last executing test programs: 15.126315058s ago: executing program 2 (id=1312): r0 = syz_io_uring_setup(0x3743, 0x0, &(0x7f0000001040), &(0x7f0000001080)) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16=r0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in=@empty, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 12.205407382s ago: executing program 2 (id=1323): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x61c4, 0x2, 0x800003, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000300)={0x0, 0xa371, 0x0, 0x0, 0x204c}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0x182, 0x0, r1}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0, 0x40}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x51, &(0x7f00000002c0)=0x2) getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 11.900811616s ago: executing program 4 (id=1326): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) r4 = socket(0x40000000019, 0x5, 0x20000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x44041) bind$inet(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507000000921895961923d4d5abedad26b374608d40c2f437252e487bae9bfa77d492c5b14874c73f022af8a768d0a33e6701e7a4fc3425dc8a418c62acf98e46da537a2164f8f4b56addaa4b7cd3de4ca9e8fbe7a23ac075bf0e2d07318adbff59bcd72d3adeb431401dd11d9378befc8a149bbc59a15d6717fe499f8e7b5b", @ANYBLOB="000000000a00020014001680100001800c00050000"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 11.772391092s ago: executing program 4 (id=1327): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffd, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11.622467134s ago: executing program 2 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4580, 0x3, 0x800000, 0x6, 0x63d, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x1, 0x0, 0x17, 0x0, 0x0, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @in6=@mcast1, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf68}}]}, 0xb8}}, 0x20000000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1210852, &(0x7f0000000140)=ANY=[], 0x5, 0x23b, &(0x7f0000000580)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r4 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r4, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r4, r4, 0x0, 0x800000009) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000180)) 9.509379257s ago: executing program 4 (id=1331): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(0x0, 0x0, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) remap_file_pages(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0x4, 0x3e0400000000, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 9.508518007s ago: executing program 2 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4580, 0x3, 0x800000, 0x6, 0x63d, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x1, 0x0, 0x17, 0x0, 0x0, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @in6=@mcast1, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf68}}]}, 0xb8}}, 0x20000000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1210852, &(0x7f0000000140)=ANY=[], 0x5, 0x23b, &(0x7f0000000580)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r3 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r3, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r3, r3, 0x0, 0x800000009) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000180)) 7.587154154s ago: executing program 4 (id=1338): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x2, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000500)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) tkill(r4, 0x2f) ptrace(0x10, r4) tkill(r4, 0xe) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) kcmp(r3, r4, 0x5, r2, r6) 7.245238431s ago: executing program 3 (id=1340): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000b38900"/20], 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket(0xa, 0x5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 7.12951909s ago: executing program 4 (id=1342): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e1f0000f689818be4f1f88a2c189b3b91e2796b950e793ddb58718d1ba935ff8860587e9f07c3abe868950b2485e39445770416d49e4be834725635a428437572938e27bbec515893127920a80f"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 6.137234497s ago: executing program 0 (id=1344): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x4000000) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x1, 0x0, 0xfe17) set_mempolicy(0x6005, 0x0, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x0, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r9, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x9}, 0x100e64, 0xc77}, 0x0, 0xffffffffffffffff, r9, 0x0) open_by_handle_at(r8, &(0x7f0000000080)=ANY=[@ANYRES8=r8], 0x755c00) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 4.298202619s ago: executing program 3 (id=1345): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000440)={0x0, 0x237b, 0x80, 0x0, 0x148}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x8040}) io_uring_enter(r1, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.129363665s ago: executing program 3 (id=1348): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 2.640801245s ago: executing program 4 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4580, 0x3, 0x800000, 0x6, 0x63d, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$key(0xf, 0x3, 0x2) r2 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r2, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r2, r2, 0x0, 0x800000009) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000180)) 2.427671786s ago: executing program 0 (id=1350): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000440)={0x0, 0x237b, 0x80, 0x0, 0x148}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x8040}) io_uring_enter(r1, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_usb_connect(0x6, 0x174, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000303c8ae608904b5e0ca520102030109026201010509000209043d0401eed99f0009050210ff03080600ff2315e6e8e59dfbef025088249abc78ccb5b16a563ff4b292855a1ac303b4ff9f4eccb713ac8aea648f56e0ea590b1b265482e42f9c35f13606c114662b49bf425821a922a4d84407a4316e81314cc7a2f7cb63509b5e3e7ad04777ba5f53aa42384dfd6705bbfc12750ee833ebab2bfe9594c2f373be57d0339b2b281b1f89f71f0544258249de63d3452a0b32671e95ff4618bfa62a84adc976f1e4402c01309af38e3e6d39628b8fdb57dfd8abf825f4d0a485fdb95a7639757edb32711b987bbf43adab360a8b33e07e6c24d92bb2e519a6b58416454b93ae2c0700000040b9fb22bace9de326123390640e664a3f2e0c92a06182a014da34b2222414482112f752c694827b1723c9838d08dcf7713304a9239b7013257905e401c06e707cb7fb68419b774456dd412d6a2391ed16ad0970d158af2fd7130a3857c1f529979708b0d4bbe8"], &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x59, 0x9, 0xa, 0x10, 0x8}, 0xf, &(0x7f0000000f80)=ANY=[@ANYBLOB="000f0fdf0203b2d7e77c698427eb000e5f9093c845b8a3850fa96bbd4680920f7a5a9523e562f35c1cf6ae2de855dee2c2238753125440d2396acf2e71314e01f2d11cbbe15c1d0f63771f1a2403e7d1ad4124e35689d854d0c27d24be4f4306c72a87c0e0adbaa181583034de061a41e6c4e8fdeb721d9eb9d5e351572ba58061c783cb81e93cde3072f085d0b0b9578a6f1bb27105163354096c5851830ec6c64f27844e857a7bb56ddb0a4bacde4d1aadc73f7db5cd0b10c5bf6566ce5b1d31b2e4"]}) r4 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = epoll_create1(0x80000) fallocate(r6, 0x1d, 0x3b20ce63, 0x1397) sendto(r4, &(0x7f0000000580)="71378e93bf518c4ec81e57e3f9417fcf0c7b10820d5430da2e3445e62b6c41f3a2c4005c616801e55c20c5f7d36ca1bc37576ce54f5437718037485a3c6fc20bb579d815c13f23f8ba6fb37f8d19689ad0a06baf7a68ea7b2e820bd7defa7046eb91b36c8c91b7aff26c4a0103544b0da7656b345f25acacd697550a7851e8ab2beebe365ebb66d819b27640849eb51b0745bf9a9f504955028df3030c1145b16588771dbb29f346dfeb99adc4d5c284dbc6c858c87e630061f719af63", 0xbd, 0x94, &(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x1}}, 0x80) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{0x0}], 0x1}, 0x40054) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x48}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)={{0x12, 0x1, 0x201, 0xe1, 0xb6, 0xad, 0x20, 0x471, 0x7600, 0xfa30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x38, 0x90, 0x40}}]}}, 0x0) 2.374911396s ago: executing program 1 (id=1351): socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0xb6202, 0x0) r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x40040c4) getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xb05, 0x2, 0x1, 0x400, 0x1, 0x8fed, '\x00', 0x0, r0, 0x4, 0x3, 0x4, 0x1}, 0x50) 2.110821788s ago: executing program 3 (id=1352): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 2.086847413s ago: executing program 1 (id=1353): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) r0 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x2e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)}], 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syslog(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, 0x0) open(0x0, 0x148640, 0x78e22799f4a46f8e) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180)=0xfffffff9, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8010002b) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x640100fd}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000140)=0x1) 1.977317723s ago: executing program 1 (id=1354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xe, 0x28, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001, {[@generic={0x44, 0x11}]}}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672974593497c186a80e00", "0000b226", "000200000040e000"}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x400) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240), &(0x7f0000000200)) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') truncate(&(0x7f0000000180)='./cgroup\x00', 0x6) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r5}, 0x10) io_uring_enter(r4, 0x6e2, 0x620, 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000012e9ffffffffffffff00950000005b20fe77"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) 1.813414013s ago: executing program 0 (id=1355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x7f, 0x0, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) recvmmsg(r6, &(0x7f0000001e40), 0x0, 0x40010021, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}, 0xa45}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 1.08827851s ago: executing program 1 (id=1356): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)='\x00', 0x1}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x2400c0c4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x52, 0x0, 0x13, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1, 0x4}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r7, &(0x7f0000000180)=[{0x0}], 0x1, 0x800, 0x4000000) timer_create(0xb, &(0x7f0000000ac0)={0x0, 0x25, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000b00)=0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r9, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) timer_settime(r8, 0x0, &(0x7f0000000b80)={{}, {0x77359400}}, &(0x7f0000000bc0)) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r10}, 0x60) 660.204912ms ago: executing program 0 (id=1357): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}], 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000340012800b0001006970766c616e000024000280060001000100000006000100010000000600020003000000060002000200000008000500", @ANYRES32=r3], 0x70}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x1b061}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x1, 0x103, 0x9}, 0x20) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)="f3fffeffffffa000", &(0x7f0000000140), 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 425.287668ms ago: executing program 3 (id=1358): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0)={[{@noauto_da_alloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nojournal_checksum}, {@acl}, {@nobarrier}]}, 0x43, 0x4e8, &(0x7f0000000c40)="$eJzs3E9sFNUfAPDvbFva8udHf4goiFpEYyOxhYLCwcRgNPGgiRET9di0hSCFGloSIahLYvBoSLwbj149eFUvxHgy8YpHE0NCDBfAxDhmdme62+1uS8u2C/bzSbb73pudee/tmzf75r3uBrBuDWZ/kmr4WkRsjYhS4wsGq0+3b14cv3Pz4niU0/TYn0llt1tZPJcfJjblkaFSROmzpLahzsz5C6fGpqYmz+bxkdnTH47MnL/w/Mm+POXIkUMHDxx+cfSF5VeqSX5ZvW7t+mR6987X37/y5nh3kV7kVl+PdhmMwWZFqXim3Zl12Ja6cNLdwYKwLNn5nzVXT6X/b42uWKzxymtYMmC1pWma9rbeXE4bXVqQAjywkuh0CYDOKD7os/vf4tFsILBhdYYfHXfjaPUGKKv37fwR8WQlsZgH6Wm4v22nwYh4r/zXV9kjVmkeAgCg3g9Hi5Fgw/hvoLoy8ve5qy9nz//L11AGIuL/EbEtIh6KiO0R8XBE7IiIRyLi0Ybjd0VEukj+jbPNc/nPLUKVrrepqk1l47+X8rWt2vhvXgEGuvLYlohiwDy5P39PhqKn9/jJqckDi+Tx46u/ftFqW/34L3tk+Rdjwbwc17sbJugmxmbHVlzhBjcuRezqbqx/0h2RzLVNEhE7I2LXMo47UBc++dw3u+ciPfNft3T9K9Km62htWGdKv454ttr+5ZjX/rUck3nrk6fHTkyemDwzOrc+OdIXU5P7R7KzYH/TPH7+5fJbrfJfsv7f/d64y2uHvz+W96x7l7X/xrrzP4r121r9B5KIZG69dmb5eVz+7fOW9zQrPf83JO9UwsV96Udjs7NnD0RsSN5YmD5a27eIZ89RrtZ/aG/z/r8t3yd7Jx6LiOwkfjwinojqHWJW9j0R8VRE7F2k/j+98vQHK6//6srqP9Fw/au2/Lz2r63Xtwok+dpgNaW/flPXqT3X7rS4eNxd+x+qhIbylIXXv6yEybxLRKuSFp92Wco/bXkHAQAA4P5XiojNdXNJm6NUGh6uzgFtj42lqemZ2X3Hp8+dmci2RQxET6mY6arOB/ckxfznQF18tCF+MJ83/rKrvxIfHp+emuhozYFNlT6flIYj3u2q6/+ZP9ozxQzcz3xfC9avxfp/NojfcWUNCwOsqbv//L/68aoWBFhzdf2/1Tf8yyv4vy/gAeD+H6hZ+od+XDPgwZfqy7CuLav/7/MjgPBf0h1vz4WrX3tO0/TTDhYIWDPG/7AuLfm9/nsKpL3NN/XFwhdH3+IH7IqVFaO/SV4dCWQjq47k3r+SvYpfU2j5migt74C90Z42PX6P70b57MyJHW0/+dP8f+Xb3YLfrkk/bRboyOUIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7f4NAAD//17h44U=") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x0) close(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x63}}, './file1\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x0, @loopback, 0x4e23, 0x4, 'fo\x00', 0x1, 0x10000, 0x31}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xc004) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x60, r7, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80000001, 0x71}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfc4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r3, 0x2}, &(0x7f0000000280)=0x8) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r11 = fspick(r10, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) 387.156541ms ago: executing program 1 (id=1359): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noauto_da_alloc}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000000440)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x1, 0x1}) gettid() timer_create(0x1, 0x0, &(0x7f0000000380)) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fallocate(r1, 0x10, 0x6, 0x3) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4}, &(0x7f0000000380)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) acct(&(0x7f0000000180)='./file1\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, 0x0) 381.995831ms ago: executing program 2 (id=1360): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x6167, &(0x7f0000000640)={0x0, 0x8b86, 0x10100, 0x1, 0x38f}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) creat(&(0x7f00000000c0)='./file1\x00', 0x80) syz_io_uring_setup(0x5bf, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='devices.list\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 292.057694ms ago: executing program 3 (id=1361): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3, 0x8000}], 0x1, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) fcntl$setown(r3, 0x8, r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) tkill(r1, 0x13) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x1) syz_emit_ethernet(0x173, &(0x7f0000000100)=ANY=[], 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x450000, 0x24) syz_emit_ethernet(0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) 286.761163ms ago: executing program 1 (id=1362): r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mbind(&(0x7f00008a5000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x8188ca, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,dots,noLots,nodots,nodots,dots,dots,\x00'], 0x5, 0x1204, &(0x7f0000004880)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, 0x0, 0x0) sendto$l2tp(r4, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0a"], 0x208}, 0x40000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 77.863795ms ago: executing program 0 (id=1363): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.461862ms ago: executing program 0 (id=1364): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 0s ago: executing program 2 (id=1365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@noblock_validity}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") openat(0xffffffffffffff9c, 0x0, 0x0, 0xd912dbfad8e30d4c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="010efc05000039e200000000004dcbfea17e168261fb0000000000"], 0xa) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): limit 307200kB, failcnt 813 [ 174.174307][ T3315] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 174.184749][ T5746] lo speed is unknown, defaulting to 1000 [ 174.204586][ T3315] kmem: usage 306904kB, limit 9007199254740988kB, failcnt 0 [ 174.207833][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.212192][ T3315] Memory cgroup stats for /syz2: [ 174.221446][ T3315] cache 0 [ 174.229463][ T3315] rss 8192 [ 174.232605][ T3315] shmem 0 [ 174.235575][ T3315] mapped_file 0 [ 174.239078][ T3315] dirty 0 [ 174.242042][ T3315] writeback 0 [ 174.245344][ T3315] workingset_refault_anon 156 [ 174.250252][ T3315] workingset_refault_file 400 [ 174.255009][ T3315] swap 188416 [ 174.340819][ T5753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 174.349010][ T3315] swapcached 970752 [ 174.353779][ T3315] pgpgin 187452 [ 174.357279][ T3315] pgpgout 187445 [ 174.360884][ T3315] pgfault 163334 [ 174.364425][ T3315] pgmajfault 70 [ 174.367917][ T3315] inactive_anon 0 [ 174.371615][ T3315] active_anon 12288 [ 174.375455][ T3315] inactive_file 0 [ 174.379080][ T3315] active_file 8192 [ 174.382866][ T3315] unevictable 0 [ 174.386435][ T3315] hierarchical_memory_limit 314572800 [ 174.391850][ T3315] hierarchical_memsw_limit 9223372036854771712 [ 174.398336][ T3315] total_cache 0 [ 174.401809][ T3315] total_rss 8192 [ 174.405442][ T3315] total_shmem 0 [ 174.408966][ T3315] total_mapped_file 0 [ 174.410935][ T5749] lo speed is unknown, defaulting to 1000 [ 174.413038][ T3315] total_dirty 0 [ 174.422541][ T3315] total_writeback 0 [ 174.426529][ T3315] total_workingset_refault_anon 156 [ 174.431799][ T3315] total_workingset_refault_file 400 [ 174.437337][ T3315] total_swap 188416 [ 174.441200][ T3315] total_swapcached 970752 [ 174.446441][ T3315] total_pgpgin 187452 [ 174.450704][ T3315] total_pgpgout 187445 [ 174.459750][ T3315] total_pgfault 163334 [ 174.468831][ T3315] total_pgmajfault 70 [ 174.477829][ T3315] total_inactive_anon 0 [ 174.486999][ T3315] total_active_anon 12288 [ 174.509671][ T3315] total_inactive_file 0 [ 174.519599][ T3315] total_active_file 8192 [ 174.529733][ T3315] total_unevictable 0 [ 174.540103][ T3315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.538,pid=5728,uid=0 [ 174.566137][ T3315] Memory cgroup out of memory: OOM victim 5728 (syz.2.538) is already exiting. Skip killing the task [ 176.450866][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 177.142805][ T5788] loop1: detected capacity change from 0 to 512 [ 177.171442][ T5788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.196183][ T5788] ext4 filesystem being mounted at /115/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.350821][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.614534][ T5799] loop1: detected capacity change from 0 to 8192 [ 178.642250][ T5799] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.665477][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.684471][ T5799] FAT-fs (loop1): Filesystem has been set read-only [ 178.708020][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.726944][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.756035][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.783445][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.803207][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.832435][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.851601][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.870533][ T5799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.884044][ T5800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 178.956113][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 179.475981][ T5803] loop1: detected capacity change from 0 to 512 [ 179.519166][ T5803] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.568323][ T5803] EXT4-fs (loop1): 1 truncate cleaned up [ 179.610103][ T5803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.505174][ T28] audit: type=1326 audit(1773044119.513:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.578872][ T28] audit: type=1326 audit(1773044119.513:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.636258][ T28] audit: type=1326 audit(1773044119.513:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.667591][ T28] audit: type=1326 audit(1773044119.513:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.700246][ T28] audit: type=1326 audit(1773044119.513:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.723567][ T28] audit: type=1326 audit(1773044119.513:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.760710][ T28] audit: type=1326 audit(1773044119.513:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.810327][ T28] audit: type=1326 audit(1773044119.513:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.850925][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.869951][ T28] audit: type=1326 audit(1773044119.513:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.913305][ T28] audit: type=1326 audit(1773044119.513:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 180.988461][ T5827] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.221283][ T5833] netlink: 80 bytes leftover after parsing attributes in process `syz.2.565'. [ 181.245959][ T5832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'. [ 181.341211][ T5835] tipc: Enabled bearer , priority 10 [ 181.356474][ T5835] loop0: detected capacity change from 0 to 2048 [ 181.367490][ T5831] Set syz1 is full, maxelem 65536 reached [ 181.413878][ T5835] loop0: p1 p2 p3 [ 181.460657][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 181.460774][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 181.472028][ T4879] udevd[4879]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 181.736878][ T5851] netlink: 64 bytes leftover after parsing attributes in process `syz.4.573'. [ 181.748509][ T5851] lo speed is unknown, defaulting to 1000 [ 181.758954][ T5851] lo speed is unknown, defaulting to 1000 [ 181.768277][ T5851] lo speed is unknown, defaulting to 1000 [ 181.778000][ T5851] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.789958][ T5851] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 181.808087][ T5851] lo speed is unknown, defaulting to 1000 [ 181.827409][ T5851] lo speed is unknown, defaulting to 1000 [ 181.863937][ T5851] lo speed is unknown, defaulting to 1000 [ 181.875249][ T5851] lo speed is unknown, defaulting to 1000 [ 181.881944][ T5851] lo speed is unknown, defaulting to 1000 [ 181.888975][ T5853] smc: removing ib device syU [ 181.929186][ T5856] netlink: 'syz.1.574': attribute type 10 has an invalid length. [ 181.979984][ T5856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.574'. [ 182.037627][ T5856] dummy0: entered promiscuous mode [ 182.043036][ T5856] dummy0: entered allmulticast mode [ 182.049210][ T5856] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 182.496925][ T23] tipc: Node number set to 2088946023 [ 182.613367][ T5869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.620717][ T5869] IPv6: NLM_F_CREATE should be set when creating new route [ 182.627991][ T5869] IPv6: NLM_F_CREATE should be set when creating new route [ 182.635253][ T5869] IPv6: NLM_F_CREATE should be set when creating new route [ 182.652655][ T5871] netlink: 80 bytes leftover after parsing attributes in process `syz.3.578'. [ 182.663986][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 182.783929][ T5873] tipc: Enabled bearer , priority 10 [ 182.871622][ T5873] loop2: detected capacity change from 0 to 2048 [ 182.898730][ T5875] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.927791][ T3300] loop2: p1 p2 p3 [ 182.935867][ T5873] loop2: p1 p2 p3 [ 182.948029][ T5875] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.997543][ T4879] udevd[4879]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 183.008863][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 183.020093][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 183.038217][ T5875] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.148607][ T5875] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.248972][ T3683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.297312][ T3683] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.305327][ T5884] syz.2.583 uses obsolete (PF_INET,SOCK_PACKET) [ 183.324989][ T82] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.382225][ T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.484966][ T5890] loop4: detected capacity change from 0 to 8192 [ 183.501765][ T5890] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.539064][ T5890] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 183.550700][ T5890] FAT-fs (loop4): Filesystem has been set read-only [ 183.558545][ T5890] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 183.568668][ T5890] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 183.781050][ T23] tipc: Node number set to 319493150 [ 184.108671][ T5899] netlink: 'syz.2.587': attribute type 10 has an invalid length. [ 184.795251][ T5911] lo speed is unknown, defaulting to 1000 [ 185.005785][ T5913] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 185.012366][ T5913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.059238][ T5913] vhci_hcd vhci_hcd.0: Device attached [ 185.131142][ T5914] vhci_hcd: connection closed [ 185.131741][ T82] vhci_hcd vhci_hcd.4: stop threads [ 185.253656][ T82] vhci_hcd vhci_hcd.4: release socket [ 185.259714][ T82] vhci_hcd vhci_hcd.4: disconnect device [ 185.917754][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 185.917772][ T28] audit: type=1400 audit(1773044124.948:559): avc: denied { read write } for pid=5916 comm="syz.4.591" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 185.957896][ T28] audit: type=1400 audit(1773044124.948:560): avc: denied { open } for pid=5916 comm="syz.4.591" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.006056][ T28] audit: type=1400 audit(1773044124.948:561): avc: denied { ioctl } for pid=5916 comm="syz.4.591" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.613645][ T5938] loop1: detected capacity change from 0 to 4096 [ 187.627761][ T5938] EXT4-fs: Ignoring removed bh option [ 187.658332][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.431999][ T5946] loop2: detected capacity change from 0 to 256 [ 188.673256][ T5952] loop4: detected capacity change from 0 to 128 [ 188.998485][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.227378][ T5957] netlink: 100 bytes leftover after parsing attributes in process `syz.1.613'. [ 189.409823][ T5957] tipc: New replicast peer: 10.1.1.2 [ 189.415292][ T5957] tipc: Enabled bearer , priority 10 [ 190.244998][ T5969] lo speed is unknown, defaulting to 1000 [ 190.453441][ T5972] SELinux: failed to load policy [ 190.487233][ T5972] loop2: detected capacity change from 0 to 512 [ 190.518979][ T5972] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.528971][ T3554] tipc: Node number set to 2607513320 [ 190.567360][ T5972] EXT4-fs (loop2): 1 truncate cleaned up [ 190.590593][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.649503][ T5972] program syz.2.