP: 0033:0x7fce081bc799 [ 144.640533][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.640553][ T6502] RSP: 002b:00007fce06c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 144.640578][ T6502] RAX: ffffffffffffffda RBX: 00007fce08435fa0 RCX: 00007fce081bc799 [ 144.640589][ T6502] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000004 [ 144.640600][ T6502] RBP: 00007fce06c17090 R08: 0000200000000140 R09: 0000000000000000 [ 144.640610][ T6502] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 144.640621][ T6502] R13: 00007fce08436038 R14: 00007fce08435fa0 R15: 00007fffc705dfa8 [ 144.640641][ T6502] [ 144.958670][ T6507] tipc: New replicast peer: 255.255.255.255 [ 144.973535][ T6507] tipc: Enabled bearer , priority 10 [ 145.049796][ T6511] loop1: detected capacity change from 0 to 512 [ 145.157314][ T6511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.170058][ T6511] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.511557][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.714503][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.206313][ T6528] loop4: detected capacity change from 0 to 8192 [ 146.235671][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 146.235687][ T28] audit: type=1400 audit(1772913492.331:740): avc: denied { mount } for pid=6533 comm="syz.0.816" name="/" dev="autofs" ino=14436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 146.290704][ T6528] vfat: Unknown parameter '18446744073709551615' [ 147.305280][ T6550] loop1: detected capacity change from 0 to 128 [ 147.560902][ T3659] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.674890][ T6554] loop3: detected capacity change from 0 to 512 [ 147.696856][ T6554] EXT4-fs: Ignoring removed oldalloc option [ 147.712415][ T6554] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.739550][ T6554] EXT4-fs (loop3): 1 truncate cleaned up [ 147.756215][ T6554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.838461][ T6557] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 147.881302][ T6557] audit: out of memory in audit_log_start [ 147.975163][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.002895][ T6559] loop1: detected capacity change from 0 to 512 [ 148.028700][ T6561] netlink: 220 bytes leftover after parsing attributes in process `syz.3.823'. [ 148.068165][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.823'. [ 148.102563][ T6559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.193058][ T6559] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.471368][ T6569] netlink: 156 bytes leftover after parsing attributes in process `syz.1.822'. [ 148.998704][ T28] audit: type=1326 audit(1772913495.114:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201023c799 code=0x7fc00000 [ 149.187159][ T28] audit: type=1326 audit(1772913495.114:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f201023c799 code=0x7fc00000 [ 149.553870][ T6574] loop3: detected capacity change from 0 to 512 [ 149.878252][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.896819][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.909473][ T6574] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.070498][ T28] audit: type=1326 audit(1772913495.114:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201023c799 code=0x7fc00000 [ 150.175346][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.188740][ T28] audit: type=1326 audit(1772913495.114:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201023c799 code=0x7fc00000 [ 150.245396][ T28] audit: type=1326 audit(1772913495.114:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201023c799 code=0x7fc00000 [ 150.295518][ T28] audit: type=1326 audit(1772913495.114:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201023c799 code=0x7fc00000 [ 150.356855][ T28] audit: type=1326 audit(1772913495.114:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201023c799 code=0x7fc00000 [ 150.499084][ T6583] random: crng reseeded on system resumption [ 150.518115][ T6582] random: crng reseeded on system resumption [ 151.131131][ T6587] random: crng reseeded on system resumption [ 151.325849][ T6590] loop3: detected capacity change from 0 to 512 [ 151.392863][ T6590] EXT4-fs: Ignoring removed oldalloc option [ 151.428401][ T6590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.486168][ T6590] EXT4-fs (loop3): 1 truncate cleaned up [ 151.539174][ T6590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.692603][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.924753][ T6598] loop1: detected capacity change from 0 to 4096 [ 151.990693][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.104749][ T6598] EXT4-fs (loop1): shut down requested (1) [ 152.130649][ T6598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 152.180575][ T6598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 152.189425][ T6598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 152.270014][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.389135][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 152.389147][ T28] audit: type=1326 audit(1772913498.509:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 152.514756][ T28] audit: type=1326 audit(1772913498.509:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 152.604475][ T28] audit: type=1326 audit(1772913498.509:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 152.648084][ T6615] netlink: 444 bytes leftover after parsing attributes in process `syz.1.837'. [ 152.678212][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 152.699637][ T6617] loop3: detected capacity change from 0 to 512 [ 152.707723][ T28] audit: type=1326 audit(1772913498.509:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 152.866955][ T28] audit: type=1326 audit(1772913498.509:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 152.904115][ T6623] random: crng reseeded on system resumption [ 152.905828][ T28] audit: type=1326 audit(1772913498.509:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 152.966468][ T28] audit: type=1326 audit(1772913498.509:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 153.036141][ T28] audit: type=1326 audit(1772913498.509:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42133fc799 code=0x7ffc0000 [ 153.073632][ T6626] loop3: detected capacity change from 0 to 8192 [ 153.086354][ T6626] vfat: Unknown parameter '18446744073709551615' [ 153.112503][ T28] audit: type=1326 audit(1772913498.509:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42133fc502 code=0x7ffc0000 [ 153.183642][ T28] audit: type=1326 audit(1772913498.509:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f42133fc597 code=0x7ffc0000 [ 154.533893][ T6528] syz.4.813 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 154.549795][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.4.813 Tainted: G W syzkaller #0 PREEMPT(full) [ 154.549822][ T6528] Tainted: [W]=WARN [ 154.549830][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.549844][ T6528] Call Trace: [ 154.549873][ T6528] [ 154.549881][ T6528] __dump_stack+0x1d/0x30 [ 154.549933][ T6528] dump_stack_lvl+0x95/0xd0 [ 154.549952][ T6528] dump_stack+0x15/0x1b [ 154.549971][ T6528] dump_header+0x80/0x240 [ 154.550011][ T6528] oom_kill_process+0x295/0x350 [ 154.550035][ T6528] out_of_memory+0x97d/0xb80 [ 154.550060][ T6528] try_charge_memcg+0x62e/0xa10 [ 154.550120][ T6528] __mem_cgroup_charge+0x65/0x150 [ 154.550150][ T6528] shmem_get_folio_gfp+0x47b/0xd60 [ 154.550187][ T6528] shmem_fallocate+0x628/0x920 [ 154.550286][ T6528] vfs_fallocate+0x3b6/0x450 [ 154.550304][ T6528] __x64_sys_fallocate+0x7a/0xd0 [ 154.550325][ T6528] x64_sys_call+0x298e/0x3020 [ 154.550356][ T6528] do_syscall_64+0x12c/0x370 [ 154.550416][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.550465][ T6528] RIP: 0033:0x7fce081bc799 [ 154.550483][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.550552][ T6528] RSP: 002b:00007fce06bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 154.550572][ T6528] RAX: ffffffffffffffda RBX: 00007fce08436090 RCX: 00007fce081bc799 [ 154.550584][ T6528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 154.550594][ T6528] RBP: 00007fce08252bd9 R08: 0000000000000000 R09: 0000000000000000 [ 154.550659][ T6528] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 154.550674][ T6528] R13: 00007fce08436128 R14: 00007fce08436090 R15: 00007fffc705dfa8 [ 154.550696][ T6528] [ 154.550705][ T6528] memory: usage 307200kB, limit 307200kB, failcnt 965 [ 154.810874][ T6528] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 154.848540][ T6528] kmem: usage 287392kB, limit 9007199254740988kB, failcnt 0 [ 154.855835][ T6528] Memory cgroup stats for /syz4: [ 154.855977][ T6528] cache 20271104 [ 154.894725][ T6528] rss 0 [ 154.897532][ T6528] shmem 20267008 [ 154.918227][ T6528] mapped_file 0 [ 154.921729][ T6528] dirty 0 [ 154.928366][ T6528] writeback 0 [ 154.938152][ T6528] workingset_refault_anon 421 [ 154.942848][ T6528] workingset_refault_file 3341 [ 154.957756][ T6528] swap 217088 [ 154.961593][ T6528] swapcached 6365184 [ 154.965539][ T6528] pgpgin 159865 [ 154.978014][ T6528] pgpgout 154913 [ 154.994410][ T6528] pgfault 161678 [ 154.998124][ T6528] pgmajfault 286 [ 155.001674][ T6528] inactive_anon 4657152 [ 155.015949][ T6528] active_anon 15204352 [ 155.026027][ T6528] inactive_file 0 [ 155.034938][ T6528] active_file 12288 [ 155.042861][ T6528] unevictable 0 [ 155.430770][ T6528] hierarchical_memory_limit 314572800 [ 155.455928][ T6528] hierarchical_memsw_limit 9223372036854771712 [ 155.462110][ T6528] total_cache 20271104 [ 155.486030][ T6528] total_rss 0 [ 155.489473][ T6528] total_shmem 20267008 [ 155.494837][ T6528] total_mapped_file 0 [ 155.503016][ T6528] total_dirty 0 [ 155.509630][ T6528] total_writeback 0 [ 155.517689][ T6528] total_workingset_refault_anon 421 [ 155.528278][ T6528] total_workingset_refault_file 3341 [ 155.539107][ T6528] total_swap 217088 [ 155.550491][ T6528] total_swapcached 6365184 [ 155.559046][ T6528] total_pgpgin 159865 [ 155.567378][ T6528] total_pgpgout 154913 [ 155.576400][ T6528] total_pgfault 161678 [ 155.585135][ T6528] total_pgmajfault 286 [ 155.593653][ T6528] total_inactive_anon 4657152 [ 155.603612][ T6528] total_active_anon 15204352 [ 155.612897][ T6528] total_inactive_file 0 [ 155.622772][ T6528] total_active_file 12288 [ 155.631631][ T6528] total_unevictable 0 [ 155.639971][ T6528] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.813,pid=6524,uid=0 [ 155.669307][ T6528] Memory cgroup out of memory: Killed process 6524 (syz.4.813) total-vm:96340kB, anon-rss:1220kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 155.812258][ T6641] netlink: 'syz.1.844': attribute type 10 has an invalid length. [ 155.834365][ T6641] netlink: 55 bytes leftover after parsing attributes in process `syz.1.844'. [ 155.898174][ T6527] SET target dimension over the limit! [ 156.098462][ T6525] syz.4.813 (6525) used greatest stack depth: 5776 bytes left [ 156.276118][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.365424][ T6663] loop1: detected capacity change from 0 to 512 [ 156.398132][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.409381][ T6663] EXT4-fs: Ignoring removed oldalloc option [ 156.417482][ T6654] loop2: detected capacity change from 0 to 1024 [ 156.427382][ T6654] EXT4-fs: quotafile must be on filesystem root [ 156.446893][ T6664] random: crng reseeded on system resumption [ 156.461913][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 156.534569][ T6663] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.853: inode has both inline data and extents flags [ 156.568581][ T6663] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.568706][ T6663] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.853: couldn't read orphan inode 15 (err -117) [ 156.577873][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 156.577886][ C1] EXT4-fs (loop1): initial error at time 1772913502: ext4_orphan_get:1391: inode 15 [ 156.577908][ C1] EXT4-fs (loop1): last error at time 1772913502: ext4_orphan_get:1391: inode 15 [ 156.654257][ T6663] loop1: lost filesystem error report for type 5 error -117 [ 156.654729][ T6663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.144217][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.291202][ T6678] netlink: 'syz.2.857': attribute type 11 has an invalid length. [ 157.433803][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 157.477993][ T6686] loop3: detected capacity change from 0 to 512 [ 157.569759][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.582349][ T6686] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.849164][ T6696] loop4: detected capacity change from 0 to 8192 [ 157.872859][ T6696] vfat: Unknown parameter '18446744073709551615' [ 157.938277][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 157.938292][ T28] audit: type=1400 audit(1772913504.092:767): avc: denied { create } for pid=6697 comm="syz.0.863" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.985066][ T28] audit: type=1400 audit(1772913504.133:768): avc: denied { mount } for pid=6697 comm="syz.0.863" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 158.017537][ T28] audit: type=1400 audit(1772913504.173:769): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 158.134583][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.506225][ T6735] loop3: detected capacity change from 0 to 8192 [ 161.534507][ T6731] lo speed is unknown, defaulting to 1000 [ 161.571891][ T6735] vfat: Unknown parameter '18446744073709551615' [ 162.457687][ T6765] loop4: detected capacity change from 0 to 1024 [ 162.476626][ T6765] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 162.515917][ T6765] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.535409][ T28] audit: type=1400 audit(1772913508.690:770): avc: denied { bind } for pid=6768 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.576197][ T6765] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 162.599475][ T6765] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 162.599475][ T6765] [ 162.634521][ T6772] loop3: detected capacity change from 0 to 1024 [ 162.641217][ T6765] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 162.650971][ T6772] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.658620][ T6765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.690362][ T6772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.719207][ T6772] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.777184][ T6777] loop1: detected capacity change from 0 to 1024 [ 162.865548][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.946304][ T6781] loop3: detected capacity change from 0 to 4096 [ 163.014158][ T6781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.075027][ T6783] loop1: detected capacity change from 0 to 1024 [ 163.093917][ T6781] EXT4-fs (loop3): shut down requested (1) [ 163.106438][ T6783] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.135708][ T6781] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 163.155074][ T6791] loop2: detected capacity change from 0 to 164 [ 163.177290][ T6783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.194499][ T6781] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 163.205643][ T6791] iso9660: Unknown parameter 'hi' [ 163.226471][ T6783] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.237797][ T6781] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 163.263962][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.303073][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.341152][ T6803] can0: slcan on ttyS3. [ 163.405131][ T6803] can0 (unregistered): slcan off ttyS3. [ 163.495657][ T6813] loop3: detected capacity change from 0 to 1024 [ 163.514764][ T6813] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.577719][ T6813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.614669][ T6822] loop1: detected capacity change from 0 to 8192 [ 163.624528][ T6813] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.643581][ T6822] vfat: Unknown parameter '18446744073709551615' [ 