last executing test programs: 1m29.891308072s ago: executing program 1 (id=17): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x9, 0x1000, @loopback, 0x20}, {0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x38}}, r3, 0x99d}}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@rand_addr, 0x0}, &(0x7f0000000640)=0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x40, r7, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffff2}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000534f31fcc8a6da8b294fb6a8af6b9604fea42ce104b829de618059f9d3e0d15a89ed54a25ed3499e4f90cd94e6469aee8b4520fbee06a0fde17accc14bd22f20325c4497d0757eb347b457df50c0cbc4f3f1bbb9091a07a4855062d3fddff00292d06d17b9843d2ab6efe3d17217295ef174df29117d9954887dbbfe8349207ed23d22f2", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000eb4a0600ffffffff95000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0xdd, &(0x7f0000000500)=""/221, 0x41000, 0x2, '\x00', r5, 0x25, r6, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x92, 0x400000}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000740)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0x2, 0x6}, {0x4, 0x5, 0x2, 0x9}, {0x4, 0x4, 0x5, 0x5}, {0x4, 0x5, 0x10, 0xb}, {0x5, 0x5, 0xf, 0x5}, {0x0, 0x5, 0xe, 0x1}, {0x2, 0x1, 0xc}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000002000000000000060000000006001500040000000c0016800800060003baaee69df957370000"], 0x30}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1db) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000380), 0x1, r1}, 0x38) 1m28.931898076s ago: executing program 2 (id=21): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0xdd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_create1(0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x3}, 0x10b518, 0x0, 0x11000, 0x1, 0xffffffff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r0], 0x28}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, r1, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="6002000031fcb05f78733d99aece22", @ANYRES16=r3, @ANYBLOB="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"], 0x260}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x51) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) fcntl$setpipe(r4, 0x407, 0xfff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000a80)={@desc={0x1, 0x0, @desc3}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000480)={0x1d, r7, 0x3}, 0x18) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r8, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x2000011) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r5) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r10, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1e6064, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) clock_gettime(0x3, &(0x7f0000000b40)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000b00)=[{0x4, 0x0, 0x1000}, {0x4, 0x76c, 0x3000}, {0x3, 0x200}], 0x3, &(0x7f0000000b80)={r11, r12+10000000}) 1m28.652031623s ago: executing program 1 (id=22): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="14", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7f}, &(0x7f00000003c0)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3dc5, &(0x7f0000000040)={0x0, 0x5b9e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x5de2}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000000180), 0x4000095, 0x0) 1m26.726623652s ago: executing program 2 (id=29): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800404, &(0x7f00000000c0), 0x2, 0x786, &(0x7f0000000780)="$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") unshare(0x62020600) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000f40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x150, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x80}}}}}]}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f80)={'syztnl1\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x42, 0x98) fadvise64(r1, 0x403, 0x3, 0x4) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) 1m25.793079845s ago: executing program 4 (id=35): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x1, 0xc, 0x40010, r0, 0x310f4b27) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000001000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mremap(&(0x7f0000ffe000/0x2000)=nil, 0xf7ff, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x8, 0x97, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0xe, 0x2c, 0x5, 0x5, 0x6, 0x7, 0x8, 0x9, 0xf, [0xed3, 0x7, 0x8, 0x20, 0x400, 0x0, 0x4, 0x7fffffff], [0x9, 0x4c2, 0x100, 0xc, 0x1000, 0x4, 0x7, 0x4, 0x8, 0x17f]}}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) fcntl$dupfd(r6, 0x0, r6) sendmmsg$inet(r6, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="81f398a269c28f714f17c745c4c445309738fde5d823c17ceb240a05c1ad008384d025352f4d424a97db9939a79e00e373c257f439add51348b4daa70caaae87fdd8174f05ecac9d7b060033d10b4a14865b4e3fa0f761204589337641c67e65", 0x60}, {&(0x7f00000004c0)="6979ae8cd99b18ad52b454eb76bf65c3ab89dcaa6de1e5eee94b5d739639ba0572b7dcdca9e55748d8498fe669f05d58e1197bf52d862a8680c3fc1cb21e4443", 0x40}], 0x2, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x73, [@dev={0xac, 0x14, 0x14, 0x38}, @empty, @empty, @multicast1, @local]}, @lsrr={0x83, 0xf, 0x4a, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x13, 0x91, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010100]}]}}}, @ip_tos_u8={{0x11}}], 0x98}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000780)="ab30f48b73d66f420681b9f88885b53122f9ba73c27ac1a477989117b7100c97ad41dad81f4eccdc266c035f4a064bf957814a74d7b58fe4ac2ec3ff27e5b00a4ba8a55f60c196492a01d3c2a6fac1dccdb0a983f566c9da650b3dac60657aaefbe39d1a544b45a87d", 0x69}, {&(0x7f0000000880)="7c5a0e7741960eb4d46a51125cc816c9e25f845d3a6e98fcc05cf622bde4a744f80ebf08e11f45125d595d84b7a3c02d043e1b9670eec461b45f61ef693cd031b83e2580ec0caa52439295e0719aabaa7958f347edf0aaf07683684b628a141d5f38e83dff73", 0x66}, {&(0x7f0000000900)="8c1d4bd62a8460ff5b4154a204be80968bd063a1d305f94ed8e86f9c3144bc5c793960aad46d961683c0c4969f2c0599be0614e1b692289e7854216f7c55273749d9f089582e5735ba58d1af6d339d749a3077dad995ef9a64ec460d424f97f28a65ebb1e2d82cc0cbf9e4", 0x6b}], 0x3, &(0x7f00000009c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x48}}], 0x2, 0x8084) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='FROZEN\x00', 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m25.082758013s ago: executing program 2 (id=37): socket$inet(0x2, 0x802, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) preadv(r0, 0x0, 0x0, 0x200005, 0x92874fa) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x22020600) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@known='security.selinux\x00', &(0x7f00000003c0)='\x00\x00', 0xc6a2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x80, r2, 0x0, 0x7}, 0x38) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x42801, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000640)=0x9) r4 = socket(0x18, 0x2, 0x84000004) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4b33f3fe}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xffffff01}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xfffffffe}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x80}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x3}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x100}]}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x4b63, 0x3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) close_range(r1, r3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1056}, 0x8000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796112000000000000007e00000008000300989e773400d630ff94", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) open(&(0x7f00000033c0)='./bus\x00', 0x14927e, 0x0) 1m24.924970147s ago: executing program 4 (id=39): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000005000000000200000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c0002800f00014000000012080003400000000208000240fcffff8208000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x400c891}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 1m24.624822824s ago: executing program 4 (id=40): socket$inet_mptcp(0x2, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x103992, 0x1, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710424000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xfd90, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) write(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ca"], 0x1, 0x262, &(0x7f0000000340)="$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") sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000880)="0400000002000000000000007e0100003801") 1m24.177285556s ago: executing program 1 (id=22): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="14", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7f}, &(0x7f00000003c0)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3dc5, &(0x7f0000000040)={0x0, 0x5b9e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x5de2}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000000180), 0x4000095, 0x0) 1m24.163310816s ago: executing program 4 (id=43): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f000089e000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r2, 0xffffd000) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000800)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x101d0}}], 0x40001b6, 0x0) 1m23.895008913s ago: executing program 1 (id=44): gettid() pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000440)=""/262, 0x106) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000640)={[{@grpquota}, {@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x1, 0x500, &(0x7f0000000680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) capset(&(0x7f0000000d00)={0x19980330}, &(0x7f0000000d40)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(r4, 