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.710252][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.730329][ T5985] SET target dimension over the limit! [ 190.796113][ T5985] loop4: detected capacity change from 0 to 4096 [ 190.809432][ T5985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.829209][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.004428][ T5994] loop1: detected capacity change from 0 to 256 [ 191.038774][ T5994] FAT-fs (loop1): Directory bread(block 64) failed [ 191.045400][ T5994] FAT-fs (loop1): Directory bread(block 65) failed [ 191.053493][ T5994] FAT-fs (loop1): Directory bread(block 66) failed [ 191.060485][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.610'. [ 191.069427][ T5994] FAT-fs (loop1): Directory bread(block 67) failed [ 191.086195][ T5991] netlink: 260 bytes leftover after parsing attributes in process `syz.4.610'. [ 191.095291][ T5994] FAT-fs (loop1): Directory bread(block 68) failed [ 191.102016][ T5994] FAT-fs (loop1): Directory bread(block 69) failed [ 191.108798][ T5994] FAT-fs (loop1): Directory bread(block 70) failed [ 191.115382][ T5994] FAT-fs (loop1): Directory bread(block 71) failed [ 191.122185][ T5994] FAT-fs (loop1): Directory bread(block 72) failed [ 191.128968][ T5994] FAT-fs (loop1): Directory bread(block 73) failed [ 191.165289][ T28] audit: type=1400 audit(1773044130.239:562): avc: denied { ioctl } for pid=5992 comm="syz.1.614" path="socket:[13654]" dev="sockfs" ino=13654 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.214242][ T28] audit: type=1400 audit(1773044130.239:563): avc: denied { ioctl } for pid=5992 comm="syz.1.614" path="socket:[13653]" dev="sockfs" ino=13653 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 191.341237][ T5996] netlink: 100 bytes leftover after parsing attributes in process `syz.3.617'. [ 191.352710][ T5998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.414889][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.450003][ T6000] syzkaller0: entered promiscuous mode [ 191.465897][ T6000] syzkaller0: entered allmulticast mode [ 191.474822][ T5996] tipc: New replicast peer: 10.1.1.2 [ 191.481045][ T5996] tipc: Enabled bearer , priority 10 [ 191.585411][ T6012] 9p: Bad value for 'rfdno' [ 191.964142][ T6021] loop1: detected capacity change from 0 to 128 [ 192.605824][ T830] tipc: Node number set to 2498516500 [ 194.365924][ T6033] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 194.397156][ T28] audit: type=1400 audit(1773044133.467:564): avc: denied { relabelto } for pid=6030 comm="syz.0.624" name="100" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 194.424064][ T28] audit: type=1400 audit(1773044133.467:565): avc: denied { associate } for pid=6030 comm="syz.0.624" name="100" dev="tmpfs" ino=563 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 194.456063][ T28] audit: type=1400 audit(1773044133.487:566): avc: denied { remount } for pid=6030 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.585734][ T28] audit: type=1400 audit(1773044133.678:567): avc: denied { getopt } for pid=6034 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.778885][ T6039] tipc: Enabled bearer , priority 0 [ 194.799352][ T6039] syzkaller0: entered promiscuous mode [ 194.804904][ T6039] syzkaller0: entered allmulticast mode [ 194.805303][ T6046] capability: warning: `syz.0.631' uses deprecated v2 capabilities in a way that may be insecure [ 194.823230][ T6039] tipc: Resetting bearer [ 194.829968][ T6038] tipc: Resetting bearer [ 194.836502][ T6038] tipc: Disabling bearer [ 194.880275][ T6044] loop2: detected capacity change from 0 to 512 [ 194.892964][ T28] audit: type=1400 audit(1773044133.989:568): avc: denied { bind } for pid=6045 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.937519][ T6044] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 195.162238][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 196.655589][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 196.698460][ T6066] unsupported nlmsg_type 40 [ 197.682529][ T6091] loop2: detected capacity change from 0 to 256 [ 197.809900][ T6091] FAT-fs (loop2): Directory bread(block 64) failed [ 197.816679][ T6091] FAT-fs (loop2): Directory bread(block 65) failed [ 197.823310][ T6091] FAT-fs (loop2): Directory bread(block 66) failed [ 197.830130][ T6091] FAT-fs (loop2): Directory bread(block 67) failed [ 197.836708][ T6091] FAT-fs (loop2): Directory bread(block 68) failed [ 197.843248][ T6091] FAT-fs (loop2): Directory bread(block 69) failed [ 197.850092][ T6091] FAT-fs (loop2): Directory bread(block 70) failed [ 197.856642][ T6091] FAT-fs (loop2): Directory bread(block 71) failed [ 197.863255][ T6091] FAT-fs (loop2): Directory bread(block 72) failed [ 197.870243][ T6091] FAT-fs (loop2): Directory bread(block 73) failed [ 197.907358][ T6082] loop1: detected capacity change from 0 to 164 [ 197.956447][ T28] audit: type=1326 audit(1773044137.065:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 197.980510][ T28] audit: type=1326 audit(1773044137.065:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 198.390145][ T28] audit: type=1326 audit(1773044137.065:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 198.414245][ T28] audit: type=1326 audit(1773044137.065:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 198.437922][ T28] audit: type=1326 audit(1773044137.065:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 199.108179][ T6099] loop4: detected capacity change from 0 to 256 [ 199.414077][ T28] audit: type=1326 audit(1773044137.065:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 199.437508][ T28] audit: type=1326 audit(1773044137.065:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 199.460811][ T28] audit: type=1326 audit(1773044137.065:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 199.870880][ T6099] FAT-fs (loop4): Directory bread(block 64) failed [ 199.877519][ T6099] FAT-fs (loop4): Directory bread(block 65) failed [ 199.884381][ T6099] FAT-fs (loop4): Directory bread(block 66) failed [ 199.890972][ T6099] FAT-fs (loop4): Directory bread(block 67) failed [ 199.897495][ T6099] FAT-fs (loop4): Directory bread(block 68) failed [ 199.904231][ T6099] FAT-fs (loop4): Directory bread(block 69) failed [ 199.910976][ T6099] FAT-fs (loop4): Directory bread(block 70) failed [ 199.917487][ T6099] FAT-fs (loop4): Directory bread(block 71) failed [ 199.924291][ T6099] FAT-fs (loop4): Directory bread(block 72) failed [ 199.930986][ T6099] FAT-fs (loop4): Directory bread(block 73) failed [ 200.434657][ T28] audit: type=1326 audit(1773044137.065:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 200.440969][ T6107] lo speed is unknown, defaulting to 1000 [ 200.458223][ T28] audit: type=1326 audit(1773044137.065:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 200.817314][ T6113] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.035880][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 203.035896][ T28] audit: type=1400 audit(1773044142.150:639): avc: denied { mount } for pid=6136 comm="syz.3.655" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 203.794058][ T6146] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 203.822142][ T6146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'. [ 203.861551][ T6146] dummy0: entered promiscuous mode [ 203.873808][ T6146] dummy0: entered allmulticast mode [ 203.889505][ T6146] bond0: (slave dummy0): Releasing backup interface [ 203.916929][ T6146] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 204.052992][ T6150] loop2: detected capacity change from 0 to 256 [ 204.111802][ T6154] loop4: detected capacity change from 0 to 4096 [ 204.150953][ T6154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.229880][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.279172][ T6160] batadv_slave_0: entered promiscuous mode [ 204.738836][ T6175] bond0: (slave bond_slave_0): Releasing backup interface [ 204.755964][ T6175] bond0: (slave bond_slave_1): Releasing backup interface [ 204.774820][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.785282][ T6175] team0: Port device team_slave_0 removed [ 204.798906][ T6175] team0: Port device team_slave_1 removed [ 204.804781][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.813243][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.840967][ T6175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.874337][ T6179] loop4: detected capacity change from 0 to 128 [ 204.882096][ T6176] team0: Mode changed to "loadbalance" [ 205.765073][ T6192] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 205.772929][ T6192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'. [ 205.784788][ T6192] dummy0: entered promiscuous mode [ 205.789982][ T6192] dummy0: entered allmulticast mode [ 206.719216][ T6199] slcan: can't register candev [ 206.838992][ T6192] bond0: (slave dummy0): Releasing backup interface [ 207.336338][ T6192] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 207.372831][ T6197] tipc: Enabling of bearer rejected, failed to enable media [ 207.590043][ T6220] netlink: 'syz.2.676': attribute type 12 has an invalid length. [ 207.610707][ T6223] loop4: detected capacity change from 0 to 512 [ 207.639196][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.675110][ T6223] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.903714][ T6228] loop2: detected capacity change from 0 to 4096 [ 208.125716][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.512566][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.579481][ T6236] SET target dimension over the limit! [ 210.765953][ T28] audit: type=1400 audit(1773044149.934:640): avc: denied { unmount } for pid=6254 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 210.909918][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.337389][ T6266] lo speed is unknown, defaulting to 1000 [ 212.607949][ T6269] loop4: detected capacity change from 0 to 512 [ 212.625405][ T6269] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.646239][ T6269] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.690: bad orphan inode 131083 [ 212.656825][ T6269] loop4: lost filesystem error report for type 5 error -117 [ 212.657486][ T6269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.766883][ T6271] lo speed is unknown, defaulting to 1000 [ 212.800813][ T28] audit: type=1400 audit(1773044151.972:641): avc: denied { create } for pid=6265 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.838802][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.897968][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.898759][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.959258][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.688'. [ 213.024787][ T6290] program syz.4.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.077941][ T6293] netlink: 52 bytes leftover after parsing attributes in process `syz.4.695'. [ 213.103830][ T6293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.695'. [ 213.132659][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 213.184562][ T6298] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.208538][ T6298] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 213.256295][ T6298] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 213.278740][ T6298] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 213.300150][ T6301] bond4: (slave bridge1): Enslaving as an active interface with a down link [ 213.320307][ T28] audit: type=1400 audit(1773044152.494:642): avc: denied { create } for pid=6297 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 213.332126][ T6301] bond4: (slave gretap1): making interface the new active one [ 213.361379][ T28] audit: type=1400 audit(1773044152.494:643): avc: denied { write } for pid=6297 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 213.378374][ T6301] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 213.413802][ T6298] macvlan2: entered promiscuous mode [ 213.422151][ T6298] macvlan2: entered allmulticast mode [ 213.435909][ T6298] bond4: entered promiscuous mode [ 213.447134][ T6298] gretap1: entered promiscuous mode [ 213.471903][ T6298] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.562050][ T6298] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 213.589325][ T6298] bond4: left promiscuous mode [ 213.594213][ T6298] gretap1: left promiscuous mode [ 214.129664][ T6308] SET target dimension over the limit! [ 214.293365][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.699'. [ 214.348263][ T6317] netlink: 260 bytes leftover after parsing attributes in process `syz.3.699'. [ 214.383026][ T6320] loop4: detected capacity change from 0 to 512 [ 214.568486][ T28] audit: type=1400 audit(1773044153.759:644): avc: denied { mounton } for pid=6315 comm="syz.4.703" path="/file0" dev="ramfs" ino=15814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 214.615625][ T6320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80fc02c, mo2=0002] [ 214.688190][ T6320] System zones: 1-12 [ 214.737863][ T6320] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.703: error while reading EA inode 32 err=-116 [ 214.875287][ T6320] loop4: lost filesystem error report for type 5 error -117 [ 214.876919][ T6320] EXT4-fs (loop4): Remounting filesystem read-only [ 214.890844][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 214.890893][ C1] EXT4-fs (loop4): initial error at time 1773044154: ext4_xattr_inode_iget:446 [ 214.890917][ C1] EXT4-fs (loop4): last error at time 1773044154: ext4_xattr_inode_iget:446 [ 215.092593][ T6320] EXT4-fs (loop4): 1 orphan inode deleted [ 215.115145][ T6320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.168744][ T6320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.497433][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 216.189095][ T6335] loop4: detected capacity change from 0 to 1024 [ 216.262925][ T6335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 216.273422][ T6335] System zones: 0-1, 3-36 [ 216.285547][ T6335] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.707: bad orphan inode 134217728 [ 216.299492][ T6335] loop4: lost filesystem error report for type 5 error -117 [ 216.311714][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.676965][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.872586][ T6343] loop4: detected capacity change from 0 to 128 [ 216.904778][ T6357] 9pnet_virtio: no channels available for device nodes=1, [ 216.943654][ T6343] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.003888][ T6360] loop1: detected capacity change from 0 to 512 [ 217.029373][ T6343] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.067140][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.712: inode has both inline data and extents flags [ 217.106769][ T6360] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.106933][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 217.122625][ C0] EXT4-fs (loop1): initial error at time 1773044156: ext4_orphan_get:1391: inode 15 [ 217.132067][ C0] EXT4-fs (loop1): last error at time 1773044156: ext4_orphan_get:1391: inode 15 [ 217.141494][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.712: couldn't read orphan inode 15 (err -117) [ 217.153481][ T6360] loop1: lost filesystem error report for type 5 error -117 [ 217.154087][ T6360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 217.214435][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 217.920208][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 217.957977][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 218.126125][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.197577][ T6384] loop1: detected capacity change from 0 to 512 [ 218.217300][ T6384] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 218.933656][ T6412] bond1: (slave lo): Releasing backup interface [ 218.941664][ T6412] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 219.003439][ T6412] bond0: (slave bond_slave_0): Releasing backup interface [ 219.016664][ T6412] bond0: (slave bond_slave_1): Releasing backup interface [ 219.039450][ T6412] team0: Port device team_slave_0 removed [ 219.059432][ T6412] team0: Port device team_slave_1 removed [ 