last executing test programs: 8m39.946197112s ago: executing program 4 (id=216): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000e40)="$eJzs3W2IHGcdAPD/7t6l5hJNK7Waapur1Tb2ZS93V4KpBclHbVNqXz4ZiUeyuYTby8a7DfauFq4UoYKRUP2knxQEFT9EBAXxQ0Gs+Enwm1IqWEQJhGIpikY9mdmZuOft3fZ6L6M7vx/M3TPPzOZ5Zv/8Z2eePDsXQGmNJj8qEXsj4uWI2NdZXbnDaOfXpcnLZ5KlEsvLT7xeSfd7dvLymXzX/HV7kh/ViPclv34esWd4dbvzC4szU81mYy5bH2vPnh+bX1i8/+zs1HRjunFuYnL88KGJw+OHj2zZsX73mRc/+eozj1y7eHXk26/sP/DXpL97s23dx7FVRmM0e0+G44PdGyoRH9/qxgpSi4ihiHhP0R1hw47/+stP5fEbTvN/X9TStYiRyeNv7IuLD3XvXy2qo8C2WE6ttbW2DAyyShTdA6AY+Sd9cv+bLzt17TEzKDfB/8euHu3cAD6bje1cuh7/oev3e8PbdH9/4E8Ro9G+5/In7vhissQ2jcOwtqXnIh2oW53/lXRs7MZsvzsj4mBEfCgiPhwRd0XE3Zts+8nPJPH/3Ve768R/Z73V+H8kIuoRcU9E3BsR90XE/Zts+5ZjSfz3fLa7TvzL49ZPFd0DivSrF4ruAen5/9DQUK/z/2bH++/os305/X/Fpde66/L2f7nJtvnf9/gTRfeAIj16uOgesLNqK9a+8XphHSHz0tHOzdzqz/9q3NK1X1J+b+dWMfYn1+4R8f6I+EBE3BYRt0fEgXw+0Vv0hYeT/euN7rrV93/VK5s5PtZ39WjEQ11zuy51xT9zYy1be2c6HjBcOX222TgUEe9Kx4SGb0jWx9dp40tLP3u4V/33b0vi/7FH8/G/ZEnaz8cCs35cGbph5etOTbWnNnvcdFx9LuLWoV7xr2QzgTrz+pYjYuxttvH8wR/8olf9Rx9P4n/XfevHn+20/M3OOG6v+Ocq68/PHEvPB2P5WWG15+Pmi73qH7uWxP+134p/cZL8H1k//un5//p83fmNtzF06cpXetbPJvH/w0/fzvl/V+XJtIO7srqnp9rtufGIXZVHKtmUxv/UT2y8z4Mqfz/y9yuJ/8E7e3/+vzt7TfKGJpn9z4j4V0T8LSL+HhHXIuIfEfHniHhjnTZ/8uKDP+5VP/lUEv8/viz/i5PE/1Sf/K+syP/Vhd2x5qa08PXbj3y+V9vf+VYS/5F6//x/IO3MwazG9V9/64RjRaHofgIAAAAAAACwNarpM/Aq1fr1crVar3ee4XdzjFSbrfn2vadbF86diuz7oMPVfKbXvq75oOPZd0Xz9Yn/Wp+MiJsi4oXa7nS9frLVPFX0wUNJ7Y149YefO7lrzxr5n3ilFrG76I4CWy7J/9Nfqy0l5TdrRfcG2ElJ/n/vzdn0e1nyH8pF/sPgGNrg/vIfykv+Q3nJfygv+Q/lJf+hvOQ/lJf8h/Lqzn+gnB47dixZlvPnfp5rTZ+dOXP+yMSh+uyFk/WTrbnz9elWazr9xs5s/3+v2WqdH38gLjw91m7Mt8fmFxZPzLYunGufSJ8bfaIxvAPHBPT3l99/+kc3HXjpN5WIWHpwd7pE1zO15SoMNrf+UF4bnTcMDA7X+EClz/Z3rLXh+Nb3BdgZ/f7Gv/sDGFx37zf+D2Vl/B/Ky/U9lJdrfMD4P5RPv/F/YHA15uYXFmemms1VhaJ7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQTvMLizNTzWZjTkFBoXSFfwcAAP//nMdHRQ==") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 8m39.144983382s ago: executing program 4 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}, 0x7000}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 8m38.181516081s ago: executing program 4 (id=232): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x200000008, 0xc2718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8eab, 0x1, @perf_config_ext={0x6, 0x40}, 0x100b28, 0x3, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x4000001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 8m38.030570843s ago: executing program 4 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a9c, 0x4522f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10044}}}}}}, @IFLA_MTU={0x8, 0x4, 0xfffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a9c, 0x4522f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10044}}}}}}, @IFLA_MTU={0x8, 0x4, 0xfffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) (async) 8m38.026378242s ago: executing program 4 (id=238): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100d2f2d16eb32902ce2f"], 0x20}}, 0x0) 8m37.818206842s ago: executing program 4 (id=241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) statx(0xffffffffffffffff, 0x0, 0x2000, 0x20, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000200001002dbd7000000000000a008004ff0000010000000014000200fc02000000000000000001000000000005001900"], 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x17d4, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000400)) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) syz_io_uring_setup(0x61ba, &(0x7f0000000200)={0x0, 0x6912, 0x8, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xff, 0x7, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10, 0x4}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) 8m37.780955005s ago: executing program 32 (id=241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) statx(0xffffffffffffffff, 0x0, 0x2000, 0x20, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000200001002dbd7000000000000a008004ff0000010000000014000200fc02000000000000000001000000000005001900"], 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x17d4, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000400)) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) syz_io_uring_setup(0x61ba, &(0x7f0000000200)={0x0, 0x6912, 0x8, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xff, 0x7, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10, 0x4}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) 7m30.045847038s ago: executing program 2 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 7m30.045586548s ago: executing program 2 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x4}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7m29.04403089s ago: executing program 2 (id=889): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$zero(0xffffffffffffff9c, 0x0, 0x521440, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0xff80) 7m28.758984807s ago: executing program 2 (id=896): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_usbip_server_init(0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) 7m27.311041565s ago: executing program 2 (id=910): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read$hidraw(r2, &(0x7f0000002380)=""/93, 0xfdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7m27.118650728s ago: executing program 2 (id=913): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0x10, 0x5, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 7m27.111001887s ago: executing program 33 (id=913): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0x10, 0x5, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 5m47.091302111s ago: executing program 5 (id=1879): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5m46.285248307s ago: executing program 5 (id=1884): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_emit_ethernet(0x1d, &(0x7f00000004c0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "bf", "9806e3", 0x88ca, "20c79fda289434"}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000001000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m44.611675918s ago: executing program 5 (id=1895): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000009a03000038000000016eee9e5a0d56b48400200003"], 0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m44.100516401s ago: executing program 5 (id=1900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000600030000001801000020756c2500010000002020207b1af8ff0000bfa1000000000000070100"/74], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="c8bb4e7dbee18bf660ce80ab88a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0xc0000, 0xdd, 0x479c28ea, 0x1, 0x2, 0xb}) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000180)=ANY=[], 0x1, 0x5b7, &(0x7f0000000780)="$eJzs3MFv29YZAPDHxK4NBwsGFGvSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggRLlybJTpWkTpcDvB8TvUfzI9z2C4QcRIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJks9FoRqGT9Xb34qdLNou8e7y0EKbXj/f3nxPNCYsTf0MUQlT9C8vL4fLoo8uv/z/2R9Wfa+HSaOlSWK6a5fD4whs//OD1hXPVhotRdCqLl+3ho8e//uTgYP9332Cbo6Ojz6rZvMC0XprttJeVedZtb6dxVubxxvp64/2drTLeyjppeaccpN04KdL2IC/i68ntEMLGWpyu3sl3e9ub7U4aX09+HDc3Nm7daDUa6/GHq/20XZR57/0PV8tkJ+t0st72MKZafaP1drhVnYgfZYN4kLa7cXzvwcH+2qwkq6DmswS1ZgW1Gq1Ws9lqNddvbty81Wgs12fr8QcLjSlhepOF+Z+0vHSv1SfKcGF8jXvtO7uIw3M6Sv427xQAAACAFywa3mOPhvflLw97W1knbZyIOYrmlh4AAADwHRh+tb9U3wAI4XKITn//BwAAAL7f/jnunPmMXYiiUPaXovGjKv2996LDdtVrH54ffXR+eo+DrSvRxXonw2Z9oV5K0qvRm6OgN8fRX9XNvac/6/fvUOURFcVi9OTbJRD+Eq6MYq7cHbV3x2tGs13ZyjrpapJ3PmiGdvviuUG6N/jDpw/+GEJRHJ3/ote9GIV7Dw72V3/5m4O7VS6jpxmfHNa/kDj1Q4mTuSyFiVx+f/zcYz3j2yeP/OLwRkw16y963ZXRuI3J+Z8bbX7uG8z/8/DWKOatlVG7cnL+y9WYzdUzZj+ZRbO/995SPdgzznwqi6ujmKvXhyfWu9frNYsTWbRmZdEaHosno+P/XMfiOIt3T2QxeSzWZmWx9i2zAJiXe9NV6FT9P1V3n+Mq9zXVvRqlKuEzq/uvZo7yeXhnFPPOlYW6Ip0PYeqK3ph1RW9MXtG/prqFcHYW/wrX/vH3EHbDtXHw02psNe5fT1TV6PDLaoMvT4/7p1FT/vf+zoWqs3T42/DGw0ePbzw4/OT+/v39T1uttfXGTxqNm62wOJxG3ag9AJwhLb6KVgZ/jooi6/+iubHRbA920rjIk4/iItvcTuOsN0iLZKfd207jfpEP8iTvVJ2Ps820jMvdfj+vKklexP28zPaGb36J61e/lGm33RtkSdnvpO0yjZO8N2gng3gzK5O4v/vzTlbupEW8lRdx2U+TbCtL2oMs78Vlvlsk6Wocl2k6EZhtpkefhZBV3V7cL7Juu7gTf5x3drtpvJlW1bI/yKNQ7XA8VtbbyovucLer8z7YAPCKeBjqN9gdv8ru4c/Gqx6dWnVmJyzPiJnzFAGAKdNVemneCQEAAAAAAAAAAAAAAKdMPq730/qVPs/22N8r27l94axVb88/sclOCGHhFUhD5xk7y69GGov1f9vn3U8UQpgd/IMqZp5XJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42/8CAAD//+AlkH0=") unshare(0x400) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) r3 = dup(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendto$inet6(r2, 0x0, 0x0, 0x48c00, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000040)}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)=@orangefs_parent={0x28, 0x2, {{"42e4bc38fa96c39e61bab70f949f6a02", 0x9}, {"46c45cbe2231ff1b73d7d6f1edfb2a58", 0x8427}}}, &(0x7f0000000240), 0x600) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, 0x140c, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40855) 5m41.334263094s ago: executing program 5 (id=1908): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000009a03000038000000016eee9e5a0d56b48400200003"], 0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m39.080750595s ago: executing program 5 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m38.914293123s ago: executing program 34 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 58.250209081s ago: executing program 3 (id=3675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x4) 57.71811879s ago: executing program 3 (id=3682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd79, &(0x7f0000001700)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "23d83b", 0xd3f, 0x21, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x8, 0x1f, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x7, 0xad, "29063501fe21071eb9a92ac651f72fec4f10ac312968487b1d1330d5ad3ab87444d7b14dd3b156c4c9ce5eca8e0e98a234967be85adfd76cff66615cb12b6e8826589285e63485610b7eaf5296f2db10d509e65769287cd6b9ebeaed0ec056e5deaae053ae99de235a8fdd58df23e8991f47b6b0d4c400638e2028d8564b1944b026ea50b193ee69ea76b1efba6c684cd58cdc593d4755dcf1df6b3eab57f34660de2898d2060929011ad52605"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x8296, [0x455, 0xff, 0x6, 0xffffffffffffffff, 0x8f]}}]}, @dstopts={0x67, 0x16e, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x40}, @generic={0x7, 0xb5e, "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"}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, "e235dc", 0x8, "aa0e3d"}, "211233e51594ceb67c76e16b3d708d21266bfb202a561838697954948ca7ab9700f43adc8cf58963048c34b459866976581e2cec50f9782eb09ad2c311880ef67300bffc79c4a4e5fb94d13ba6836f16c269654a2ed65059dae21e5491f33b5ebd27f494e0d3eea969ccbe40277cad51594ec417e829440eb1ca065711cc7173df4c080f6f00e977e18b4c10cf7c203081a1666920d663b8fb2e2c86570421ba36b9c285990161"}}}}}}, 0x0) 57.399761579s ago: executing program 3 (id=3683): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00b3be80ae0000000000"], 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000200), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 56.002044903s ago: executing program 3 (id=3694): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) chroot(&(0x7f0000000040)='./file0\x00') r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 55.232515817s ago: executing program 3 (id=3698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x24}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 32) msync(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) (async) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) (async) r4 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x6}, [{0x2, 0x0, r1}, {0x2, 0x9d993098ffe4d970, r2}, {0x2, 0x0, r3}], {0x4, 0x4}, [{0x8, 0x0, r4}, {0x8, 0x2, 0xee01}], {0x10, 0x4}, {0x20, 0x7}}, 0x4c, 0x1) 53.894508161s ago: executing program 3 (id=3704): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00b3be80ae0000000000"], 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000200), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 53.809781706s ago: executing program 35 (id=3704): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00b3be80ae0000000000"], 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000200), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 34.274118456s ago: executing program 7 (id=3848): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x1f, &(0x7f00000004c0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "bf", "9806e3", 0x88ca, "20c79fda2894344202"}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000001000000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r4, 0x0, 0x44004) 33.925722459s ago: executing program 7 (id=3853): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 33.094667881s ago: executing program 7 (id=3856): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008004) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x786}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x83}, 0xc824) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x7a}, 0x8) 32.155682932s ago: executing program 7 (id=3859): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc71, 0x2}) fallocate(0xffffffffffffffff, 0x3, 0x8dc, 0xfffffffb) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x8005, 0x0, 0x0, 0xc, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f283b8d19dc39a00000000000000410100000000000300", [0x9, 0x40000000000000]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 31.363169971s ago: executing program 7 (id=3863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x90, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x7c, 0x1, [@m_skbedit={0x48, 0xf, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1416}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x30, 0x10, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x90}}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pidfd_send_signal(0xffffffffffffffff, 0x28, &(0x7f0000001340)={0x11, 0x80000001, 0x6}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.885321841s ago: executing program 7 (id=3867): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000080000000000000000000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009582df9fee34bf11"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020207025000000000020"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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") setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="97fe0d2d1b4a88c43c64795c0b97acb594c78c45d3c0fcf72414e389d6442606f936af957b33a66221d64505fb08e9460072847e485d398b968e8bd8052001580de6bba6c98daff989cf8b0810e8dd6ab830397f9f0387feff818363953d1b1dfa4b990f6308c99f13e67ee743e66e55df6f5898ed085495f8a526a208234822", 0x80}, {&(0x7f0000000200)="1a295f2f19d9d24e4e85761551b4a50de0afd82891e497e92c5f12bc8e1f333915d2f2656b0be935ee865121aec01e9e9b1eaf09e13b26facbb317830a4ee1cea9ce105765977282818abbf164c37b77d7793226392b658381d9d7319e76e2abe999e22d893635dba7d5f1a55b", 0x6d}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x5, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4f3d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x91f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="cd547747518be305d563d22ef9617231a0918a4241a24d8f3b93e6202983d9d3639481b556e322590b6c3365489b56ffd8295cd2619a846ab1466da0b0afefd46f8cb6911340829fb1fd7eaf4e2e7c289f6bdc3d7d6784dea3b26ec1d8025478391d5075b44d", 0x66}, {&(0x7f00000006c0)="b6c9155aca5c266b3bf3c1041252b93a7663ef42441c713b0d462d7b99192a20557b82da6e1fed044d07d6725d940fb6be35ea83600a2a807950e63af3ec25ff8b17f5a929f90b6984e8a7afc6dc67b5f6c31f89d52612895538d2022f94e9161d06d011bd952c6fb7a12b424fa691ed774b29dfeb09f04faaf758a028ccae68a73a69d1a5f38fa90bafbc1f496f4e1e5135a46962aa5929706ccc0a9cb27a7a01b7b137762e1c0ec022f72de9d0c2cd3ca3bed5c1588437f3b1e8698a12c3a8801465b46c1d718c3a7d797fe0a9d717", 0xd0}, {&(0x7f00000007c0)="b759a2ff012922", 0x7}, {&(0x7f0000000800)="9c46c796ec69e28e6ddbc12d030984eca675b9eb64b11f637b782cd228fd0ec88c2423", 0x23}, {&(0x7f0000000840)="959a2604afd974834a6f5243ff6b4fc74e23747edffc7ee9b66a574c0cfcc998ce6f5185a9f2924951ea65293e4cb57c38049a5d3540a997d99da7a28220b15e02267593a1eaf00733800ffb686cef75a7c10382a65c15612f74db873ee8142515f951eef981bab938687bb11dd6f6754ff823ad51b124235565b6c55efd857e2316f24d1110ad571dcf85e7cfddd2092c", 0x91}, {&(0x7f0000000900)="f8cc4a0ac0f235a09fe7757fe9ba0bb8b3cc27322c2000ac26fff582a5aab7b7dce5330bd70f43b783f430d89015071e618edd5205d1a3c4068260e7e8a4ef05bf9f28983f2e5a4974ce7e999effb37f4c9df9bf98dcefdf0d61be8d4bc58ef304f57f4bd149e7544c8f67aab265abae7e2f0329dc3a3c4f3c6dbff7f9654a5dde3491ddf3f4ae5a2437dbda06911f7e1d9bb4e9079b3b79f238394b8e03107670ed0358260240", 0xa7}, {&(0x7f0000000a80)='N15', 0x3}, {&(0x7f0000000ac0)="a02f59ec761c885c2fa7b3540c2ace1e47fe77d034c528542f9395b795faabc889bae63ed7a33d61a4663b493695f4af84468e8902a2d8e6150a0597787476fca6f541bd383578ca62d49e23bca17b6c7356b2651d9c36a6f0e97195f2043d70bca788b3ccde37f00516238cda44a856264fdde7a413534a4df51b6bc31c6e48f292bcc81ddd9a6df2fa9ae38035858714491784a1c0ebf8428000e36a3781e78026449ef2d12a3e42b97f0fe11bd050ee17f656afcadd9a3d12977412c8fb2ad4ef29a9712f385d5a3d344f56c6b8c1bf5cebd889836f5ffb93ddd571f5667fb6786d9ae2100a1c8d9421df7ed5cb", 0xef}], 0x8}}], 0x2, 0x400a090) 30.864871877s ago: executing program 36 (id=3867): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000080000000000000000000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009582df9fee34bf11"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020207025000000000020"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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") setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="97fe0d2d1b4a88c43c64795c0b97acb594c78c45d3c0fcf72414e389d6442606f936af957b33a66221d64505fb08e9460072847e485d398b968e8bd8052001580de6bba6c98daff989cf8b0810e8dd6ab830397f9f0387feff818363953d1b1dfa4b990f6308c99f13e67ee743e66e55df6f5898ed085495f8a526a208234822", 0x80}, {&(0x7f0000000200)="1a295f2f19d9d24e4e85761551b4a50de0afd82891e497e92c5f12bc8e1f333915d2f2656b0be935ee865121aec01e9e9b1eaf09e13b26facbb317830a4ee1cea9ce105765977282818abbf164c37b77d7793226392b658381d9d7319e76e2abe999e22d893635dba7d5f1a55b", 