0x0, 0xee01) fchown(r4, 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='3', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001bc0)=@delchain={0x34, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xc}, {}, {0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x24004004) 1m23.735073127s ago: executing program 4 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x9, 0x1000, @loopback, 0x20}, {0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x38}}, r3, 0x99d}}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@rand_addr, 0x0}, &(0x7f0000000640)=0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x40, r7, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffff2}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000534f31fcc8a6da8b294fb6a8af6b9604fea42ce104b829de618059f9d3e0d15a89ed54a25ed3499e4f90cd94e6469aee8b4520fbee06a0fde17accc14bd22f20325c4497d0757eb347b457df50c0cbc4f3f1bbb9091a07a4855062d3fddff00292d06d17b9843d2ab6efe3d17217295ef174df29117d9954887dbbfe8349207ed23d22f2", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000eb4a0600ffffffff95000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0xdd, &(0x7f0000000500)=""/221, 0x41000, 0x2, '\x00', r5, 0x25, r6, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x92, 0x400000}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000740)=[{0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0x2, 0x6}, {0x4, 0x5, 0x2, 0x9}, {0x4, 0x4, 0x5, 0x5}, {0x4, 0x5, 0x10, 0xb}, {0x5, 0x5, 0xf, 0x5}, {0x0, 0x5, 0xe, 0x1}, {0x2, 0x1, 0xc}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000002000000000000060000000006001500040000000c0016800800060003baaee69df957370000"], 0x30}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1db) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000380), 0x1, r1}, 0x38) 1m23.191620131s ago: executing program 1 (id=47): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB="312ba7f79f91b2f480a0d60a013f61353671dff379860a9c60d20d506067355c28dc3ff1316b91f69e7237799d7e6836d63782bf5992185f62dc1c5da324298bb7488dce8f28f212c075b01aa0c429da9972fce050710fa4c11ff56b49d87872c5d809a3efe7953a03e4d4694ac26f1e751ff72a2ac3de22918d16256cf7e7682e6db47e8f2dfbc2aed81181f9f90c8c6b7c34ed29db8d", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x5, 0x56d, &(0x7f0000001500)="$eJzs3V1v01gawPHHpV2yWam7WlYIVQUOZVcqUglOAkERV17nJDUkdmQ7qL1CFU1RRQorykrb3rC9YWakmQ/BXM6HmG+E5iMw8rHT17wM9IVO5/+L2uPYJz6PU+s8PW18LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCy3ZttFS5qe31lSw7m1MGjtPc1efWSF3DlQjGhXxEq+JJeTa+mqa//Y23w1+TYns+mzWcklRU62/3L1b4+uTE70Xz8i4M/y4xfuaXNr++VKr9d9c1KBnEPXLw/f1tC+FwVey2lo5UWBqlYq9r3FeqTqXlNHy1GsW8oNtRMHoZp376hitVpWurAcdPxGzWnq/sqHd0u2XVGPC23thFHg33tciNxFr9n0/Iapk2xO6jxMTsQnXqxi7bSUWlvvdcvjDiCpVPwtlUrjKpXsUqlYLJWKlQfVBw9te/LICvsQOVLj5E5a/D6dYO8NHM9Elv+lKZ740pElUQMfrtQklEBaQ7Zn+vn/X/f0yHb35/9+lr+2t3lGTP6/kT67MSz/D4nl7B6bsiXb8lJWpCc96cqbrx7R2T4aosUXTyIJxJOWOGaNytYoqUpFKmLLM1mU+lTyQ6yLJ03REsmyRBKLNmeUK6FocSSWQEJRMi+u3BElRalKVcqiREtBliWQjvjSkJo4Zi9rsm7e97Ioa1B8ueTM7FcqDj2MfP+860ppxNGS/3F8J9l9A8fyqZ//AQAAAADAhWWZv75Pma/r5nnda2pbRC597dAAAAAAAMAJMf/5n00K8+ms62L1x/8AAAAAAOCisMw1dpaI5OVmurQmlrlcij8CAAAAAABwQZj//99ICjMHyk2xdqdLYfwPAAAAAMAF8e3YOfaj9mXr518kDKesnfbSP60NMzevs5HND3BkmoC4PmNNZzsxRSUtJiddPWvl0kq7k2B+zIq1cXFYewE4uwH8/3MCuDIp38uttM6t1bRczbb8NW0lX/eauuAGzUdFcZzpiVgvxf99tf4/MYf/nd+atnKy3usWnr/urZpYdpK97GxkEygemUdxRCxvzXwL5pqLgUc8ZS7EyNrNW7K23uva7aXL2Z6djYl0YeJgi++mR7T5XubSWnPZjLf5/pa0zVzSZrEw7OizKIrHPPL3cjutc3v+dloMiKI0LorS/igGvxfHj6I8Loryl0fx58PVAOAsrY3JQpYcybtf0Nceyu5JFzsyu098/q8XpkefT+vMzyQtyOTMgB7dHtej28fMbj8duQfSsBybtPvDoaz6IXnBh6HtRs2SlbyFl95u/Eeubm5t313fWHnRfdF9VSqVK/Z9235QkilzGFkxIlIAwB/X/nvsWAPz/6i78Hz6lOTu+9moeufwqDrLeH/f/UhBQZ7La+nJqiyYqw3MJw4G/t6R3/cxhIUxo9a8SZPpHV4WRozq/mSucujvtzSy7sEYymfxowAA4MzMjcnDo/N/OnZfGDPuPpjLR4+O8/vu1gYAAE6HDj9a+fgbKwy99rNitVp04kWtwsB9okKv1tDK82MduouO39CqHQZx4AbNZOGpV9ORijrtdhDGqh6Eqh1E3pKZPlBlt36PdMvxY8+N2k3tRFq5gR87bqxqXuSqduffTS9a1KF5cdTWrlf3XCf2Al9FQSd0dUGpSOt9Fb2a9mOv7iWLvmqHXssJc+pp0Oy0tKrpyA29dhykO+y35fn1IGyZ3Ra+9psNAMA5sbm1/XKl1+u+OcWFgQ3nzvxQAQBAZkyWBgAAAAAAAAAAAAAAAAAAAAAA58BZXP/HwgVf6E8FfV7iYeEEFsZ2He9OvXMCcKp+DQAA//8L0k/8") ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r2, &(0x7f0000000040)='..\xf8\'+(-(-!:{\x87%\x00', 0x4ac200, &(0x7f0000000080)={@_ha_fsid={[0x8000bb68, 0x8]}, {0x9, 0x2, 0x80000001, 0xa}}, 0x7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180062) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000600)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67529ffeff0f00000000502748e5da4f321cedeb449a5dd3952b000000007013", [0xfffffffffffffce8, 0x6]}}) ioctl$BLKRRPART(r4, 0x125f, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)=0x40) 1m22.675442404s ago: executing program 2 (id=48): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x419c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4b, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x0, 0x3fe, 0x7fffffff, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x8, 0x24000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1a41, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, 0x0) move_pages(0x0, 0x2064, &(0x7f00000002c0)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340), &(0x7f0000000380), 0x0) r2 = syz_ublk_setup_io_uring(0x4704, &(0x7f00000003c0)={0x0, 0xe172, 0x0, 0x2, 0x8f}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x8042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000740)={0x7, 0x9}, 0x0, 0xf3) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5) r3 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 1m21.344143697s ago: executing program 1 (id=53): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x3, 0x20, 0x0, 0x20c}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000018c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0x14a892}], &(0x7f00000005c0), 0x2}, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1008, 0x5, 0x0, 0x9, 0x800000, 0x43, 0x4cb, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x9, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101180, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) setpriority(0x0, 0x0, 0x200002a14b56) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$TUNGETVNETLE(r1, 0x80047441, 0x0) socket$inet6(0xa, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x400, &(0x7f00000001c0), 0x2, 0x790, &(0x7f0000000f40)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x143041, 0x0) file_setattr(r3, 0x0, &(0x7f0000001740)={0x6a61, 0x0, 0x6, 0xff, 0x5}, 0x18, 0x1000) 1m21.324054138s ago: executing program 32 (id=53): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x3, 0x20, 0x0, 0x20c}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000018c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0x14a892}], &(0x7f00000005c0), 0x2}, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1008, 0x5, 0x0, 0x9, 0x800000, 0x43, 0x4cb, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x9, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101180, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) setpriority(0x0, 0x0, 0x200002a14b56) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$TUNGETVNETLE(r1, 0x80047441, 0x0) socket$inet6(0xa, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x400, &(0x7f00000001c0), 0x2, 0x790, &(0x7f0000000f40)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x143041, 0x0) file_setattr(r3, 0x0, &(0x7f0000001740)={0x6a61, 0x0, 0x6, 0xff, 0x5}, 0x18, 0x1000) 1m21.256397019s ago: executing program 2 (id=55): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000014c0), 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r1, 0xfffffffffffffffc, 0x80000000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000300)={'sit0\x00', @random="5600230d1100"}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000340)=r5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m16.808046691s ago: executing program 2 (id=71): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setns(0xc9, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000800)="$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") r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) fsetxattr(r2, &(0x7f0000000080)=@random={'osx.', 'ext4\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x2) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}, {&(0x7f0000000380)=""/50, 0x35}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/206, 0xf8}, {&(0x7f0000001f40)=""/249, 0xf9}, {&(0x7f0000002040)=""/240, 0xf0}, {&(0x7f0000002140)=""/112, 0x70}, {&(0x7f00000021c0)=""/140, 0x8c}], 0x8, &(0x7f0000002280)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10100, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc41, 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x8a141, 0x59) pwrite64(r5, &(0x7f0000000e00)="f6", 0x1, 0xe32d) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x2, 0x5, 0x0, 0x0, 0xf, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in=@rand_addr=0x64010101, 0x3, 0x0, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x86}}]}, 0x78}, 0x1, 0x7}, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r7, 0x0, 0xa20, 0x8000c65) keyctl$unlink(0x9, 0x0, 0x0) 1m16.750562953s ago: executing program 33 (id=71): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setns(0xc9, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000800)="$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") r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) fsetxattr(r2, &(0x7f0000000080)=@random={'osx.', 'ext4\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x2) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}, {&(0x7f0000000380)=""/50, 0x35}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/206, 0xf8}, {&(0x7f0000001f40)=""/249, 0xf9}, {&(0x7f0000002040)=""/240, 