163.945977][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.008071][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.033674][ T6844] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.902' sets config #0 [ 164.062178][ T6844] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.902' sets config #1 [ 164.339886][ T6864] loop3: detected capacity change from 0 to 512 [ 164.373925][ T6864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.386543][ T6864] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.471941][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.482811][ T6872] can0: slcan on ttyS3. [ 165.502717][ T6876] netlink: 'syz.4.913': attribute type 12 has an invalid length. [ 165.965977][ T6871] can0 (unregistered): slcan off ttyS3. [ 165.988928][ T6891] 9p: Unknown uid 00000000004294967295 [ 166.021809][ T6888] loop3: detected capacity change from 0 to 1024 [ 166.047384][ T6888] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.166586][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.203069][ T6904] loop4: detected capacity change from 0 to 4096 [ 166.205139][ T6888] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.258298][ T6904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.019981][ T6904] EXT4-fs (loop4): shut down requested (1) [ 167.052841][ T6914] xt_hashlimit: size too large, truncated to 1048576 [ 167.066643][ T6904] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 167.111732][ T6904] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 167.156934][ T6904] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 167.181551][ T6828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 167.207565][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.277295][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.782164][ T6932] loop3: detected capacity change from 0 to 512 [ 167.819572][ T6932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.832082][ T6932] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.859291][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.921218][ T6956] loop2: detected capacity change from 0 to 1024 [ 168.929333][ T6956] journal_path: Non-blockdev passed as './file0' [ 168.936252][ T6956] EXT4-fs: error: could not find journal device path [ 168.944059][ T6956] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.928'. [ 168.953823][ T6956] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.928'. [ 168.978732][ T6957] loop3: detected capacity change from 0 to 2048 [ 169.602492][ T6957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.714489][ T6976] loop2: detected capacity change from 0 to 1024 [ 169.790486][ T6976] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.809877][ T6976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.822686][ T6976] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.020448][ T6989] loop4: detected capacity change from 0 to 8192 [ 170.052628][ T6989] vfat: Unknown parameter '18446744073709551615' [ 170.195343][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.353779][ T1031] IPVS: starting estimator thread 0... [ 170.441109][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.453950][ T6997] IPVS: using max 2736 ests per chain, 136800 per kthread [ 170.627443][ T7007] netlink: 64 bytes leftover after parsing attributes in process `syz.3.941'. [ 171.066816][ T7010] loop2: detected capacity change from 0 to 512 [ 171.494579][ T7010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.507327][ T7010] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.571177][ T28] audit: type=1400 audit(1772913517.771:771): avc: denied { read write } for pid=7015 comm="syz.3.942" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.610357][ T3393] hid (null): unknown global tag 0xe [ 171.623144][ T3393] hid (null): unknown global tag 0xc [ 171.632762][ T3393] hid (null): unknown global tag 0xc [ 171.640233][ T28] audit: type=1400 audit(1772913517.791:772): avc: denied { open } for pid=7015 comm="syz.3.942" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.740133][ T3393] hid (null): global environment stack underflow [ 171.751342][ T7021] loop1: detected capacity change from 0 to 256 [ 171.761817][ T3393] hid (null): report_id 0 is invalid [ 171.791125][ T3393] hid (null): unknown global tag 0xe [ 171.810283][ T28] audit: type=1400 audit(1772913517.942:773): avc: denied { getopt } for pid=7015 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.862597][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.878452][ T3393] hid-generic 0007:80000000:0009.0001: unknown global tag 0xe [ 171.892953][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 171.900248][ T7023] netlink: 188 bytes leftover after parsing attributes in process `syz.1.944'. [ 171.915507][ T3393] hid-generic 0007:80000000:0009.0001: item 0 2 1 14 parsing failed [ 171.923717][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 171.923748][ T3317] Tainted: [W]=WARN [ 171.923754][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.923768][ T3317] Call Trace: [ 171.923797][ T3317] [ 171.923808][ T3317] __dump_stack+0x1d/0x30 [ 171.923835][ T3317] dump_stack_lvl+0x95/0xd0 [ 171.923861][ T3317] dump_stack+0x15/0x1b [ 171.923886][ T3317] dump_header+0x80/0x240 [ 171.923958][ T3317] oom_kill_process+0x295/0x350 [ 171.924069][ T3317] out_of_memory+0x97d/0xb80 [ 171.924096][ T3317] try_charge_memcg+0x62e/0xa10 [ 171.924145][ T3317] __mem_cgroup_charge+0x65/0x150 [ 171.924214][ T3317] filemap_add_folio+0x110/0x350 [ 171.924233][ T3317] __filemap_get_folio_mpol+0x326/0x680 [ 171.924295][ T3317] filemap_fault+0x486/0xb90 [ 171.924325][ T3317] __do_fault+0xbc/0x200 [ 171.924344][ T3317] handle_mm_fault+0x11d7/0x3020 [ 171.924380][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 171.924406][ T3317] do_user_addr_fault+0x62f/0x1050 [ 171.924477][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 171.924540][ T3317] exc_page_fault+0x62/0xa0 [ 171.924600][ T3317] asm_exc_page_fault+0x26/0x30 [ 171.924617][ T3317] RIP: 0033:0x7fce0808a7b4 [ 171.924663][ T3317] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 [ 171.924678][ T3317] RSP: 002b:00007fffc705e310 EFLAGS: 00010202 [ 171.924771][ T3317] RAX: 0000001b33924000 RBX: 0000000000000227 RCX: 0000000000029fe0 [ 171.924783][ T3317] RDX: 000000000282dc09 RSI: 00007fffc705e3a0 RDI: 0000000000000001 [ 171.924794][ T3317] RBP: 00007fffc705e34c R08: 0000000009945080 R09: 7fffffffffffffff [ 171.924808][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 171.924867][ T3317] R13: 00000000000927c0 R14: 00000000000299d9 R15: 00007fffc705e3a0 [ 171.924899][ T3317] [ 171.925236][ T3393] hid-generic 0007:80000000:0009.0001: probe with driver hid-generic failed with error -22 [ 171.995542][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 2002 [ 172.137562][ T3317] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 172.146419][ T3317] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 172.149567][ T7029] loop3: detected capacity change from 0 to 1024 [ 172.169576][ T3317] Memory cgroup stats for /syz4: [ 172.169904][ T3317] cache 4096 [ 172.175769][ T7029] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.180520][ T3317] rss 0 [ 172.194883][ T3317] shmem 0 [ 172.198005][ T3317] mapped_file 4096 [ 172.201770][ T3317] dirty 0 [ 172.205033][ T3317] writeback 0 [ 172.208517][ T3317] workingset_refault_anon 593 [ 172.209252][ T7029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.213232][ T3317] workingset_refault_file 4699 [ 172.230111][ T3317] swap 720896 [ 172.233446][ T3317] swapcached 7012352 [ 172.246109][ T7029] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.256882][ T3317] pgpgin 203120 [ 172.260365][ T3317] pgpgout 203117 [ 172.263955][ T3317] pgfault 173411 [ 172.268311][ T3317] pgmajfault 402 [ 172.271883][ T3317] inactive_anon 0 [ 172.275717][ T3317] active_anon 0 [ 172.279335][ T3317] inactive_file 12288 [ 172.283399][ T3317] active_file 0 [ 172.287153][ T3317] unevictable 0 [ 172.290740][ T3317] hierarchical_memory_limit 314572800 [ 172.299244][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 