0x6d}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x5, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4f3d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x91f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="cd547747518be305d563d22ef9617231a0918a4241a24d8f3b93e6202983d9d3639481b556e322590b6c3365489b56ffd8295cd2619a846ab1466da0b0afefd46f8cb6911340829fb1fd7eaf4e2e7c289f6bdc3d7d6784dea3b26ec1d8025478391d5075b44d", 0x66}, {&(0x7f00000006c0)="b6c9155aca5c266b3bf3c1041252b93a7663ef42441c713b0d462d7b99192a20557b82da6e1fed044d07d6725d940fb6be35ea83600a2a807950e63af3ec25ff8b17f5a929f90b6984e8a7afc6dc67b5f6c31f89d52612895538d2022f94e9161d06d011bd952c6fb7a12b424fa691ed774b29dfeb09f04faaf758a028ccae68a73a69d1a5f38fa90bafbc1f496f4e1e5135a46962aa5929706ccc0a9cb27a7a01b7b137762e1c0ec022f72de9d0c2cd3ca3bed5c1588437f3b1e8698a12c3a8801465b46c1d718c3a7d797fe0a9d717", 0xd0}, {&(0x7f00000007c0)="b759a2ff012922", 0x7}, {&(0x7f0000000800)="9c46c796ec69e28e6ddbc12d030984eca675b9eb64b11f637b782cd228fd0ec88c2423", 0x23}, {&(0x7f0000000840)="959a2604afd974834a6f5243ff6b4fc74e23747edffc7ee9b66a574c0cfcc998ce6f5185a9f2924951ea65293e4cb57c38049a5d3540a997d99da7a28220b15e02267593a1eaf00733800ffb686cef75a7c10382a65c15612f74db873ee8142515f951eef981bab938687bb11dd6f6754ff823ad51b124235565b6c55efd857e2316f24d1110ad571dcf85e7cfddd2092c", 0x91}, {&(0x7f0000000900)="f8cc4a0ac0f235a09fe7757fe9ba0bb8b3cc27322c2000ac26fff582a5aab7b7dce5330bd70f43b783f430d89015071e618edd5205d1a3c4068260e7e8a4ef05bf9f28983f2e5a4974ce7e999effb37f4c9df9bf98dcefdf0d61be8d4bc58ef304f57f4bd149e7544c8f67aab265abae7e2f0329dc3a3c4f3c6dbff7f9654a5dde3491ddf3f4ae5a2437dbda06911f7e1d9bb4e9079b3b79f238394b8e03107670ed0358260240", 0xa7}, {&(0x7f0000000a80)='N15', 0x3}, {&(0x7f0000000ac0)="a02f59ec761c885c2fa7b3540c2ace1e47fe77d034c528542f9395b795faabc889bae63ed7a33d61a4663b493695f4af84468e8902a2d8e6150a0597787476fca6f541bd383578ca62d49e23bca17b6c7356b2651d9c36a6f0e97195f2043d70bca788b3ccde37f00516238cda44a856264fdde7a413534a4df51b6bc31c6e48f292bcc81ddd9a6df2fa9ae38035858714491784a1c0ebf8428000e36a3781e78026449ef2d12a3e42b97f0fe11bd050ee17f656afcadd9a3d12977412c8fb2ad4ef29a9712f385d5a3d344f56c6b8c1bf5cebd889836f5ffb93ddd571f5667fb6786d9ae2100a1c8d9421df7ed5cb", 0xef}], 0x8}}], 0x2, 0x400a090) 6.325464244s ago: executing program 8 (id=4049): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000080000000000000000000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009582df9fee34bf11"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="97fe0d2d1b4a88c43c64795c0b97acb594c78c45d3c0fcf72414e389d6442606f936af957b33a66221d64505fb08e9460072847e485d398b968e8bd8052001580de6bba6c98daff989cf8b0810e8dd6ab830397f9f0387feff818363953d1b1dfa4b990f6308c99f13e67ee743e66e55df6f5898ed085495f8a526a208234822", 0x80}, {&(0x7f0000000200)="1a295f2f19d9d24e4e85761551b4a50de0afd82891e497e92c5f12bc8e1f333915d2f2656b0be935ee865121aec01e9e9b1eaf09e13b26facbb317830a4ee1cea9ce105765977282818abbf164c37b77d7793226392b658381d9d7319e76e2abe999e22d893635dba7d5f1a55b", 0x6d}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x5, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4f3d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x91f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="cd547747518be305d563d22ef9617231a0918a4241a24d8f3b93e6202983d9d3639481b556e322590b6c3365489b56ffd8295cd2619a846ab1466da0b0afefd46f8cb6911340829fb1fd7eaf4e2e7c289f6bdc3d7d6784dea3b26ec1d8025478391d5075b44d", 0x66}, {&(0x7f00000006c0)="b6c9155aca5c266b3bf3c1041252b93a7663ef42441c713b0d462d7b99192a20557b82da6e1fed044d07d6725d940fb6be35ea83600a2a807950e63af3ec25ff8b17f5a929f90b6984e8a7afc6dc67b5f6c31f89d52612895538d2022f94e9161d06d011bd952c6fb7a12b424fa691ed774b29dfeb09f04faaf758a028ccae68a73a69d1a5f38fa90bafbc1f496f4e1e5135a46962aa5929706ccc0a9cb27a7a01b7b137762e1c0ec022f72de9d0c2cd3ca3bed5c1588437f3b1e8698a12c3a8801465b46c1d718c3a7d797fe0a9d717", 0xd0}, {&(0x7f00000007c0)="b759a2ff012922", 0x7}, {&(0x7f0000000800)="9c46c796ec69e28e6ddbc12d030984eca675b9eb64b11f637b782cd228fd0ec88c2423", 0x23}, {&(0x7f0000000840)="959a2604afd974834a6f5243ff6b4fc74e23747edffc7ee9b66a574c0cfcc998ce6f5185a9f2924951ea65293e4cb57c38049a5d3540a997d99da7a28220b15e02267593a1eaf00733800ffb686cef75a7c10382a65c15612f74db873ee8142515f951eef981bab938687bb11dd6f6754ff823ad51b124235565b6c55efd857e2316f24d1110ad571dcf85e7cfddd2092c", 0x91}, {&(0x7f0000000900)="f8cc4a0ac0f235a09fe7757fe9ba0bb8b3cc27322c2000ac26fff582a5aab7b7dce5330bd70f43b783f430d89015071e618edd5205d1a3c4068260e7e8a4ef05bf9f28983f2e5a4974ce7e999effb37f4c9df9bf98dcefdf0d61be8d4bc58ef304f57f4bd149e7544c8f67aab265abae7e2f0329dc3a3c4f3c6dbff7f9654a5dde3491ddf3f4ae5a2437dbda06911f7e1d9bb4e9079b3b79f238394b8e03107670ed0358260240", 0xa7}, {&(0x7f0000000a80)='N15', 0x3}, {&(0x7f0000000ac0)="a02f59ec761c885c2fa7b3540c2ace1e47fe77d034c528542f9395b795faabc889bae63ed7a33d61a4663b493695f4af84468e8902a2d8e6150a0597787476fca6f541bd383578ca62d49e23bca17b6c7356b2651d9c36a6f0e97195f2043d70bca788b3ccde37f00516238cda44a856264fdde7a413534a4df51b6bc31c6e48f292bcc81ddd9a6df2fa9ae38035858714491784a1c0ebf8428000e36a3781e78026449ef2d12a3e42b97f0fe11bd050ee17f656afcadd9a3d12977412c8fb2ad4ef29a9712f385d5a3d344f56c6b8c1bf5cebd889836f5ffb93ddd571f5667fb6786d9ae2100a1c8d9421df7ed5cb", 0xef}], 0x8}}], 0x2, 0x400a090) 5.99268786s ago: executing program 8 (id=4043): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x700) 5.288101547s ago: executing program 8 (id=4050): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000180)={[{@nombcache}, {@errors_remount}, {@inlinecrypt}, {@norecovery}, {@nodioread_nolock}, {@debug}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shmdt(0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88\a'}, @typed={0x8, 0x16, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x2, 0x88) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pread64(r6, &(0x7f0000002500)=""/233, 0xe9, 0x7ffffffeffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) unshare(0x22020400) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/169) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r8}}, 0x18) 4.173519374s ago: executing program 6 (id=4058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x6) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2b, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xb}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8, 0xb, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)={0x2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000040)="04a63eb507e7ae000098d1db1ba9", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe4}, 0x50) 3.947084941s ago: executing program 9 (id=4059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4c1723ff22329273708b7da7", 0x26}], 0x2) 3.776464538s ago: executing program 9 (id=4060): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x700) 3.496800965s ago: executing program 9 (id=4062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4c1723ff", 0x1e}], 0x2) 3.370956461s ago: executing program 1 (id=4063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd79, &(0x7f0000001700)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "23d83b", 0xd3f, 0x21, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x8, 0x1e, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x7, 0xad, "29063501fe21071eb9a92ac651f72fec4f10ac312968487b1d1330d5ad3ab87444d7b14dd3b156c4c9ce5eca8e0e98a234967be85adfd76cff66615cb12b6e8826589285e63485610b7eaf5296f2db10d509e65769287cd6b9ebeaed0ec056e5deaae053ae99de235a8fdd58df23e8991f47b6b0d4c400638e2028d8564b1944b026ea50b193ee69ea76b1efba6c684cd58cdc593d4755dcf1df6b3eab57f34660de2898d2060929011ad52605"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x8296, [0x455, 0x6, 0xffffffffffffffff, 0x8f]}}]}, @dstopts={0x67, 0x16f, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x40}, @pad1, @generic={0x7, 0xb5e, "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"}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, "e235dc", 0x8, "aa0e3d"}, "211233e51594ceb67c76e16b3d708d21266bfb202a561838697954948ca7ab9700f43adc8cf58963048c34b459866976581e2cec50f9782eb09ad2c311880ef67300bffc79c4a4e5fb94d13ba6836f16c269654a2ed65059dae21e5491f33b5ebd27f494e0d3eea969ccbe40277cad51594ec417e829440eb1ca065711cc7173df4c080f6f00e977e18b4c10cf7c203081a1666920d663b8fb2e2c86570421ba36b9c285990161"}}}}}}, 0x0) 3.291299326s ago: executing program 0 (id=4064): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f00000006c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@resuid}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) 3.290841826s ago: executing program 6 (id=4065): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008004) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x786}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x83}, 0xc824) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x7a}, 0x8) 3.178597845s ago: executing program 1 (id=4066): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.166666752s ago: executing program 8 (id=4067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0xb0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000280)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000340)) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x44) 3.143138748s ago: executing program 0 (id=4068): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000003040)={@broadcast, @remote, @local}, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002f80), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r6, r6, 0x0, 0x548) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x13}], 0x1}}], 0x400000000000126, 0x20000800) pause() shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000010040)={0x0, 0x7ff}, &(0x7f0000010080)=0x8) r8 = creat(&(0x7f0000000080)='./bus\x00', 0xad) fcntl$setstatus(r8, 0x4, 0x46100) 2.951731701s ago: executing program 9 (id=4069): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @private0, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x6}, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000540)='\v', 0x1}], 0x1}}], 0x2, 0x40001) (async) shutdown(r0, 0x1) (async) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) 2.491052964s ago: executing program 8 (id=4070): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) 2.392590995s ago: executing program 9 (id=4071): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) 2.391517675s ago: executing program 6 (id=4072): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x1f, &(0x7f00000004c0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "bf", "9806e3", 0x88ca, "20c79fda2894344202"}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000001000000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.909383183s ago: executing program 1 (id=4073): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x26, 0x4000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10003, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x301102, 0x1a2) 1.093333687s ago: executing program 6 (id=4074): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010102}, 0x10) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000e40)="f94d45", 0xfdef}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 989.576938ms ago: executing program 6 (id=4075): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffa8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) writev(r2, 0x0, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd79, &(0x7f0000001700)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "23d83b", 0xd3f, 0x21, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x8, 0x1e, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x7, 0xad, "29063501fe21071eb9a92ac651f72fec4f10ac312968487b1d1330d5ad3ab87444d7b14dd3b156c4c9ce5eca8e0e98a234967be85adfd76cff66615cb12b6e8826589285e63485610b7eaf5296f2db10d509e65769287cd6b9ebeaed0ec056e5deaae053ae99de235a8fdd58df23e8991f47b6b0d4c400638e2028d8564b1944b026ea50b193ee69ea76b1efba6c684cd58cdc593d4755dcf1df6b3eab57f34660de2898d2060929011ad52605"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x8296, [0x455, 0x6, 0xffffffffffffffff, 0x8f]}}]}, @dstopts={0x67, 0x16f, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x40}, @pad1, @generic={0x7, 0xb5e, "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"}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, "e235dc", 0x8, "aa0e3d"}, "211233e51594ceb67c76e16b3d708d21266bfb202a561838697954948ca7ab9700f43adc8cf58963048c34b459866976581e2cec50f9782eb09ad2c311880ef67300bffc79c4a4e5fb94d13ba6836f16c269654a2ed65059dae21e5491f33b5ebd27f494e0d3eea969ccbe40277cad51594ec417e829440eb1ca065711cc7173df4c080f6f00e977e18b4c10cf7c203081a1666920d663b8fb2e2c86570421ba36b9c285990161"}}}}}}, 0x0) 873.469236ms ago: executing program 0 (id=4077): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 806.014243ms ago: executing program 8 (id=4078): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000180)={[{@nombcache}, {@errors_remount}, {@inlinecrypt}, {@norecovery}, {@nodioread_nolock}, {@debug}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shmdt(0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88\a'}, @typed={0x8, 0x16, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x2, 0x88) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pread64(r6, &(0x7f0000002500)=""/233, 0xe9, 0x7ffffffeffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) unshare(0x22020400) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/169) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r8}}, 0x18) 805.422833ms ago: executing program 1 (id=4079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000000)={0x0, 0x7fffffff, 0x5, 0x4, 0xf}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 794.60337ms ago: executing program 0 (id=4080): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a"], 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 554.272695ms ago: executing program 9 (id=4081): syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x8, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x3, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x402, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x2, 0x9a7f, 0xe665, 0x3c71, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x8001, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x9, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x2, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x7, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x3, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x6, 0x10000, 0x4, 0xffff, 0x2, 0x800089, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0x6, 0x8, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x14, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x20000, 0x80000000, 0x800d, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x200009, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0xd995, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x5, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x5e5, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x6, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x2, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x1, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x5, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x80000003, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x104, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0xc, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0xfffffffe, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x6, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0x6, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0xffffffff, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0x800f39d, 0x71, 0xfff, 0x7, 0x400008]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2006}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f00000002c0)=0x8, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = accept4$inet(r5, 0x0, &(0x7f0000000100), 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x10000003, 'none\x00', 0x19, 0x5, 0x71}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) 553.638285ms ago: executing program 1 (id=4082): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008004) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x786}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x83}, 0xc824) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x7a}, 0x8) 337.445494ms ago: executing program 0 (id=4083): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_clone(0x10010280, &(0x7f0000000180)="f464794f33ffd5a888a7025127bc03073f26bbe2cf15fff3a6af169a20a4520973201e9fc0fb70ca6912860e660f9f2b096185f3ebe1185f708633e8e79e56aa2b845c8f16052b50fe954cb271c7afc07664236764b5d8be99f10e9c3cc8b022b90e23e45bce44f6c19e17f9c2696a3b7da1e27707ab639418b03116f1c65dc88c44e8b5ed731ad3e1e08ab449ea2764f5f7c2c4423363a2a0818f3bba0055b64dbd5c826fcb2afd1a6cf1aa004a30a24af982009e3ae4e97ff5af041c3fe9dd3b014088e0300fb0", 0xc8, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)="d479af3a561fcae1157235f051d9fffa06de3c2922edb9d30e43f9255290ec00e7a49600240843711757093e37034e660ae6a6d68595b47ec84edd7699f18b67671b647044dc90") fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 254.017228ms ago: executing program 0 (id=4084): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x3, {0x1c}}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = dup(r0) shutdown(r3, 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x33, 0x0, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000000)={[{@barrier_val}, {@resuid={'resuid', 0x3d, r5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x8}}]}, 0x1, 0x7c9, &(0x7f0000000680)="$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") 0s ago: executing program 6 (id=4085): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008004) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x786}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x83}, 0xc824) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x7a}, 0x8) kernel console output (not intermixed with test programs): x77/0x7f [ 533.988604][T16602] RIP: 0033:0x7f1ffd21c799 [ 533.988618][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.988632][T16602] RSP: 002b:00007f1ffbc4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 533.988650][T16602] RAX: ffffffffffffffda RBX: 00007f1ffd496090 RCX: 00007f1ffd21c799 [ 533.988746][T16602] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 533.988757][T16602] RBP: 