219.066817][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.075549][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.094686][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.103121][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.113205][ T6412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.134198][ T23] lo speed is unknown, defaulting to 1000 [ 219.140399][ T3391] lo speed is unknown, defaulting to 1000 [ 219.147046][ T6413] team0: Mode changed to "loadbalance" [ 219.160538][ T23] syz2: Port: 1 Link DOWN [ 220.476385][ T6438] loop1: detected capacity change from 0 to 512 [ 220.560812][ T6438] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 221.258760][ T6446] lo speed is unknown, defaulting to 1000 [ 221.460349][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 221.780936][ T6457] xt_TCPMSS: Only works on TCP SYN packets [ 222.815921][ T28] audit: type=1400 audit(1773044162.029:645): avc: denied { read write } for pid=6470 comm="syz.4.742" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.858320][ T28] audit: type=1400 audit(1773044162.059:646): avc: denied { open } for pid=6470 comm="syz.4.742" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.889507][ T6477] bond0: (slave bond_slave_0): Releasing backup interface [ 222.924999][ T6477] bond0: (slave bond_slave_1): Releasing backup interface [ 222.945731][ T6477] team_slave_0: left promiscuous mode [ 222.951649][ T6477] team_slave_0: left allmulticast mode [ 222.963802][ T6477] team0: Port device team_slave_0 removed [ 222.970605][ T6477] team_slave_1: left promiscuous mode [ 222.976340][ T6477] team_slave_1: left allmulticast mode [ 222.985296][ T6477] team0: Port device team_slave_1 removed [ 222.993507][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.004069][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.113222][ T6477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.138109][ T6485] team0: Mode changed to "loadbalance" [ 223.206556][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 223.256452][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 223.312348][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 223.908319][ T6486] infiniband syz1: set down [ 223.912982][ T3554] xfrm0 speed is unknown, defaulting to 1000 [ 223.932845][ T6486] infiniband syz1: added xfrm0 [ 223.939033][ T6486] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 223.939267][ T6486] infiniband syz1: Couldn't open port 1 [ 223.967154][ T6507] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 223.984850][ T6486] RDS/IB: syz1: added [ 223.996510][ T6486] smc: adding ib device syz1 with port count 1 [ 224.007625][ T6486] smc: ib device syz1 port 1 has no pnetid [ 224.019240][ T23] xfrm0 speed is unknown, defaulting to 1000 [ 224.027469][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 224.102111][ T6503] loop2: detected capacity change from 0 to 512 [ 224.103448][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 224.143065][ T6503] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 224.217888][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 224.297066][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 224.453368][ T6518] loop2: detected capacity change from 0 to 128 [ 224.748132][ T6486] xfrm0 speed is unknown, defaulting to 1000 [ 225.487161][ T6526] lo speed is unknown, defaulting to 1000 [ 225.493197][ T6526] xfrm0 speed is unknown, defaulting to 1000 [ 225.719626][ T6530] netlink: 'syz.0.761': attribute type 13 has an invalid length. [ 226.299432][ T6545] loop2: detected capacity change from 0 to 512 [ 226.313459][ T6547] SET target dimension over the limit! [ 226.365883][ T6545] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 226.405543][ T6547] loop1: detected capacity change from 0 to 4096 [ 226.414129][ T6545] EXT4-fs (loop2): mount failed [ 226.428193][ T6547] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.483428][ T6547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.533958][ T6536] loop4: detected capacity change from 0 to 512 [ 226.578270][ T6536] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 226.829756][ T6556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 227.220658][ T6556] netlink: 260 bytes leftover after parsing attributes in process `syz.1.768'. [ 227.358054][ T6530] team0: left allmulticast mode [ 227.443475][ T6530] team0: left promiscuous mode [ 227.501769][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.454198][ T6572] siw: device registration error -23 [ 228.462168][ T6572] netlink: 14 bytes leftover after parsing attributes in process `syz.3.773'. [ 228.516808][ T6572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.558847][ T6572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.589017][ T6572] bond0 (unregistering): Released all slaves [ 228.623191][ T6569] lo speed is unknown, defaulting to 1000 [ 228.642603][ T6569] xfrm0 speed is unknown, defaulting to 1000 [ 228.649448][ T6568] lo speed is unknown, defaulting to 1000 [ 228.735574][ T6568] xfrm0 speed is unknown, defaulting to 1000 [ 228.775112][ T6577] loop2: detected capacity change from 0 to 512 [ 228.783274][ T6577] EXT4-fs (loop2): 1 truncate cleaned up [ 228.809868][ T6577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.876872][ T28] audit: type=1400 audit(1773044168.109:647): avc: denied { write } for pid=6576 comm="syz.2.774" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.004094][ T28] audit: type=1400 audit(1773044168.109:648): avc: denied { open } for pid=6576 comm="syz.2.774" path="/157/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.149474][ T6583] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.774: bg 0: block 465: padding at end of block bitmap is not set [ 229.517997][ T6583] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 12288 with max blocks 1 with error 28 [ 229.518153][ T6584] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 229.530554][ T6583] EXT4-fs (loop2): This should not happen!! Data will be lost [ 229.530554][ T6583] [ 229.542717][ T6584] EXT4-fs (loop2): This should not happen!! Data will be lost [ 229.542717][ T6584] [ 229.542736][ T6584] EXT4-fs (loop2): Total free blocks count 0 [ 229.552381][ T6583] EXT4-fs (loop2): Total free blocks count 0 [ 229.552447][ T6583] EXT4-fs (loop2): Free/Dirty block details [ 229.552457][ T6583] EXT4-fs (loop2): free_blocks=0 [ 229.562090][ T6584] EXT4-fs (loop2): Free/Dirty block details [ 229.651576][ T28] audit: type=1400 audit(1773044168.430:649): avc: denied { append } for pid=6576 comm="syz.2.774" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.326013][ T6606] loop2: detected capacity change from 0 to 1024 [ 233.405988][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.618380][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.719726][ T6619] batadv_slave_0: entered promiscuous mode [ 234.253315][ T6623] geneve3: entered promiscuous mode [ 234.305267][ T30] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.325328][ T30] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.352817][ T30] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.384782][ T30] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.565061][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 235.656278][ T6628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=6628 comm=syz.2.787 [ 236.510807][ T6629] syz.0.785 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 236.523494][ T6629] CPU: 1 UID: 0 PID: 6629 Comm: syz.0.785 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.523521][ T6629] Tainted: [W]=WARN [ 236.523527][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.523571][ T6629] Call Trace: [ 236.523578][ T6629] [ 236.523587][ T6629] __dump_stack+0x1d/0x30 [ 236.523614][ T6629] dump_stack_lvl+0x95/0xd0 [ 236.523660][ T6629] dump_stack+0x15/0x1b [ 236.523679][ T6629] dump_header+0x80/0x240 [ 236.523697][ T6629] oom_kill_process+0x295/0x350 [ 236.523729][ T6629] out_of_memory+0x97d/0xb80 [ 236.523753][ T6629] try_charge_memcg+0x62e/0xa10 [ 236.523833][ T6629] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 236.523939][ T6629] __swap_cache_prepare_and_add+0x386/0x530 [ 236.524065][ T6629] swap_cache_alloc_folio+0xa2/0x120 [ 236.524100][ T6629] swap_cluster_readahead+0x26e/0x3d0 [ 236.524150][ T6629] swapin_readahead+0xde/0x840 [ 236.524172][ T6629] ? _raw_spin_unlock+0x9/0x30 [ 236.524195][ T6629] ? swap_put_entries_cluster+0x385/0x3a0 [ 236.524276][ T6629] ? swap_put_entries_cluster+0x111/0x3a0 [ 236.524381][ T6629] ? __rcu_read_unlock+0x4e/0x70 [ 236.524399][ T6629] ? swap_cache_get_folio+0x26f/0x280 [ 236.524422][ T6629] do_swap_page+0x30d/0x2220 [ 236.524495][ T6629] ? css_rstat_updated+0xbb/0x280 [ 236.524511][ T6629] ? __rcu_read_lock+0x36/0x50 [ 236.524558][ T6629] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 236.524607][ T6629] handle_mm_fault+0xb40/0x3020 [ 236.524713][ T6629] ? vma_start_read+0x1c7/0x2c0 [ 236.524743][ T6629] do_user_addr_fault+0x62f/0x1050 [ 236.524770][ T6629] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 236.524791][ T6629] ? trace_page_fault_user+0x1f/0xe0 [ 236.524818][ T6629] exc_page_fault+0x62/0xa0 [ 236.524846][ T6629] asm_exc_page_fault+0x26/0x30 [ 236.524922][ T6629] RIP: 0033:0x7f540d9e78b4 [ 236.524939][ T6629] Code: ff ff ff f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca <64> 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ee 4d 29 00 00 [ 236.524957][ T6629] RSP: 002b:00007ffc9cc616d0 EFLAGS: 00010246 [ 236.524972][ T6629] RAX: 00000000fffffffa RBX: 00007f540dca5fa0 RCX: 0000000000000000 [ 236.524983][ T6629] RDX: 00007ffc9cc61710 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.525077][ T6629] RBP: 00007f540dca7da0 R08: 0000000000000000 R09: 0000000000000000 [ 236.525088][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000039da8 [ 236.525099][ T6629] R13: 00007f540dca627c R14: 0000000000039b5e R15: 00007f540dca6270 [ 236.525120][ T6629] [ 236.771982][ T6629] memory: usage 307200kB, limit 307200kB, failcnt 538 [ 236.778762][ T6629] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 236.786871][ T6629] kmem: usage 306872kB, limit 9007199254740988kB, failcnt 0 [ 236.794303][ T6629] Memory cgroup stats for /syz0: [ 236.794515][ T6629] cache 98304 [ 236.802746][ T6629] rss 0 [ 236.805730][ T6629] shmem 0 [ 236.808723][ T6629] mapped_file 98304 [ 236.812614][ T6629] dirty 98304 [ 236.816250][ T6629] writeback 0 [ 236.819519][ T6629] workingset_refault_anon 1638 [ 236.824556][ T6629] workingset_refault_file 276 [ 236.829700][ T6629] swap 393216 [ 236.833026][ T6629] swapcached 11476992 [ 236.837323][ T6629] pgpgin 158950 [ 236.840823][ T6629] pgpgout 158925 [ 236.960799][ T6629] pgfault 178440 [ 237.973324][ T6629] pgmajfault 226 [ 237.976937][ T6629] inactive_anon 0 [ 237.980617][ T6629] active_anon 0 [ 237.984103][ T6629] inactive_file 102400 [ 237.988228][ T6629] active_file 0 [ 237.991812][ T6629] unevictable 0 [ 237.995294][ T6629] hierarchical_memory_limit 314572800 [ 238.226124][ T6649] loop1: detected capacity change from 0 to 512 [ 238.380172][ T6649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80fc02c, mo2=0002] [ 238.412968][ T6649] System zones: 1-12 [ 238.684813][ T6629] hierarchical_memsw_limit 9223372036854771712 [ 238.761004][ T6649] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.798: error while reading EA inode 32 err=-116 [ 238.798502][ T6649] loop1: lost filesystem error report for type 5 error -117 [ 238.808237][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 238.821980][ C1] EXT4-fs (loop1): initial error at time 1773044178: ext4_xattr_inode_iget:446 [ 238.830939][ C1] EXT4-fs (loop1): last error at time 1773044178: ext4_xattr_inode_iget:446 [ 238.839664][ T6649] EXT4-fs (loop1): Remounting filesystem read-only [ 238.846169][ T6649] EXT4-fs (loop1): 1 orphan inode deleted [ 238.858575][ T6629] total_cache 98304 [ 238.866143][ T6649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.921147][ T6649] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.977807][ T6629] total_rss 0 [ 238.981138][ T6629] total_shmem 0 [ 239.003292][ T6629] total_mapped_file 98304 [ 239.049636][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 239.053406][ T6629] total_dirty 98304 [ 239.072445][ T6629] total_writeback 0 [ 239.076364][ T6629] total_workingset_refault_anon 1638 [ 239.120739][ T6629] total_workingset_refault_file 276 [ 239.169123][ T6629] total_swap 393216 [ 239.189869][ T6629] total_swapcached 11476992 [ 239.227248][ T6629] total_pgpgin 158950 [ 239.231250][ T6629] total_pgpgout 158925 [ 239.243733][ T6629] total_pgfault 178440 [ 239.259964][ T6671] loop1: detected capacity change from 0 to 1024 [ 239.272714][ T6629] total_pgmajfault 226 [ 239.277516][ T6629] total_inactive_anon 0 [ 239.292666][ T6671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.307397][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 239.320233][ T6629] total_active_anon 0 [ 239.325384][ T6629] total_inactive_file 102400 [ 239.331626][ T28] audit: type=1326 audit(1773044178.599:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 239.355442][ T6629] total_active_file 0 [ 239.359473][ T28] audit: type=1326 audit(1773044178.599:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 239.382828][ T28] audit: type=1326 audit(1773044178.599:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 239.383573][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.406120][ T6629] total_unevictable 0 [ 239.415481][ T28] audit: type=1326 audit(1773044178.619:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 239.419082][ T6629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.785,pid=6629,uid=0 [ 239.457137][ T6629] Memory cgroup out of memory: Killed process 6629 (syz.0.785) total-vm:100576kB, anon-rss:1224kB, file-rss:26420kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 239.489482][ T28] audit: type=1326 audit(1773044178.619:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 239.523563][ T6666] loop4: detected capacity change from 0 to 512 [ 239.536099][ T6666] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 241.150220][ T6688] loop2: detected capacity change from 0 to 1024 [ 241.258997][ T6688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 241.278226][ T6688] System zones: 0-1, 3-36 [ 241.298196][ T6688] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.801: bad orphan inode 134217728 [ 241.309937][ T6688] loop2: lost filesystem error report for type 5 error -117 [ 241.317117][ T6688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.469470][ T6706] loop4: detected capacity change from 0 to 164 [ 241.563844][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.765817][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 241.896092][ T28] audit: type=1400 audit(1773044181.166:655): avc: denied { ioctl } for pid=6711 comm="syz.2.808" path="socket:[17043]" dev="sockfs" ino=17043 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.049216][ T6716] loop1: detected capacity change from 0 to 512 [ 242.092259][ T6716] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 242.100878][ T6721] lo speed is unknown, defaulting to 1000 [ 242.171873][ T6725] loop2: detected capacity change from 0 to 512 [ 242.195346][ T6725] msdos: Unknown parameter 'qodots' [ 242.213958][ T6721] xfrm0 speed is unknown, defaulting to 1000 [ 242.284190][ T6729] netlink: 'syz.1.815': attribute type 13 has an invalid length. [ 244.412338][ T6736] lo speed is unknown, defaulting to 1000 [ 244.422151][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 244.850538][ T6749] loop2: detected capacity change from 0 to 512 [ 244.882545][ T6749] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 244.927677][ T28] audit: type=1400 audit(1773044184.203:656): avc: denied { accept } for pid=6763 comm="syz.3.828" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.209778][ T6771] loop2: detected capacity change from 0 to 1024 [ 245.223550][ T6771] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 245.236935][ T28] audit: type=1400 audit(1773044184.514:657): avc: denied { accept } for pid=6772 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.259226][ T6771] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.831: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.314444][ T6771] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.319315][ T6771] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 245.328454][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 245.328474][ C1] EXT4-fs (loop2): initial error at time 1773044184: ext4_map_blocks:776: inode 3: block 2 [ 245.328527][ C1] EXT4-fs (loop2): last error at time 1773044184: ext4_map_blocks:776: inode 3: block 2 [ 245.367333][ T6771] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.831: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.383657][ T6771] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.383837][ T6771] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 245.402702][ T6771] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.831: Failed to acquire dquot type 0 [ 245.418195][ T6771] loop2: lost filesystem error report for type 5 error -117 [ 245.418372][ T6771] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 245.439444][ T6771] loop2: lost filesystem error report for type 5 error -117 [ 245.439546][ T6771] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.831: mark_inode_dirty error [ 245.732089][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.744240][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.925971][ T6771] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 245.951796][ T6771] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 245.978622][ T6788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.987820][ T6788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.998040][ T6771] EXT4-fs (loop2): 1 orphan inode deleted [ 246.004379][ T6771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.017480][ T3683] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 246.032723][ T3683] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 246.032869][ T3683] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 246.050804][ T3683] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 246.101710][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.111328][ T3315] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 246.126147][ T3315] loop2: lost filesystem error report for type 5 error -117 [ 246.126272][ T3315] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 246.143582][ T3315] loop2: lost filesystem error report for type 5 error -117 [ 246.143700][ T3315] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 246.162572][ T3315] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 247.445759][ T6802] lo speed is unknown, defaulting to 1000 [ 247.460899][ T6802] xfrm0 speed is unknown, defaulting to 1000 [ 247.834521][ T6800] loop1: detected capacity change from 0 to 1024 [ 248.280270][ T6812] netlink: 'syz.4.842': attribute type 13 has an invalid length. [ 248.851910][ T6800] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 248.886116][ T6800] System zones: 0-1, 3-36 [ 248.934295][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.840: bad orphan inode 134217728 [ 248.960239][ T6800] loop1: lost filesystem error report for type 5 error -117 [ 248.963369][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 248.977082][ C0] EXT4-fs (loop1): initial error at time 1773044188: ext4_orphan_get:1417 [ 248.985722][ C0] EXT4-fs (loop1): last error at time 1773044188: ext4_orphan_get:1417 [ 249.051993][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.055929][ T6827] loop2: detected capacity change from 0 to 1024 [ 249.089790][ T6827] EXT4-fs: inline encryption not supported [ 249.120270][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.155366][ T830] Process accounting resumed [ 249.162093][ T6827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.319469][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.586332][ T3681] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.596126][ T3681] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.635084][ T3681] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.703604][ T3681] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.861507][ T6858] lo speed is unknown, defaulting to 1000 [ 251.867558][ T6858] xfrm0 speed is unknown, defaulting to 1000 [ 252.888472][ T6867] loop4: detected capacity change from 0 to 1024 [ 252.922460][ T6876] xt_TCPMSS: Only works on TCP SYN packets [ 252.928899][ T6867] EXT4-fs: inline encryption not supported [ 253.133283][ T6885] netlink: 277 bytes leftover after parsing attributes in process `syz.2.859'. [ 253.142991][ T6885] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 253.165676][ T6885] macvlan1: entered allmulticast mode [ 253.171389][ T6885] veth1_vlan: entered allmulticast mode [ 253.178986][ T6885] team0: Port device macvlan1 added [ 253.186468][ T6867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.813443][ T6893] SET target dimension over the limit! [ 253.923743][ T830] Process accounting resumed [ 253.935684][ T6867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.143702][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.862'. [ 254.164212][ T6908] netlink: 260 bytes leftover after parsing attributes in process `syz.3.862'. [ 254.503752][ T6911] netlink: 64 bytes leftover after parsing attributes in process `syz.0.866'. [ 254.714187][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 254.723109][ T6913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.867'. [ 254.732219][ T6913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.867'. [ 254.812627][ T28] audit: type=1400 audit(1773044194.115:658): avc: denied { bind } for pid=6918 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 254.871059][ T6909] Process accounting resumed [ 254.986426][ T6924] lo speed is unknown, defaulting to 1000 [ 254.992789][ T6924] xfrm0 speed is unknown, defaulting to 1000 [ 256.757338][ T6928] tc_dump_action: action bad kind [ 256.799115][ T6917] loop1: detected capacity change from 0 to 1024 [ 256.909308][ T6917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.282215][ T6952] bridge0: entered promiscuous mode [ 257.287511][ T6952] bridge0: entered allmulticast mode [ 257.310826][ T28] audit: type=1326 audit(1773044196.600:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 257.434486][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.444488][ T28] audit: type=1326 audit(1773044196.600:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 257.473130][ T28] audit: type=1326 audit(1773044196.600:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 257.620512][ T28] audit: type=1326 audit(1773044196.600:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 257.775957][ T28] audit: type=1326 audit(1773044196.600:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 257.906615][ T28] audit: type=1326 audit(1773044196.600:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 258.244556][ T28] audit: type=1326 audit(1773044196.600:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 258.275479][ T28] audit: type=1326 audit(1773044196.600:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 258.313392][ T28] audit: type=1326 audit(1773044196.600:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 258.419267][ T6971] loop1: detected capacity change from 0 to 512 [ 258.429678][ T6971] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.050943][ T6980] siw: device registration error -23 [ 259.056673][ T6980] netlink: 14 bytes leftover after parsing attributes in process `syz.0.887'. [ 259.093186][ T6980] bond0 (unregistering): Released all slaves [ 259.107442][ T6983] netlink: 'syz.2.884': attribute type 13 has an invalid length. [ 259.159947][ T6983] veth1_vlan: left allmulticast mode [ 259.725536][ T6991] lo speed is unknown, defaulting to 1000 [ 259.734200][ T6991] xfrm0 speed is unknown, defaulting to 1000 [ 259.801208][ T6998] 9p: Bad value for 'rfdno' [ 260.011841][ T6998] lo speed is unknown, defaulting to 1000 [ 260.286749][ T6998] xfrm0 speed is unknown, defaulting to 1000 [ 261.637932][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 261.637946][ T28] audit: type=1326 audit(1773044200.958:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 261.847189][ T28] audit: type=1326 audit(1773044200.958:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 261.870619][ T28] audit: type=1326 audit(1773044200.958:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 261.894384][ T28] audit: type=1326 audit(1773044200.958:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 262.407905][ T28] audit: type=1326 audit(1773044200.958:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 262.436015][ T28] audit: type=1326 audit(1773044200.958:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 262.460249][ T28] audit: type=1326 audit(1773044200.958:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 262.486599][ T28] audit: type=1326 audit(1773044200.958:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 262.517141][ T28] audit: type=1326 audit(1773044200.958:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 262.541699][ T7019] loop1: detected capacity change from 0 to 512 [ 262.553979][ T28] audit: type=1326 audit(1773044200.958:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5178a8c799 code=0x7ffc0000 [ 262.606483][ T7019] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 262.804044][ T7047] netlink: 'syz.3.906': attribute type 13 has an invalid length. [ 263.554313][ T7054] loop1: detected capacity change from 0 to 128 [ 264.017039][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 264.032450][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'. [ 264.050998][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'. [ 264.069617][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.139728][ T7049] IPv6: sit1: Disabled Multicast RS [ 264.145720][ T7049] sit1: entered allmulticast mode [ 264.211824][ T3673] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.230801][ T3673] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.248854][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 264.260896][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 264.329449][ T3681] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.335946][ T3673] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.352696][ T3673] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.361200][ T3673] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.389036][ T3673] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.520062][ T3673] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.530465][ T3673] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.841173][ T7100] xt_hashlimit: size too large, truncated to 1048576 [ 265.847898][ T7100] xt_hashlimit: max too large, truncated to 1048576 [ 266.358486][ T3315] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 266.369592][ T3489] Bluetooth: hci0: command 0x1003 tx timeout [ 266.375667][ T4489] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.388517][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 266.388545][ T3315] Tainted: [W]=WARN [ 266.388572][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.388588][ T3315] Call Trace: [ 266.388594][ T3315] [ 266.388602][ T3315] __dump_stack+0x1d/0x30 [ 266.388625][ T3315] dump_stack_lvl+0x95/0xd0 [ 266.388671][ T3315] dump_stack+0x15/0x1b [ 266.388693][ T3315] dump_header+0x80/0x240 [ 266.388714][ T3315] oom_kill_process+0x295/0x350 [ 266.388787][ T3315] out_of_memory+0x97d/0xb80 [ 266.388810][ T3315] try_charge_memcg+0x62e/0xa10 [ 266.388848][ T3315] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 266.388939][ T3315] __swap_cache_prepare_and_add+0x386/0x530 [ 266.389013][ T3315] swap_cache_alloc_folio+0xa2/0x120 [ 266.389041][ T3315] swap_cluster_readahead+0x26e/0x3d0 [ 266.389074][ T3315] swapin_readahead+0xde/0x840 [ 266.389105][ T3315] ? __rcu_read_unlock+0x4e/0x70 [ 266.389176][ T3315] ? __perf_event_task_sched_in+0xa65/0xad0 [ 266.389216][ T3315] ? __list_add_valid_or_report+0x38/0xe0 [ 266.389249][ T3315] ? __rcu_read_unlock+0x4e/0x70 [ 266.389265][ T3315] ? swap_cache_get_folio+0x26f/0x280 [ 266.389288][ T3315] do_swap_page+0x30d/0x2220 [ 266.389371][ T3315] ? __schedule+0x93c/0xd40 [ 266.389395][ T3315] ? __rcu_read_lock+0x36/0x50 [ 266.389416][ T3315] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 266.389442][ T3315] handle_mm_fault+0xb40/0x3020 [ 266.389602][ T3315] ? vma_start_read+0x1c7/0x2c0 [ 266.389631][ T3315] do_user_addr_fault+0x62f/0x1050 [ 266.389663][ T3315] ? trace_page_fault_user+0x1f/0xe0 [ 266.389707][ T3315] exc_page_fault+0x62/0xa0 [ 266.389836][ T3315] asm_exc_page_fault+0x26/0x30 [ 266.389860][ T3315] RIP: 0033:0x7fb48bf97917 [ 266.389876][ T3315] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 266.389912][ T3315] RSP: 002b:00007ffd49a15450 EFLAGS: 00010202 [ 266.389930][ T3315] RAX: 0000000000000000 RBX: 000055557c8a2500 RCX: 00007fb48bf97917 [ 266.389965][ T3315] RDX: 00007ffd49a15490 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.389979][ T3315] RBP: 00007ffd49a154fc R08: 0000000000000000 R09: 0000000000000000 [ 266.389993][ T3315] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 266.390047][ T3315] R13: 00000000000927c0 R14: 0000000000040fb0 R15: 00007ffd49a15550 [ 266.390062][ T3315] [ 266.633535][ T3315] memory: usage 307200kB, limit 307200kB, failcnt 975 [ 266.640373][ T3315] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 266.648315][ T3315] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 266.655835][ T3315] Memory cgroup stats for /syz2: [ 266.656053][ T3315] cache 0 [ 266.664221][ T3315] rss 0 [ 266.683473][ T3315] shmem 0 [ 266.686857][ T3315] mapped_file 0 [ 266.690361][ T3315] dirty 0 [ 266.693422][ T3315] writeback 0 [ 266.696715][ T3315] workingset_refault_anon 172 [ 266.701560][ T3315] workingset_refault_file 528 [ 266.706238][ T3315] swap 720896 [ 266.709579][ T3315] swapcached 1613824 [ 266.713507][ T3315] pgpgin 277833 [ 266.716957][ T3315] pgpgout 277830 [ 266.720552][ T3315] pgfault 269422 [ 266.724081][ T3315] pgmajfault 80 [ 266.727530][ T3315] inactive_anon 0 [ 266.733921][ T3315] active_anon 4096 [ 266.737645][ T3315] inactive_file 0 [ 266.741547][ T3315] active_file 8192 [ 266.745322][ T3315] unevictable 0 [ 266.748913][ T3315] hierarchical_memory_limit 314572800 [ 266.848439][ T3315] hierarchical_memsw_limit 9223372036854771712 [ 266.854611][ T3315] total_cache 0 [ 266.858097][ T3315] total_rss 0 [ 266.861529][ T3315] total_shmem 0 [ 266.865166][ T3315] total_mapped_file 0 [ 266.869314][ T3315] total_dirty 0 [ 266.872788][ T3315] total_writeback 0 [ 266.876725][ T3315] total_workingset_refault_anon 172 [ 266.881942][ T3315] total_workingset_refault_file 528 [ 266.887164][ T3315] total_swap 720896 [ 266.891198][ T3315] total_swapcached 1613824 [ 266.895675][ T3315] total_pgpgin 277833 [ 267.075968][ T3315] total_pgpgout 277830 [ 267.080105][ T3315] total_pgfault 269422 [ 267.084231][ T3315] total_pgmajfault 80 [ 267.088309][ T3315] total_inactive_anon 0 [ 267.092511][ T3315] total_active_anon 4096 [ 267.096761][ T3315] total_inactive_file 0 [ 267.100978][ T3315] total_active_file 8192 [ 267.105212][ T3315] total_unevictable 0 [ 267.109562][ T3315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.921,pid=7092,uid=0 [ 267.125660][ T3315] Memory cgroup out of memory: Killed process 7092 (syz.2.921) total-vm:96208kB, anon-rss:1224kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 267.199576][ T7106] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 267.310008][ T7106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.216604][ T7148] lo speed is unknown, defaulting to 1000 [ 269.224039][ T7148] xfrm0 speed is unknown, defaulting to 1000 [ 269.670297][ T7151] loop1: detected capacity change from 0 to 1024 [ 269.725866][ T7151] ext4: Unknown parameter 'noacl' [ 270.713272][ T7151] loop1: detected capacity change from 0 to 1024 [ 270.730324][ T7151] journal_path: not usable as path [ 270.737860][ T7151] EXT4-fs: error: could not find journal device path [ 270.988603][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 271.018745][ T7151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7151 comm=syz.1.936 [ 271.510366][ T7177] lo speed is unknown, defaulting to 1000 [ 271.522145][ T7177] xfrm0 speed is unknown, defaulting to 1000 [ 272.942061][ T7193] Q6`Ҙ: renamed from lo [ 272.953644][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 272.953658][ T28] audit: type=1400 audit(1773044212.288:797): avc: denied { create } for pid=7192 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 273.102685][ T7197] Q6`Ҙ speed is unknown, defaulting to 1000 [ 273.109630][ T7197] xfrm0 speed is unknown, defaulting to 1000 [ 275.627470][ T7217] loop1: detected capacity change from 0 to 128 [ 275.675850][ T7217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'. [ 275.720108][ T7220] 9p: Bad value for 'rfdno' [ 275.924022][ T28] audit: type=1326 audit(1773044214.992:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 275.947573][ T28] audit: type=1326 audit(1773044214.992:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 275.970901][ T28] audit: type=1326 audit(1773044214.992:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fddafbec502 code=0x7ffc0000 [ 276.021446][ T28] audit: type=1326 audit(1773044215.002:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fddafbacfce code=0x7ffc0000 [ 276.048929][ T28] audit: type=1326 audit(1773044215.022:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fddafbec5c7 code=0x7ffc0000 [ 276.072871][ T28] audit: type=1326 audit(1773044215.032:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddafbacfce code=0x7ffc0000 [ 276.101317][ T28] audit: type=1326 audit(1773044215.032:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fddafbacfce code=0x7ffc0000 [ 276.130678][ T28] audit: type=1326 audit(1773044215.032:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 276.154363][ T28] audit: type=1326 audit(1773044215.032:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.3.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 276.491294][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 276.500171][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.960'. [ 276.509253][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.960'. [ 277.030936][ T7254] Q6`Ҙ speed is unknown, defaulting to 1000 [ 277.040039][ T7254] xfrm0 speed is unknown, defaulting to 1000 [ 277.233244][ T7247] netlink: 64 bytes leftover after parsing attributes in process `syz.1.966'. [ 279.149692][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 279.149714][ T28] audit: type=1400 audit(1773044218.497:828): avc: denied { map } for pid=7270 comm="syz.3.972" path="socket:[19194]" dev="sockfs" ino=19194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.199815][ T7271] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 279.228377][ T28] audit: type=1400 audit(1773044218.527:829): avc: denied { read } for pid=7270 comm="syz.3.972" path="socket:[19194]" dev="sockfs" ino=19194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.839520][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 279.848649][ T7252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.861056][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 279.872329][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 279.938775][ T7294] loop1: detected capacity change from 0 to 1024 [ 279.959864][ T7294] EXT4-fs: inline encryption not supported [ 280.109066][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.141422][ T3554] Process accounting resumed [ 280.147594][ T7293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.209259][ T7317] netlink: 164 bytes leftover after parsing attributes in process `syz.3.985'. [ 280.218412][ T28] audit: type=1400 audit(1773044219.558:830): avc: denied { connect } for pid=7316 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 280.240906][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 280.250305][ T28] audit: type=1400 audit(1773044219.588:831): avc: denied { ioctl } for pid=7316 comm="syz.3.985" path="socket:[18231]" dev="sockfs" ino=18231 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 280.311640][ T28] audit: type=1400 audit(1773044219.628:832): avc: denied { ioctl } for pid=7296 comm="syz.4.979" path="socket:[19258]" dev="sockfs" ino=19258 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 280.824441][ T7324] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 280.831926][ T7324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.862511][ T28] audit: type=1400 audit(1773044220.169:833): avc: denied { setopt } for pid=7296 comm="syz.4.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 281.008498][ T7329] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 281.329750][ T7337] netlink: 64 bytes leftover after parsing attributes in process `syz.3.990'. [ 281.949204][ T7345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7345 comm=syz.4.992 [ 282.772778][ T7363] netlink: 'syz.1.997': attribute type 11 has an invalid length. [ 284.610173][ T7396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.628898][ T7396] team0: Unable to change to the same mode the team is in [ 285.928846][ T7410] Q6`Ҙ speed is unknown, defaulting to 1000 [ 285.935680][ T7410] xfrm0 speed is unknown, defaulting to 1000 [ 286.571168][ T7413] netlink: 'syz.0.1010': attribute type 32 has an invalid length. [ 287.592920][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 288.394848][ T7413] bond0: option coupled_control: invalid value (77) [ 290.539578][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'. [ 290.559954][ T7413] bond0 (unregistering): Released all slaves [ 291.194629][ T7445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.274757][ T28] audit: type=1400 audit(1773044230.632:834): avc: denied { mount } for pid=7453 comm="syz.2.1022" name="/" dev="autofs" ino=19518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 291.314181][ T7456] xt_hashlimit: size too large, truncated to 1048576 [ 292.032075][ T7473] Q6`Ҙ speed is unknown, defaulting to 1000 [ 292.039143][ T7473] xfrm0 speed is unknown, defaulting to 1000 [ 292.134572][ T7468] tipc: Enabling of bearer rejected, failed to enable media [ 294.952138][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 294.981717][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 294.999657][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 295.865871][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 298.974262][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 299.014760][ T28] audit: type=1326 audit(1773044238.371:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.014336][ T28] audit: type=1326 audit(1773044238.371:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.403695][ T28] audit: type=1326 audit(1773044238.371:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.453786][ T28] audit: type=1326 audit(1773044238.371:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.480300][ T28] audit: type=1326 audit(1773044238.381:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.543591][ T28] audit: type=1326 audit(1773044238.381:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.576268][ T7553] Q6`Ҙ speed is unknown, defaulting to 1000 [ 300.582903][ T7553] xfrm0 speed is unknown, defaulting to 1000 [ 300.668853][ T28] audit: type=1326 audit(1773044238.381:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.733385][ T28] audit: type=1326 audit(1773044238.381:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.883998][ T28] audit: type=1326 audit(1773044238.381:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 300.926542][ T28] audit: type=1326 audit(1773044238.381:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 301.390573][ T7574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 301.878135][ T7589] Q6`Ҙ speed is unknown, defaulting to 1000 [ 301.885483][ T7589] xfrm0 speed is unknown, defaulting to 1000 [ 302.810618][ T7591] 9p: Bad value for 'rfdno' [ 302.835584][ T7591] Q6`Ҙ speed is unknown, defaulting to 1000 [ 302.861797][ T7591] xfrm0 speed is unknown, defaulting to 1000 [ 303.556495][ T7596] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 303.564480][ T7596] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.906433][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1059'. [ 305.745912][ T7710] Q6`Ҙ speed is unknown, defaulting to 1000 [ 305.771615][ T7710] xfrm0 speed is unknown, defaulting to 1000 [ 305.780939][ T7717] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1063'. [ 305.802370][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 305.815767][ T7718] Q6`Ҙ speed is unknown, defaulting to 1000 [ 305.860982][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 305.861002][ T28] audit: type=1400 audit(1773044245.237:873): avc: denied { connect } for pid=7719 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 306.010123][ T7718] xfrm0 speed is unknown, defaulting to 1000 [ 306.045790][ T7708] syz.2.1062 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 306.081151][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.2.1062 Tainted: G W syzkaller #0 PREEMPT(full) [ 306.081184][ T7708] Tainted: [W]=WARN [ 306.081269][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.081282][ T7708] Call Trace: [ 306.081289][ T7708] [ 306.081297][ T7708] __dump_stack+0x1d/0x30 [ 306.081320][ T7708] dump_stack_lvl+0x95/0xd0 [ 306.081338][ T7708] dump_stack+0x15/0x1b [ 306.081355][ T7708] dump_header+0x80/0x240 [ 306.081423][ T7708] oom_kill_process+0x295/0x350 [ 306.081446][ T7708] out_of_memory+0x97d/0xb80 [ 306.081469][ T7708] try_charge_memcg+0x62e/0xa10 [ 306.081602][ T7708] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 306.081687][ T7708] __swap_cache_prepare_and_add+0x386/0x530 [ 306.081786][ T7708] swap_cache_alloc_folio+0xa2/0x120 [ 306.081863][ T7708] swap_cluster_readahead+0x26e/0x3d0 [ 306.081954][ T7708] swapin_readahead+0xde/0x840 [ 306.081988][ T7708] ? _raw_spin_unlock+0x9/0x30 [ 306.082006][ T7708] ? swap_put_entries_cluster+0x385/0x3a0 [ 306.082030][ T7708] ? swap_put_entries_cluster+0x111/0x3a0 [ 306.082080][ T7708] ? __rcu_read_unlock+0x4e/0x70 [ 306.082102][ T7708] ? swap_cache_get_folio+0x26f/0x280 [ 306.082149][ T7708] do_swap_page+0x30d/0x2220 [ 306.082182][ T7708] ? css_rstat_updated+0xbb/0x280 [ 306.082203][ T7708] ? __rcu_read_lock+0x36/0x50 [ 306.082221][ T7708] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 306.082282][ T7708] handle_mm_fault+0xb40/0x3020 [ 306.082314][ T7708] ? vma_start_read+0x1c7/0x2c0 [ 306.082357][ T7708] do_user_addr_fault+0x62f/0x1050 [ 306.082382][ T7708] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 306.082404][ T7708] ? trace_page_fault_user+0x1f/0xe0 [ 306.082451][ T7708] exc_page_fault+0x62/0xa0 [ 306.082475][ T7708] asm_exc_page_fault+0x26/0x30 [ 306.082524][ T7708] RIP: 0033:0x7fb48bfdd2b6 [ 306.082539][ T7708] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 306.082554][ T7708] RSP: 002b:00007ffd49a15290 EFLAGS: 00010246 [ 306.082580][ T7708] RAX: 000000000004ad1a RBX: 00007fb48c255fa0 RCX: 000000000004ab50 [ 306.082594][ T7708] RDX: 00000000000001ca RSI: 0000000000000000 RDI: 00000000000003e8 [ 306.082606][ T7708] RBP: 00007fb48c257da0 R08: 000000001b59dbf6 R09: 7fffffffffffffff [ 306.082618][ T7708] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000004af25 [ 306.082629][ T7708] R13: 00007fb48c25627c R14: 000000000004acda R15: 00007fb48c256270 [ 306.082703][ T7708] [ 306.087953][ T7708] memory: usage 299100kB, limit 307200kB, failcnt 1844 [ 306.355683][ T7728] Q6`Ҙ speed is unknown, defaulting to 1000 [ 306.598777][ T7728] xfrm0 speed is unknown, defaulting to 1000 [ 307.039477][ T7708] memory+swap: usage 247652kB, limit 9007199254740988kB, failcnt 0 [ 307.047655][ T7708] kmem: usage 227984kB, limit 9007199254740988kB, failcnt 0 [ 307.055002][ T7708] Memory cgroup stats