172.305621][ T3317] total_cache 4096 [ 172.309365][ T3317] total_rss 0 [ 172.312692][ T3317] total_shmem 0 [ 172.316415][ T3317] total_mapped_file 4096 [ 172.320750][ T3317] total_dirty 0 [ 172.324221][ T3317] total_writeback 0 [ 172.328296][ T3317] total_workingset_refault_anon 593 [ 172.333519][ T3317] total_workingset_refault_file 4699 [ 172.339123][ T3317] total_swap 720896 [ 172.342954][ T3317] total_swapcached 7012352 [ 172.348490][ T3317] total_pgpgin 203120 [ 172.353368][ T3317] total_pgpgout 203117 [ 172.357648][ T3317] total_pgfault 173411 [ 172.361818][ T3317] total_pgmajfault 402 [ 172.366128][ T3317] total_inactive_anon 0 [ 172.370355][ T3317] total_active_anon 0 [ 172.374572][ T3317] total_inactive_file 12288 [ 172.379304][ T3317] total_active_file 0 [ 172.383324][ T3317] total_unevictable 0 [ 172.387610][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.936,pid=6985,uid=0 [ 172.402581][ T3317] Memory cgroup out of memory: Killed process 6985 (syz.4.936) total-vm:94292kB, anon-rss:1220kB, file-rss:22492kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 173.133384][ T28] audit: type=1326 audit(1772913519.346:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.2.952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52f526c799 code=0x0 [ 173.700209][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.739552][ T7054] lo speed is unknown, defaulting to 1000 [ 174.209885][ T28] audit: type=1400 audit(1772913520.420:775): avc: denied { ioctl } for pid=7060 comm="syz.2.958" path="socket:[14117]" dev="sockfs" ino=14117 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 174.383152][ T7072] loop1: detected capacity change from 0 to 1024 [ 174.478772][ T7072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.727276][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.807181][ T7093] loop1: detected capacity change from 0 to 1024 [ 174.824276][ T7093] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.929473][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 174.986457][ T7093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.006048][ T7093] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.089555][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.145991][ T7112] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 175.161332][ T7112] syzkaller0: entered promiscuous mode [ 175.185607][ T7112] syzkaller0: entered allmulticast mode [ 175.231704][ T7118] loop1: detected capacity change from 0 to 128 [ 175.272180][ T7118] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.328337][ T7118] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.418076][ T28] audit: type=1400 audit(1772913521.633:776): avc: denied { add_name } for pid=7113 comm="syz.1.973" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 176.000305][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.192107][ T28] audit: type=1400 audit(1772913522.406:777): avc: denied { read } for pid=7133 comm="syz.0.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.228481][ T7132] loop3: detected capacity change from 0 to 512 [ 176.235110][ T7135] netlink: 'syz.1.981': attribute type 2 has an invalid length. [ 176.243415][ T7135] netlink: 'syz.1.981': attribute type 2 has an invalid length. [ 176.260852][ T7135] loop1: detected capacity change from 0 to 128 [ 176.270382][ T7135] vfat: Unknown parameter 'wpan0' [ 176.275359][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 176.288063][ T7132] EXT4-fs (loop3): 1 truncate cleaned up [ 176.300121][ T7132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.487613][ T7148] loop1: detected capacity change from 0 to 1024 [ 176.508711][ T7148] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.552330][ T7148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.574617][ T7148] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.665473][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.709966][ T7152] loop1: detected capacity change from 0 to 512 [ 176.731760][ T7152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.799780][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.870124][ T7155] lo speed is unknown, defaulting to 1000 [ 176.923711][ T7156] loop1: detected capacity change from 0 to 2048 [ 176.950614][ T7156] EXT4-fs: Ignoring removed i_version option [ 176.991668][ T7156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.010084][ T7156] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.053717][ T70] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 465: padding at end of block bitmap is not set [ 177.156899][ T70] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 177.195473][ T70] EXT4-fs (loop3): This should not happen!! Data will be lost [ 177.195473][ T70] [ 177.309177][ T70] EXT4-fs (loop3): Total free blocks count 0 [ 177.319183][ T70] EXT4-fs (loop3): Free/Dirty block details [ 177.325093][ T70] EXT4-fs (loop3): free_blocks=0 [ 177.340288][ T70] EXT4-fs (loop3): dirty_blocks=4 [ 177.345358][ T70] EXT4-fs (loop3): Block reservation details [ 177.361456][ T70] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 177.425368][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.507011][ T7167] loop3: detected capacity change from 0 to 2048 [ 177.527229][ T7167] EXT4-fs: Ignoring removed i_version option [ 177.571527][ T7167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.720105][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.036394][ T7184] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.075576][ T7184] netlink: 14 bytes leftover after parsing attributes in process `syz.1.996'. [ 178.131671][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 178.149189][ T7184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.183380][ T7184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.200164][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 940 with error 28 [ 178.222725][ T7184] bond0 (unregistering): Released all slaves [ 178.236394][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 178.236394][ T50] [ 178.267464][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 178.273478][ T50] EXT4-fs (loop3): Free/Dirty block details [ 178.290150][ T50] EXT4-fs (loop3): free_blocks=2415919504 [ 178.295979][ T28] audit: type=1400 audit(1772913524.512:778): avc: denied { read } for pid=7188 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.300300][ T50] EXT4-fs (loop3): dirty_blocks=1888 [ 178.331952][ T7185] loop1: detected capacity change from 0 to 8192 [ 178.347309][ T50] EXT4-fs (loop3): Block reservation details [ 178.361562][ T50] EXT4-fs (loop3): i_reserved_data_blocks=59 [ 178.372438][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 940 with error 28 [ 178.477535][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 178.563274][ T28] audit: type=1400 audit(1772913524.723:779): avc: denied { create } for pid=7198 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 178.609143][ T7208] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.643883][ T7208] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 179.621690][ T7235] set_capacity_and_notify: 1 callbacks suppressed [ 179.622102][ T7235] loop2: detected capacity change from 0 to 128 [ 179.731681][ T28] audit: type=1400 audit(1772913525.956:780): avc: denied { create } for pid=7240 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.824095][ T7235] loop2: detected capacity change from 0 to 1024 [ 179.950195][ T7235] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 180.085203][ T7257] loop3: detected capacity change from 0 to 512 [ 180.101792][ T7257] EXT4-fs: Ignoring removed oldalloc option [ 180.109581][ T7257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.127757][ T7257] EXT4-fs (loop3): 1 truncate cleaned up [ 180.143734][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.157439][ T7255] loop1: detected capacity change from 0 to 512 [ 180.179104][ T7255] EXT4-fs (loop1): 1 truncate cleaned up [ 180.201203][ T7255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.255654][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.691453][ T7277] ip6gretap1: entered promiscuous mode [ 180.799211][ T28] audit: type=1400 audit(1772913526.969:781): avc: denied { read } for pid=7276 comm="syz.4.1020" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 180.823852][ T7278] loop4: detected capacity change from 0 to 128 [ 180.878875][ T28] audit: type=1400 audit(1772913526.969:782): avc: denied { open } for pid=7276 comm="syz.4.1020" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 180.944245][ T28] audit: type=1400 audit(1772913526.969:783): avc: denied { ioctl } for pid=7276 comm="syz.4.1020" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 180.997432][ T28] audit: type=1326 audit(1772913527.139:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce081bc799 code=0x7ffc0000 [ 181.034320][ T28] audit: type=1326 audit(1772913527.139:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce081bc799 code=0x7ffc0000 [ 181.057896][ T28] audit: type=1326 audit(1772913527.149:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fce081bc799 code=0x7ffc0000 [ 181.087968][ T28] audit: type=1326 audit(1772913527.149:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce081bc799 code=0x7ffc0000 [ 181.158241][ T70] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 465: padding at end of block bitmap is not set [ 181.173360][ T70] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 181.186605][ T70] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.186605][ T70] [ 181.197639][ T70] EXT4-fs (loop1): Total free blocks count 0 [ 181.203890][ T70] EXT4-fs (loop1): Free/Dirty block details [ 181.209890][ T70] EXT4-fs (loop1): free_blocks=0 [ 181.214971][ T70] EXT4-fs (loop1): dirty_blocks=4 [ 181.228269][ T70] EXT4-fs (loop1): Block reservation details [ 181.238725][ T7289] loop2: detected capacity change from 0 to 512 [ 181.245030][ T70] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 181.280923][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.355655][ T7304] loop1: detected capacity change from 0 to 512 [ 181.389205][ T7304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.401870][ T7304] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.426477][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.480853][ T7312] FAULT_INJECTION: forcing a failure. [ 181.480853][ T7312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.506579][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.1.1031 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.506612][ T7312] Tainted: [W]=WARN [ 181.506619][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.506660][ T7312] Call Trace: [ 181.506665][ T7312] [ 181.506671][ T7312] __dump_stack+0x1d/0x30 [ 181.506695][ T7312] dump_stack_lvl+0x95/0xd0 [ 181.506721][ T7312] dump_stack+0x15/0x1b [ 181.506783][ T7312] should_fail_ex+0x263/0x280 [ 181.506807][ T7312] should_fail+0xb/0x20 [ 181.506824][ T7312] should_fail_usercopy+0x1a/0x20 [ 181.506845][ T7312] _copy_from_user+0x1c/0xb0 [ 181.506931][ T7312] ___sys_sendmsg+0xc1/0x1e0 [ 181.506975][ T7312] __x64_sys_sendmsg+0xd4/0x160 [ 181.507011][ T7312] x64_sys_call+0x194c/0x3020 [ 181.507036][ T7312] do_syscall_64+0x12c/0x370 [ 181.507082][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.507126][ T7312] RIP: 0033:0x7f42133fc799 [ 181.507143][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.507197][ T7312] RSP: 002b:00007f4211e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.507216][ T7312] RAX: ffffffffffffffda RBX: 00007f4213675fa0 RCX: 00007f42133fc799 [ 181.507227][ T7312] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.507238][ T7312] RBP: 00007f4211e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.507308][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.507321][ T7312] R13: 00007f4213676038 R14: 00007f4213675fa0 R15: 00007fffb8ccb358 [ 181.507344][ T7312] [ 182.382364][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 182.401472][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 182.458659][ T7333] loop3: detected capacity change from 0 to 32768 [ 182.465195][ T7347] netlink: 'syz.2.1044': attribute type 3 has an invalid length. [ 182.514727][ T3294] loop3: p1 p2 p3 < p5 p6 > [ 182.520094][ T3294] loop3: p2 size 16775168 extends beyond EOD, truncated [ 182.528383][ T3294] loop3: p5 start 4294970168 is beyond EOD, truncated [ 182.543307][ T7333] loop3: p1 p2 p3 < p5 p6 > [ 182.554260][ T7333] loop3: p2 size 16775168 extends beyond EOD, truncated [ 182.570085][ T7333] loop3: p5 start 4294970168 is beyond EOD, truncated [ 182.999255][ T7358] loop1: detected capacity change from 0 to 164 [ 183.024222][ T7358] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 183.199071][ T7368] loop1: detected capacity change from 0 to 1024 [ 183.237504][ T7368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.282934][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 183.282948][ T28] audit: type=1400 audit(1772913529.526:800): avc: denied { mounton } for pid=7374 comm="syz.3.1049" path="mnt:[4026532385]" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.350368][ T7375] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.398189][ T7375] ext4 filesystem being mounted at mnt:[4026532385] supports timestamps until 2038-01-19 (0x7fffffff) [ 183.411313][ T7375] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.829472][ T28] audit: type=1400 audit(1772913530.067:801): avc: denied { connect } for pid=7374 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 184.171375][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.231501][ T7397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.259851][ T7397] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.262806][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 184.290321][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.441511][ T7415] batadv_slave_1: entered promiscuous mode [ 184.482572][ T7415] pimreg: entered allmulticast mode [ 184.496755][ T7415] pimreg: left allmulticast mode [ 184.528444][ T7418] netlink: 'syz.1.1063': attribute type 10 has an invalid length. [ 184.559566][ T7418] veth1_macvtap: left promiscuous mode [ 184.599078][ T7414] batadv_slave_1: left promiscuous mode [ 184.702317][ T7423] SELinux: policydb table sizes (8,16453) do not match mine (8,7) [ 184.715016][ T7423] SELinux: failed to load policy [ 185.536315][ T7433] syzkaller0: entered promiscuous mode [ 185.550326][ T7433] syzkaller0: entered allmulticast mode [ 185.608529][ T7435] set_capacity_and_notify: 2 callbacks suppressed [ 185.608544][ T7435] loop4: detected capacity change from 0 to 512 [ 185.747301][ T7439] loop2: detected capacity change from 0 to 512 [ 185.834577][ T7439] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 185.859921][ T7439] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 185.954896][ T28] audit: type=1400 audit(1772913532.193:802): avc: denied { connect } for pid=7434 comm="syz.4.