00007f1ffd2b2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 533.988768][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.988778][T16602] R13: 00007f1ffd496128 R14: 00007f1ffd496090 R15: 00007ffe7fbada38 [ 533.988795][T16602] [ 533.988935][T16602] memory: usage 307200kB, limit 307200kB, failcnt 55 [ 533.993436][T16612] loop6: detected capacity change from 0 to 136 [ 534.020847][T16602] memory+swap: usage 269664kB, limit 9007199254740988kB, failcnt 0 [ 534.122154][T16612] Attempt to read inode for relocated directory [ 534.159572][T16602] kmem: usage 242124kB, limit 9007199254740988kB, failcnt 0 [ 534.277057][T16602] Memory cgroup stats for /syz8: [ 534.277275][T16602] cache 4096 [ 534.328887][T16602] rss 32768 [ 534.339595][T16602] shmem 0 [ 534.350118][T16602] mapped_file 0 [ 534.363966][T16602] dirty 0 [ 534.374828][T16602] writeback 0 [ 534.386017][T10032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.404966][T16602] workingset_refault_anon 0 [ 534.433235][T16602] workingset_refault_file 0 [ 534.449433][T16602] swap 167936 [ 534.463611][T16602] swapcached 266240 [ 534.482553][T16602] pgpgin 695 [ 534.495973][T16602] pgpgout 670 [ 534.503791][T16623] loop7: detected capacity change from 0 to 1024 [ 534.513969][T16602] pgfault 1040 [ 534.522860][T16602] pgmajfault 0 [ 534.528757][T16623] EXT4-fs: inline encryption not supported [ 534.544275][T16602] inactive_anon 98304 [ 534.548375][T16602] active_anon 0 [ 534.570998][T16602] inactive_file 4096 [ 534.578930][T16602] active_file 0 [ 534.585000][T16623] EXT4-fs: Ignoring removed bh option [ 534.591467][T16623] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 534.598785][T16615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.602422][T16602] unevictable 0 [ 534.617636][T16602] hierarchical_memory_limit 314572800 [ 534.623019][T16602] hierarchical_memsw_limit 9223372036854771712 [ 534.634564][T16615] team0: Port device bond3 added [ 534.641510][T16623] EXT4-fs (loop7): orphan cleanup on readonly fs [ 534.662456][T16627] lo speed is unknown, defaulting to 1000 [ 534.668873][T16602] total_cache 4096 [ 534.672585][T16602] total_rss 32768 [ 534.676498][T16623] EXT4-fs error (device loop7): ext4_quota_enable:7192: comm syz.7.3760: inode #2304: comm syz.7.3760: iget: illegal inode # [ 534.702900][T16602] total_shmem 0 [ 534.706523][T16602] total_mapped_file 0 [ 534.707986][T16623] loop7: lost filesystem error report for type 5 error -117 [ 534.710593][T16602] total_dirty 0 [ 534.710843][T16623] EXT4-fs error (device loop7): ext4_quota_enable:7195: comm syz.7.3760: Bad quota inode: 2304, type: 2 [ 534.717896][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 534.717913][ C0] EXT4-fs (loop7): initial error at time 1772729170: ext4_quota_enable:7192 [ 534.717941][ C0] EXT4-fs (loop7): last error at time 1772729170: ext4_quota_enable:7192 [ 534.718156][T16602] total_writeback 0 [ 534.752909][T16623] loop7: lost filesystem error report for type 5 error -117 [ 534.756458][T16602] total_workingset_refault_anon 0 [ 534.772841][T16602] total_workingset_refault_file 0 [ 534.777981][T16602] total_swap 167936 [ 534.781781][T16602] total_swapcached 266240 [ 534.786221][T16602] total_pgpgin 695 [ 534.789925][T16602] total_pgpgout 670 [ 534.793803][T16602] total_pgfault 1040 [ 534.797781][T16602] total_pgmajfault 0 [ 534.807127][T16602] total_inactive_anon 98304 [ 534.811648][T16602] total_active_anon 0 [ 534.823967][T16602] total_inactive_file 4096 [ 534.828429][T16602] total_active_file 0 [ 534.832401][T16602] total_unevictable 0 [ 534.836551][T16602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3756,pid=16598,uid=0 [ 534.851512][T16602] Memory cgroup out of memory: Killed process 16602 (syz.8.3756) total-vm:98456kB, anon-rss:1352kB, file-rss:26588kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 534.869115][T16623] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 535.064257][T16623] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 535.080887][T16623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 535.150536][T10032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.909618][T16624] loop1: detected capacity change from 0 to 65536 [ 535.916574][T16624] vfat: Unknown parameter 'subj_role' [ 535.981900][T16624] xt_bpf: check failed: parse error [ 535.987395][ T7803] IPVS: starting estimator thread 0... [ 536.083972][T16646] IPVS: using max 2112 ests per chain, 105600 per kthread [ 536.150491][T16617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.216246][T16654] loop8: detected capacity change from 0 to 136 [ 536.272043][T16654] Attempt to read inode for relocated directory [ 536.547102][T16656] syzkaller0: entered promiscuous mode [ 536.573727][T16656] syzkaller0: entered allmulticast mode [ 536.716250][T16660] loop0: detected capacity change from 0 to 512 [ 536.729442][T16660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 536.909823][T16331] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 536.944144][T16660] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3772: bad orphan inode 131083 [ 536.954957][T16331] CPU: 0 UID: 0 PID: 16331 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 536.954990][T16331] Tainted: [W]=WARN [ 536.954997][T16331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.955043][T16331] Call Trace: [ 536.955050][T16331] [ 536.955060][T16331] __dump_stack+0x1d/0x30 [ 536.955086][T16331] dump_stack_lvl+0x95/0xd0 [ 536.955108][T16331] dump_stack+0x15/0x1b [ 536.955127][T16331] dump_header+0x80/0x240 [ 536.955172][T16331] oom_kill_process+0x295/0x350 [ 536.955195][T16331] out_of_memory+0x97d/0xb80 [ 536.955217][T16331] try_charge_memcg+0x62e/0xa10 [ 536.955297][T16331] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 536.955326][T16331] __swap_cache_prepare_and_add+0x386/0x530 [ 536.955358][T16331] swap_cache_alloc_folio+0xa2/0x120 [ 536.955458][T16331] swap_cluster_readahead+0x26e/0x3d0 [ 536.955544][T16331] swapin_readahead+0xde/0x840 [ 536.955568][T16331] ? __rcu_read_unlock+0x4e/0x70 [ 536.955588][T16331] ? __perf_event_task_sched_in+0xa65/0xad0 [ 536.955610][T16331] ? __list_add_valid_or_report+0x38/0xe0 [ 536.955788][T16331] ? __rcu_read_unlock+0x4e/0x70 [ 536.955809][T16331] ? swap_cache_get_folio+0x26f/0x280 [ 536.955832][T16331] do_swap_page+0x309/0x2210 [ 536.955857][T16331] ? __schedule+0x93c/0xd40 [ 536.955921][T16331] ? __rcu_read_lock+0x36/0x50 [ 536.955946][T16331] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 536.955968][T16331] handle_mm_fault+0xb40/0x3020 [ 536.956008][T16331] ? vma_start_read+0x1c7/0x2c0 [ 536.956055][T16331] do_user_addr_fault+0x62f/0x1050 [ 536.956082][T16331] ? trace_page_fault_user+0x1f/0xe0 [ 536.956120][T16331] exc_page_fault+0x62/0xa0 [ 536.956145][T16331] asm_exc_page_fault+0x26/0x30 [ 536.956162][T16331] RIP: 0033:0x7f1ffd1d7917 [ 536.956213][T16331] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 536.956284][T16331] RSP: 002b:00007ffe7fbadd30 EFLAGS: 00010202 [ 536.956295][T16331] RAX: 0000000000000000 RBX: 0000555562f39500 RCX: 00007f1ffd1d7917 [ 536.956308][T16331] RDX: 00007ffe7fbadd70 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.956316][T16331] RBP: 00007ffe7fbadddc R08: 0000000000000000 R09: 0000000000000000 [ 536.956323][T16331] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 536.956374][T16331] R13: 00000000000927c0 R14: 0000000000082ee0 R15: 00007ffe7fbade30 [ 536.956450][T16331] [ 536.956455][T16331] memory: usage 307200kB, limit 307200kB, failcnt 256 [ 536.960219][T16660] loop0: lost filesystem error report for type 5 error -117 [ 537.012611][T16331] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 537.015794][T16660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.020513][T16331] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 537.240087][T16331] Memory cgroup stats for /syz8: [ 537.240355][T16331] cache 4096 [ 537.248593][T16331] rss 0 [ 537.251502][T16331] shmem 0 [ 537.254482][T16331] mapped_file 0 [ 537.257931][T16331] dirty 0 [ 537.260963][T16331] writeback 0 [ 537.264340][T16331] workingset_refault_anon 24 [ 537.268949][T16331] workingset_refault_file 0 [ 537.273449][T16331] swap 253952 [ 537.277171][T16331] swapcached 360448 [ 537.280984][T16331] pgpgin 1367 [ 537.284336][T16331] pgpgout 1363 [ 537.287698][T16331] pgfault 1943 [ 537.291114][T16331] pgmajfault 16 [ 537.300656][T16331] inactive_anon 4096 [ 537.302885][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.305121][T16331] active_anon 8192 [ 537.324284][T16331] inactive_file 0 [ 537.340051][T16331] active_file 4096 [ 537.349319][T16331] unevictable 0 [ 537.366358][T16331] hierarchical_memory_limit 314572800 [ 537.376443][T16331] hierarchical_memsw_limit 9223372036854771712 [ 537.382671][T16331] total_cache 4096 [ 537.390434][T16331] total_rss 0 [ 537.393787][T16331] total_shmem 0 [ 537.397737][T16331] total_mapped_file 0 [ 537.402404][T16331] total_dirty 0 [ 537.403431][T16674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3775'. [ 537.406204][T16331] total_writeback 0 [ 537.418855][T16331] total_workingset_refault_anon 24 [ 537.433111][T16331] total_workingset_refault_file 0 [ 537.438283][T16331] total_swap 253952 [ 537.442176][T16331] total_swapcached 360448 [ 537.448329][T16331] total_pgpgin 1367 [ 537.452744][T16331] total_pgpgout 1363 [ 537.456905][T16331] total_pgfault 1943 [ 537.460928][T16331] total_pgmajfault 16 [ 537.470519][T16331] total_inactive_anon 4096 [ 537.475586][T16331] total_active_anon 8192 [ 537.479909][T16331] total_inactive_file 0 [ 537.484139][T16331] total_active_file 4096 [ 537.488433][T16331] total_unevictable 0 [ 537.492430][T16331] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3770,pid=16648,uid=0 [ 537.507335][T16331] Memory cgroup out of memory: Killed process 16648 (syz.8.3770) total-vm:96340kB, anon-rss:1236kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 538.715763][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3784'. [ 538.811457][T16713] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3786'. [ 538.856705][T16703] loop0: detected capacity change from 0 to 8192 [ 538.914459][T13616] loop0: p1 < > p2 p4 < p5 > [ 538.919798][T13616] loop0: partition table partially beyond EOD, truncated [ 538.936913][T13616] loop0: p1 start 134217728 is beyond EOD, truncated [ 538.954394][T16718] syzkaller0: entered promiscuous mode [ 538.960060][T13616] loop0: p2 size 591360 extends beyond EOD, truncated [ 538.973994][T16718] syzkaller0: entered allmulticast mode [ 538.980980][T13616] loop0: p5 size 591360 extends beyond EOD, truncated [ 539.009764][T16720] loop7: detected capacity change from 0 to 136 [ 539.065778][T16720] Attempt to read inode for relocated directory [ 539.583998][ T28] audit: type=1326 audit(1772729175.716:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.6.3791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5dc5c799 code=0x0 [ 539.613577][T16703] loop0: p1 < > p2 p4 < p5 > [ 539.624998][T16730] loop6: detected capacity change from 0 to 128 [ 539.630020][T16703] loop0: partition table partially beyond EOD, truncated [ 539.660840][T16703] loop0: p1 start 134217728 is beyond EOD, truncated [ 539.683540][T16703] loop0: p2 size 591360 extends beyond EOD, truncated [ 539.741996][T16703] loop0: p5 size 591360 extends beyond EOD, truncated [ 539.852146][T13616] udevd[13616]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 539.862337][T11604] udevd[11604]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 539.913098][T16716] syz.7.3787 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 539.927453][T16716] CPU: 0 UID: 0 PID: 16716 Comm: syz.7.3787 Tainted: G W syzkaller #0 PREEMPT(full) [ 539.927485][T16716] Tainted: [W]=WARN [ 539.927491][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.927561][T16716] Call Trace: [ 539.927569][T16716] [ 539.927576][T16716] __dump_stack+0x1d/0x30 [ 539.927601][T16716] dump_stack_lvl+0x95/0xd0 [ 539.927621][T16716] dump_stack+0x15/0x1b [ 539.927638][T16716] dump_header+0x80/0x240 [ 539.927661][T16716] oom_kill_process+0x295/0x350 [ 539.927684][T16716] out_of_memory+0x97d/0xb80 [ 539.927714][T16716] try_charge_memcg+0x62e/0xa10 [ 539.927745][T16716] obj_cgroup_charge_pages+0x23/0xc0 [ 539.927784][T16716] __memcg_kmem_charge_page+0x9e/0x170 [ 539.927810][T16716] __alloc_frozen_pages_noprof+0x18a/0x360 [ 539.927929][T16716] alloc_pages_mpol+0xb3/0x260 [ 539.927953][T16716] alloc_pages_noprof+0x8f/0x130 [ 539.927980][T16716] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 539.928046][T16716] __kvmalloc_node_noprof+0x3d4/0x650 [ 539.928151][T16716] ? futex_hash_allocate+0x190/0x9d0 [ 539.928178][T16716] ? futex_hash_allocate+0x190/0x9d0 [ 539.928201][T16716] futex_hash_allocate+0x190/0x9d0 [ 539.928225][T16716] ? cap_task_prctl+0x13f/0x6e0 [ 539.928246][T16716] futex_hash_prctl+0xd8/0xf0 [ 539.928296][T16716] __se_sys_prctl+0xa3d/0x13f0 [ 539.928322][T16716] __x64_sys_prctl+0x67/0x80 [ 539.928412][T16716] x64_sys_call+0x2533/0x3020 [ 539.928433][T16716] do_syscall_64+0x12c/0x370 [ 539.928451][T16716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.928539][T16716] RIP: 0033:0x7f602d5fc799 [ 539.928557][T16716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.928601][T16716] RSP: 002b:00007f602c02e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 539.928621][T16716] RAX: ffffffffffffffda RBX: 00007f602d876090 RCX: 00007f602d5fc799 [ 539.928700][T16716] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 539.928715][T16716] RBP: 00007f602d692bd9 R08: 0000000000000000 R09: 0000000000000000 [ 539.928729][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.928749][T16716] R13: 00007f602d876128 R14: 00007f602d876090 R15: 00007fff2f81a768 [ 539.928767][T16716] [ 540.157459][T11664] udevd[11664]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 540.159186][ T28] audit: type=1400 audit(1772729176.076:3717): avc: denied { name_bind } for pid=16740 comm="syz.0.3796" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 540.192077][T16745] tmpfs: Bad value for 'mpol' [ 540.198550][T11604] udevd[11604]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 540.201740][T13616] udevd[13616]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 540.208642][T16716] memory: usage 307200kB, limit 307200kB, failcnt 2542 [ 540.226681][T11664] udevd[11664]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 540.237732][T16716] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0 [ 540.249935][T16716] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 540.262816][T16716] Memory cgroup stats for /syz7: [ 540.263046][T16716] cache 0 [ 540.265512][ T28] audit: type=1400 audit(1772729176.416:3718): avc: denied { read } for pid=16738 comm="syz.1.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 540.268330][T16716] rss 0 [ 540.293877][T16716] shmem 0 [ 540.296950][T16716] mapped_file 0 [ 540.300454][T16716] dirty 0 [ 540.303419][T16716] writeback 0 [ 540.306783][T16716] workingset_refault_anon 852 [ 540.311484][T16716] workingset_refault_file 0 [ 540.316063][T16716] swap 290816 [ 540.319556][T16716] swapcached 1904640 [ 540.323574][T16716] pgpgin 271242 [ 540.327108][T16716] pgpgout 271240 [ 540.330751][T16716] pgfault 333137 [ 540.334517][T16716] pgmajfault 402 [ 540.338107][T16716] inactive_anon 0 [ 540.341873][T16716] active_anon 0 [ 540.345476][T16716] inactive_file 0 [ 540.349136][T16716] active_file 8192 [ 540.353075][T16716] unevictable 0 [ 540.356741][T16716] hierarchical_memory_limit 314572800 [ 540.362140][T16716] hierarchical_memsw_limit 9223372036854771712 [ 540.368390][T16716] total_cache 0 [ 540.371918][T16716] total_rss 0 [ 540.375290][T16716] total_shmem 0 [ 540.378868][T16716] total_mapped_file 0 [ 540.382984][T16716] total_dirty 0 [ 540.386774][T16716] total_writeback 0 [ 540.390642][T16716] total_workingset_refault_anon 852 [ 540.395913][T16716] total_workingset_refault_file 0 [ 540.401065][T16716] total_swap 290816 [ 540.407896][T16716] total_swapcached 1904640 [ 540.412454][T16716] total_pgpgin 271242 [ 540.416465][T16716] total_pgpgout 271240 [ 540.425752][T16716] total_pgfault 333137 [ 540.430353][T16716] total_pgmajfault 402 [ 540.487782][ T28] audit: type=1326 audit(1772729176.636:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.6.3799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5dc5c799 code=0x0 [ 540.493998][T16716] total_inactive_anon 0 [ 540.536297][T16716] total_active_anon 0 [ 540.545898][T16759] loop0: detected capacity change from 0 to 512 [ 540.553663][T16716] total_inactive_file 0 [ 540.558634][T16716] total_active_file 8192 [ 540.562934][T16759] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 540.573162][T16716] total_unevictable 0 [ 540.577366][T16716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3787,pid=16714,uid=0 [ 540.584411][T16759] EXT4-fs (loop0): 1 truncate cleaned up [ 540.593607][T16764] loop6: detected capacity change from 0 to 128 [ 540.598997][T16759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.604503][T16716] Memory cgroup out of memory: Killed process 16714 (syz.7.3787) total-vm:100576kB, anon-rss:1228kB, file-rss:26572kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 540.693411][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.737824][ T28] audit: type=1326 audit(1772729176.886:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.1.3804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd44487c799 code=0x0 [ 540.765869][T16761] loop8: detected capacity change from 0 to 1024 [ 540.784359][T16761] EXT4-fs: Ignoring removed bh option [ 540.791409][T16771] loop1: detected capacity change from 0 to 128 [ 540.829008][T16761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.918744][T16761] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3802'. [ 540.943062][ T28] audit: type=1326 audit(1772729177.086:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde278fc799 code=0x0 [ 540.994155][T16785] loop0: detected capacity change from 0 to 128 [ 540.994613][ T28] audit: type=1400 audit(1772729177.146:3722): avc: denied { watch } for pid=16760 comm="syz.8.3802" path="/9/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 541.055843][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.093364][T16787] loop7: detected capacity change from 0 to 136 [ 541.107011][T16787] Attempt