for /syz2: [ 307.055247][ T7708] cache 0 [ 307.472226][ T7736] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1066'. [ 307.482248][ T7736] netlink: zone id is out of range [ 307.487963][ T7736] netlink: zone id is out of range [ 307.494939][ T7736] netlink: zone id is out of range [ 307.578948][ T7736] netlink: set zone limit has 8 unknown bytes [ 307.612791][ T7708] rss 0 [ 307.615712][ T7708] shmem 0 [ 307.618746][ T7708] mapped_file 0 [ 307.622254][ T7708] dirty 0 [ 307.751464][ T7708] writeback 4096 [ 307.856258][ T7708] workingset_refault_anon 883 [ 307.861262][ T7708] workingset_refault_file 656 [ 307.866019][ T7708] swap 741376 [ 307.869518][ T7708] swapcached 8024064 [ 307.873444][ T7708] pgpgin 329206 [ 307.898925][ T7708] pgpgout 329203 [ 307.902494][ T7708] pgfault 331392 [ 307.906084][ T7708] pgmajfault 268 [ 308.022340][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 308.032695][ T7708] inactive_anon 4096 [ 308.078739][ T7708] active_anon 0 [ 308.107233][ T7708] inactive_file 8192 [ 308.131753][ T7708] active_file 0 [ 308.167618][ T7708] unevictable 0 [ 308.209487][ T7708] hierarchical_memory_limit 314572800 [ 308.260263][ T7708] hierarchical_memsw_limit 9223372036854771712 [ 308.266493][ T7708] total_cache 0 [ 308.270022][ T7708] total_rss 0 [ 308.273323][ T7708] total_shmem 0 [ 308.277507][ T7708] total_mapped_file 0 [ 308.281502][ T7708] total_dirty 0 [ 308.285018][ T7708] total_writeback 4096 [ 308.289476][ T7708] total_workingset_refault_anon 883 [ 308.294686][ T7708] total_workingset_refault_file 656 [ 308.300473][ T7708] total_swap 741376 [ 308.304395][ T7708] total_swapcached 8024064 [ 308.327714][ T7708] total_pgpgin 329206 [ 308.331954][ T7708] total_pgpgout 329203 [ 308.336102][ T7708] total_pgfault 331392 [ 308.342589][ T7708] total_pgmajfault 268 [ 308.346850][ T7708] total_inactive_anon 4096 [ 308.351266][ T7708] total_active_anon 0 [ 308.355364][ T7708] total_inactive_file 8192 [ 308.360086][ T7708] total_active_file 0 [ 308.364063][ T7708] total_unevictable 0 [ 308.379571][ T7742] Q6`Ҙ speed is unknown, defaulting to 1000 [ 308.386323][ T7708] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1062,pid=7708,uid=0 [ 308.434365][ T7708] Memory cgroup out of memory: Killed process 7708 (syz.2.1062) total-vm:98528kB, anon-rss:1244kB, file-rss:26312kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 308.486287][ T7742] xfrm0 speed is unknown, defaulting to 1000 [ 309.056733][ T7744] Q6`Ҙ speed is unknown, defaulting to 1000 [ 309.063332][ T7744] xfrm0 speed is unknown, defaulting to 1000 [ 309.101144][ T7763] Q6`Ҙ speed is unknown, defaulting to 1000 [ 309.130718][ T7763] xfrm0 speed is unknown, defaulting to 1000 [ 309.423492][ T7771] Q6`Ҙ speed is unknown, defaulting to 1000 [ 309.430305][ T7771] xfrm0 speed is unknown, defaulting to 1000 [ 310.841374][ T7781] Q6`Ҙ speed is unknown, defaulting to 1000 [ 310.848618][ T7781] xfrm0 speed is unknown, defaulting to 1000 [ 311.602764][ T7787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 312.177385][ T7798] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 312.185736][ T7798] xt_TPROXY: Can be used only with -p tcp or -p udp [ 312.463992][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'. [ 313.063652][ T7821] batadv_slave_0: entered promiscuous mode [ 313.671479][ T28] audit: type=1400 audit(1773044253.044:874): avc: denied { shutdown } for pid=7829 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.695349][ T28] audit: type=1400 audit(1773044253.044:875): avc: denied { ioctl } for pid=7829 comm="syz.2.1094" path="socket:[20208]" dev="sockfs" ino=20208 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.089896][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 315.654477][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.724275][ T7872] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 315.732134][ T7872] xt_TPROXY: Can be used only with -p tcp or -p udp [ 316.349623][ T7882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7882 comm=syz.3.1109 [ 316.769828][ T28] audit: type=1326 audit(1773044256.157:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 316.817943][ T28] audit: type=1326 audit(1773044256.157:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 316.865886][ T28] audit: type=1326 audit(1773044256.177:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 316.919086][ T28] audit: type=1326 audit(1773044256.177:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 316.964445][ T28] audit: type=1326 audit(1773044256.177:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 317.018272][ T28] audit: type=1326 audit(1773044256.177:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 317.148971][ T28] audit: type=1326 audit(1773044256.177:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 317.233192][ T28] audit: type=1326 audit(1773044256.177:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658fe6c799 code=0x7ffc0000 [ 319.970291][ T7928] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 319.977942][ T7928] xt_TPROXY: Can be used only with -p tcp or -p udp [ 321.570921][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 321.597219][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 321.597255][ T28] audit: type=1400 audit(1773044260.980:911): avc: denied { setopt } for pid=7961 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.390580][ T7962] Set syz1 is full, maxelem 65536 reached [ 324.715261][ T28] audit: type=1400 audit(1773044264.092:912): avc: denied { name_connect } for pid=7999 comm="syz.3.1145" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 324.814080][ T28] audit: type=1400 audit(1773044264.162:913): avc: denied { name_connect } for pid=7999 comm="syz.3.1145" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 326.460296][ T8031] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1155'. [ 326.641208][ T28] audit: type=1400 audit(1773044266.024:914): avc: denied { setopt } for pid=8036 comm="syz.3.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.685282][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 326.705277][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.794355][ T28] audit: type=1400 audit(1773044522.188:915): avc: denied { ioctl } for pid=8041 comm="syz.2.1159" path="socket:[21610]" dev="sockfs" ino=21610 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 326.918814][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.239980][ T28] audit: type=1326 audit(1773044522.628:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 327.332367][ T28] audit: type=1326 audit(1773044522.628:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 327.880903][ T28] audit: type=1326 audit(1773044522.628:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 327.904750][ T28] audit: type=1326 audit(1773044522.628:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 327.928385][ T28] audit: type=1326 audit(1773044522.628:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 327.952138][ T28] audit: type=1326 audit(1773044522.628:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 327.975810][ T28] audit: type=1326 audit(1773044522.628:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 327.999879][ T28] audit: type=1326 audit(1773044522.658:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48bfdc799 code=0x7ffc0000 [ 332.692037][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 332.692063][ T28] audit: type=1326 audit(1773044527.748:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 333.672405][ T28] audit: type=1326 audit(1773044527.748:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 333.695984][ T28] audit: type=1326 audit(1773044527.748:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 333.719516][ T28] audit: type=1326 audit(1773044527.748:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 334.167216][ T8113] Q6`Ҙ speed is unknown, defaulting to 1000 [ 334.174209][ T8113] xfrm0 speed is unknown, defaulting to 1000 [ 334.293854][ T28] audit: type=1326 audit(1773044527.748:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 334.456772][ T28] audit: type=1326 audit(1773044527.758:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 334.603773][ T28] audit: type=1326 audit(1773044527.758:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 334.766182][ T28] audit: type=1326 audit(1773044527.768:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 334.843179][ T28] audit: type=1326 audit(1773044527.768:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 334.896815][ T28] audit: type=1326 audit(1773044527.778:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fddafbec799 code=0x7ffc0000 [ 335.496901][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 335.524483][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 336.129944][ T8142] xt_TCPMSS: Only works on TCP SYN packets [ 338.260747][ T8156] Q6`Ҙ speed is unknown, defaulting to 1000 [ 338.267441][ T8156] xfrm0 speed is unknown, defaulting to 1000 [ 338.374442][ T8161] Q6`Ҙ speed is unknown, defaulting to 1000 [ 338.381293][ T8161] xfrm0 speed is unknown, defaulting to 1000 [ 340.490666][ T8191] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 341.198612][ T8200] Q6`Ҙ speed is unknown, defaulting to 1000 [ 341.205214][ T8200] xfrm0 speed is unknown, defaulting to 1000 [ 341.299473][ T8204] netlink: 'syz.1.1207': attribute type 16 has an invalid length. [ 341.310482][ T8204] netlink: 'syz.1.1207': attribute type 17 has an invalid length. [ 341.367660][ T8204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.386331][ T8204] dummy0: left promiscuous mode [ 341.398863][ T8204] dummy0: left allmulticast mode [ 341.415193][ T8204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.096514][ T8226] Q6`Ҙ speed is unknown, defaulting to 1000 [ 342.103242][ T8226] xfrm0 speed is unknown, defaulting to 1000 [ 342.537867][ T8215] syz.1.1211 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 342.554790][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.1.1211 Tainted: G W syzkaller #0 PREEMPT(full) [ 342.554854][ T8215] Tainted: [W]=WARN [ 342.554861][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.554897][ T8215] Call Trace: [ 342.554903][ T8215] [ 342.554917][ T8215] __dump_stack+0x1d/0x30 [ 342.554943][ T8215] dump_stack_lvl+0x95/0xd0 [ 342.554966][ T8215] dump_stack+0x15/0x1b [ 342.555045][ T8215] dump_header+0x80/0x240 [ 342.555068][ T8215] oom_kill_process+0x295/0x350 [ 342.555087][ T8215] out_of_memory+0x97d/0xb80 [ 342.555140][ T8215] try_charge_memcg+0x62e/0xa10 [ 342.555175][ T8215] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 342.555248][ T8215] __swap_cache_prepare_and_add+0x386/0x530 [ 342.555277][ T8215] swap_cache_alloc_folio+0xa2/0x120 [ 342.555304][ T8215] swap_cluster_readahead+0x36b/0x3d0 [ 342.555384][ T8215] swapin_readahead+0xde/0x840 [ 342.555444][ T8215] ? __rcu_read_unlock+0x4e/0x70 [ 342.555465][ T8215] ? __rcu_read_unlock+0x4e/0x70 [ 342.555485][ T8215] ? swap_cache_get_folio+0x26f/0x280 [ 342.555554][ T8215] do_swap_page+0x30d/0x2220 [ 342.555583][ T8215] ? refill_obj_stock+0x246/0x400 [ 342.555606][ T8215] ? __rcu_read_unlock+0x4e/0x70 [ 342.555621][ T8215] ? __rcu_read_lock+0x36/0x50 [ 342.555640][ T8215] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 342.555733][ T8215] handle_mm_fault+0xb40/0x3020 [ 342.555764][ T8215] ? vma_start_read+0x1c7/0x2c0 [ 342.555846][ T8215] do_user_addr_fault+0x62f/0x1050 [ 342.555874][ T8215] ? trace_page_fault_user+0x1f/0xe0 [ 342.555901][ T8215] exc_page_fault+0x62/0xa0 [ 342.555965][ T8215] asm_exc_page_fault+0x26/0x30 [ 342.555986][ T8215] RIP: 0033:0x7f658fe6c7a1 [ 342.556001][ T8215] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 342.556129][ T8215] RSP: 002b:00007ffddfe54478 EFLAGS: 00010217 [ 342.556177][ T8215] RAX: 0000000000000000 RBX: 00007f65900e7da0 RCX: 00007f658fe6c799 [ 342.556189][ T8215] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 342.556199][ T8215] RBP: 00007f65900e7da0 R08: 0000000000000006 R09: 0000000000000000 [ 342.556210][ T8215] R10: 00007f65900e7cb0 R11: 0000000000000246 R12: 0000000000053b17 [ 342.556224][ T8215] R13: 00007f65900e609c R14: 0000000000053845 R15: 00007f65900e6090 [ 342.556239][ T8215] [ 342.556270][ T8215] memory: usage 307200kB, limit 307200kB, failcnt 2803 [ 343.011074][ T8215] memory+swap: usage 308076kB, limit 9007199254740988kB, failcnt 0 [ 343.038450][ T8215] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 343.057139][ T8215] Memory cgroup stats for /syz1: [ 343.057528][ T8215] cache 0 [ 343.079061][ T8215] rss 4096 [ 343.088737][ T8215] shmem 0 [ 343.098704][ T8215] mapped_file 0 [ 343.109323][ T8215] dirty 0 [ 343.119527][ T8215] writeback 0 [ 343.131183][ T8215] workingset_refault_anon 841 [ 343.144106][ T8215] workingset_refault_file 1288 [ 343.158497][ T8215] swap 901120 [ 343.167311][ T8215] swapcached 10784768 [ 343.178748][ T8215] pgpgin 341553 [ 343.188088][ T8215] pgpgout 341549 [ 343.198510][ T8215] pgfault 368929 [ 343.209190][ T8215] pgmajfault 171 [ 343.220176][ T8215] inactive_anon 0 [ 343.229244][ T8215] active_anon 4096 [ 343.233045][ T8215] inactive_file 0 [ 343.236789][ T8215] active_file 12288 [ 343.240618][ T8215] unevictable 0 [ 343.244200][ T8215] hierarchical_memory_limit 314572800 [ 343.249603][ T8215] hierarchical_memsw_limit 9223372036854771712 [ 343.255848][ T8215] total_cache 0 [ 343.259374][ T8215] total_rss 4096 [ 343.262965][ T8215] total_shmem 0 [ 343.275674][ T8215] total_mapped_file 0 [ 343.279748][ T8215] total_dirty 0 [ 343.283246][ T8215] total_writeback 0 [ 343.287110][ T8215] total_workingset_refault_anon 841 [ 343.292459][ T8215] total_workingset_refault_file 1288 [ 343.301932][ T8215] total_swap 901120 [ 343.311069][ T8215] total_swapcached 10784768 [ 343.321901][ T8215] total_pgpgin 341553 [ 343.330137][ T8215] total_pgpgout 341549 [ 343.339393][ T8215] total_pgfault 368929 [ 343.349709][ T8215] total_pgmajfault 171 [ 343.357974][ T8215] total_inactive_anon 0 [ 343.366312][ T8215] total_active_anon 4096 [ 343.374696][ T8215] total_inactive_file 0 [ 343.384099][ T8215] total_active_file 12288 [ 343.392607][ T8215] total_unevictable 0 [ 343.400748][ T8215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.210,pid=4454,uid=0 [ 343.429824][ T8215] Memory cgroup out of memory: Killed process 4454 (syz.1.210) total-vm:94028kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 343.519672][ T8215] syz.1.1211 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 343.541732][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.1.1211 Tainted: G W syzkaller #0 PREEMPT(full) [ 343.541763][ T8215] Tainted: [W]=WARN [ 