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.523043][ T7469] loop4: detected capacity change from 0 to 164 [ 186.530192][ T7469] isofs_fill_super: root inode is not a directory. Corrupted media? [ 186.669719][ T28] audit: type=1400 audit(1772913532.915:803): avc: denied { read } for pid=7471 comm="syz.3.1080" path="socket:[15643]" dev="sockfs" ino=15643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 186.773283][ T5324] delete_channel: no stack [ 187.438485][ T7492] loop4: detected capacity change from 0 to 1024 [ 187.447941][ T7492] EXT4-fs: inline encryption not supported [ 187.453920][ T7492] EXT4-fs: Ignoring removed bh option [ 187.459749][ T7492] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.474793][ T7492] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.481631][ T7492] EXT4-fs error (device loop4): ext4_quota_enable:7192: comm syz.4.1089: inode #2304: comm syz.4.1089: iget: illegal inode # [ 187.494861][ T7492] loop4: lost filesystem error report for type 5 error -117 [ 187.495051][ T7492] EXT4-fs (loop4): Remounting filesystem read-only [ 187.502365][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 187.502381][ C0] EXT4-fs (loop4): initial error at time 1772913533: ext4_quota_enable:7192 [ 187.502403][ C0] EXT4-fs (loop4): last error at time 1772913533: ext4_quota_enable:7192 [ 187.547251][ T7492] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 187.562682][ T7492] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 187.569660][ T7492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.647310][ T28] audit: type=1400 audit(1772913533.897:804): avc: denied { execute } for pid=7490 comm="syz.4.1089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.704366][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.737888][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 187.767337][ T7499] hsr_slave_0: left promiscuous mode [ 187.817201][ T7505] 9p: Bad value for 'rfdno' [ 187.822088][ T7499] hsr_slave_1: left promiscuous mode [ 187.831282][ T7511] random: crng reseeded on system resumption [ 187.873577][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 187.962828][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 188.054309][ T7512] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1090'. [ 188.107654][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 188.621225][ T7531] loop3: detected capacity change from 0 to 1024 [ 188.628973][ T7531] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.169534][ T7538] loop2: detected capacity change from 0 to 8192 [ 189.197524][ T7538] vfat: Unknown parameter '18446744073709551615' [ 189.335233][ T7531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.361362][ T7531] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.454573][ T7545] loop1: detected capacity change from 0 to 1024 [ 189.496145][ T7545] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.516243][ T28] audit: type=1400 audit(1772913535.742:805): avc: denied { mount } for pid=7550 comm="syz.0.1108" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 189.574447][ T7545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.632302][ T7555] loop4: detected capacity change from 0 to 512 [ 189.640958][ T7545] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.676600][ T7555] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1106: invalid indirect mapped block 256 (level 2) [ 189.728116][ T7555] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.728736][ T7555] EXT4-fs (loop4): 2 truncates cleaned up [ 189.735941][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 189.750099][ C1] EXT4-fs (loop4): initial error at time 1772913535: ext4_free_branches:1023: inode 11 [ 189.756754][ T7555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.759775][ C1] EXT4-fs (loop4): last error at time 1772913535: ext4_free_branches:1023: inode 11 [ 189.985685][ T7546] netlink: 'syz.4.1106': attribute type 13 has an invalid length. [ 190.306158][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.323124][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.336011][ T7562] xt_hashlimit: size too large, truncated to 1048576 [ 190.364272][ T28] audit: type=1400 audit(1772913536.614:806): avc: denied { write } for pid=7565 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.398215][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.470717][ T7564] bond2: invalid ARP target 0.0.0.0 specified for addition [ 190.478940][ T7564] bond2: option arp_ip_target: invalid value (0) [ 190.487600][ T7582] loop3: detected capacity change from 0 to 1024 [ 190.500547][ T7564] bond2 (unregistering): Released all slaves [ 190.526735][ T7582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.538952][ T7585] loop4: detected capacity change from 0 to 512 [ 190.552055][ T7585] EXT4-fs (loop4): #clusters per group too big: 8896768 [ 191.113240][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.353641][ T7610] loop3: detected capacity change from 0 to 256 [ 191.377300][ T7608] netlink: 'syz.1.1122': attribute type 4 has an invalid length. [ 191.471926][ T7610] FAT-fs (loop3): Directory bread(block 64) failed [ 191.482605][ T7610] FAT-fs (loop3): Directory bread(block 65) failed [ 191.492015][ T7619] loop4: detected capacity change from 0 to 1024 [ 191.500908][ T7610] FAT-fs (loop3): Directory bread(block 66) failed [ 191.507536][ T7610] FAT-fs (loop3): Directory bread(block 67) failed [ 191.520046][ T7610] FAT-fs (loop3): Directory bread(block 68) failed [ 191.526951][ T7610] FAT-fs (loop3): Directory bread(block 69) failed [ 191.533510][ T7610] FAT-fs (loop3): Directory bread(block 70) failed [ 191.540111][ T7610] FAT-fs (loop3): Directory bread(block 71) failed [ 191.561320][ T7610] FAT-fs (loop3): Directory bread(block 72) failed [ 191.579443][ T7610] FAT-fs (loop3): Directory bread(block 73) failed [ 191.632030][ T30] kworker/u8:1: attempt to access beyond end of device [ 191.632030][ T30] loop3: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 191.655872][ T30] kworker/u8:1: attempt to access beyond end of device [ 191.655872][ T30] loop3: rw=1, sector=1288, nr_sectors = 32 limit=256 [ 191.690032][ T30] kworker/u8:1: attempt to access beyond end of device [ 191.690032][ T30] loop3: rw=1, sector=1352, nr_sectors = 32 limit=256 [ 191.704061][ T30] kworker/u8:1: attempt to access beyond end of device [ 191.704061][ T30] loop3: rw=1, sector=1416, nr_sectors = 32 limit=256 [ 192.545707][ T7661] loop2: detected capacity change from 0 to 1024 [ 192.620484][ T3311] EXT4-fs unmount: 3 callbacks suppressed [ 192.620497][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.850396][ T7673] loop2: detected capacity change from 0 to 1024 [ 192.883284][ T7673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.057757][ T7677] lo speed is unknown, defaulting to 1000 [ 193.065886][ T7681] loop3: detected capacity change from 0 to 2048 [ 193.081195][ T7681] EXT4-fs: Ignoring removed i_version option [ 193.110337][ T7681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.130182][ T7681] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.240443][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.309169][ T7685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7685 comm=syz.3.1146 [ 193.587916][ T7685] SELinux: failed to load policy [ 193.609739][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.764843][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 193.794146][ T7669] syz.0.1143 (7669) used greatest stack depth: 5544 bytes left [ 193.926925][ T7704] loop4: detected capacity change from 0 to 512 [ 193.957619][ T7704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.024112][ T7704] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.037883][ T7703] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 194.108827][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.146043][ T7713] loop4: detected capacity change from 0 to 4096 [ 194.196975][ T7713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.261716][ T7713] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 194.585835][ T7713] loop4: detected capacity change from 0 to 512 [ 194.603361][ T3632] IPVS: starting estimator thread 0... [ 194.725714][ T7715] IPVS: using max 2544 ests per chain, 127200 per kthread [ 194.740450][ T7725] loop4: detected capacity change from 0 to 128 [ 194.771059][ T7725] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.798065][ T7725] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.874915][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.989507][ T28] audit: type=1326 audit(1772913541.254:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99aea1c799 code=0x0 [ 195.564215][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 195.596884][ T7758] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 195.615847][ T7765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1170'. [ 196.621908][ T7773] loop4: detected capacity change from 0 to 512 [ 196.667563][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.680263][ T7773] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.960391][ T7798] netlink: 'syz.0.1181': attribute type 20 has an invalid length. [ 197.002819][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.034960][ T7805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7805 comm=syz.0.1182 [ 197.079180][ T28] audit: type=1400 audit(1772913543.339:808): avc: denied { getopt } for pid=7790 comm="syz.3.