to read inode for relocated directory [ 541.379027][T16798] syzkaller0: entered promiscuous mode [ 541.384974][T16798] syzkaller0: entered allmulticast mode [ 541.941040][T16801] loop1: detected capacity change from 0 to 512 [ 541.987473][T16801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.004917][T16801] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.031415][T16780] syz.7.3808 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 542.044041][T16780] CPU: 1 UID: 0 PID: 16780 Comm: syz.7.3808 Tainted: G W syzkaller #0 PREEMPT(full) [ 542.044070][T16780] Tainted: [W]=WARN [ 542.044076][T16780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.044111][T16780] Call Trace: [ 542.044118][T16780] [ 542.044127][T16780] __dump_stack+0x1d/0x30 [ 542.044154][T16780] dump_stack_lvl+0x95/0xd0 [ 542.044177][T16780] dump_stack+0x15/0x1b [ 542.044198][T16780] dump_header+0x80/0x240 [ 542.044225][T16780] oom_kill_process+0x295/0x350 [ 542.044244][T16780] out_of_memory+0x97d/0xb80 [ 542.044273][T16780] try_charge_memcg+0x62e/0xa10 [ 542.044308][T16780] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 542.044375][T16780] __swap_cache_prepare_and_add+0x386/0x530 [ 542.044442][T16780] swap_cache_alloc_folio+0xa2/0x120 [ 542.044466][T16780] swap_cluster_readahead+0x26e/0x3d0 [ 542.044591][T16780] swapin_readahead+0xde/0x840 [ 542.044612][T16780] ? _raw_spin_unlock+0x9/0x30 [ 542.044660][T16780] ? swap_put_entries_cluster+0x385/0x3a0 [ 542.044683][T16780] ? swap_put_entries_cluster+0x71/0x3a0 [ 542.044705][T16780] ? __rcu_read_unlock+0x4e/0x70 [ 542.044723][T16780] ? swap_cache_get_folio+0x26f/0x280 [ 542.044773][T16780] do_swap_page+0x309/0x2210 [ 542.044796][T16780] ? css_rstat_updated+0xbb/0x280 [ 542.044815][T16780] ? __rcu_read_lock+0x36/0x50 [ 542.044877][T16780] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 542.044899][T16780] handle_mm_fault+0xb40/0x3020 [ 542.045034][T16780] ? vma_start_read+0x1c7/0x2c0 [ 542.045058][T16780] do_user_addr_fault+0x62f/0x1050 [ 542.045083][T16780] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 542.045169][T16780] ? trace_page_fault_user+0x1f/0xe0 [ 542.045192][T16780] exc_page_fault+0x62/0xa0 [ 542.045216][T16780] asm_exc_page_fault+0x26/0x30 [ 542.045236][T16780] RIP: 0033:0x7f602d4c59d0 [ 542.045286][T16780] Code: 00 00 45 31 d2 48 83 b8 88 00 00 00 ff 41 b9 03 00 00 00 ba 01 00 00 00 0f 85 59 ff ff ff eb ca 66 2e 0f 1f 84 00 00 00 00 00 <80> 3d 0e fd ed 00 00 74 40 80 3d f3 fc ed 00 00 74 2e 80 3d f6 fc [ 542.045304][T16780] RSP: 002b:00007fff2f81a8c8 EFLAGS: 00010246 [ 542.045321][T16780] RAX: 0000000000000000 RBX: 00007f602d877da0 RCX: 00007f602d5fc799 [ 542.045334][T16780] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 542.045345][T16780] RBP: 00007f602d877da0 R08: 0000000000000006 R09: 0000000000000000 [ 542.045359][T16780] R10: 00007f602d877cb0 R11: 0000000000000246 R12: 000000000008441f [ 542.045387][T16780] R13: 00007f602d87618c R14: 00000000000841f2 R15: 00007f602d876180 [ 542.045408][T16780] [ 542.045440][T16780] memory: usage 307200kB, limit 307200kB, failcnt 2800 [ 542.352673][T16832] FAULT_INJECTION: forcing a failure. [ 542.352673][T16832] name failslab, interval 1, probability 0, space 0, times 0 [ 542.365334][T16780] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 542.373231][T16780] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 542.397118][T16832] CPU: 1 UID: 0 PID: 16832 Comm: syz.0.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 542.397147][T16832] Tainted: [W]=WARN [ 542.397155][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.397168][T16832] Call Trace: [ 542.397175][T16832] [ 542.397181][T16832] __dump_stack+0x1d/0x30 [ 542.397245][T16832] dump_stack_lvl+0x95/0xd0 [ 542.397341][T16832] dump_stack+0x15/0x1b [ 542.397362][T16832] should_fail_ex+0x263/0x280 [ 542.397386][T16832] should_failslab+0x8c/0xb0 [ 542.397457][T16832] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 542.397502][T16832] ? __alloc_skb+0x2d6/0x690 [ 542.397523][T16832] __alloc_skb+0x2d6/0x690 [ 542.397545][T16832] ? __alloc_skb+0x200/0x690 [ 542.397611][T16832] netlink_alloc_large_skb+0xbf/0xf0 [ 542.397635][T16832] netlink_sendmsg+0x40c/0x6f0 [ 542.397664][T16832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.397757][T16832] ____sys_sendmsg+0x5af/0x600 [ 542.397858][T16832] ___sys_sendmsg+0x195/0x1e0 [ 542.397931][T16832] ? path_openat+0x1b01/0x2050 [ 542.397971][T16832] __sys_sendmmsg+0x185/0x320 [ 542.398055][T16832] __x64_sys_sendmmsg+0x57/0x70 [ 542.398125][T16832] x64_sys_call+0x27aa/0x3020 [ 542.398149][T16832] do_syscall_64+0x12c/0x370 [ 542.398214][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.398252][T16832] RIP: 0033:0x7fde278fc799 [ 542.398271][T16832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.398291][T16832] RSP: 002b:00007fde26357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 542.398385][T16832] RAX: ffffffffffffffda RBX: 00007fde27b75fa0 RCX: 00007fde278fc799 [ 542.398400][T16832] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 542.398488][T16832] RBP: 00007fde26357090 R08: 0000000000000000 R09: 0000000000000000 [ 542.398502][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.398515][T16832] R13: 00007fde27b76038 R14: 00007fde27b75fa0 R15: 00007fff9ff4a508 [ 542.398532][T16832] [ 542.606068][T16780] Memory cgroup stats for /syz7: [ 542.606276][T16780] cache 0 [ 542.614235][T16780] rss 0 [ 542.616989][T16780] shmem 0 [ 542.619924][T16780] mapped_file 0 [ 542.623352][T16780] dirty 0 [ 542.629417][T16780] writeback 4096 [ 542.632976][T16780] workingset_refault_anon 952 [ 542.637762][T16780] workingset_refault_file 0 [ 542.642292][T16780] swap 274432 [ 542.645567][T16780] swapcached 2109440 [ 542.649442][T16780] pgpgin 271444 [ 542.652888][T16780] pgpgout 271440 [ 542.656459][T16780] pgfault 333443 [ 542.660003][T16780] pgmajfault 466 [ 542.674779][T16821] lo speed is unknown, defaulting to 1000 [ 542.681883][T16780] inactive_anon 8192 [ 542.685795][T16780] active_anon 0 [ 542.690729][T16780] inactive_file 8192 [ 542.694710][T16780] active_file 0 [ 542.699487][T16780] unevictable 0 [ 542.702973][T16780] hierarchical_memory_limit 314572800 [ 542.708529][T16780] hierarchical_memsw_limit 9223372036854771712 [ 542.714785][T16780] total_cache 0 [ 542.718256][T16780] total_rss 0 [ 542.721571][T16780] total_shmem 0 [ 542.725088][T16780] total_mapped_file 0 [ 542.729064][T16780] total_dirty 0 [ 542.732825][T16780] total_writeback 4096 [ 542.737106][T16780] total_workingset_refault_anon 952 [ 542.742330][T16780] total_workingset_refault_file 0 [ 542.754740][T16780] total_swap 274432 [ 542.761313][T16780] total_swapcached 2109440 [ 542.766032][T16780] total_pgpgin 271444 [ 542.783960][T16780] total_pgpgout 271440 [ 542.788050][T16780] total_pgfault 333443 [ 542.800461][T16780] total_pgmajfault 466 [ 542.807660][T16780] total_inactive_anon 8192 [ 542.813641][T16780] total_active_anon 0 [ 542.817897][T16780] total_inactive_file 8192 [ 542.822301][T16780] total_active_file 0 [ 542.829038][T16780] total_unevictable 0 [ 542.833056][T16780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3808,pid=16780,uid=0 [ 542.852700][T16854] syzkaller0: entered promiscuous mode [ 542.858261][T16854] syzkaller0: entered allmulticast mode [ 542.875910][T16780] Memory cgroup out of memory: Killed process 16780 (syz.7.3808) total-vm:94292kB, anon-rss:1228kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 542.970603][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3826'. [ 542.991008][T16865] netlink: 'syz.6.3828': attribute type 10 has an invalid length. [ 543.030501][T16865] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3828'. [ 543.030546][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.124326][T16868] netlink: 'syz.7.3827': attribute type 4 has an invalid length. [ 543.169406][T16865] team0: entered promiscuous mode [ 543.177502][ T28] audit: type=1400 audit(1772729179.326:3723): avc: denied { write } for pid=16886 comm="syz.7.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 543.214008][T16865] team_slave_0: entered promiscuous mode [ 543.228932][T16892] xt_hashlimit: size too large, truncated to 1048576 [ 543.264786][T16865] team_slave_1: entered promiscuous mode [ 543.293049][T16865] team0: entered allmulticast mode [ 543.299891][T16896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.316324][T16865] team_slave_0: entered allmulticast mode [ 543.322235][T16865] team_slave_1: entered allmulticast mode [ 543.328295][T16896] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.330924][T16865] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.425829][T16865] bridge0: port 3(team0) entered blocking state [ 543.432379][T16865] bridge0: port 3(team0) entered disabled state [ 543.589090][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.711579][T16899] lo speed is unknown, defaulting to 1000 [ 543.982501][T16936] syz.8.3838 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 543.997050][T16936] CPU: 0 UID: 0 PID: 16936 Comm: syz.8.3838 Tainted: G W syzkaller #0 PREEMPT(full) [ 543.997091][T16936] Tainted: [W]=WARN [ 543.997099][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.997183][T16936] Call Trace: [ 543.997191][T16936] [ 543.997200][T16936] __dump_stack+0x1d/0x30 [ 543.997223][T16936] dump_stack_lvl+0x95/0xd0 [ 543.997242][T16936] dump_stack+0x15/0x1b [ 543.997299][T16936] dump_header+0x80/0x240 [ 543.997318][T16936] oom_kill_process+0x295/0x350 [ 543.997338][T16936] out_of_memory+0x97d/0xb80 [ 543.997396][T16936] try_charge_memcg+0x62e/0xa10 [ 543.997427][T16936] obj_cgroup_charge_pages+0x23/0xc0 [ 543.997483][T16936] __memcg_kmem_charge_page+0x9e/0x170 [ 543.997511][T16936] __alloc_frozen_pages_noprof+0x18a/0x360 [ 543.997618][T16936] alloc_pages_mpol+0xb3/0x260 [ 543.997644][T16936] alloc_pages_noprof+0x8f/0x130 [ 543.997671][T16936] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 543.997778][T16936] __kvmalloc_node_noprof+0x3d4/0x650 [ 543.997801][T16936] ? futex_hash_allocate+0x190/0x9d0 [ 543.997829][T16936] ? futex_hash_allocate+0x190/0x9d0 [ 543.997857][T16936] futex_hash_allocate+0x190/0x9d0 [ 543.997896][T16936] ? cap_task_prctl+0x13f/0x6e0 [ 543.997914][T16936] futex_hash_prctl+0xd8/0xf0 [ 543.998006][T16936] __se_sys_prctl+0xa3d/0x13f0 [ 543.998056][T16936] __x64_sys_prctl+0x67/0x80 [ 543.998086][T16936] x64_sys_call+0x2533/0x3020 [ 543.998229][T16936] do_syscall_64+0x12c/0x370 [ 543.998253][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.998274][T16936] RIP: 0033:0x7f1ffd21c799 [ 543.998337][T16936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.998355][T16936] RSP: 002b:00007f1ffbc6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 543.998419][T16936] RAX: ffffffffffffffda RBX: 00007f1ffd495fa0 RCX: 00007f1ffd21c799 [ 543.998444][T16936] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 543.998456][T16936] RBP: 00007f1ffd2b2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 543.998470][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.998481][T16936] R13: 00007f1ffd496038 R14: 00007f1ffd495fa0 R15: 00007ffe7fbada38 [ 543.998561][T16936] [ 543.998617][T16936] memory: usage 307200kB, limit 307200kB, failcnt 319 [ 544.155613][T16946] set_capacity_and_notify: 1 callbacks suppressed [ 544.155629][T16946] loop8: detected capacity change from 0 to 136 [ 544.173142][T16936] memory+swap: usage 112852kB, limit 9007199254740988kB, failcnt 0 [ 544.221200][T16946] Attempt to read inode for relocated directory [ 544.277007][T16936] kmem: usage 53668kB, limit 9007199254740988kB, failcnt 0 [ 544.295359][T16936] Memory cgroup stats for /syz8: [ 544.295638][T16936] cache 73728 [ 544.306802][T16954] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3841'. [ 544.313976][T16936] rss 131072 [ 544.321291][ T28] audit: type=1326 audit(1772729180.466:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.351744][T16936] shmem 69632 [ 544.355663][T16936] mapped_file 0 [ 544.359996][T16936] dirty 0 [ 544.363341][T16936] writeback 0 [ 544.384684][T16936] workingset_refault_anon 104 [ 544.389539][ T28] audit: type=1326 audit(1772729180.496:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.415906][T16936] workingset_refault_file 0 [ 544.420528][T16936] swap 57344 [ 544.423843][T16936] swapcached 475136 [ 544.427928][T16936] pgpgin 13060 [ 544.431506][T16936] pgpgout 13008 [ 544.445281][T16936] pgfault 15459 [ 544.452336][T16936] pgmajfault 81 [ 544.459105][T16936] inactive_anon 90112 [ 544.476905][T16936] active_anon 118784 [ 544.513140][T16936] inactive_file 4096 [ 544.572131][T16936] active_file 0 [ 544.582808][T16957] syzkaller0: entered promiscuous mode [ 544.613073][ T28] audit: type=1326 audit(1772729180.496:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.644820][T16936] unevictable 0 [ 544.667685][T16957] syzkaller0: entered allmulticast mode [ 544.692087][T16936] hierarchical_memory_limit 314572800 [ 544.722741][T16936] hierarchical_memsw_limit 9223372036854771712 [ 544.729065][ T28] audit: type=1326 audit(1772729180.496:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.743922][T16936] total_cache 73728 [ 544.752861][ T28] audit: type=1326 audit(1772729180.496:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.780057][ T28] audit: type=1326 audit(1772729180.496:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.803863][ T28] audit: type=1326 audit(1772729180.496:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.813940][T16936] total_rss 131072 [ 544.841443][T16959] loop6: detected capacity change from 0 to 1024 [ 544.848949][T16959] EXT4-fs: Ignoring removed orlov option [ 544.855268][T16959] EXT4-fs: Ignoring removed bh option [ 544.864392][ T28] audit: type=1326 audit(1772729180.496:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.895122][T16936] total_shmem 69632 [ 544.900973][T16936] total_mapped_file 0 [ 544.915964][T16971] loop1: detected capacity change from 0 to 512 [ 544.927816][ T28] audit: type=1326 audit(1772729180.496:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.933076][T16936] total_dirty 0 [ 544.952614][ T28] audit: type=1326 audit(1772729180.496:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 544.979469][T16959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.995656][ T28] audit: type=1326 audit(1772729180.496:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 545.019281][ T28] audit: type=1326 audit(1772729180.496:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.7.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f602d5fc799 code=0x7ffc0000 [ 545.044538][T16936] total_writeback 0 [ 545.048425][T16936] total_workingset_refault_anon 104 [ 545.057081][T16936] total_workingset_refault_file 0 [ 545.062129][T16936] total_swap 57344 [ 545.067166][T16971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.082460][T16971] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.099789][T16936] total_swapcached 475136 [ 545.104494][T16936] total_pgpgin 13060 [ 545.108378][T16936] total_pgpgout 13008 [ 545.114238][T16936] total_pgfault 15459 [ 545.118223][T16936] total_pgmajfault 81 [ 545.122182][T16936] total_inactive_anon 90112 [ 545.168931][ T6791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.185041][T16981] xt_hashlimit: size too large, truncated to 1048576 [ 545.190431][T16936] total_active_anon 118784 [ 545.224319][T16936] total_inactive_file 4096 [ 545.228764][T16936] total_active_file 0 [ 545.232801][T16936] total_unevictable 0 [ 545.270976][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.326354][T16936] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3838,pid=16935,uid=0 [ 545.373185][T16936] Memory cgroup out of memory: Killed process 16936 (syz.8.3838) total-vm:94292kB, anon-rss:1364kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 546.345710][T17001] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 546.352262][T17001] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 546.384294][T17001] vhci_hcd vhci_hcd.0: Device attached [ 546.440215][T17001] loop8: detected capacity change from 0 to 8192 [ 546.452234][T17001] vfat: Unknown parameter 'GPL' [ 546.573957][ T7804] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 546.626885][T17010] loop8: detected capacity change from 0 to 512 [ 546.634326][ T7804] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 546.738161][T17014] loop1: detected capacity change from 0 to 512 [ 546.748829][T17014] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 546.760957][T17014] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 546.771479][T17014] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3858: Corrupt directory, running e2fsck is recommended [ 546.806093][T17010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.815036][T17014] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 546.833247][T17014] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.3858: corrupted in-inode xattr: invalid ea_ino [ 546.854826][T17014] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 546.855081][T17014] EXT4-fs (loop1): Remounting filesystem read-only [ 546.871595][T17014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.893227][T17010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.907359][T17010] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.928619][T17004] vhci_hcd: connection reset by peer [ 546.934294][ T4010] vhci_hcd vhci_hcd.8: stop threads [ 546.940028][ T4010] vhci_hcd vhci_hcd.8: release socket [ 546.945537][ T4010] vhci_hcd vhci_hcd.8: disconnect device [ 547.330677][T17021] loop7: detected capacity change from 0 to 512 [ 547.481324][T17021] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3859: inode has both inline data and extents flags [ 547.497004][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.506045][T17021] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 547.513925][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 547.529483][ C0] EXT4-fs (loop7): initial error at time 1772729183: ext4_orphan_get:1391: inode 15 [ 547.538883][ C0] EXT4-fs (loop7): last error at time 1772729183: ext4_orphan_get:1391: inode 15 [ 547.637264][T17021] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3859: couldn't read orphan inode 15 (err -117) [ 547.699640][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.716054][T17021] loop7: lost filesystem error report for type 5 error -117 [ 547.722890][T17021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.950732][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'. [ 547.974421][T17021] loop7: detected capacity change from 512 to 64 [ 547.986287][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'. [ 548.000048][T17030] loop8: detected capacity change from 0 to 128 [ 548.043188][T10032] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 548.072600][T10032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.262871][T17045] loop1: detected capacity change from 0 to 136 [ 548.342900][T17045] Attempt to read inode for relocated directory [ 548.440738][T17030] ucma_write: process 63 (syz.8.3861) changed security contexts after opening file descriptor, this is not allowed. [ 548.517311][T17046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=17046 comm=syz.8.3861 [ 548.898182][T17048] lo speed is unknown, defaulting to 1000 [ 549.116569][T17048] chnl_net:caif_netlink_parms(): no params data found [ 549.364809][T17076] loop1: detected capacity change from 0 to 256 [ 549.442326][T17076] msdos: Bad value for 'gid' [ 549.497998][T17076] msdos: Bad value for 'gid' [ 549.517205][T17048] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.561393][T17048] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.597647][T17073] loop8: detected capacity change from 0 to 512 [ 549.627674][T17048] bridge_slave_0: entered allmulticast mode [ 549.657897][T17073] EXT4-fs (loop8): 1 orphan inode deleted [ 549.666345][T17073] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.694975][T17048] bridge_slave_0: entered promiscuous mode [ 550.085071][T17048] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.102422][T17048] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.114781][T17048] bridge_slave_1: entered allmulticast mode [ 550.131503][T17085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26970 sclass=netlink_route_socket pid=17085 comm=syz.6.3873 [ 550.247842][T17048] bridge_slave_1: entered promiscuous mode [ 550.549916][T17048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.596005][T17048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.700295][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.816877][T17048] team0: Port device team_slave_0 added [ 550.835548][T17048] team0: Port device team_slave_1 added [ 550.842354][T17093] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 551.337905][T17048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.345272][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.410812][T17048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.486434][T17105] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3879'. [ 551.501905][T17048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.551310][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.586913][T17048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.673205][T17048] hsr_slave_0: entered promiscuous mode [ 551.685716][T17048] hsr_slave_1: entered promiscuous mode [ 551.700323][T17048] debugfs: 'hsr0' already exists in 'hsr' [ 551.706223][ T7804] usb 17-1: enqueue for inactive port 0 [ 551.711786][ T7804] usb 17-1: enqueue for inactive port 0 [ 551.717887][T17048] Cannot create hsr debugfs directory [ 551.784231][ T7804] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 551.819471][T17048] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 551.836553][T17048] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 551.852071][T17048] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 551.871602][T17048] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 551.952461][T17120] loop0: detected capacity change from 0 to 256 [ 551.961834][T17048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.969267][T17120] msdos: Bad value for 'gid' [ 551.988760][T17120] msdos: Bad value for 'gid' [ 551.996628][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.039312][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.046463][ T3864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.082332][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.089414][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.163403][T17124] loop0: detected capacity change from 0 to 1024 [ 552.178256][T17124] EXT4-fs: Ignoring removed bh option [ 552.225628][T17124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.250696][T17048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.291615][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.408393][T17048] veth0_vlan: entered promiscuous mode [ 552.416744][T17048] veth1_vlan: entered promiscuous mode [ 552.438207][T17048] veth0_macvtap: entered promiscuous mode [ 552.446554][T17048] veth1_macvtap: entered promiscuous mode [ 552.463137][T17048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.473678][T17048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.627823][ T3864] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.830989][ T3864] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.845740][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 552.845756][ T28] audit: type=1326 audit(1772729188.996:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.0.3884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde278fc799 code=0x0 [ 552.898322][ T3864] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.912476][ T3864] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.946921][T17158] loop0: detected capacity change from 0 to 128 [ 552.971020][T17155] loop8: detected capacity change from 0 to 1024 [ 552.980544][ T28] audit: type=1326 audit(1772729189.126:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17159 comm="syz.9.3889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86e70c799 code=0x0 [ 552.981004][T17155] EXT4-fs: inline encryption not supported [ 553.019636][T17155] EXT4-fs: Ignoring removed nobh option [ 553.081665][T17163] loop9: detected capacity change from 0 to 128 [ 553.088433][T17155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 553.103592][T17155] System zones: 0-1, 3-12 [ 553.109260][T17166] loop6: detected capacity change from 0 to 136 [ 553.125012][T17166] Attempt to read inode for relocated directory [ 553.126499][T17155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.859456][T17173] loop0: detected capacity change from 0 to 512 [ 553.912917][T17173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.927216][T17173] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.953207][T17173] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 553.986207][T17179] loop9: detected capacity change from 0 to 256 [ 553.992848][T17179] msdos: Bad value for 'gid' [ 554.003602][T17173] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 554.020710][ T28] audit: type=1400 audit(1772729190.166:3747): avc: denied { bind } for pid=17172 comm="syz.0.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 554.074162][T17179] msdos: Bad value for 'gid' [ 554.185512][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.290827][T17188] EXT4-fs: Ignoring removed bh option [ 554.338293][T17188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.328650][T17205] tipc: Started in network mode [ 555.344444][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.384036][T17205] tipc: Node identity 92f455f35207, cluster identity 4711 [ 555.393008][T17205] tipc: Enabled bearer , priority 0 [ 555.475055][ T28] audit: type=1400 audit(1772729191.626:3748): avc: denied { map } for pid=17206 comm="syz.1.3899" path="pipe:[51339]" dev="pipefs" ino=51339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 555.535928][T17205] syzkaller0: entered promiscuous mode [ 555.561751][T17205] syzkaller0: entered allmulticast mode [ 555.594571][T17205] tipc: Resetting bearer [ 555.622488][T17207] netlink: 16628 bytes leftover after parsing attributes in process `syz.1.3899'. [ 555.699883][T17204] tipc: Resetting bearer [ 555.764082][T17204] tipc: Disabling bearer [ 555.781051][T17212] set_capacity_and_notify: 1 callbacks suppressed [ 555.781068][T17212] loop1: detected capacity change from 0 to 128 [ 555.854069][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.953789][ T28] audit: type=1326 audit(1772729191.866:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.1.3900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd44487c799 code=0x0 [ 556.015431][T17218] loop6: detected capacity change from 0 to 136 [ 556.072403][T17222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4611 sclass=netlink_route_socket pid=17222 comm=syz.9.3904 [ 556.099348][T17226] loop0: detected capacity change from 0 to 256 [ 556.106503][T17226] msdos: Bad value for 'gid' [ 556.111473][T17226] msdos: Bad value for 'gid' [ 556.173152][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3904'. [ 556.196628][T17218] Attempt to read inode for relocated directory [ 556.198429][T17222] team0 (unregistering): Port device team_slave_0 removed [ 556.212322][T17222] team0 (unregistering): Port device team_slave_1 removed [ 556.390464][T17232] loop0: detected capacity change from 0 to 512 [ 556.483343][T17232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.533254][T17232] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 556.551851][T17215] syz.6.3902 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 556.569245][T17232] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.3906: corrupted inode contents [ 556.589987][T17232] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.3906: mark_inode_dirty error [ 556.627173][T17215] CPU: 0 UID: 0 PID: 17215 Comm: syz.6.3902 Tainted: G W syzkaller #0 PREEMPT(full) [ 556.627353][T17215] Tainted: [W]=WARN [ 556.627359][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.627447][T17215] Call Trace: [ 556.627453][T17215] [ 556.627461][T17215] __dump_stack+0x1d/0x30 [ 556.627487][T17215] dump_stack_lvl+0x95/0xd0 [ 556.627511][T17215] dump_stack+0x15/0x1b [ 556.627543][T17215] dump_header+0x80/0x240 [ 556.627565][T17215] oom_kill_process+0x295/0x350 [ 556.627587][T17215] out_of_memory+0x97d/0xb80 [ 556.627635][T17215] try_charge_memcg+0x62e/0xa10 [ 556.627671][T17215] obj_cgroup_charge_pages+0x23/0xc0 [ 556.627739][T17215] __memcg_kmem_charge_page+0x9e/0x170 [ 556.627765][T17215] __alloc_frozen_pages_noprof+0x18a/0x360 [ 556.627790][T17215] alloc_pages_bulk_noprof+0x4aa/0x530 [ 556.627811][T17215] ? policy_nodemask+0x417/0x5e0 [ 556.627885][T17215] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 556.627907][T17215] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 556.627932][T17215] ? alloc_pages_mpol+0x217/0x260 [ 556.628083][T17215] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 556.628115][T17215] __kvmalloc_node_noprof+0x3d4/0x650 [ 556.628167][T17215] ? futex_hash_allocate+0x190/0x9d0 [ 556.628233][T17215] ? futex_hash_allocate+0x190/0x9d0 [ 556.628303][T17215] futex_hash_allocate+0x190/0x9d0 [ 556.628333][T17215] ? cap_task_prctl+0x13f/0x6e0 [ 556.628357][T17215] futex_hash_prctl+0xd8/0xf0 [ 556.628379][T17215] __se_sys_prctl+0xa3d/0x13f0 [ 556.628441][T17215] __x64_sys_prctl+0x67/0x80 [ 556.628461][T17215] x64_sys_call+0x2533/0x3020 [ 556.628482][T17215] do_syscall_64+0x12c/0x370 [ 556.628573][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.628647][T17215] RIP: 0033:0x7f6f5dc5c799 [ 556.628662][T17215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.628677][T17215] RSP: 002b:00007f6f5c696028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 556.628695][T17215] RAX: ffffffffffffffda RBX: 00007f6f5ded6090 RCX: 00007f6f5dc5c799 [ 556.628708][T17215] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 556.628723][T17215] RBP: 00007f6f5dcf2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 556.628800][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.628814][T17215] R13: 00007f6f5ded6128 R14: 00007f6f5ded6090 R15: 00007ffc4f6a5bf8 [ 556.628836][T17215] [ 556.629721][T17215] memory: usage 307200kB, limit 307200kB, failcnt 3184 [ 556.664125][T17232] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.3906: corrupted inode contents [ 556.667622][T17215] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 556.757987][T17232] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3906: mark_inode_dirty error [ 556.765552][T17215] kmem: usage 294308kB, limit 9007199254740988kB, failcnt 0 [ 556.784817][T17235] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.3906: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 556.784817][T17235] [ 556.787627][T17215] Memory cgroup stats for [ 556.808766][T17232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3906'. [ 556.822356][T17215] /syz6 [ 556.951460][T17232] netlink: 'syz.0.3906': attribute type 6 has an invalid length. [ 556.971610][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 557.001185][T17215] : [ 557.001347][T17215] cache 0 [ 557.007494][T17215] rss 4096 [ 557.010555][T17215] shmem 0 [ 557.013561][T17215] mapped_file 0 [ 557.017364][T17215] dirty 0 [ 557.020372][T17215] writeback 0 [ 557.023693][T17215] workingset_refault_anon 1952 [ 557.142706][T17215] workingset_refault_file 0 [ 557.147886][T17215] swap 409600 [ 557.151192][T17215] swapcached 4739072 [ 557.157822][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.165886][T17247] loop8: detected capacity change from 0 to 136 [ 557.167034][T17215] pgpgin 448880 [ 557.178055][T17215] pgpgout 448866 [ 557.181592][T17215] pgfault 461859 [ 557.185248][T17215] pgmajfault 635 [ 557.188933][T17215] inactive_anon 53248 [ 557.192928][T17215] active_anon 0 [ 557.196570][T17215] inactive_file 4096 [ 557.200561][T17215] active_file 0 [ 557.204328][T17215] unevictable 0 [ 557.207833][T17215] hierarchical_memory_limit 314572800 [ 557.213252][T17215] hierarchical_memsw_limit 9223372036854771712 [ 557.231290][T17251] loop0: detected capacity change from 0 to 128 [ 557.232538][T17215] total_cache 0 [ 557.241033][T17215] total_rss 4096 [ 557.244661][T17215] total_shmem 0 [ 557.248183][T17215] total_mapped_file 0 [ 557.252212][T17215] total_dirty 0 [ 557.255367][T17247] Attempt to read inode for relocated directory [ 557.255822][T17215] total_writeback 0 [ 557.265851][T17215] total_workingset_refault_anon 1952 [ 557.271164][T17215] total_workingset_refault_file 0 [ 557.276259][T17215] total_swap 409600 [ 557.280090][T17215] total_swapcached 4739072 [ 557.282775][T17251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.284689][T17215] total_pgpgin 448880 [ 557.300486][T17215] total_pgpgout 448866 [ 557.304861][T17215] total_pgfault 461859 [ 557.316337][T17251] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 557.383048][T17215] total_pgmajfault 635 [ 557.390608][T17215] total_inactive_anon 53248 [ 557.395358][T17215] total_active_anon 0 [ 557.399334][T17215] total_inactive_file 4096 [ 557.403885][T17215] total_active_file 0 [ 557.408189][T17215] total_unevictable 0 [ 557.412154][T17215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3902,pid=17213,uid=0 [ 557.427094][T17215] Memory cgroup out of memory: Killed process 17213 (syz.6.3902) total-vm:96340kB, anon-rss:1224kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 557.491545][T17240] syz.8.3908 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 557.554025][T17240] CPU: 0 UID: 0 PID: 17240 Comm: syz.8.3908 Tainted: G W syzkaller #0 PREEMPT(full) [ 557.554056][T17240] Tainted: [W]=WARN [ 557.554110][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.554122][T17240] Call Trace: [ 557.554129][T17240] [ 557.554137][T17240] __dump_stack+0x1d/0x30 [ 557.554162][T17240] dump_stack_lvl+0x95/0xd0 [ 557.554183][T17240] dump_stack+0x15/0x1b [ 557.554203][T17240] dump_header+0x80/0x240 [ 557.554235][T17240] oom_kill_process+0x295/0x350 [ 557.554298][T17240] out_of_memory+0x97d/0xb80 [ 557.554322][T17240] try_charge_memcg+0x62e/0xa10 [ 557.554362][T17240] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 557.554387][T17240] __swap_cache_prepare_and_add+0x386/0x530 [ 557.554417][T17240] swap_cache_alloc_folio+0xa2/0x120 [ 557.554514][T17240] swap_cluster_readahead+0x26e/0x3d0 [ 557.554547][T17240] swapin_readahead+0xde/0x840 [ 557.554625][T17240] ? _raw_spin_unlock+0x9/0x30 [ 557.554712][T17240] ? swap_put_entries_cluster+0x385/0x3a0 [ 557.554735][T17240] ? swap_put_entries_cluster+0x71/0x3a0 [ 557.554810][T17240] ? __rcu_read_unlock+0x4e/0x70 [ 557.554862][T17240] ? swap_cache_get_folio+0x26f/0x280 [ 557.554896][T17240] do_swap_page+0x309/0x2210 [ 557.554931][T17240] ? css_rstat_updated+0xbb/0x280 [ 557.554949][T17240] ? __rcu_read_lock+0x36/0x50 [ 557.555042][T17240] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 557.555138][T17240] handle_mm_fault+0xb40/0x3020 [ 557.555161][T17240] ? vma_start_read+0x1c7/0x2c0 [ 557.555239][T17240] do_user_addr_fault+0x62f/0x1050 [ 557.555268][T17240] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 557.555314][T17240] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 557.555335][T17240] ? trace_page_fault_user+0x1f/0xe0 [ 557.555364][T17240] exc_page_fault+0x62/0xa0 [ 557.555518][T17240] asm_exc_page_fault+0x26/0x30 [ 557.555534][T17240] RIP: 0033:0x7f1ffd1d78f8 [ 557.555551][T17240] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 557.555567][T17240] RSP: 002b:00007ffe7fbadb20 EFLAGS: 00010246 [ 557.555582][T17240] RAX: 0000000000000000 RBX: 0000555562f39500 RCX: 00007f1ffd1dcfce [ 557.555627][T17240] RDX: 00007ffe7fbadb70 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.555639][T17240] RBP: 00007f1ffd497da0 R08: 0000000000000000 R09: 0000000000000000 [ 557.555678][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008831d [ 557.555689][T17240] R13: 00007f1ffd49618c R14: 000000000008811d R15: 00007f1ffd496180 [ 557.555706][T17240] [ 557.555714][T17240] memory: usage 279980kB, limit 307200kB, failcnt 533 [ 557.817248][T17240] memory+swap: usage 138388kB, limit 9007199254740988kB, failcnt 0 [ 557.825693][T17240] kmem: usage 147848kB, limit 9007199254740988kB, failcnt 0 [ 557.847003][T17240] Memory cgroup stats for /syz8: [ 557.847392][T17240] cache 0 [ 557.855737][T17240] rss 4096 [ 557.858801][T17240] shmem 0 [ 557.861756][T17240] mapped_file 0 [ 557.865705][T17240] dirty 0 [ 557.868662][T17240] writeback 0 [ 557.871966][T17240] workingset_refault_anon 161 [ 