343.541770][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.541782][ T8215] Call Trace: [ 343.541790][ T8215] [ 343.541798][ T8215] __dump_stack+0x1d/0x30 [ 343.541882][ T8215] dump_stack_lvl+0x95/0xd0 [ 343.541901][ T8215] dump_stack+0x15/0x1b [ 343.541919][ T8215] dump_header+0x80/0x240 [ 343.541938][ T8215] oom_kill_process+0x295/0x350 [ 343.542016][ T8215] out_of_memory+0x97d/0xb80 [ 343.542040][ T8215] try_charge_memcg+0x62e/0xa10 [ 343.542076][ T8215] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 343.542178][ T8215] __swap_cache_prepare_and_add+0x386/0x530 [ 343.542279][ T8215] swap_cache_alloc_folio+0xa2/0x120 [ 343.542302][ T8215] swap_cluster_readahead+0x26e/0x3d0 [ 343.542449][ T8215] swapin_readahead+0xde/0x840 [ 343.542476][ T8215] ? _raw_spin_unlock+0x9/0x30 [ 343.542496][ T8215] ? swap_put_entries_cluster+0x385/0x3a0 [ 343.542521][ T8215] ? swap_put_entries_cluster+0x111/0x3a0 [ 343.542608][ T8215] ? __rcu_read_unlock+0x4e/0x70 [ 343.542674][ T8215] ? swap_cache_get_folio+0x26f/0x280 [ 343.542702][ T8215] do_swap_page+0x30d/0x2220 [ 343.542759][ T8215] ? css_rstat_updated+0xbb/0x280 [ 343.542801][ T8215] ? __rcu_read_lock+0x36/0x50 [ 343.542817][ T8215] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 343.542900][ T8215] handle_mm_fault+0xb40/0x3020 [ 343.542992][ T8215] ? vma_start_read+0x1c7/0x2c0 [ 343.543014][ T8215] do_user_addr_fault+0x62f/0x1050 [ 343.543039][ T8215] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 343.543063][ T8215] ? trace_page_fault_user+0x1f/0xe0 [ 343.543127][ T8215] exc_page_fault+0x62/0xa0 [ 343.543155][ T8215] asm_exc_page_fault+0x26/0x30 [ 343.543255][ T8215] RIP: 0033:0x7f658fd23d60 [ 343.543272][ T8215] Code: e8 95 d4 ff ff 48 8b 05 66 e3 3b 00 48 89 18 48 8b 05 54 e3 3b 00 c7 00 00 00 01 00 5b c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 <80> 3d 42 40 3c 00 00 48 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 [ 343.543290][ T8215] RSP: 002b:00007ffddfe54468 EFLAGS: 00010246 [ 343.543306][ T8215] RAX: 0000000000000000 RBX: 00007f65900e5f40 RCX: 00007f658fe6c799 [ 343.543321][ T8215] RDX: 0000000000000000 RSI: 000000000000001e RDI: 00007f65900e5f40 [ 343.543346][ T8215] RBP: 00007f65900e7da0 R08: 0000000000000006 R09: 0000000000000000 [ 343.543357][ T8215] R10: 00007f65900e7cb0 R11: 0000000000000246 R12: 0000000000053b17 [ 343.543368][ T8215] R13: 00007f65900e609c R14: 0000000000053845 R15: 00007f65900e6090 [ 343.543384][ T8215] [ 343.874678][ T8215] memory: usage 307200kB, limit 307200kB, failcnt 2933 [ 343.881600][ T8215] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 343.889922][ T8215] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 343.897437][ T8215] Memory cgroup stats for /syz1: [ 343.897639][ T8215] cache 0 [ 343.905938][ T8215] rss 0 [ 343.908715][ T8215] shmem 0 [ 343.911663][ T8215] mapped_file 0 [ 343.915413][ T8215] dirty 0 [ 343.918415][ T8215] writeback 4096 [ 343.922272][ T8215] workingset_refault_anon 846 [ 343.926930][ T8215] workingset_refault_file 1289 [ 343.931739][ T8215] swap 724992 [ 343.935310][ T8215] swapcached 10784768 [ 343.939311][ T8215] pgpgin 341559 [ 343.943117][ T8215] pgpgout 341555 [ 343.946671][ T8215] pgfault 368934 [ 343.950206][ T8215] pgmajfault 175 [ 343.954060][ T8215] inactive_anon 4096 [ 343.958124][ T8215] active_anon 0 [ 343.961612][ T8215] inactive_file 12288 [ 343.966042][ T8215] active_file 0 [ 343.969551][ T8215] unevictable 0 [ 343.973215][ T8215] hierarchical_memory_limit 314572800 [ 343.978780][ T8215] hierarchical_memsw_limit 9223372036854771712 [ 343.987654][ T8215] total_cache 0 [ 343.991213][ T8215] total_rss 0 [ 343.994763][ T8215] total_shmem 0 [ 343.998264][ T8215] total_mapped_file 0 [ 344.002563][ T8215] total_dirty 0 [ 344.006111][ T8215] total_writeback 4096 [ 344.010282][ T8215] total_workingset_refault_anon 846 [ 344.015807][ T8215] total_workingset_refault_file 1289 [ 344.021119][ T8215] total_swap 724992 [ 344.025266][ T8215] total_swapcached 10784768 [ 344.029975][ T8215] total_pgpgin 341559 [ 344.034155][ T8215] total_pgpgout 341555 [ 344.038286][ T8215] total_pgfault 368934 [ 344.042572][ T8215] total_pgmajfault 175 [ 344.046699][ T8215] total_inactive_anon 4096 [ 344.051311][ T8215] total_active_anon 0 [ 344.062877][ T8215] total_inactive_file 12288 [ 344.067449][ T8215] total_active_file 0 [ 344.081709][ T8215] total_unevictable 0 [ 344.085870][ T8215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1211,pid=8215,uid=0 [ 344.100713][ T8215] Memory cgroup out of memory: Killed process 8215 (syz.1.1211) total-vm:94160kB, anon-rss:1224kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 345.680540][ T8257] blktrace: Concurrent blktraces are not allowed on loop8 [ 346.315951][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 346.331920][ T8264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8264 comm=syz.1.1225 [ 346.516601][ T8265] Q6`Ҙ speed is unknown, defaulting to 1000 [ 346.523222][ T8265] xfrm0 speed is unknown, defaulting to 1000 [ 347.243282][ T8277] Q6`Ҙ speed is unknown, defaulting to 1000 [ 347.249845][ T8277] xfrm0 speed is unknown, defaulting to 1000 [ 350.044348][ T8306] Q6`Ҙ speed is unknown, defaulting to 1000 [ 350.051214][ T8306] xfrm0 speed is unknown, defaulting to 1000 [ 350.602038][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 350.602069][ T28] audit: type=1400 audit(1773044545.938:1153): avc: denied { read } for pid=8309 comm="syz.0.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.739342][ T8329] Q6`Ҙ speed is unknown, defaulting to 1000 [ 352.750570][ T8329] xfrm0 speed is unknown, defaulting to 1000 [ 353.588844][ T28] audit: type=1400 audit(1773044548.978:1154): avc: denied { ioctl } for pid=8331 comm="syz.3.1243" path="socket:[22254]" dev="sockfs" ino=22254 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 353.625531][ T28] audit: type=1400 audit(1773044549.018:1155): avc: denied { create } for pid=8333 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 354.652060][ T8350] sch_fq: defrate 4294967295 ignored. [ 354.658233][ T8350] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1247'. [ 356.379358][ T8357] Q6`Ҙ speed is unknown, defaulting to 1000 [ 356.390000][ T8357] xfrm0 speed is unknown, defaulting to 1000 [ 356.888692][ T28] audit: type=1326 audit(1773044552.278:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 356.932610][ T8374] Q6`Ҙ speed is unknown, defaulting to 1000 [ 356.939274][ T8374] xfrm0 speed is unknown, defaulting to 1000 [ 356.967466][ T28] audit: type=1326 audit(1773044552.278:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.128832][ T28] audit: type=1326 audit(1773044552.348:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.158460][ T28] audit: type=1326 audit(1773044552.348:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.234282][ T28] audit: type=1326 audit(1773044552.348:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.340345][ T28] audit: type=1326 audit(1773044552.348:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.421686][ T28] audit: type=1326 audit(1773044552.358:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.446713][ T28] audit: type=1326 audit(1773044552.358:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.471285][ T28] audit: type=1326 audit(1773044552.358:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.495726][ T28] audit: type=1326 audit(1773044552.358:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540da2c799 code=0x7ffc0000 [ 357.992880][ T8368] syz.4.1253 (8368) used greatest stack depth: 6752 bytes left [ 358.726332][ T8402] Q6`Ҙ speed is unknown, defaulting to 1000 [ 358.733313][ T8402] xfrm0 speed is unknown, defaulting to 1000 [ 360.740483][ T8415] Q6`Ҙ speed is unknown, defaulting to 1000 [ 360.747051][ T8415] xfrm0 speed is unknown, defaulting to 1000 [ 361.325988][ T8373] Set syz1 is full, maxelem 65536 reached [ 361.577154][ T8427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1267'. [ 361.678072][ T8427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1267'. [ 363.016015][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 363.016036][ T28] audit: type=1400 audit(1773044558.408:1181): avc: denied { mount } for pid=8439 comm="syz.4.1272" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 363.047529][ T28] audit: type=1400 audit(1773044558.438:1182): avc: denied { search } for pid=8439 comm="syz.4.1272" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.384315][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 365.717013][ T8449] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1273'. [ 366.338641][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1277'. [ 366.628614][ T8468] netlink: 'syz.2.1279': attribute type 39 has an invalid length. [ 366.642244][ T8468] hsr_slave_1 (unregistering): left promiscuous mode [ 366.721962][ T8487] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=534 sclass=netlink_xfrm_socket pid=8487 comm=syz.3.1280 [ 366.998270][ T8491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.166881][ T8496] Q6`Ҙ speed is unknown, defaulting to 1000 [ 367.177177][ T8496] xfrm0 speed is unknown, defaulting to 1000 [ 370.616734][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 370.625780][ T8539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.029604][ T8533] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.1294'. [ 371.039212][ T8533] netlink: zone id is out of range [ 371.044474][ T8533] netlink: zone id is out of range [ 371.049694][ T8533] netlink: zone id is out of range [ 371.054882][ T8533] netlink: zone id is out of range [ 371.060119][ T8533] netlink: zone id is out of range [ 371.065311][ T8533] netlink: zone id is out of range [ 371.070454][ T8533] netlink: zone id is out of range [ 371.075617][ T8533] netlink: zone id is out of range [ 371.080790][ T8533] netlink: zone id is out of range [ 371.138402][ T8540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1293'. [ 371.149085][ T8539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.250719][ T8557] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1300'. [ 373.297611][ T8559] netlink: 'syz.2.1297': attribute type 25 has an invalid length. [ 373.318457][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'. [ 373.549024][ T8553] net_ratelimit: 14 callbacks suppressed [ 373.549077][ T8553] openvswitch: netlink: Key type 294 is out of range max 32 [ 374.362053][ T28] audit: type=1400 audit(2000000002.809:1183): avc: denied { write } for pid=8569 comm="syz.4.1304" lport=44299 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 375.984264][ T8592] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1309'. [ 375.996464][ T8592] netlink: 'syz.2.1309': attribute type 36 has an invalid length. [ 376.012844][ T8592] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 376.022921][ T8592] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 376.045392][ T8592] netlink: 'syz.2.1309': attribute type 10 has an invalid length. [ 377.084756][ T8602] netlink: 'syz.0.1313': attribute type 24 has an invalid length. [ 379.302633][ T8616] Q6`Ҙ speed is unknown, defaulting to 1000 [ 379.309245][ T8616] xfrm0 speed is unknown, defaulting to 1000 [ 379.955143][ T28] audit: type=1400 audit(2000000008.409:1184): avc: denied { accept } for pid=8626 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.382230][ T28] audit: type=1400 audit(2000000008.829:1185): avc: denied { relabelfrom } for pid=8645 comm="syz.4.1327" name="" dev="pipefs" ino=24574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 384.669793][ T8653] syzkaller0: entered promiscuous mode [ 384.683269][ T8653] syzkaller0: entered allmulticast mode [ 388.556275][ T8714] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 389.757622][ T8729] Q6`Ҙ speed is unknown, defaulting to 1000 [ 389.772577][ T8729] xfrm0 speed is unknown, defaulting to 1000 [ 390.048134][ T8737] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 391.467945][ T8751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'. [ 391.487306][ T8734] Q6`Ҙ speed is unknown, defaulting to 1000 [ 391.494028][ T8734] xfrm0 speed is unknown, defaulting to 1000 [ 391.532533][ T8751] ip_vti0: Master is either lo or non-ether device [ 391.696306][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1358'. [ 392.341832][ T28] audit: type=1400 audit(2000000020.599:1186): avc: denied { ioctl } for pid=8774 comm="syz.1.1362" path="socket:[25516]" dev="sockfs" ino=25516 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 392.410765][ T8787] Q6`Ҙ speed is unknown, defaulting to 1000 [ 392.436110][ T8787] xfrm0 speed is unknown, defaulting to 1000 [ 392.613303][ T8795] ================================================================== [ 392.621418][ T8795] BUG: KCSAN: data-race in atime_needs_update / inode_update_time [ 392.629252][ T8795] [ 392.631578][ T8795] write to 0xffff88812ce4a9a4 of 4 bytes by task 8794 on cpu 0: [ 392.639216][ T8795] inode_update_time+0x2cc/0x360 [ 392.644179][ T8795] file_update_time_flags+0x277/0x2e0 [ 392.649559][ T8795] file_update_time+0x17/0x20 [ 392.654326][ T8795] shmem_file_write_iter+0x9c/0xf0 [ 392.659451][ T8795] iter_file_splice_write+0x6c4/0xa80 [ 392.664837][ T8795] direct_splice_actor+0x156/0x2a0 [ 392.670029][ T8795] splice_direct_to_actor+0x311/0x670 [ 392.675409][ T8795] do_splice_direct+0x119/0x1a0 [ 392.680286][ T8795] do_sendfile+0x382/0x650 [ 392.684822][ T8795] __x64_sys_sendfile64+0x105/0x150 [ 392.690042][ T8795] x64_sys_call+0x2dc4/0x3020 [ 392.694754][ T8795] do_syscall_64+0x12c/0x370 [ 392.699358][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.705264][ T8795] [ 392.707586][ T8795] read to 0xffff88812ce4a9a4 of 4 bytes by task 8795 on cpu 1: [ 392.715124][ T8795] atime_needs_update+0x2a8/0x3e0 [ 392.720164][ T8795] touch_atime+0x4a/0x330 [ 392.724501][ T8795] shmem_file_splice_read+0x5b1/0x600 [ 392.729890][ T8795] splice_direct_to_actor+0x26e/0x670 [ 392.735263][ T8795] do_splice_direct+0x119/0x1a0 [ 392.740128][ T8795] do_sendfile+0x382/0x650 [ 392.744652][ T8795] __x64_sys_sendfile64+0x105/0x150 [ 392.749948][ T8795] x64_sys_call+0x2dc4/0x3020 [ 392.754635][ T8795] do_syscall_64+0x12c/0x370 [ 392.759245][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.765141][ T8795] [ 392.767455][ T8795] value changed: 0x03938604 -> 0x042c1c84 [ 392.773174][ T8795] [ 392.775490][ T8795] Reported by Kernel Concurrency Sanitizer on: [ 392.781638][ T8795] CPU: 1 UID: 0 PID: 8795 Comm: syz.2.1365 Tainted: G W syzkaller #0 PREEMPT(full) [ 392.792493][ T8795] Tainted: [W]=WARN [ 392.796286][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.806418][ T8795] ==================================================================