0xf0}, {&(0x7f0000002140)=""/112, 0x70}, {&(0x7f00000021c0)=""/140, 0x8c}], 0x8, &(0x7f0000002280)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10100, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc41, 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x8a141, 0x59) pwrite64(r5, &(0x7f0000000e00)="f6", 0x1, 0xe32d) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x2, 0x5, 0x0, 0x0, 0xf, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in=@rand_addr=0x64010101, 0x3, 0x0, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x86}}]}, 0x78}, 0x1, 0x7}, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r7, 0x0, 0xa20, 0x8000c65) keyctl$unlink(0x9, 0x0, 0x0) 1m15.948360153s ago: executing program 4 (id=75): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff34, &(0x7f0000000440)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x100000000000000) 1m15.927989764s ago: executing program 34 (id=75): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff34, &(0x7f0000000440)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x100000000000000) 23.726346291s ago: executing program 5 (id=437): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x213, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103ffd, 0x0, @perf_bp={0x0}, 0x2000, 0x4, 0x649798fd, 0x1, 0x80000000, 0x6, 0x4, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f00000009c0)='./my_configfs\x00', &(0x7f0000000a00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a40)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x6, 0xa, 0x8) rmdir(&(0x7f00000015c0)='./my_configfs/target/core/rd_mcp_0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000440)={0x5, 0x1ff, 0x10001, 0x20, 0x17, "16ee0500000000000000c000"}) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xc}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r5 = syz_clone(0x10000000, &(0x7f0000000740)="c13b7458603ed1a2452d8c02cd37f8960e95f5335644e2f4015ea1fb0c7d44f34c84f0a14f54e30883743855e478cbafe18d779a3ffe568851bf0141ae554cc6bd0fae0a80c374eabbc9de9dd89a392592db58c37fa5b8da8fef517a2cd3957f7a1e00e954eeea6bb5d75eaa86", 0x6d, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f00000001c0)="982913ed155ab9aac079f42d98763d793facd9c3eb04c3d646b186f8db670c580f148d77f95f44be13edcb4c059fe4deb6f971753d29dc56000000000000000000005e37210728") sched_setaffinity(r5, 0x8, &(0x7f00000008c0)=0x8) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x200000, &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000fc0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="70000000300001060000000000000000000000005c000180580001800f00010074756e6e656c5f6b65790000440002801c000200000000000000000000000000000000000700000001000000080003007f000001080004007f00000114000b80040000000c0002800800190000000000", 0x70) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="11a0040fede474f83d513000060000000a00030099fa3a1c87a79511470012800e0001007769726567756172ee0ef4cc4659b6b79f01ece029a64e48209b4c7205655f9bb3619c654e311647a6650686b300cb0fb6f755b089c67f358bb92bc910930675b166d1f80674a85dbcd93192300c63d5fc3771f3a2284141a233a1840843088533d4e340d6e75085e364774e9f843e51d01971f8894c0b7e09e01724daec909fd6776f5cb438f18fac22bde4fcfab56d164de49e64fbe035e5c75b2db49f6f96dcdd6b318a3091ba841497adeb"], 0x44}}, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000001480), &(0x7f00000014c0)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000001500)=0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x11403, 0x21018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x4}, @IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x80) 22.061377363s ago: executing program 5 (id=445): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000b6ca22", @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5e0}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x40800}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000500)={0x2, @in={{0x2, 0x4e20, @empty}}, 0x2}, &(0x7f00000005c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r5, 0x84, 0x81, &(0x7f0000000600)={r6, 0xffffffff}, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0xc, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_config_ext={0x6be2, 0x8000000000000001}, 0x400, 0x0, 0x11000, 0x1, 0xffffffff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x20, 0xb0}}}]}, 0x38}}, 0x0) 21.923654386s ago: executing program 5 (id=447): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000000c0)=0xffffffc3, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @remote, 0x9}, 0x1c) capget(&(0x7f0000000040)={0x39900612}, 0x0) r1 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000080)={0xffffffff, 0xe4, 0xff, 0x3, 0xcc1, 0x6}) 21.875859937s ago: executing program 5 (id=448): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x214802, &(0x7f0000000080)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000140)="$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") open(&(0x7f00000006c0)='./bus\x00', 0x14927e, 0x0) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x12148c5, &(0x7f0000000980)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x800030a}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}, {@fat=@check_normal}, {@shortname_mixed}, {@fat=@debug}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@shortname_win95}, {@shortname_mixed}, {@utf8}]}, 0x0, 0x2da, &(0x7f0000000a80)="$eJzs3cFOG0ccx/EftrGNEdgHVKmVqo7aS7mswH0CqwKpqqVWgKvSQ6WlrFvLWxt5XSpXVeCWa54gD4CSW06JlOQecckt9ygXLpFy4RCykdfe2JhF2IrADnw/EtphZv/eGWaM/rMC79Gvd/6ulj2rbDcVSxvFpH0dS7l2qWuqe4wF5aT67Wtx9s2LL9c3f/uxUCyurBmzWtj4Lm+Mmf/q8b//3/v6aXP2lwfzj1I6zP1+9Dr/8vCzw8+P3m2Er16XbLNVrzftLdcx2xWvahnzs+vYnmMqNc9pNE1fe9mt7+y0jF3bnsvsNBzPM3atZapOyzTrptloGftPu1IzlmWZucxg96+9+MgRpZOkVLiUzmAcZqIqG42CHY9sLB1cRacAAMBkGVf+/1fFMxXP1Ort/L79wufk/zGNkP9LUfk/zlU6WFuzyf+vuXb+n+m+f08j/wcAAAAAAAAAAAAAAAAAAAAA4FNwLGV9388e+35wDL9SktKSwu/H3U9cjnDemf+baX1zSt1/3EtL7u3dUlKdY6e9UFZFrhwtTUtvg/XQ1Smv/lBcWTKBnJ64e7uldmT7GFcqjA/louOXO/GmP35P08r0Xz+vrBai4/MR8e1xfPuNn+pe2ZGlrJ7/obpcbQfruhd/a9mY738qDsTPBOcBAAAAAHAdWOaDcP+ekBTs34N2y4QfGzKwv+9U9u4PKNu7P7ASdX9gYH+d0BeJ8Y0bAAAAAICbxGv9V7Vd12lcVEj3ap4NHzVRhfD5ByOHxyOawr+IGd9w0sOenJDUrXk4KXMxTCH2ET/e+AizPH12PSclnapZuPo1f//uCG/P4Qqv/hl+0Y7rNxIAAACAyxIm/TfmIZkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEyg3KI0zIeHheefaTrxff+C8L7LxcczSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAyvA8AAP//TL4Leg==") mount(&(0x7f0000000700)=@loop={'/dev/loop', 0x0}, &(0x7f0000000740)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x441, 0x102) r2 = open(&(0x7f0000000d80)='./file0\x00', 0x80140, 0x38) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000dc0)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x802000, &(0x7f0000000e40), 0xfe, 0x250, &(0x7f0000000e80)="$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") socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000001200)={0x0, 0x0}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000001240), &(0x7f0000001280)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001500)={0x1, &(0x7f0000001540)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) fallocate(r1, 0x10, 0x3, 0x7c27) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r8, 0x4b72, &(0x7f0000001680)={0x5, 0xdf, 0x4, 0x20, 0xe, "00106700"}) 21.581473485s ago: executing program 5 (id=454): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540)={[{@nodioread_nolock}]}, 0xff, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = open(0x0, 0x8000, 0x70) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800010, &(0x7f0000000640)={[{@norecovery}]}, 0x6d, 0x48d, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x304, 0x0, 0x0, 0x40801}, 0x4000000) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="540100001a00330600000000fddbdf250a010101000000000000000000000000ffffffff000000000000000000000000000040004e2180010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x0) syslog(0x4, &(0x7f0000000300)=""/19, 0xb12288e90d7c8384) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0200020000000003000000000200000002000000010400000000"], 0x0, 0x3e, 0x0, 0x1, 0x1}, 0x28) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000002c001a000600000002000000200004801c0001800800", @ANYRES32, @ANYBLOB='\b'], 0x4c}}, 0x0) rt_tgsigqueueinfo(r3, r3, 0x9, &(0x7f00000003c0)={0x2d, 0x3, 0x80000000}) 21.307952692s ago: executing program 5 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000280), 0xc}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0xae) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x1, 0x154) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x8000, @local}, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) (async) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x528, &(0x7f0000000600)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='memory.events.local\x00', 0x275a, 0x0) syz_io_uring_setup(0x5fce, &(0x7f0000000b80)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, 0x0, 0x0, 0x0) (async) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, 0x0, 0x0) 21.286162142s ago: executing program 35 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000280), 0xc}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0xae) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x1, 0x154) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x8000, @local}, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) (async) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x528, &(0x7f0000000600)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='memory.events.local\x00', 0x275a, 0x0) syz_io_uring_setup(0x5fce, &(0x7f0000000b80)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, 0x0, 0x0, 0x0) (async) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, 0x0, 0x0) 5.216184848s ago: executing program 8 (id=603): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x485, &(0x7f0000000780)="$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") symlink(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='./file0\x00') (fail_nth: 4) 4.948271634s ago: executing program 8 (id=604): close(0xffffffffffffffff) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) 4.592360263s ago: executing program 3 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x703, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x1800, 0x6, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xb, 0x601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x5}, 0x10e848, 0x1, 0x9, 0x5, 0x2, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200, 0x80084, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}, 0x8809, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xc9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = fsopen(&(0x7f00000006c0)='devtmpfs\x00', 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000740)='reno\x00', 0x5) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc3d}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x88, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}]}], {0x14}}, 0x15c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x167) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000008381b0000000000040007000000000010000000000000002000070000000000"], 0x24, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x242, 0x0) semtimedop(0x0, &(0x7f0000000940)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) pselect6(0x40, &(0x7f00000009c0)={0x9, 0xd, 0xbe, 0x80000000, 0x6, 0xffffffff, 0x3, 0x8}, &(0x7f0000000a00)={0x6f7510d9, 0x1, 0x6, 0x7, 0x2f, 0x9, 0x100, 0xb5}, &(0x7f0000000c00)={0x8, 0x3, 0x8000000000000001, 0x6, 0x0, 0x6768b9f8, 0x0, 0x9}, &(0x7f0000000c40)={r6, r7+60000000}, &(0x7f0000000c80)={&(0x7f0000000cc0)={[0x2]}, 0x8}) semop(0x0, &(0x7f0000000d00)=[{0x2}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) truncate(&(0x7f0000000d80)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) 4.087180166s ago: executing program 8 (id=611): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x213, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103ffd, 0x0, @perf_bp={0x0}, 0x2000, 0x4, 0x649798fd, 0x1, 0x80000000, 0x6, 0x4, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f00000009c0)='./my_configfs\x00', &(0x7f0000000a00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a40)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x6, 0xa, 0x8) rmdir(&(0x7f00000015c0)='./my_configfs/target/core/rd_mcp_0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000440)={0x5, 0x1ff, 0x10001, 0x20, 0x17, "16ee0500000000000000c000"}) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xc}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x10000000, &(0x7f0000000740)="c13b7458603ed1a2452d8c02cd37f8960e95f5335644e2f4015ea1fb0c7d44f34c84f0a14f54e30883743855e478cbafe18d779a3ffe568851bf0141ae554cc6bd0fae0a80c374eabbc9de9dd89a392592db58c37fa5b8da8fef517a2cd3957f7a1e00e954eeea6bb5d75eaa86", 0x6d, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f00000001c0)="982913ed155ab9aac079f42d98763d793facd9c3eb04c3d646b186f8db670c580f148d77f95f44be13edcb4c059fe4deb6f971753d29dc56000000000000000000005e37210728") sched_setaffinity(r4, 0x8, &(0x7f00000008c0)=0x8) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x200000, &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000fc0)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="70000000300001060000000000000000000000005c000180580001800f00010074756e6e656c5f6b65790000440002801c000200000000000000000000000000000000000700000001000000080003007f000001080004007f00000114000b80040000000c0002800800190000000000", 0x70) 3.461751232s ago: executing program 8 (id=617): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7834}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46e9a) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5437, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r5, &(0x7f0000000180)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)='h', 0x1}], 0x1}}], 0x1, 0xc8844) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x480}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = getuid() setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@private1, 0x4e22, 0x4, 0x4e23, 0x3, 0xa, 0xa0, 0x100, 0x7b, r1, r6}, {0x7, 0x6, 0x8, 0x7, 0x9, 0x2, 0x100000000, 0x8}, {0x4, 0xbec, 0x7, 0x6}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x3, 0x1}, {{@in=@remote, 0x4d2}, 0x2, @in=@private=0xa010100, 0x3506, 0x4, 0x2, 0x5, 0x5, 0x1000, 0x4}}, 0xe8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x8}}) 2.945859425s ago: executing program 3 (id=619): bpf$MAP_CREATE(0x0, 0x0, 0x50) shutdown(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="39000000140081ae00002c000500015601618575e285af0100d41f215cfe00883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.482604466s ago: executing program 3 (id=624): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x4000000}, 0x20) 2.449963097s ago: executing program 8 (id=625): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8994, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c36a07200086287356e7fecd80ad057c70bb38184c0dde97519cbc9684f06b3c2dd1c1ae7a1710927e6d66517ca85fe8f9513c8510ab597d78fdf8adaed7e1b76ccaf89b8ae3ad6f0dae7acec71ec7a599332d5dcce3f17b3bce3d4175fd7df4dfc7cd8f147b5d0d79190dc31712c1a4d02a81000"/129, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000280)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180), 0x400000000000041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x39b3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2d, 'freezer'}, {0x2b, 'memory'}]}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=ANY=[], 0x48) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.357995329s ago: executing program 3 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3e8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = syz_open_dev$sg(&(0x7f0000000080), 0xe92, 0x402) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000300)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.308388621s ago: executing program 8 (id=627): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") (rerun: 32) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) unshare(0x40000) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x400, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4000800) (async) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x204, @in={0x2, 0x4e23, @empty}}}, 0x90) socket(0x10, 0x803, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x8000, 0x4, 0x6, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) getuid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1000, 0x3, 0x9, 0x8, 0x20003, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000300)={0x3, 0x3}) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x2, 0x0, 0x6000) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.152850065s ago: executing program 3 (id=630): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x400c891}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 2.150435445s ago: executing program 6 (id=631): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x1, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) 1.911144941s ago: executing program 0 (id=632): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0x80, 0x4}, 'port0\x00', 0x33, 0x100c75, 0x10000, 0x20004, 0x3, 0x0, 0xb597, 0x0, 0x4, 0xec}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x0, [0x4, 0x81, 0x4, 0xffffffff, 0x100000000, 0x8000]}) 1.744092435s ago: executing program 0 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000014c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r1, 0x0, 0xe, 0x0, &(0x7f0000001580)="b88fd8698b791f9cea0efaca8a7f", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xf00}, 0x50) 1.721873136s ago: executing program 7 (id=634): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000000780)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x2, 0x4e20, @local}, 0x10) listen(0xffffffffffffffff, 0x5) socket(0x2, 0x80805, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x38, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x10001, @local, 0x8}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0xfff}]}, &(0x7f0000000740)=0x10) 1.664500067s ago: executing program 0 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='0fc5:1227:e', 0xb) 1.54796531s ago: executing program 0 (id=636): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x15}, 0x4559, 0x0, 0x35, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x48e, &(0x7f0000000180)={0x0, 0x2607, 0x2, 0x2, 0x29d}) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1, 0x3}, 0x1) close(r0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000280)={0x1, 0xecd1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r2, 0x84, 0x83, &(0x7f0000000300)={r3, 0x2}, &(0x7f0000000340)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r4 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.248860918s ago: executing program 0 (id=637): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x28df, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001300), 