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.389004][ T7819] loop2: detected capacity change from 0 to 512 [ 197.419669][ T7819] ext4: Unknown parameter 'acl.data_err' [ 197.613214][ T7825] loop3: detected capacity change from 0 to 512 [ 197.624744][ T7825] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.855307][ T7834] loop2: detected capacity change from 0 to 512 [ 197.908788][ T7838] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 198.065587][ T7841] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1196'. [ 198.264888][ T7839] loop1: detected capacity change from 0 to 8192 [ 198.282471][ T7834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.295181][ T7834] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.324623][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1199'. [ 198.499596][ T3316] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 198.555389][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.614170][ T7862] loop3: detected capacity change from 0 to 4096 [ 198.633654][ T7862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.651978][ T7854] lo speed is unknown, defaulting to 1000 [ 198.661925][ T7865] netlink: 'syz.2.1203': attribute type 13 has an invalid length. [ 198.673222][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.817621][ T7874] loop2: detected capacity change from 0 to 1024 [ 198.845588][ T7874] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.889994][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.930220][ T7884] loop1: detected capacity change from 0 to 128 [ 198.951161][ T7874] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.999159][ T7884] FAT-fs (loop1): Directory bread(block 32) failed [ 199.025159][ T7884] FAT-fs (loop1): Directory bread(block 33) failed [ 199.032821][ T7891] lo speed is unknown, defaulting to 1000 [ 199.043033][ T7884] FAT-fs (loop1): Directory bread(block 34) failed [ 199.049975][ T7884] FAT-fs (loop1): Directory bread(block 35) failed [ 199.056648][ T7884] FAT-fs (loop1): Directory bread(block 36) failed [ 199.063274][ T7884] FAT-fs (loop1): Directory bread(block 37) failed [ 199.105749][ T7895] loop4: detected capacity change from 0 to 4096 [ 199.125078][ T7895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.140804][ T7884] FAT-fs (loop1): Directory bread(block 38) failed [ 199.148444][ T7884] FAT-fs (loop1): Directory bread(block 39) failed [ 199.155010][ T7884] FAT-fs (loop1): Directory bread(block 40) failed [ 199.161564][ T7884] FAT-fs (loop1): Directory bread(block 41) failed [ 199.201213][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.220169][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.270394][ T28] audit: type=1400 audit(1772913545.544:809): avc: denied { write } for pid=7901 comm="syz.2.1218" name="file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.299588][ T28] audit: type=1400 audit(1772913545.544:810): avc: denied { open } for pid=7901 comm="syz.2.1218" path="/230/file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.324818][ T7891] loop3: detected capacity change from 0 to 512 [ 199.339232][ T28] audit: type=1400 audit(1772913545.554:811): avc: denied { ioctl } for pid=7901 comm="syz.2.1218" path="/230/file0" dev="tmpfs" ino=1238 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.364575][ T28] audit: type=1400 audit(1772913545.574:812): avc: denied { mount } for pid=7901 comm="syz.2.1218" name="/" dev="hugetlbfs" ino=17709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 199.388998][ T28] audit: type=1400 audit(1772913545.614:813): avc: denied { mounton } for pid=7890 comm="syz.3.1214" path="/file0" dev="ramfs" ino=16305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 199.445462][ T7891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.470276][ T7891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.479788][ T28] audit: type=1400 audit(1772913545.744:814): avc: denied { append } for pid=7921 comm="syz.2.1223" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 199.503795][ T28] audit: type=1400 audit(1772913545.754:815): avc: denied { read write } for pid=7921 comm="syz.2.1223" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.505438][ T7922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.529014][ T28] audit: type=1400 audit(1772913545.754:816): avc: denied { open } for pid=7921 comm="syz.2.1223" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.534793][ T7922] IPv6: NLM_F_CREATE should be set when creating new route [ 199.534805][ T7922] IPv6: NLM_F_CREATE should be set when creating new route [ 199.590532][ T7926] futex_wake_op: syz.1.1224 tries to shift op by -65; fix this program [ 199.599735][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1224'. [ 199.720321][ T7937] sch_fq: defrate 4294967295 ignored. [ 199.737321][ T7936] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.785872][ T7937] serio: Serial port ttyS3 [ 199.798257][ T7936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.819217][ T7936] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.889636][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.958394][ T7947] random: crng reseeded on system resumption [ 200.033187][ T7949] netlink: 'syz.1.1233': attribute type 4 has an invalid length. [ 200.059722][ T7944] vfat: Unknown parameter '18446744073709551615' [ 200.096918][ T7952] netlink: 'syz.1.1233': attribute type 4 has an invalid length. [ 200.127387][ T7954] netlink: 'syz.0.1232': attribute type 15 has an invalid length. [ 200.163689][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1232'. [ 200.909030][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 200.909046][ T28] audit: type=1400 audit(1772913547.187:820): avc: denied { ioctl } for pid=7981 comm="syz.1.1243" path="pid:[4026532369]" dev="nsfs" ino=4026532369 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.972288][ T7985] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1242'. [ 200.988220][ T28] audit: type=1400 audit(1772913547.257:821): avc: denied { ioctl } for pid=7981 comm="syz.1.1243" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17888 ioctlcmd=0x54d2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.028826][ T7982] syzkaller0: entered promiscuous mode [ 201.034437][ T7985] netlink: 'syz.3.1242': attribute type 9 has an invalid length. [ 201.053829][ T28] audit: type=1400 audit(1772913547.267:822): avc: denied { getattr } for pid=7981 comm="syz.1.1243" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.072769][ T7982] syzkaller0: entered allmulticast mode [ 201.085185][ T7985] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1242'. [ 201.094421][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1242'. [ 201.138628][ T28] audit: type=1400 audit(1772913547.418:823): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 201.155810][ T7989] iso9660: Bad value for 'block' [ 201.329392][ T7999] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.362333][ T7999] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.1248: Bad quota inum: 2, type: 1 [ 201.373497][ T7999] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 201.401688][ T8009] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 201.449720][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.466067][ T7999] bond0: (slave gretap1): making interface the new active one [ 201.473726][ T8015] syz.4.1252 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.484959][ T7999] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 202.158413][ T3310] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 202.345090][ T8033] set_capacity_and_notify: 7 callbacks suppressed [ 202.345108][ T8033] loop2: detected capacity change from 0 to 512 [ 202.378471][ T8035] SELinux: policydb table sizes (8,16453) do not match mine (8,7) [ 202.398912][ T8035] SELinux: failed to load policy [ 202.408077][ T8041] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.457712][ T8033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 202.523538][ T8033] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.577976][ T8040] loop1: detected capacity change from 0 to 8192 [ 202.596792][ T8033] EXT4-fs (loop2): resizing filesystem from 128 to 2 blocks [ 202.619928][ T8033] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 202.646080][ T8040] vfat: Unknown parameter '18446744073709551615' [ 202.652697][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 202.744104][ T28] audit: type=1400 audit(1772913549.021:824): avc: denied { mounton } for pid=8057 comm="syz.3.1265" path="/syzcgroup/unified/syz3/cgroup.procs" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 202.769903][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 203.563843][ T28] audit: type=1400 audit(1772913549.842:825): avc: denied { accept } for pid=8074 comm="syz.4.