557.883296][T17240] workingset_refault_file 0 [ 557.888726][T17240] swap 266240 [ 557.892055][T17240] swapcached 569344 [ 557.896072][T17240] pgpgin 23789 [ 557.899471][T17240] pgpgout 23786 [ 557.902946][T17240] pgfault 26527 [ 557.906495][T17240] pgmajfault 114 [ 557.910066][T17240] inactive_anon 0 [ 557.913705][T17240] active_anon 8192 [ 557.917616][T17240] inactive_file 0 [ 557.921403][T17240] active_file 4096 [ 557.925455][T17240] unevictable 0 [ 557.928991][T17240] hierarchical_memory_limit 314572800 [ 557.934523][T17240] hierarchical_memsw_limit 9223372036854771712 [ 557.948851][T17240] total_cache 0 [ 557.958733][T17270] loop6: detected capacity change from 0 to 256 [ 557.959399][T17240] total_rss 4096 [ 557.968672][T17240] total_shmem 0 [ 557.971884][T17270] msdos: Bad value for 'gid' [ 557.972235][T17240] total_mapped_file 0 [ 557.985342][T17270] msdos: Bad value for 'gid' [ 557.990234][T17240] total_dirty 0 [ 558.000314][T17240] total_writeback 0 [ 558.004949][T17240] total_workingset_refault_anon 161 [ 558.022504][T17240] total_workingset_refault_file 0 [ 558.027901][T17240] total_swap 266240 [ 558.031874][T17240] total_swapcached 569344 [ 558.036792][T17240] total_pgpgin 23789 [ 558.040823][T17240] total_pgpgout 23786 [ 558.045121][T17240] total_pgfault 26527 [ 558.049162][T17240] total_pgmajfault 114 [ 558.053327][T17240] total_inactive_anon 0 [ 558.057722][T17240] total_active_anon 8192 [ 558.062279][T17240] total_inactive_file 0 [ 558.067516][T17240] total_active_file 4096 [ 558.076687][T17240] total_unevictable 0 [ 558.084841][T17240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3908,pid=17240,uid=0 [ 558.120207][T13232] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 558.173989][T17240] Memory cgroup out of memory: Killed process 17240 (syz.8.3908) total-vm:94292kB, anon-rss:1236kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 558.432774][T17277] loop0: detected capacity change from 0 to 512 [ 558.521694][T17277] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 558.636736][T17277] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 558.681684][T17277] EXT4-fs (loop0): group descriptors corrupted! [ 558.713666][T17285] loop9: detected capacity change from 0 to 8192 [ 558.732211][T17277] loop0: detected capacity change from 0 to 256 [ 558.890963][T17277] FAT-fs (loop0): Directory bread(block 64) failed [ 558.943504][T17285] FAT-fs (loop9): error, clusters badly computed (2 != 1) [ 558.959266][T17285] FAT-fs (loop9): Filesystem has been set read-only [ 559.014126][T17277] FAT-fs (loop0): Directory bread(block 65) failed [ 559.088369][T17277] FAT-fs (loop0): Directory bread(block 66) failed [ 559.135211][T17277] FAT-fs (loop0): Directory bread(block 67) failed [ 559.183306][T17277] FAT-fs (loop0): Directory bread(block 68) failed [ 559.214664][T17277] FAT-fs (loop0): Directory bread(block 69) failed [ 559.221609][T17277] FAT-fs (loop0): Directory bread(block 70) failed [ 559.233522][T17277] FAT-fs (loop0): Directory bread(block 71) failed [ 559.241087][T17277] FAT-fs (loop0): Directory bread(block 72) failed [ 559.248075][T17277] FAT-fs (loop0): Directory bread(block 73) failed [ 559.648290][T17298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.692500][ T28] audit: type=1400 audit(1772729195.826:3750): avc: denied { ioctl } for pid=17309 comm="syz.0.3929" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 559.719595][T17298] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.729642][T17313] syzkaller0: entered promiscuous mode [ 559.735882][T17313] syzkaller0: entered allmulticast mode [ 559.744081][ T28] audit: type=1400 audit(1772729195.826:3751): avc: denied { setattr } for pid=17309 comm="syz.0.3929" path="/dev/hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 559.849502][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.880410][T17324] xt_hashlimit: size too large, truncated to 1048576 [ 559.918857][T17327] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 559.931301][T17329] Attempt to read inode for relocated directory [ 560.006558][T17333] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3936'. [ 560.033662][T17328] 8021q: adding VLAN 0 to HW filter on device bond6 [ 560.068925][T17333] bond6: entered allmulticast mode [ 560.078548][T17327] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 560.088845][T17327] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3935: Corrupt directory, running e2fsck is recommended [ 560.093387][T17335] dummy0: entered allmulticast mode [ 560.107221][T17327] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 560.115760][T17327] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.3935: corrupted in-inode xattr: invalid ea_ino [ 560.129489][T17327] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 560.130134][T17335] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 560.139293][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 560.139309][ C1] EXT4-fs (loop8): initial error at time 1772729196: ext4_iget_extra_inode:5025: inode 15 [ 560.139350][ C1] EXT4-fs (loop8): last error at time 1772729196: ext4_iget_extra_inode:5025: inode 15 [ 560.220666][T17327] EXT4-fs (loop8): Remounting filesystem read-only [ 560.238717][T17327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.258613][T17339] EXT4-fs: inline encryption not supported [ 560.269359][T17339] EXT4-fs: Ignoring removed nobh option [ 560.281640][T17323] syz.9.3933 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 560.305921][T17339] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 560.314348][T17339] System zones: 0-1, 3-12 [ 560.314680][T17323] CPU: 1 UID: 0 PID: 17323 Comm: syz.9.3933 Tainted: G W syzkaller #0 PREEMPT(full) [ 560.314714][T17323] Tainted: [W]=WARN [ 560.314721][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.314733][T17323] Call Trace: [ 560.314740][T17323] [ 560.314749][T17323] __dump_stack+0x1d/0x30 [ 560.314881][T17323] dump_stack_lvl+0x95/0xd0 [ 560.314904][T17323] dump_stack+0x15/0x1b [ 560.314925][T17323] dump_header+0x80/0x240 [ 560.314990][T17323] oom_kill_process+0x295/0x350 [ 560.315012][T17323] out_of_memory+0x97d/0xb80 [ 560.315075][T17323] try_charge_memcg+0x62e/0xa10 [ 560.315111][T17323] obj_cgroup_charge_pages+0x23/0xc0 [ 560.315137][T17323] __memcg_kmem_charge_page+0x9e/0x170 [ 560.315169][T17323] __alloc_frozen_pages_noprof+0x18a/0x360 [ 560.315198][T17323] alloc_pages_mpol+0xb3/0x260 [ 560.315226][T17323] alloc_pages_noprof+0x8f/0x130 [ 560.315272][T17323] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 560.315308][T17323] __kvmalloc_node_noprof+0x3d4/0x650 [ 560.315331][T17323] ? futex_hash_allocate+0x190/0x9d0 [ 560.315357][T17323] ? futex_hash_allocate+0x190/0x9d0 [ 560.315418][T17323] futex_hash_allocate+0x190/0x9d0 [ 560.315445][T17323] ? cap_task_prctl+0x13f/0x6e0 [ 560.315531][T17323] futex_hash_prctl+0xd8/0xf0 [ 560.315555][T17323] __se_sys_prctl+0xa3d/0x13f0 [ 560.315583][T17323] __x64_sys_prctl+0x67/0x80 [ 560.315669][T17323] x64_sys_call+0x2533/0x3020 [ 560.315695][T17323] do_syscall_64+0x12c/0x370 [ 560.315716][T17323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.315815][T17323] RIP: 0033:0x7fc86e70c799 [ 560.315832][T17323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.315933][T17323] RSP: 002b:00007fc86d146028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 560.315950][T17323] RAX: ffffffffffffffda RBX: 00007fc86e986090 RCX: 00007fc86e70c799 [ 560.316033][T17323] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 560.316044][T17323] RBP: 00007fc86e7a2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 560.316055][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.316070][T17323] R13: 00007fc86e986128 R14: 00007fc86e986090 R15: 00007ffdbc33f908 [ 560.316089][T17323] [ 560.316185][T17323] memory: usage 307200kB, limit 307200kB, failcnt 191 [ 560.319141][T17339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.329732][T17323] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 560.354421][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.359651][T17323] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 560.604409][T17346] msdos: Bad value for 'gid' [ 560.609010][T17346] msdos: Bad value for 'gid' [ 560.615972][T17323] Memory cgroup stats for /syz9: [ 560.616213][T17323] cache 0 [ 560.617322][T17348] FAULT_INJECTION: forcing a failure. [ 560.617322][T17348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.621145][T17323] rss 4096 [ 560.637646][T17348] CPU: 1 UID: 0 PID: 17348 Comm: syz.8.3940 Tainted: G W syzkaller #0 PREEMPT(full) [ 560.637743][T17348] Tainted: [W]=WARN [ 560.637750][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.637761][T17348] Call Trace: [ 560.637767][T17348] [ 560.637773][T17348] __dump_stack+0x1d/0x30 [ 560.637820][T17348] dump_stack_lvl+0x95/0xd0 [ 560.637841][T17348] dump_stack+0x15/0x1b [ 560.637867][T17348] should_fail_ex+0x263/0x280 [ 560.637953][T17348] should_fail+0xb/0x20 [ 560.637972][T17348] should_fail_usercopy+0x1a/0x20 [ 560.637994][T17348] _copy_from_user+0x1c/0xb0 [ 560.638019][T17348] __sys_bind+0x106/0x290 [ 560.638045][T17348] __x64_sys_bind+0x3f/0x50 [ 560.638102][T17348] x64_sys_call+0x2b30/0x3020 [ 560.638126][T17348] do_syscall_64+0x12c/0x370 [ 560.638175][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.638195][T17348] RIP: 0033:0x7f1ffd21c799 [ 560.638211][T17348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.638278][T17348] RSP: 002b:00007f1ffbc6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 560.638298][T17348] RAX: ffffffffffffffda RBX: 00007f1ffd495fa0 RCX: 00007f1ffd21c799 [ 560.638313][T17348] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 560.638325][T17348] RBP: 00007f1ffbc6f090 R08: 0000000000000000 R09: 0000000000000000 [ 560.638338][T17348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.638422][T17348] R13: 00007f1ffd496038 R14: 00007f1ffd495fa0 R15: 00007ffe7fbada38 [ 560.638442][T17348] [ 560.808630][T17323] shmem 0 [ 560.820777][T17323] mapped_file 0 [ 560.824478][T17323] dirty 0 [ 560.827552][T17323] writeback 0 [ 560.830816][T17323] workingset_refault_anon 12 [ 560.835617][T17323] workingset_refault_file 0 [ 560.840117][T17323] swap 253952 [ 560.844904][T17323] swapcached 266240 [ 560.858848][T17323] pgpgin 5659 [ 560.862202][T17323] pgpgout 5656 [ 560.872038][T17323] pgfault 7552 [ 560.875593][T17323] pgmajfault 2 [ 560.886483][T17323] inactive_anon 12288 [ 560.890496][T17323] active_anon 0 [ 560.904624][T17323] inactive_file 0 [ 560.908594][T17323] active_file 0 [ 560.912159][T17323] unevictable 0 [ 560.914956][T17363] syzkaller0: entered promiscuous mode [ 560.916177][T17323] hierarchical_memory_limit 314572800 [ 560.921107][T17363] syzkaller0: entered allmulticast mode [ 560.926733][T17323] hierarchical_memsw_limit 9223372036854771712 [ 560.941835][T17323] total_cache 0 [ 560.945415][T17323] total_rss 4096 [ 560.949170][T17323] total_shmem 0 [ 560.965491][T17323] total_mapped_file 0 [ 560.972742][T17323] total_dirty 0 [ 560.978401][T17323] total_writeback 0 [ 560.987883][T17323] total_workingset_refault_anon 12 [ 560.998471][T17323] total_workingset_refault_file 0 [ 561.008544][T17323] total_swap 253952 [ 561.016764][T17323] total_swapcached 266240 [ 561.027761][T17323] total_pgpgin 5659 [ 561.028583][T17359] set_capacity_and_notify: 6 callbacks suppressed [ 561.028615][T17359] loop6: detected capacity change from 0 to 512 [ 561.035919][T17323] total_pgpgout 5656 [ 561.067290][T17323] total_pgfault 7552 [ 561.078197][T17323] total_pgmajfault 2 [ 561.082316][T17323] total_inactive_anon 12288 [ 561.088954][T17323] total_active_anon 0 [ 561.093766][T17323] total_inactive_file 0 [ 561.098387][T17323] total_active_file 0 [ 561.102415][T17323] total_unevictable 0 [ 561.106896][T17323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3933,pid=17319,uid=0 [ 561.127185][T17323] Memory cgroup out of memory: Killed process 17319 (syz.9.3933) total-vm:94292kB, anon-rss:1232kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 561.197188][T17359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.232486][ T28] audit: type=1326 audit(1772729197.376:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17369 comm="syz.8.3949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ffd21c799 code=0x0 [ 561.244379][T17359] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.283892][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.309267][T17372] loop8: detected capacity change from 0 to 128 [ 561.406686][ T6791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.426889][T17381] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3952'. [ 561.435381][T17377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 561.446063][T17377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3950'. [ 561.455179][T17377] bond4: entered allmulticast mode [ 561.464826][T17377] bond3: (slave dummy0): Releasing active interface [ 561.471637][T17383] loop6: detected capacity change from 0 to 256 [ 561.474293][T17377] dummy0: entered allmulticast mode [ 561.480435][T17383] msdos: Bad value for 'gid' [ 561.484285][T17377] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 561.487924][T17383] msdos: Bad value for 'gid' [ 561.549618][T17387] loop6: detected capacity change from 0 to 1024 [ 561.556350][T17387] EXT4-fs: inline encryption not supported [ 561.562335][T17387] EXT4-fs: Ignoring removed bh option [ 561.569363][T17387] EXT4-fs warning (device loop6): read_mmp_block:111: Error -117 while reading MMP block 73 [ 561.637431][T17394] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3958'. [ 561.649121][T17394] ip6tnl1: entered allmulticast mode [ 561.895358][T17403] loop1: detected capacity change from 0 to 136 [ 561.902635][T17403] Attempt to read inode for relocated directory [ 562.156753][T17406] loop8: detected capacity change from 0 to 512 [ 562.300272][T17402] syz.1.3961 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 562.315679][T17402] CPU: 1 UID: 0 PID: 17402 Comm: syz.1.3961 Tainted: G W syzkaller #0 PREEMPT(full) [ 562.315713][T17402] Tainted: [W]=WARN [ 562.315720][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.315733][T17402] Call Trace: [ 562.315812][T17402] [ 562.315819][T17402] __dump_stack+0x1d/0x30 [ 562.315842][T17402] dump_stack_lvl+0x95/0xd0 [ 562.315862][T17402] dump_stack+0x15/0x1b [ 562.315938][T17402] dump_header+0x80/0x240 [ 562.315958][T17402] oom_kill_process+0x295/0x350 [ 562.316050][T17402] out_of_memory+0x97d/0xb80 [ 562.316070][T17402] try_charge_memcg+0x62e/0xa10 [ 562.316175][T17402] obj_cgroup_charge_pages+0x23/0xc0 [ 562.316198][T17402] __memcg_kmem_charge_page+0x9e/0x170 [ 562.316270][T17402] __alloc_frozen_pages_noprof+0x18a/0x360 [ 562.316342][T17402] alloc_pages_mpol+0xb3/0x260 [ 562.316391][T17402] alloc_pages_noprof+0x8f/0x130 [ 562.316417][T17402] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 562.316482][T17402] __kvmalloc_node_noprof+0x3d4/0x650 [ 562.316503][T17402] ? futex_hash_allocate+0x190/0x9d0 [ 562.316571][T17402] ? futex_hash_allocate+0x190/0x9d0 [ 562.316600][T17402] futex_hash_allocate+0x190/0x9d0 [ 562.316680][T17402] ? cap_task_prctl+0x13f/0x6e0 [ 562.316803][T17402] futex_hash_prctl+0xd8/0xf0 [ 562.316824][T17402] __se_sys_prctl+0xa3d/0x13f0 [ 562.316852][T17402] __x64_sys_prctl+0x67/0x80 [ 562.316906][T17402] x64_sys_call+0x2533/0x3020 [ 562.316929][T17402] do_syscall_64+0x12c/0x370 [ 562.316951][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.316970][T17402] RIP: 0033:0x7fd44487c799 [ 562.317115][T17402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.317131][T17402] RSP: 002b:00007fd4432b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 562.317150][T17402] RAX: ffffffffffffffda RBX: 00007fd444af6090 RCX: 00007fd44487c799 [ 562.317165][T17402] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 562.317179][T17402] RBP: 00007fd444912bd9 R08: 0000000000000000 R09: 0000000000000000 [ 562.317194][T17402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.317208][T17402] R13: 00007fd444af6128 R14: 00007fd444af6090 R15: 00007ffcb992e578 [ 562.317303][T17402] [ 562.319521][T17402] memory: usage 307200kB, limit 307200kB, failcnt 4244 [ 562.368945][T17406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.372844][T17402] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 562.372862][T17402] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 562.372913][T17402] Memory cgroup stats for /syz1: [ 562.373436][T17402] cache 0 [ 562.380378][T17406] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.743044][T17402] rss 0 [ 562.754314][T17402] shmem 0 [ 562.757270][T17402] mapped_file 0 [ 562.760740][T17402] dirty 0 [ 562.774126][T17402] writeback 0 [ 562.784356][T17402] workingset_refault_anon 1032 [ 562.801814][T17402] workingset_refault_file 5389 [ 562.807550][T17402] swap 274432 [ 562.818099][T17402] swapcached 74674176 [ 562.830011][T17415] loop0: detected capacity change from 0 to 512 [ 562.836594][T17402] pgpgin 506628 [ 562.842061][T17402] pgpgout 506627 [ 562.846281][T17402] pgfault 570227 [ 562.850263][T17402] pgmajfault 728 [ 562.854206][T17402] inactive_anon 0 [ 562.861303][T17402] active_anon 0 [ 562.876584][T17402] inactive_file 0 [ 562.883944][T17415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 562.895682][T17402] active_file 4096 [ 562.899690][T17402] unevictable 0 [ 562.910537][T17402] hierarchical_memory_limit 314572800 [ 562.918439][T17402] hierarchical_memsw_limit 9223372036854771712 [ 562.924931][T17402] total_cache 0 [ 562.928579][T17402] total_rss 0 [ 562.932165][T17402] total_shmem 0 [ 562.939308][T17402] total_mapped_file 0 [ 562.954409][T17402] total_dirty 0 [ 562.965151][T17402] total_writeback 0 [ 562.984240][T17402] total_workingset_refault_anon 1032 [ 563.003057][T17402] total_workingset_refault_file 5389 [ 563.183993][T17402] total_swap 274432 [ 563.188321][T17402] total_swapcached 74674176 [ 563.192808][T17402] total_pgpgin 508025 [ 563.204976][T17415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.217494][T17402] total_pgpgout 508024 [ 563.221653][T17402] total_pgfault 571923 [ 563.237524][T17402] total_pgmajfault 728 [ 563.245440][T17415] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.256136][T17402] total_inactive_anon 0 [ 563.260281][T17402] total_active_anon 