0xffffffffffffffd2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'batadv_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0xe0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001c00)=[0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000001c80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0x30, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e00)={&(0x7f0000001340)=ANY=[@ANYBLOB="9c060000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="bc0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400feffffff3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000a0e000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r3, @ANYBLOB="bc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400dd31000008000100", @ANYRESHEX=0x0, @ANYBLOB="740102803800010024000100616374697665706f727400000018000000000000000000000000000000000000050003000300000008000400701e3e1f539d151e0f433fe1a1bb503a793bb929387018010000003018c5844d3c023bee9d697b3306d9a6710484ec3a270d311275bb8e46aff0ed554adc7e055dadbac67f62d754c07a6d3ca68af07b44c55ba3eb49dfffb01b34e1aedd", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726500000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008affffff08000600"/116, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003ff0300000008000400070000003c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000a3000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r4, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a8010280380001002400010086636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000500030006000000040004000800060000000000000000", @ANYRESHEX=r2, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000008000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff03000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x69c}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002500)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf2507000000340001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003007302000000080001", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x4011) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x20004000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0x6, 0x6}) r8 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xdf, 0xff, 0x0, 0x0, 0x0, 0x0, 0x52280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9df9}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x4000000, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)='\x00\x00\x00', 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f00000002c0)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) 1.120177081s ago: executing program 6 (id=638): perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffefa, 0x2f, 0x1, 0x5, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.log\x00', 0x5899c0, 0xd4) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000640)=0x3, 0x4) fsetxattr(r3, &(0x7f0000000680)=@random={'osx.', 'net/vlan/vlan1\x00'}, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xba}}, 0x10001}, 0x1c) getsockname$inet6(r5, 0x0, &(0x7f0000001900)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x10040, 0x800000000000006, 0x2, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) memfd_create(&(0x7f0000000540)='^%-\xe6\x00', 0x5) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001e40)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001fc0)=@newqdisc={0x24, 0x28, 0x4, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x6}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x20040080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x600d4) 743.614481ms ago: executing program 7 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000580040001000800020003000000080004"], 0x38}}, 0x0) 724.523621ms ago: executing program 6 (id=640): io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a00000001801000076cd2e3e2ad47d0a002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$OBJ_GET_MAP(0x7, 0xfffffffffffffffd, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0xe000055) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) setns(0xc9, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x221, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000440)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 580.060765ms ago: executing program 7 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7d, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x7, 0x400}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 519.671276ms ago: executing program 0 (id=642): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001500010029bd7000fcdbdf250a2039ffed4f1cd98ece33e0ed1608227581ba4fa767177c6df771d814d3663ff0b035c11b2256026ba03e579ef7562cc9", @ANYRES32=0x0, @ANYBLOB="14000100fc000000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x1) r9 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44010000", @ANYRES16=r6, @ANYBLOB="100029bd7000030000003f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x24000090}, 0x28000000) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r10, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 385.1821ms ago: executing program 7 (id=643): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x80000001, 0x3, 0x1, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x60600) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0x80, 0x4}, 'port0\x00', 0x33, 0x100c75, 0x10000, 0x20004, 0x3, 0x0, 0xb597, 0x0, 0x4, 0xec}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x0, [0x4, 0x81, 0x4, 0xffffffff, 0x100000000, 0x8000]}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) 335.935281ms ago: executing program 6 (id=644): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/12, @ANYRES32, @ANYBLOB="73887037c7b8021fc23e6e424378a24b78d4e772ba184acb16fa8a78238f41554311ea93ef6b48b321825503b01e239dbf8bf207679079a66079e6a8f94240560dbc9a64c95083b80892556296d7ff62f7709b39", @ANYRES64=0x0], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback, 0xbd4, 0x1}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x2000, 0x19, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value=0x6000000}, 0x50) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000140)=0x2a0) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0xf, 0x2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000a000200aaaaaaaaaabb0000080007"], 0x30}}, 0x0) 144.078185ms ago: executing program 6 (id=645): getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0xc, @loopback, 0x4}}}, &(0x7f00000002c0)=0x84) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000440)={[{}, {}, {@dioread_lock}, {@barrier_val}, {@sb={'sb', 0x3d, 0x5}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4ef, &(0x7f0000000a40)="$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") 143.441456ms ago: executing program 7 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)="306663353a313232373a65692c9bacee12", 0x11) 112.387716ms ago: executing program 3 (id=647): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0030000000001907864010100ac1414aa0b009078032ce00045000000000010000389000000000000ac1414aa830b000a010101e00000018632000000000005df61160512ffd11634eea26b0faffa0d4d59d84c28060802a20948fd74070dccf0294e2a3bdb4aa40b2400862300000000020ee16ef60f68c35d463511ccdb060dbc76652e8db847a0677b"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x7, 0x0, 0x2004) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, 0xffffffffffffffff, 0x403000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x40, 0x80000000, 0x0, 0x6, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000006000000000000007f00000018330000040000000000000000000000517900000000000018480000ffffffff00000000000000001834000003000000000000000000000018210000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0xf, 0xd2, &(0x7f0000000600)=""/210, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xd, 0x8000, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x3, 0x9, 0x5}, {0x4, 0x5, 0x1, 0xa}, {0x2, 0x1, 0xd, 0x4}, {0x1, 0x4, 0xb, 0x4}, {0x2, 0x1, 0xa, 0x1}], 0x10, 0x10155d2e}, 0x94) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x10840, &(0x7f0000000880)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x274, &(0x7f0000000940)="$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") syz_emit_ethernet(0x2a, &(0x7f0000002bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa89aaaaaaaadf8eefcf4500001cffff000000029069ac1e0001d40000011400904cc412413f01c4a1844e694ccd32c99f5c7e927cae54acdb40afb6056337de443669e1976b325ab2b604861bc5f58c9882ad10a93eb00339ad9448ebdbf85132e5be1931a2896940e2a87edbb3aab5f1a2d8c2b79e4544aa5735ef2f1e3a372d70"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x11c0, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x30) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002940)={{{@in6, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000002900)=0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000002240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000002280), 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000002340)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfffffffffffffd58, &(0x7f00000023c0), &(0x7f0000002400)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002ac0)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd2a, 0x0, {}, [{0xe4, 0x1, [@m_ife={0xe0, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x7e, 0x6, "ac0eacac20c0bf0e99bafe3e9aad7c433960806b2f5548c456419dce84dbbd4a3c56f6d6587be18b74dcf00f878e7ab9b154c5993ac1d5ee804beffe8f42d8c5288107faacf312558f6c04a42601de209377162f178c730a9b5e5764d95c8ffa6f94a957c9a9342cd17a1a1b967baf574d432eb0156308a1b2f0"}, {0xc}, {0xc}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write(0xffffffffffffffff, &(0x7f00000025c0)="240000001a005f0214f9f407000904ff80000000fe000000000200000800040001000000", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000002780)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'ovf\x00', 0x9, 0x60000001, 0x8000000c}, {@broadcast, 0x4e20, 0x2000, 0xfffffffb, 0x48001, 0xfffffffc}}, 0x44) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=ANY=[@ANYBLOB="4c000000100001000200000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e000000140002800800010064000000080003000200"], 0x4c}}, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000d80)={'syz_tun\x00', &(0x7f0000000d40)=@ethtool_channels={0x3c, 0x9, 0x0, 0xb9, 0x772, 0x3, 0xb443, 0x9, 0x4}}) 47.956798ms ago: executing program 6 (id=648): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x1, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) 