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 203.645235][ T8081] SELinux: policydb table sizes (8,16453) do not match mine (8,7) [ 203.684310][ T8081] SELinux: failed to load policy [ 203.817221][ T8089] netlink: 'syz.2.1273': attribute type 10 has an invalid length. [ 203.825827][ T28] audit: type=1400 audit(1772913550.113:826): avc: denied { accept } for pid=8090 comm="syz.3.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 203.851577][ T8089] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1273'. [ 203.871019][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 203.915331][ T8089] bond0: entered promiscuous mode [ 203.920458][ T8089] bond_slave_0: entered promiscuous mode [ 203.935238][ T8089] bond_slave_1: entered promiscuous mode [ 203.941003][ T8089] bridge0: port 3(bond0) entered blocking state [ 203.968274][ T8089] bridge0: port 3(bond0) entered disabled state [ 203.974687][ T8089] bond0: entered allmulticast mode [ 203.988559][ T8089] bond_slave_0: entered allmulticast mode [ 204.004517][ T8089] bond_slave_1: entered allmulticast mode [ 204.027724][ T8089] bridge0: port 3(bond0) entered blocking state [ 204.034173][ T8089] bridge0: port 3(bond0) entered forwarding state [ 204.049097][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'. [ 204.058090][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'. [ 204.069895][ T8101] loop1: detected capacity change from 0 to 512 [ 204.080217][ T8101] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 204.097266][ T8101] EXT4-fs (loop1): 1 truncate cleaned up [ 204.110611][ T8101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.257703][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.339457][ T8117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.356090][ T8117] bond0: (slave bond1): Enslaving as an active interface with a down link [ 205.152868][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'. [ 205.349674][ T8135] random: crng reseeded on system resumption [ 205.703713][ T8139] tipc: Enabling of bearer rejected, failed to enable media [ 205.727092][ T28] audit: type=1400 audit(1772913552.016:827): avc: denied { bind } for pid=8142 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 205.774425][ T8143] lo speed is unknown, defaulting to 1000 [ 205.860151][ T8150] loop4: detected capacity change from 0 to 8192 [ 205.881969][ T8150] vfat: Unknown parameter '' [ 205.905613][ T28] audit: type=1400 audit(1772913552.187:828): avc: denied { read } for pid=8149 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.941935][ T8143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8143 comm=syz.3.1289 [ 206.098972][ T28] audit: type=1326 audit(1772913552.387:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.176032][ T28] audit: type=1326 audit(1772913552.387:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.204812][ T28] audit: type=1326 audit(1772913552.427:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.228550][ T28] audit: type=1326 audit(1772913552.427:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.252191][ T28] audit: type=1326 audit(1772913552.427:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.276070][ T28] audit: type=1326 audit(1772913552.427:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.299758][ T28] audit: type=1326 audit(1772913552.427:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.323991][ T28] audit: type=1326 audit(1772913552.427:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.347688][ T28] audit: type=1326 audit(1772913552.427:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99aea1c799 code=0x7ffc0000 [ 206.600163][ T8178] loop1: detected capacity change from 0 to 1024 [ 206.619774][ T8178] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.682234][ T8176] loop3: detected capacity change from 0 to 8192 [ 206.688894][ T8176] vfat: Unknown parameter '18446744073709551615' [ 206.707422][ T8178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 206.731705][ T8178] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.092543][ T8172] ================================================================== [ 207.100662][ T8172] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 207.105203][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 207.108499][ T8172] [ 207.108507][ T8172] write to 0xffffea00042a6d18 of 8 bytes by task 8173 on cpu 0: [ 207.127449][ T8172] __filemap_remove_folio+0x201/0x310 [ 207.132851][ T8172] filemap_remove_folio+0x6d/0x1d0 [ 207.137981][ T8172] truncate_inode_folio+0x42/0x50 [ 207.143024][ T8172] shmem_undo_range+0x26d/0xb10 [ 207.147886][ T8172] shmem_fallocate+0x881/0x920 [ 207.152667][ T8172] vfs_fallocate+0x3b6/0x450 [ 207.157280][ T8172] __x64_sys_fallocate+0x7a/0xd0 [ 207.162233][ T8172] x64_sys_call+0x298e/0x3020 [ 207.166925][ T8172] do_syscall_64+0x12c/0x370 [ 207.171518][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.177426][ T8172] [ 207.179780][ T8172] read to 0xffffea00042a6d18 of 8 bytes by task 8172 on cpu 1: [ 207.187326][ T8172] folio_mapping+0xa1/0xe0 [ 207.191754][ T8172] evict_folios+0x2b79/0x35c0 [ 207.196439][ T8172] try_to_shrink_lruvec+0x81b/0xbf0 [ 207.201641][ T8172] shrink_lruvec+0x255/0x1c60 [ 207.206337][ T8172] shrink_node+0x67a/0x2130 [ 207.210867][ T8172] do_try_to_free_pages+0x408/0xc80 [ 207.216078][ T8172] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 207.222006][ T8172] try_charge_memcg+0x37e/0xa10 [ 207.226871][ T8172] obj_cgroup_charge_pages+0x23/0xc0 [ 207.232180][ T8172] __memcg_kmem_charge_page+0x9e/0x170 [ 207.237658][ T8172] __alloc_frozen_pages_noprof+0x18a/0x360 [ 207.243502][ T8172] alloc_pages_mpol+0xb3/0x260 [ 207.248302][ T8172] alloc_pages_noprof+0x8f/0x130 [ 207.253272][ T8172] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 207.259179][ T8172] __kvmalloc_node_noprof+0x3d4/0x650 [ 207.264576][ T8172] ip_set_alloc+0x24/0x30 [ 207.268920][ T8172] hash_netiface_create+0x282/0x740 [ 207.274123][ T8172] ip_set_create+0x3cf/0x970 [ 207.278723][ T8172] nfnetlink_rcv_msg+0x509/0x5d0 [ 207.283667][ T8172] netlink_rcv_skb+0x123/0x220 [ 207.288526][ T8172] nfnetlink_rcv+0x167/0x1720 [ 207.293209][ T8172] netlink_unicast+0x5c0/0x690 [ 207.297998][ T8172] netlink_sendmsg+0x5c8/0x6f0 [ 207.302775][ T8172] ____sys_sendmsg+0x563/0x5b0 [ 207.307556][ T8172] ___sys_sendmsg+0x195/0x1e0 [ 207.312302][ T8172] __x64_sys_sendmsg+0xd4/0x160 [ 207.317233][ T8172] x64_sys_call+0x194c/0x3020 [ 207.321942][ T8172] do_syscall_64+0x12c/0x370 [ 207.326535][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.332659][ T8172] [ 207.334982][ T8172] value changed: 0xffff88811c3b2d88 -> 0x0000000000000000 [ 207.342088][ T8172] [ 207.344424][ T8172] Reported by Kernel Concurrency Sanitizer on: [ 207.350615][ T8172] CPU: 1 UID: 0 PID: 8172 Comm: syz.0.1297 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.361476][ T8172] Tainted: [W]=WARN [ 207.365285][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.375348][ T8172] ==================================================================