0 [ 563.272438][T17419] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.279248][T17402] total_inactive_file 0 [ 563.283387][T17402] total_active_file 4096 [ 563.292984][T17415] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.3964: path /245/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 563.317203][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3965'. [ 563.326647][T17402] total_unevictable 0 [ 563.330627][T17402] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3961,pid=17400,uid=0 [ 563.346127][T17421] bond7: entered allmulticast mode [ 563.384224][T17402] Memory cgroup out of memory: Killed process 17400 (syz.1.3961) total-vm:94292kB, anon-rss:1220kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 563.410441][T17419] bond6: (slave dummy0): Releasing backup interface [ 563.426672][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.442633][T17419] dummy0: left allmulticast mode [ 563.463712][T17424] loop0: detected capacity change from 0 to 256 [ 563.471568][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.491733][T17419] dummy0: entered allmulticast mode [ 563.537898][T17424] msdos: Bad value for 'gid' [ 563.542504][T17424] msdos: Bad value for 'gid' [ 563.551472][T17419] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 563.642389][T17429] loop0: detected capacity change from 0 to 256 [ 563.682118][T17429] msdos: Bad value for 'gid' [ 563.709023][T17429] msdos: Bad value for 'gid' [ 563.841821][T17438] loop6: detected capacity change from 0 to 764 [ 563.872414][T17438] Symlink component flag not implemented [ 563.903491][T17438] Symlink component flag not implemented (15) [ 564.071547][T17453] EXT4-fs: inline encryption not supported [ 564.085864][T17453] EXT4-fs: Ignoring removed nobh option [ 564.107978][T17453] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 564.116213][T17453] System zones: 0-1, 3-12 [ 564.121272][T17453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.867914][T17466] msdos: Bad value for 'gid' [ 564.940160][T17466] msdos: Bad value for 'gid' [ 565.249836][T17470] tipc: Enabled bearer , priority 0 [ 565.369817][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.406690][T17473] syzkaller0: entered promiscuous mode [ 565.412329][T17473] syzkaller0: entered allmulticast mode [ 565.418665][T17473] tipc: Resetting bearer [ 565.494184][T17469] tipc: Resetting bearer [ 565.518670][T17476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.574402][T17476] EXT4-fs (loop9): shut down requested (1) [ 565.585412][T17469] tipc: Disabling bearer [ 565.605502][T17476] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 565.621630][ T28] audit: type=1400 audit(1772729201.736:3753): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 565.647944][T17476] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 565.680709][ T28] audit: type=1400 audit(1772729201.736:3754): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.725826][T17048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.759271][ T28] audit: type=1400 audit(1772729201.736:3755): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.877827][ T28] audit: type=1400 audit(1772729201.736:3756): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.898785][ T28] audit: type=1400 audit(1772729201.736:3757): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 565.919534][ T28] audit: type=1400 audit(1772729201.736:3758): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.306475][ T28] audit: type=1400 audit(1772729201.736:3759): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.329489][ T28] audit: type=1400 audit(1772729201.816:3760): avc: denied { setattr } for pid=17475 comm="syz.9.3984" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 566.459900][T17497] set_capacity_and_notify: 3 callbacks suppressed [ 566.459913][T17497] loop8: detected capacity change from 0 to 512 [ 566.559684][T17478] lo speed is unknown, defaulting to 1000 [ 566.648870][T17506] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3989'. [ 566.658982][T17497] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 566.716410][T17497] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 566.738185][T17497] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3987: Corrupt directory, running e2fsck is recommended [ 566.766676][T17512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.766671][T17497] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 566.766716][T17497] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.3987: corrupted in-inode xattr: invalid ea_ino [ 566.775505][T17512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.788811][T17497] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.804753][T17497] EXT4-fs (loop8): Remounting filesystem read-only [ 566.820393][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 566.820414][ C1] EXT4-fs (loop8): initial error at time 1772729202: ext4_iget_extra_inode:5025: inode 15 [ 566.820463][ C1] EXT4-fs (loop8): last error at time 1772729202: ext4_iget_extra_inode:5025: inode 15 [ 566.866107][T17497] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.887138][T17478] chnl_net:caif_netlink_parms(): no params data found [ 566.942265][T17478] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.950554][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.960292][T17478] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.968370][T17478] bridge_slave_0: entered allmulticast mode [ 566.975095][T17519] loop9: detected capacity change from 0 to 136 [ 566.982106][T17478] bridge_slave_0: entered promiscuous mode [ 566.989505][T17478] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.997255][T17478] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.005015][T17478] bridge_slave_1: entered allmulticast mode [ 567.010998][T17519] Attempt to read inode for relocated directory [ 567.018361][T17478] bridge_slave_1: entered promiscuous mode [ 567.037142][T17478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.048120][T17478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.070272][T17478] team0: Port device team_slave_0 added [ 567.077077][T17478] team0: Port device team_slave_1 added [ 567.094955][T17478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.101915][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.128364][T17478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.139681][T17478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.146848][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.173616][T17478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.226971][T17510] syz.9.3992 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 567.235624][T17478] hsr_slave_0: entered promiscuous mode [ 567.244896][T17510] CPU: 1 UID: 0 PID: 17510 Comm: syz.9.3992 Tainted: G W syzkaller #0 PREEMPT(full) [ 567.244923][T17510] Tainted: [W]=WARN [ 567.244929][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 567.244953][T17510] Call Trace: [ 567.244959][T17510] [ 567.244968][T17510] __dump_stack+0x1d/0x30 [ 567.244993][T17510] dump_stack_lvl+0x95/0xd0 [ 567.245011][T17510] dump_stack+0x15/0x1b [ 567.245041][T17510] dump_header+0x80/0x240 [ 567.245081][T17510] oom_kill_process+0x295/0x350 [ 567.245161][T17510] out_of_memory+0x97d/0xb80 [ 567.245181][T17510] try_charge_memcg+0x62e/0xa10 [ 567.245274][T17510] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 567.245298][T17510] __swap_cache_prepare_and_add+0x386/0x530 [ 567.245323][T17510] swap_cache_alloc_folio+0xa2/0x120 [ 567.245384][T17510] swap_cluster_readahead+0x26e/0x3d0 [ 567.245413][T17510] swapin_readahead+0xde/0x840 [ 567.245483][T17510] ? _raw_spin_unlock+0x9/0x30 [ 567.245505][T17510] ? swap_put_entries_cluster+0x385/0x3a0 [ 567.245532][T17510] ? swap_put_entries_cluster+0x71/0x3a0 [ 567.245628][T17510] ? __rcu_read_unlock+0x4e/0x70 [ 567.245649][T17510] ? swap_cache_get_folio+0x26f/0x280 [ 567.245687][T17510] do_swap_page+0x309/0x2210 [ 567.245778][T17478] hsr_slave_1: entered promiscuous mode [ 567.245778][T17510] ? css_rstat_updated+0xbb/0x280 [ 567.245799][T17510] ? __rcu_read_lock+0x36/0x50 [ 567.245815][T17510] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 567.245896][T17510] handle_mm_fault+0xb40/0x3020 [ 567.245925][T17510] ? vma_start_read+0x1c7/0x2c0 [ 567.245950][T17510] do_user_addr_fault+0x62f/0x1050 [ 567.245992][T17510] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 567.246017][T17510] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 567.246061][T17510] ? trace_page_fault_user+0x1f/0xe0 [ 567.246088][T17510] exc_page_fault+0x62/0xa0 [ 567.246114][T17510] asm_exc_page_fault+0x26/0x30 [ 567.246134][T17510] RIP: 0033:0x7fc86e6c78f8 [ 567.246194][T17510] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 567.246211][T17510] RSP: 002b:00007ffdbc33f9f0 EFLAGS: 00010246 [ 567.246228][T17510] RAX: 0000000000000000 RBX: 000055559101d500 RCX: 00007fc86e6ccfce [ 567.246275][T17510] RDX: 00007ffdbc33fa40 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.246288][T17510] RBP: 00007fc86e987da0 R08: 0000000000000000 R09: 0000000000000000 [ 567.246301][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008a915 [ 567.246385][T17510] R13: 00007fc86e98618c R14: 000000000008a710 R15: 00007fc86e986180 [ 567.246405][T17510] [ 567.246412][T17510] memory: usage 307200kB, limit 307200kB, failcnt 415 [ 567.264345][T17478] debugfs: 'hsr0' already exists in 'hsr' [ 567.314046][T17510] memory+swap: usage 219820kB, limit 9007199254740988kB, failcnt 0 [ 567.368885][T17478] Cannot create hsr debugfs directory [ 567.413947][T17510] kmem: usage 208024kB, limit 9007199254740988kB, failcnt 0 [ 567.413976][T17510] Memory cgroup stats for /syz9: [ 567.414179][T17510] cache 4096 [ 567.491802][T17527] tipc: Started in network mode [ 567.560592][T17531] loop0: detected capacity change from 0 to 256 [ 567.574578][T17531] msdos: Bad value for 'gid' [ 567.579080][T17527] tipc: Node identity e27f8796d2f1, cluster identity 4711 [ 567.579193][T17531] msdos: Bad value for 'gid' [ 567.601147][T17510] rss 4096 [ 567.601502][T17527] tipc: Enabled bearer , priority 0 [ 567.620119][T17510] shmem 0 [ 567.633450][T17510] mapped_file 0 [ 567.640671][T17510] dirty 0 [ 567.643625][T17510] writeback 0 [ 567.693223][T17536] loop0: detected capacity change from 0 to 4096 [ 567.703143][T17510] workingset_refault_anon 45 [ 567.708175][T17525] syzkaller0: entered promiscuous mode [ 567.714021][T17510] workingset_refault_file 0 [ 567.718586][T17510] swap 245760 [ 567.721871][T17510] swapcached 458752 [ 567.734573][T17536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.737615][T17525] syzkaller0: entered allmulticast mode [ 567.747602][T17510] pgpgin 10791 [ 567.764787][T17525] tipc: Resetting bearer [ 567.783979][T17510] pgpgout 10785 [ 567.787624][T17510] pgfault 14509 [ 567.791156][T17510] pgmajfault 17 [ 567.794702][T17510] inactive_anon 20480 [ 567.798733][T17510] active_anon 0 [ 567.802222][T17510] inactive_file 4096 [ 567.806183][T17510] active_file 0 [ 567.809645][T17510] unevictable 0 [ 567.813285][T17510] hierarchical_memory_limit 314572800 [ 567.818859][T17510] hierarchical_memsw_limit 9223372036854771712 [ 567.825162][T17510] total_cache 4096 [ 567.829187][T17510] total_rss 4096 [ 567.832818][T17510] total_shmem 0 [ 567.836770][T17510] total_mapped_file 0 [ 567.840801][T17510] total_dirty 0 [ 567.844393][T17510] total_writeback 0 [ 567.848374][T17510] total_workingset_refault_anon 45 [ 567.853931][T17510] total_workingset_refault_file 0 [ 567.858958][T17510] total_swap 245760 [ 567.862773][T17510] total_swapcached 458752 [ 567.867201][T17510] total_pgpgin 10791 [ 567.871087][T17510] total_pgpgout 10785 [ 567.875091][T17510] total_pgfault 14509 [ 567.879148][T17510] total_pgmajfault 17 [ 567.883127][T17510] total_inactive_anon 20480 [ 567.887789][T17510] total_active_anon 0 [ 567.891871][T17510] total_inactive_file 4096 [ 567.891899][T17524] tipc: Resetting bearer [ 567.902255][T17510] total_active_file 0 [ 567.906308][T17510] total_unevictable 0 [ 567.910276][T17510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3992,pid=17510,uid=0 [ 567.912491][T17524] tipc: Disabling bearer [ 567.928103][T17510] Memory cgroup out of memory: Killed process 17510 (syz.9.3992) total-vm:96340kB, anon-rss:1236kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 568.047959][T17478] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.064022][T17478] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.126294][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4000'. [ 568.184958][T17478] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.258453][T17478] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.359065][T17478] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.434722][T17478] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.562321][T17478] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.578475][T17478] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.645217][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.682441][T17478] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.694296][T17478] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.703556][T17478] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.713202][T17478] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.722206][T17557] FAULT_INJECTION: forcing a failure. [ 568.722206][T17557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.735552][T17557] CPU: 0 UID: 0 PID: 17557 Comm: syz.1.4004 Tainted: G W syzkaller #0 PREEMPT(full) [ 568.735580][T17557] Tainted: [W]=WARN [ 568.735586][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.735595][T17557] Call Trace: [ 568.735657][T17557] [ 568.735666][T17557] __dump_stack+0x1d/0x30 [ 568.735806][T17557] dump_stack_lvl+0x95/0xd0 [ 568.735828][T17557] dump_stack+0x15/0x1b [ 568.735907][T17557] should_fail_ex+0x263/0x280 [ 568.735921][T17557] should_fail+0xb/0x20 [ 568.735952][T17557] should_fail_usercopy+0x1a/0x20 [ 568.735966][T17557] _copy_from_user+0x1c/0xb0 [ 568.735983][T17557] ___sys_sendmsg+0xc1/0x1e0 [ 568.736072][T17557] __x64_sys_sendmsg+0xd4/0x160 [ 568.736090][T17557] x64_sys_call+0x194c/0x3020 [ 568.736169][T17557] do_syscall_64+0x12c/0x370 [ 568.736181][T17557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.736193][T17557] RIP: 0033:0x7fd44487c799 [ 568.736203][T17557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.736244][T17557] RSP: 002b:00007fd4432d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.736256][T17557] RAX: ffffffffffffffda RBX: 00007fd444af5fa0 RCX: 00007fd44487c799 [ 568.736277][T17557] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 568.736284][T17557] RBP: 00007fd4432d7090 R08: 0000000000000000 R09: 0000000000000000 [ 568.736291][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.736299][T17557] R13: 00007fd444af6038 R14: 00007fd444af5fa0 R15: 00007ffcb992e578 [ 568.736309][T17557] [ 569.062909][T17576] loop8: detected capacity change from 0 to 256 [ 569.114410][T17576] msdos: Bad value for 'gid' [ 569.133374][T17576] msdos: Bad value for 'gid' [ 569.150396][T17478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.229044][T17478] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.292386][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.299514][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.403022][ T1729] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.410167][ T1729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.429747][T17578] loop8: detected capacity change from 0 to 512 [ 569.461802][T17478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 569.477121][T17478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.545527][T17581] tipc: Started in network mode [ 569.550705][T17581] tipc: Node identity 460b94a4b407, cluster identity 4711 [ 569.559193][T17581] tipc: Enabled bearer , priority 0 [ 569.630537][T17587] syzkaller0: entered promiscuous mode [ 569.646653][T17587] syzkaller0: entered allmulticast mode [ 569.653655][T17587] tipc: Resetting bearer [ 569.722656][T17590] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 569.752439][T17578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.769553][T17578] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.056316][T17579] tipc: Resetting bearer [ 570.102201][T17579] tipc: Disabling bearer [ 570.126568][T17478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.206766][T17606] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4015'. [ 570.225147][T17606] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4015'. [ 570.235620][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.251422][T17610] loop0: detected capacity change from 0 to 1024 [ 570.260201][T17610] EXT4-fs: inline encryption not supported [ 570.314184][T17610] EXT4-fs: Ignoring removed nobh option [ 570.348419][T17610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 570.366664][T17610] System zones: 0-1, 3-12 [ 570.383789][T17610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.396372][T17478] veth0_vlan: entered promiscuous mode [ 570.404843][T17478] veth1_vlan: entered promiscuous mode [ 570.419085][T17478] veth0_macvtap: entered promiscuous mode [ 570.427892][T17478] veth1_macvtap: entered promiscuous mode [ 570.439526][T17478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.449107][T17478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.479421][T17625] xt_hashlimit: size too large, truncated to 1048576 [ 570.534015][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.542802][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.554119][T17628] loop1: detected capacity change from 0 to 136 [ 570.594386][T17628] Attempt to read inode for relocated directory [ 571.000194][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.013137][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.102209][T17635] tipc: Started in network mode [ 571.116089][T17637] loop9: detected capacity change from 0 to 1024 [ 571.119590][T17635] tipc: Node identity f666edcbb042, cluster identity 4711 [ 571.129919][T17635] tipc: Enabled bearer , priority 0 [ 571.136945][T17637] EXT4-fs: inline encryption not supported [ 571.151773][T17637] EXT4-fs: Ignoring removed nobh option [ 571.185451][T17637] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 571.236488][T17637] System zones: 0-1, 3-12 [ 571.265532][T17637] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.356695][T17645] loop8: detected capacity change from 0 to 1024 [ 571.365075][T17635] syzkaller0: entered promiscuous mode [ 571.399981][T17635] syzkaller0: entered allmulticast mode [ 571.415806][T17645] EXT4-fs: Ignoring removed orlov option [ 571.421642][T17645] EXT4-fs: Ignoring removed nobh option [ 571.428619][T17635] tipc: Resetting bearer [ 571.458626][T17645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.511974][T17634] tipc: Resetting bearer [ 571.554252][T17634] tipc: Disabling bearer [ 571.704819][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.725359][T17654] tipc: New replicast peer: 10.1.1.2 [ 571.730812][T17654] tipc: Enabled bearer , priority 10 [ 571.738269][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.793876][T17660] netlink: 'syz.0.4027': attribute type 1 has an invalid length. [ 571.809357][T17660] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.819679][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4027'. [ 571.828809][T17660] bond5: entered allmulticast mode [ 571.835807][T17656] loop6: detected capacity change from 0 to 136 [ 571.867371][T17660] bond4: (slave dummy0): Releasing backup interface [ 571.878689][T17660] dummy0: left allmulticast mode [ 571.895854][T17660] dummy0: entered allmulticast mode [ 571.903735][T17660] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 572.066422][T17656] Attempt to read inode for relocated directory [ 572.186034][T17664] loop8: detected capacity change from 0 to 512 [ 572.260620][T17664] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.348958][T17664] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.518250][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.857028][T16294] tipc: Node number set to 151513513 [ 573.071882][T17048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.107823][T17703] loop9: detected capacity change from 0 to 512 [ 573.121041][T17700] loop8: detected capacity change from 0 to 512 [ 573.148692][T17700] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 573.163838][T17700] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 573.174218][T17703] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 573.186862][T17708] netlink: 'syz.0.4040': attribute type 1 has an invalid length. [ 573.195075][T17703] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 573.209067][T17700] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4049: Corrupt directory, running e2fsck is recommended [ 573.210886][T17708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.224003][T17703] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4039: Corrupt directory, running e2fsck is recommended [ 573.234378][T17700] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 573.257250][T17700] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.4049: corrupted in-inode xattr: invalid ea_ino [ 573.271856][T17708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4040'. [ 573.280939][T17700] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.281409][T17700] EXT4-fs (loop8): Remounting filesystem read-only [ 573.282666][T17703] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 573.290591][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 573.290624][ C1] EXT4-fs (loop8): initial error at time 1772729209: ext4_iget_extra_inode:5025: inode 15 [ 573.290656][ C1] EXT4-fs (loop8): last error at time 1772729209: ext4_iget_extra_inode:5025 [ 573.300876][T17708] bond6: entered allmulticast mode [ 573.305308][ C1] : inode 15 [ 573.305840][T17700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.325371][T17703] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.4039: corrupted in-inode xattr: invalid ea_ino [ 573.374129][T17708] bond5: (slave dummy0): Releasing backup interface [ 573.381294][T17703] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.382507][T17708] dummy0: left allmulticast mode [ 573.398332][T17703] EXT4-fs (loop9): Remounting filesystem read-only [ 573.404887][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 573.404908][ C0] EXT4-fs (loop9): initial error at time 1772729209: ext4_iget_extra_inode:5025: inode 15 [ 573.404938][ C0] EXT4-fs (loop9): last error at time 1772729209: ext4_iget_extra_inode:5025: inode 15 [ 573.410061][T17708] dummy0: entered allmulticast mode [ 573.415077][T17703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.422414][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.458641][T17708] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 573.508383][T17048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.521411][T17723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4045'. [ 573.554337][T17723] loop1: detected capacity change from 0 to 512 [ 573.591100][T17723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.614186][T17723] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.640988][T17722] loop8: detected capacity change from 0 to 512 [ 573.680129][T17727] FAULT_INJECTION: forcing a failure. [ 573.680129][T17727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.681531][T17723] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4045: bg 0: block 456: padding at end of block bitmap is not set [ 573.693989][T17727] CPU: 1 UID: 0 PID: 17727 Comm: syz.0.4047 Tainted: G W syzkaller #0 PREEMPT(full) [ 573.694073][T17727] Tainted: [W]=WARN [ 573.694079][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 573.694127][T17727] Call Trace: [ 573.694135][T17727] [ 573.694178][T17727] __dump_stack+0x1d/0x30 [ 573.694202][T17727] dump_stack_lvl+0x95/0xd0 [ 573.694241][T17727] dump_stack+0x15/0x1b [ 573.694323][T17727] should_fail_ex+0x263/0x280 [ 573.694346][T17727] should_fail+0xb/0x20 [ 573.694440][T17727] should_fail_usercopy+0x1a/0x20 [ 573.694521][T17727] _copy_from_user+0x1c/0xb0 [ 573.694546][T17727] vcs_write+0x353/0xbb0 [ 573.694566][T17727] ? selinux_file_permission+0x1f2/0x690 [ 573.694591][T17727] ? __pfx_vcs_write+0x10/0x10 [ 573.694690][T17727] vfs_write+0x269/0x9f0 [ 573.694759][T17727] ? __rcu_read_unlock+0x4e/0x70 [ 573.694780][T17727] ? __fget_files+0x184/0x1c0 [ 573.694805][T17727] ksys_write+0xdc/0x1a0 [ 573.694823][T17727] __x64_sys_write+0x40/0x50 [ 573.694839][T17727] x64_sys_call+0x27e1/0x3020 [ 573.694861][T17727] do_syscall_64+0x12c/0x370 [ 573.694879][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.694899][T17727] RIP: 0033:0x7fde278fc799 [ 573.694932][T17727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.694949][T17727] RSP: 002b:00007fde26357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 573.694968][T17727] RAX: ffffffffffffffda RBX: 00007fde27b75fa0 RCX: 00007fde278fc799 [ 573.695045][T17727] RDX: 0000000000001006 RSI: 0000200000000d00 RDI: 0000000000000003 [ 573.695058][T17727] RBP: 00007fde26357090 R08: 0000000000000000 R09: 0000000000000000 [ 573.695071][T17727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.695083][T17727] R13: 00007fde27b76038 R14: 00007fde27b75fa0 R15: 00007fff9ff4a508 [ 573.695102][T17727] [ 573.773763][T17733] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4045: bg 0: block 456: padding at end of block bitmap is not set [ 573.815760][T17722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.880983][ T28] audit: type=1326 audit(1772729210.026:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.1.4045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd44487c799 code=0x0 [ 574.076511][T17722] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.120169][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.269521][T17742] xt_hashlimit: size too large, truncated to 1048576 [ 574.377850][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.628426][T17746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4054'. [ 574.653117][T17746] ip6tnl1: entered allmulticast mode [ 574.870560][T17754] loop8: detected capacity change from 0 to 1024 [ 574.878825][T17754] EXT4-fs: inline encryption not supported [ 574.905727][T17749] loop6: detected capacity change from 0 to 4096 [ 574.926530][T17754] EXT4-fs: Ignoring removed nobh option [ 574.985274][T17749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.003602][T17754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 575.013717][T17756] loop1: detected capacity change from 0 to 512 [ 575.020900][T17754] System zones: 0-1, 3-12 [ 575.040593][T17749] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4055: corrupted inode contents [ 575.057621][T17754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.085830][T17749] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 575.085950][T17749] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.4055: mark_inode_dirty error [ 575.123400][T17756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.150786][T17766] EXT4-fs (loop6): shut down requested (1) [ 575.161644][T17756] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.175302][T17749] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 575.197306][T17478] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.446359][ T4004] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 575.466096][ T4004] Quota error (device loop6): write_blk: dquota write failed [ 575.519408][T17773] tipc: Enabling of bearer rejected, failed to enable media [ 575.564307][ T4004] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 575.714797][T17778] loop9: detected capacity change from 0 to 512 [ 575.825981][T17778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.855200][T17778] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.945378][T17048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.041026][T13425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.102566][T17793] EXT4-fs: Ignoring removed bh option [ 576.108966][T17794] tipc: Enabled bearer , priority 0 [ 576.164951][T17793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.187750][T17794] syzkaller0: entered promiscuous mode [ 576.203966][T17794] syzkaller0: entered allmulticast mode [ 576.214659][T17794] tipc: Resetting bearer [ 576.242475][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.264825][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.289737][T17791] tipc: Resetting bearer [ 576.313891][T17791] tipc: Disabling bearer [ 577.059488][T17827] set_capacity_and_notify: 1 callbacks suppressed [ 577.059521][T17827] loop8: detected capacity change from 0 to 136 [ 577.149971][T17831] xt_hashlimit: size too large, truncated to 1048576 [ 577.395630][T17827] Attempt to read inode for relocated directory [ 577.403462][T17835] loop9: detected capacity change from 0 to 136 [ 577.480766][T17835] Attempt to read inode for relocated directory [ 577.920939][T17048] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 577.932017][T17048] CPU: 0 UID: 0 PID: 17048 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 577.932074][T17048] Tainted: [W]=WARN [ 577.932080][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.932093][T17048] Call Trace: [ 577.932101][T17048] [ 577.932109][T17048] __dump_stack+0x1d/0x30 [ 577.932142][T17048] dump_stack_lvl+0x95/0xd0 [ 577.932188][T17048] dump_stack+0x15/0x1b [ 577.932209][T17048] dump_header+0x80/0x240 [ 577.932302][T17048] oom_kill_process+0x295/0x350 [ 577.932326][T17048] out_of_memory+0x97d/0xb80 [ 577.932349][T17048] try_charge_memcg+0x62e/0xa10 [ 577.932480][T17048] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 577.932636][T17048] __swap_cache_prepare_and_add+0x386/0x530 [ 577.932670][T17048] swap_cache_alloc_folio+0xa2/0x120 [ 577.932774][T17048] swap_cluster_readahead+0x36b/0x3d0 [ 577.932807][T17048] swapin_readahead+0xde/0x840 [ 577.932833][T17048] ? __rcu_read_unlock+0x4e/0x70 [ 577.932854][T17048] ? __perf_event_task_sched_in+0xa65/0xad0 [ 577.932937][T17048] ? __list_add_valid_or_report+0x38/0xe0 [ 577.932967][T17048] ? xfd_validate_state+0x45/0xf0 [ 577.933018][T17048] ? __rcu_read_unlock+0x4e/0x70 [ 577.933039][T17048] ? swap_cache_get_folio+0x26f/0x280 [ 577.933066][T17048] do_swap_page+0x309/0x2210 [ 577.933168][T17048] ? __schedule+0x93c/0xd40 [ 577.933193][T17048] ? __rcu_read_lock+0x36/0x50 [ 577.933209][T17048] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 577.933338][T17048] handle_mm_fault+0xb40/0x3020 [ 577.933367][T17048] ? vma_start_read+0x1c7/0x2c0 [ 577.933395][T17048] do_user_addr_fault+0x62f/0x1050 [ 577.933426][T17048] ? trace_page_fault_user+0x1f/0xe0 [ 577.933614][T17048] exc_page_fault+0x62/0xa0 [ 577.933641][T17048] asm_exc_page_fault+0x26/0x30 [ 577.933707][T17048] RIP: 0033:0x7fc86e6c7917 [ 577.933725][T17048] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 577.933743][T17048] RSP: 002b:00007ffdbc33fc00 EFLAGS: 00010202 [ 577.933761][T17048] RAX: 0000000000000000 RBX: 000055559101d500 RCX: 00007fc86e6c7917 [ 577.933775][T17048] RDX: 00007ffdbc33fc40 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.933816][T17048] RBP: 00007ffdbc33fcac R08: 0000000000000000 R09: 0000000000000000 [ 577.933830][T17048] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 577.933844][T17048] R13: 00000000000927c0 R14: 000000000008cffe R15: 00007ffdbc33fd00 [ 577.933864][T17048] [ 577.933873][T17048] memory: usage 307200kB, limit 307200kB, failcnt 521 [ 578.221258][T17048] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 578.326301][T17048] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 578.375833][T17048] Memory cgroup stats for /syz9: [ 578.376072][T17048] cache 4096 [ 578.428175][T17048] rss 0 [ 578.430957][T17048] shmem 0 [ 578.433883][T17048] mapped_file 0 [ 578.453943][T17048] dirty 0 [ 578.467348][T17048] writeback 0 [ 578.490853][T17048] workingset_refault_anon 83 [ 578.505259][T17048] workingset_refault_file 0 [ 578.522453][T17048] swap 270336 [ 578.545067][T17048] swapcached 638976 [ 578.548894][T17048] pgpgin 18646 [ 578.552339][T17048] pgpgout 18644 [ 578.556124][T17048] pgfault 24471 [ 578.559596][T17048] pgmajfault 34 [ 578.563104][T17048] inactive_anon 0 [ 578.567042][T17048] active_anon 4096 [ 578.570786][T17048] inactive_file 0 [ 578.574448][T17048] active_file 4096 [ 578.578155][T17048] unevictable 0 [ 578.581602][T17048] hierarchical_memory_limit 314572800 [ 578.587347][T17048] hierarchical_memsw_limit 9223372036854771712 [ 578.593484][T17048] total_cache 4096 [ 578.597351][T17048] total_rss 0 [ 578.600847][T17048] total_shmem 0 [ 578.604721][T17048] total_mapped_file 0 [ 578.608714][T17048] total_dirty 0 [ 578.612348][T17048] total_writeback 0 [ 578.616287][T17048] total_workingset_refault_anon 83 [ 578.630713][T17048] total_workingset_refault_file 0 [ 578.635871][T17048] total_swap 270336 [ 578.639662][T17048] total_swapcached 638976 [ 578.644922][T17048] total_pgpgin 18646 [ 578.648818][T17048] total_pgpgout 18644 [ 578.652782][T17048] total_pgfault 24471 [ 578.656972][T17048] total_pgmajfault 34 [ 578.657941][T17854] netlink: 'syz.0.4080': attribute type 1 has an invalid length. [ 578.660943][T17048] total_inactive_anon 0 [ 578.660953][T17048] total_active_anon 4096 [ 578.660961][T17048] total_inactive_file 0 [ 578.681397][T17048] total_active_file 4096 [ 578.685773][T17048] total_unevictable 0 [ 578.689759][T17048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4071,pid=17828,uid=0 [ 578.704570][T17048] Memory cgroup out of memory: Killed process 17828 (syz.9.4071) total-vm:98528kB, anon-rss:1232kB, file-rss:26508kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 578.723735][T17855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4080'. [ 578.738638][T17858] loop8: detected capacity change from 0 to 1024 [ 578.778206][T17858] EXT4-fs: inline encryption not supported [ 578.789536][T17854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 578.803879][T17858] EXT4-fs: Ignoring removed nobh option [ 578.859025][T17855] bond7: entered allmulticast mode [ 578.874841][T17858] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 578.883067][T17858] System zones: 0-1, 3-12 [ 578.889870][T17858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.024429][T17860] bond6: (slave dummy0): Releasing backup interface [ 579.032723][T17860] dummy0: left allmulticast mode [ 579.039939][T17860] dummy0: entered allmulticast mode [ 579.046044][T17860] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 579.187977][T17874] loop0: detected capacity change from 0 to 2048 [ 579.196693][T17874] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 579.549317][T13616] ================================================================== [ 579.557408][T13616] BUG: KCSAN: data-race in __d_drop / fast_dput [ 579.563638][T13616] [ 579.565940][T13616] write to 0xffff88811b3d3790 of 8 bytes by task 2999 on cpu 1: [ 579.573551][T13616] __d_drop+0x14d/0x240 [ 579.577690][T13616] __dentry_kill+0x122/0x460 [ 579.582258][T13616] finish_dput+0x2b/0x200 [ 579.586573][T13616] dput+0x52/0x60 [ 579.590190][T13616] step_into_slowpath+0x38c/0x4c0 [ 579.595202][T13616] path_lookupat+0x330/0x500 [ 579.599799][T13616] filename_lookup+0x32a/0x390 [ 579.604549][T13616] do_readlinkat+0x74/0x2f0 [ 579.609042][T13616] __x64_sys_readlink+0x47/0x60 [ 579.613875][T13616] x64_sys_call+0x2b51/0x3020 [ 579.618540][T13616] do_syscall_64+0x12c/0x370 [ 579.623110][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.628984][T13616] [ 579.631286][T13616] read to 0xffff88811b3d3790 of 8 bytes by task 13616 on cpu 0: [ 579.638895][T13616] fast_dput+0x5f/0x2c0 [ 579.643041][T13616] dput+0x24/0x60 [ 579.646658][T13616] filename_unlinkat+0x217/0x410 [ 579.651578][T13616] __se_sys_unlink+0x2b/0xe0 [ 579.656152][T13616] __x64_sys_unlink+0x1f/0x30 [ 579.660815][T13616] x64_sys_call+0x2eb6/0x3020 [ 579.665476][T13616] do_syscall_64+0x12c/0x370 [ 579.670048][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.675921][T13616] [ 579.678223][T13616] value changed: 0xffff888237ab0678 -> 0x0000000000000000 [ 579.685304][T13616] [ 579.687606][T13616] Reported by Kernel Concurrency Sanitizer on: [ 579.693739][T13616] CPU: 0 UID: 0 PID: 13616 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 579.704226][T13616] Tainted: [W]=WARN [ 579.708007][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 579.718053][T13616] ================================================================== [ 579.766342][T16331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.