0s ago: executing program 7 (id=649): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) flock(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004008000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340), 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) kernel console output (not intermixed with test programs): ed syzkaller #0 PREEMPT(lazy) [ 74.085573][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.085619][ T4835] Call Trace: [ 74.085625][ T4835] [ 74.085632][ T4835] __dump_stack+0x1d/0x30 [ 74.085656][ T4835] dump_stack_lvl+0x95/0xd0 [ 74.085777][ T4835] dump_stack+0x15/0x1b [ 74.085799][ T4835] should_fail_ex+0x262/0x280 [ 74.085856][ T4835] should_fail+0xb/0x20 [ 74.085881][ T4835] should_fail_usercopy+0x1a/0x20 [ 74.085934][ T4835] _copy_from_iter+0xcc/0xe70 [ 74.086003][ T4835] ? __alloc_skb+0x516/0x6f0 [ 74.086025][ T4835] ? __alloc_skb+0x209/0x6f0 [ 74.086045][ T4835] netlink_sendmsg+0x4a4/0x6f0 [ 74.086069][ T4835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.086094][ T4835] ____sys_sendmsg+0x532/0x580 [ 74.086211][ T4835] ___sys_sendmsg+0x195/0x1e0 [ 74.086325][ T4835] __x64_sys_sendmsg+0xd4/0x160 [ 74.086357][ T4835] x64_sys_call+0x22ab/0x2550 [ 74.086387][ T4835] do_syscall_64+0x112/0x360 [ 74.086490][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.086512][ T4835] RIP: 0033:0x7f155487e1d9 [ 74.086527][ T4835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.086546][ T4835] RSP: 002b:00007f15532d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.086568][ T4835] RAX: ffffffffffffffda RBX: 00007f1554b05fa0 RCX: 00007f155487e1d9 [ 74.086585][ T4835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 74.086611][ T4835] RBP: 00007f15532d7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.086626][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.086640][ T4835] R13: 00007f1554b06038 R14: 00007f1554b05fa0 R15: 00007fff8d06cde8 [ 74.086661][ T4835] [ 74.289644][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.312360][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.318796][ T143] bond0 (unregistering): Released all slaves [ 74.332076][ T3982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.443261][ T143] hsr_slave_0: left promiscuous mode [ 74.452906][ T143] hsr_slave_1: left promiscuous mode [ 74.453348][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.453363][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.464628][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.464647][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.481991][ T143] veth1_macvtap: left promiscuous mode [ 74.482018][ T143] veth0_macvtap: left promiscuous mode [ 74.482140][ T143] veth1_vlan: left promiscuous mode [ 74.482185][ T143] veth0_vlan: left promiscuous mode [ 74.845816][ T143] team0 (unregistering): Port device team_slave_1 removed [ 74.856239][ T143] team0 (unregistering): Port device team_slave_0 removed [ 75.088178][ T4837] loop0: detected capacity change from 0 to 512 [ 75.138767][ T4639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.207826][ T4639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.246243][ T4639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.266592][ T4639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.307840][ T4639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.315847][ T4639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.316645][ T4639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.343469][ T4639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.369531][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 75.369545][ T30] audit: type=1400 audit(1791862636.088:968): avc: denied { write } for pid=4865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.420571][ T4837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.423162][ T4839] loop7: detected capacity change from 0 to 512 [ 75.432254][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.432286][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.432336][ T4761] bridge_slave_0: entered allmulticast mode [ 75.432816][ T4761] bridge_slave_0: entered promiscuous mode [ 75.451233][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.451268][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.451338][ T4761] bridge_slave_1: entered allmulticast mode [ 75.451998][ T4761] bridge_slave_1: entered promiscuous mode [ 75.453581][ T4837] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.535985][ T4761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.548018][ T4761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.621334][ T30] audit: type=1400 audit(1791862636.338:969): avc: denied { write } for pid=4836 comm="syz.0.197" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.621361][ T30] audit: type=1400 audit(1791862636.338:970): avc: denied { write } for pid=4836 comm="syz.0.197" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.669315][ T4761] team0: Port device team_slave_0 added [ 75.670894][ T4761] team0: Port device team_slave_1 added [ 75.717035][ T4839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.726111][ T4839] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.739084][ T30] audit: type=1400 audit(1791862636.428:971): avc: denied { write } for pid=4836 comm="syz.0.197" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.754635][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.754650][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.754680][ T4761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.762853][ T30] audit: type=1400 audit(1791862636.458:972): avc: denied { unlink } for pid=4836 comm="syz.0.197" name="file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.763778][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.763791][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.763821][ T4761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.898182][ T4761] hsr_slave_0: entered promiscuous mode [ 75.898578][ T4761] hsr_slave_1: entered promiscuous mode [ 75.905105][ T4761] debugfs: 'hsr0' already exists in 'hsr' [ 75.905121][ T4761] Cannot create hsr debugfs directory [ 75.915296][ T4639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.973489][ T30] audit: type=1400 audit(1791862636.688:973): avc: denied { write } for pid=4880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.052324][ T4639] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.075285][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.075325][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.100877][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.100913][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.111648][ T30] audit: type=1400 audit(1791862636.828:974): avc: denied { write } for pid=4895 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.483840][ T30] audit: type=1400 audit(1791862637.198:975): avc: denied { write } for pid=4898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.599297][ T30] audit: type=1400 audit(1791862637.318:976): avc: denied { write } for pid=4916 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.769637][ T4761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.791568][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.792161][ T4761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.807831][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.808486][ T4761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.835516][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.838731][ T4761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 76.892889][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.902490][ T4639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.930636][ T4839] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.953162][ T4934] loop3: detected capacity change from 0 to 512 [ 76.996826][ T4934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.996894][ T4934] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.012475][ T30] audit: type=1400 audit(1791862637.728:977): avc: denied { write } for pid=4921 comm="syz.3.204" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.137011][ T4761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.167181][ T4761] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.188264][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.188346][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.210348][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.210381][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.230439][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.483750][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.063394][ T4992] loop0: detected capacity change from 0 to 512 [ 78.111634][ T4992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.112215][ T4992] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.415675][ T4975] netlink: 'syz.7.209': attribute type 10 has an invalid length. [ 78.498816][ T4975] team0 (unregistering): Port device team_slave_0 removed [ 78.534750][ T4975] team0 (unregistering): Port device team_slave_1 removed [ 78.626662][ T4639] veth0_vlan: entered promiscuous mode [ 78.642678][ T4639] veth1_vlan: entered promiscuous mode [ 78.687867][ T4639] veth0_macvtap: entered promiscuous mode [ 78.697093][ T4761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.698782][ T4639] veth1_macvtap: entered promiscuous mode [ 78.700702][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.743150][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.784341][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.808953][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.809079][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.809115][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.809207][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.315896][ T4761] veth0_vlan: entered promiscuous mode [ 79.331591][ T4761] veth1_vlan: entered promiscuous mode [ 79.377618][ T4761] veth0_macvtap: entered promiscuous mode [ 79.386666][ T4761] veth1_macvtap: entered promiscuous mode [ 79.441211][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.497391][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.529281][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.529790][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.529886][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.529917][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.592881][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 79.899948][ T5055] loop7: detected capacity change from 0 to 2048 [ 79.921538][ T5088] loop6: detected capacity change from 0 to 512 [ 79.927861][ T5088] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.189: bad orphan inode 15 [ 79.927982][ T5088] loop6: lost filesystem error report for type 5 error -117 [ 79.928390][ T5088] ext4_test_bit(bit=14, block=5) = 0 [ 79.928816][ T5088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.929673][ T5055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.988877][ T5088] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 79.988987][ T5088] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.189: bit already cleared for inode 13 [ 80.155276][ T4761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.255728][ T3982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.538480][ T5119] loop5: detected capacity change from 0 to 512 [ 80.690066][ T5119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.690536][ T5119] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.901497][ T5118] netlink: 'syz.7.223': attribute type 2 has an invalid length. [ 81.137005][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 81.137022][ T30] audit: type=1400 audit(1791862641.848:1026): avc: denied { create } for pid=5136 comm="syz.7.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.320827][ T30] audit: type=1400 audit(1791862642.038:1027): avc: denied { write } for pid=5132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.329872][ T4639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.466179][ T30] audit: type=1400 audit(1791862642.178:1028): avc: denied { write } for pid=5152 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.486969][ T5155] loop3: detected capacity change from 0 to 512 [ 81.524134][ T5155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.524206][ T5155] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.540367][ T30] audit: type=1400 audit(1791862642.248:1029): avc: denied { write } for pid=5145 comm="syz.3.230" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.573808][ T30] audit: type=1400 audit(1791862642.278:1030): avc: denied { write } for pid=5145 comm="syz.3.230" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.598765][ T5151] random: crng reseeded on system resumption [ 81.608673][ T30] audit: type=1400 audit(1791862642.328:1031): avc: denied { ioctl } for pid=5145 comm="syz.3.230" path="/69/file2/file0/file0" dev="loop3" ino=18 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.704222][ T5125] syz_tun: entered allmulticast mode [ 81.757014][ T30] audit: type=1400 audit(1791862642.468:1032): avc: denied { write } for pid=5163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.845476][ T30] audit: type=1400 audit(1791862642.558:1033): avc: denied { write } for pid=5174 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.913450][ T5109] loop6: detected capacity change from 0 to 512 [ 82.003547][ T5109] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 82.053503][ T5109] EXT4-fs (loop6): orphan cleanup on readonly fs [ 82.075768][ T5109] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.221: Block bitmap for bg 0 marked uninitialized [ 82.075909][ T5109] loop6: lost filesystem error report for type 5 error -117 [ 82.077777][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 82.077802][ C0] EXT4-fs (loop6): initial error at time 1791862642: ext4_read_block_bitmap_nowait:521 [ 82.077828][ C0] EXT4-fs (loop6): last error at time 1791862642: ext4_read_block_bitmap_nowait:521 [ 82.083424][ T5109] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 82.083497][ T5109] loop6: lost filesystem error report for type 5 error -117 [ 82.141930][ T5109] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.221: Block bitmap for bg 0 marked uninitialized [ 82.142055][ T5109] loop6: lost filesystem error report for type 5 error -117 [ 82.152641][ T5109] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 82.152711][ T5109] loop6: lost filesystem error report for type 5 error -117 [ 82.182529][ T5109] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.221: Block bitmap for bg 0 marked uninitialized [ 82.182624][ T5109] loop6: lost filesystem error report for type 5 error -117 [ 82.188888][ T5185] loop7: detected capacity change from 0 to 128 [ 82.202489][ T5109] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 82.204902][ T5185] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.209236][ T5109] loop6: lost filesystem error report for type 5 error -117 [ 82.211703][ T5185] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.215601][ T5124] syz_tun: left allmulticast mode [ 82.230364][ T5109] EXT4-fs (loop6): 1 orphan inode deleted [ 82.262276][ T5109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.340590][ T30] audit: type=1400 audit(1791862643.058:1034): avc: denied { write } for pid=5176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.372523][ T5189] loop5: detected capacity change from 0 to 1024 [ 82.400732][ T5189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.422320][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.431348][ T30] audit: type=1400 audit(1791862643.148:1035): avc: denied { write } for pid=5187 comm="syz.5.233" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.509993][ T5109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.221'. [ 82.510244][ T5109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.221'. [ 82.510297][ T5109] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 82.510363][ T5109] iwpm_mapping_info_cb: Unable to parse nlmsg [ 82.515694][ T3982] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.760088][ T4639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.849493][ T5218] random: crng reseeded on system resumption [ 82.997467][ T5224] ip_tables: iptables: counters copy to user failed while replacing table [ 83.001247][ T5204] loop7: detected capacity change from 0 to 128 [ 83.133926][ T5204] EXT4-fs: Invalid want_extra_isize 1686723270 [ 83.143017][ T4761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.377204][ T5233] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.860809][ T5235] FAULT_INJECTION: forcing a failure. [ 83.860809][ T5235] name failslab, interval 1, probability 0, space 0, times 0 [ 83.860845][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: syz.5.244 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.860874][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.860922][ T5235] Call Trace: [ 83.860928][ T5235] [ 83.860936][ T5235] __dump_stack+0x1d/0x30 [ 83.860964][ T5235] dump_stack_lvl+0x95/0xd0 [ 83.860991][ T5235] dump_stack+0x15/0x1b [ 83.861015][ T5235] should_fail_ex+0x262/0x280 [ 83.861097][ T5235] ? __kernfs_new_node+0x70/0x440 [ 83.861124][ T5235] should_failslab+0x8c/0xb0 [ 83.861207][ T5235] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 83.861249][ T5235] ? __kernfs_new_node+0x70/0x440 [ 83.861277][ T5235] __kernfs_new_node+0x70/0x440 [ 83.861316][ T5235] ? rb_insert_color+0x6e/0x2a0 [ 83.861349][ T5235] ? __rcu_read_unlock+0x4e/0x70 [ 83.861517][ T5235] ? __rcu_read_unlock+0x4e/0x70 [ 83.861554][ T5235] ? kernfs_activate_one+0x10c/0x140 [ 83.861653][ T5235] ? __rcu_read_unlock+0x4e/0x70 [ 83.861690][ T5235] ? up_write+0x19/0x60 [ 83.861747][ T5235] kernfs_new_node+0xcf/0xf0 [ 83.861840][ T5235] __kernfs_create_file+0x4b/0x180 [ 83.861873][ T5235] ? __pfx_dev_attr_show+0x10/0x10 [ 83.861977][ T5235] ? __pfx_dev_attr_store+0x10/0x10 [ 83.861998][ T5235] sysfs_add_file_mode_ns+0x132/0x1b0 [ 83.862066][ T5235] internal_create_group+0x43e/0x9e0 [ 83.862091][ T5235] ? kernfs_add_one+0x2cf/0x350 [ 83.862118][ T5235] sysfs_create_groups+0x3f/0xf0 [ 83.862175][ T5235] device_add_attrs+0xf2/0x3f0 [ 83.862283][ T5235] ? kobject_put+0x108/0x180 [ 83.862320][ T5235] device_add+0x37a/0x790 [ 83.862351][ T5235] netdev_register_kobject+0x127/0x240 [ 83.862445][ T5235] register_netdevice+0xaf7/0x11a0 [ 83.862544][ T5235] register_netdev+0x3b/0x50 [ 83.862571][ T5235] vti6_init_net+0x22d/0x310 [ 83.862632][ T5235] ops_init+0x22a/0x2e0 [ 83.862786][ T5235] setup_net+0x9f/0x230 [ 83.862823][ T5235] copy_net_ns+0x333/0x490 [ 83.862940][ T5235] create_new_namespaces+0x1f6/0x420 [ 83.862980][ T5235] unshare_nsproxy_namespaces+0x115/0x150 [ 83.863030][ T5235] ksys_unshare+0x3fd/0x6f0 [ 83.863063][ T5235] __x64_sys_unshare+0x1f/0x30 [ 83.863188][ T5235] x64_sys_call+0x1e33/0x2550 [ 83.863247][ T5235] do_syscall_64+0x112/0x360 [ 83.863278][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.863306][ T5235] RIP: 0033:0x7f6f5d04e1d9 [ 83.863325][ T5235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.863413][ T5235] RSP: 002b:00007f6f5baa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 83.863469][ T5235] RAX: ffffffffffffffda RBX: 00007f6f5d2d5fa0 RCX: 00007f6f5d04e1d9 [ 83.863486][ T5235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 83.863502][ T5235] RBP: 00007f6f5d0e5888 R08: 0000000000000000 R09: 0000000000000000 [ 83.863517][ T5235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.863532][ T5235] R13: 00007f6f5d2d6038 R14: 00007f6f5d2d5fa0 R15: 00007ffd36bace48 [ 83.863554][ T5235] [ 84.009000][ T5242] loop7: detected capacity change from 0 to 512 [ 84.033117][ T5242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.033253][ T5242] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.051411][ T5233] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.149662][ T5233] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.248656][ T5233] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.326806][ T143] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.347443][ T143] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.350763][ T143] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.350897][ T143] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.417794][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.248'. [ 84.510990][ T5262] loop3: detected capacity change from 0 to 128 [ 84.531743][ T5262] vfat: Unknown parameter 'rodir»I+Šf8' [ 84.544433][ T5253] loop5: detected capacity change from 0 to 512 [ 84.562660][ T3982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.569910][ T5253] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.246: corrupted in-inode xattr: invalid ea_ino [ 84.570001][ T5253] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.570113][ T5253] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.246: couldn't read orphan inode 15 (err -117) [ 84.570140][ T5253] loop5: lost filesystem error report for type 5 error -117 [ 84.570631][ T5253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.649801][ T5269] loop6: detected capacity change from 0 to 256 [ 84.890441][ T5273] iso9660: Unknown parameter 'unhidriderocrm' [ 85.027455][ T5273] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 85.027637][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 85.285440][ T5278] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.310322][ T5267] random: crng reseeded on system resumption [ 85.382118][ T4639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.499971][ T5285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.256'. [ 85.503625][ T5283] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 85.645350][ T5283] set_capacity_and_notify: 3 callbacks suppressed [ 85.645380][ T5283] loop5: detected capacity change from 0 to 1024 [ 85.674333][ T5283] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 85.692304][ T5283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.953432][ T5273] loop3: detected capacity change from 0 to 1024 [ 85.982988][ T5273] EXT4-fs: Ignoring removed bh option [ 86.025722][ T5273] EXT4-fs: Mount option(s) incompatible with ext2 [ 86.155006][ T4639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.412657][ T5273] loop3: detected capacity change from 0 to 512 [ 86.430193][ T5273] ext4: Bad value for 'resgid' [ 86.430270][ T5273] ext4: Bad value for 'resgid' [ 86.646293][ T5320] netlink: 156 bytes leftover after parsing attributes in process `syz.6.265'. [ 86.813567][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 86.813585][ T30] audit: type=1400 audit(1791862647.528:1051): avc: denied { wake_alarm } for pid=5321 comm="syz.7.266" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.881314][ T5273] loop3: detected capacity change from 0 to 1024 [ 86.891850][ T5328] netlink: 'syz.6.267': attribute type 13 has an invalid length. [ 87.918577][ T5336] netlink: 72 bytes leftover after parsing attributes in process `syz.0.269'. [ 87.918638][ T5337] netlink: 72 bytes leftover after parsing attributes in process `syz.0.269'. [ 88.160959][ T5349] random: crng reseeded on system resumption [ 88.512828][ T30] audit: type=1400 audit(1791862649.228:1052): avc: denied { write } for pid=5362 comm="syz.3.276" path="socket:[12506]" dev="sockfs" ino=12506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.515032][ T30] audit: type=1400 audit(1791862649.228:1053): avc: denied { read } for pid=5364 comm="syz.7.277" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.515132][ T30] audit: type=1400 audit(1791862649.228:1054): avc: denied { open } for pid=5364 comm="syz.7.277" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.639868][ T30] audit: type=1400 audit(1791862649.358:1055): avc: denied { view } for pid=5335 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 88.667015][ T30] audit: type=1400 audit(1791862649.368:1056): avc: denied { mounton } for pid=5335 comm="syz.0.269" path="/59/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 88.667047][ T30] audit: type=1400 audit(1791862649.368:1057): avc: denied { write } for pid=5335 comm="syz.0.269" name="dynamic_events" dev="tracefs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 88.674185][ T5367] FAULT_INJECTION: forcing a failure. [ 88.674185][ T5367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.674222][ T5367] CPU: 1 UID: 0 PID: 5367 Comm: syz.3.278 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.674251][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.674336][ T5367] Call Trace: [ 88.674344][ T5367] [ 88.674352][ T5367] __dump_stack+0x1d/0x30 [ 88.674382][ T5367] dump_stack_lvl+0x95/0xd0 [ 88.674407][ T5367] dump_stack+0x15/0x1b [ 88.674429][ T5367] should_fail_ex+0x262/0x280 [ 88.674513][ T5367] should_fail+0xb/0x20 [ 88.674541][ T5367] should_fail_usercopy+0x1a/0x20 [ 88.674574][ T5367] strncpy_from_user+0x27/0x250 [ 88.674620][ T5367] do_tcp_setsockopt+0x379/0x16c0 [ 88.674663][ T5367] ? selinux_socket_setsockopt+0x1ea/0x220 [ 88.674705][ T5367] tcp_setsockopt+0x51/0xb0 [ 88.674786][ T5367] sock_common_setsockopt+0x69/0x80 [ 88.674824][ T5367] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 88.674963][ T5367] __sys_setsockopt+0x184/0x200 [ 88.675020][ T5367] __x64_sys_setsockopt+0x64/0x80 [ 88.675062][ T5367] x64_sys_call+0x248f/0x2550 [ 88.675104][ T5367] do_syscall_64+0x112/0x360 [ 88.675135][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.675232][ T5367] RIP: 0033:0x7f849b8be1d9 [ 88.675249][ T5367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.675271][ T5367] RSP: 002b:00007f849a317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.675376][ T5367] RAX: ffffffffffffffda RBX: 00007f849bb45fa0 RCX: 00007f849b8be1d9 [ 88.675393][ T5367] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000005 [ 88.675476][ T5367] RBP: 00007f849b955888 R08: 0000000000000003 R09: 0000000000000000 [ 88.675541][ T5367] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000000 [ 88.675556][ T5367] R13: 00007f849bb46038 R14: 00007f849bb45fa0 R15: 00007ffcd8d151c8 [ 88.675578][ T5367] [ 88.687736][ T5370] loop7: detected capacity change from 0 to 512 [ 88.820807][ T5376] x_tables: unsorted entry at hook 4 [ 88.893202][ T5381] loop7: detected capacity change from 0 to 164 [ 88.898992][ T5381] iso9660: Unknown parameter 'unhidriderocrm' [ 88.970737][ T30] audit: type=1326 audit(1791862649.688:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x0 [ 89.329556][ T5391] random: crng reseeded on system resumption [ 89.363889][ T5381] netlink: 'syz.7.284': attribute type 1 has an invalid length. [ 89.364056][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.284'. [ 89.586753][ T5397] loop0: detected capacity change from 0 to 512 [ 89.595839][ T30] audit: type=1400 audit(1791862650.308:1059): avc: denied { mounton } for pid=5396 comm="syz.0.289" path="/62/file0" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.643777][ T5397] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.289: corrupted in-inode xattr: invalid ea_ino [ 89.643812][ T5397] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.647571][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 89.647596][ C1] EXT4-fs (loop0): initial error at time 1791862650: ext4_iget_extra_inode:5210: inode 15 [ 89.647639][ C1] EXT4-fs (loop0): last error at time 1791862650: ext4_iget_extra_inode:5210: inode 15 [ 89.698973][ T5404] netlink: 104 bytes leftover after parsing attributes in process `syz.3.291'. [ 89.699016][ T30] audit: type=1400 audit(1791862650.418:1060): avc: denied { nlmsg_read } for pid=5402 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.809871][ T5385] loop5: detected capacity change from 0 to 512 [ 89.834629][ T5397] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.289: couldn't read orphan inode 15 (err -117) [ 89.834663][ T5397] loop0: lost filesystem error report for type 5 error -117 [ 89.835310][ T5397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.835851][ T5397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.017226][ T5397] loop0: detected capacity change from 0 to 512 [ 90.032873][ T5397] EXT4-fs: dax option not supported [ 90.331185][ T5385] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 90.548993][ T5408] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 90.554218][ T5408] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 90.612567][ T5385] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.631371][ T5385] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.285: Block bitmap for bg 0 marked uninitialized [ 90.631397][ T5385] loop5: lost filesystem error report for type 5 error -117 [ 90.633797][ T5385] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 90.633939][ T5385] loop5: lost filesystem error report for type 5 error -117 [ 90.636916][ T5385] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.285: Block bitmap for bg 0 marked uninitialized [ 90.637026][ T5385] loop5: lost filesystem error report for type 5 error -117 [ 90.637535][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 90.637554][ C0] EXT4-fs (loop5): initial error at time 1791862651: ext4_read_block_bitmap_nowait:521 [ 90.637578][ C0] EXT4-fs (loop5): last error at time 1791862651: ext4_read_block_bitmap_nowait:521 [ 90.724522][ T5385] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 90.724556][ T5385] loop5: lost filesystem error report for type 5 error -117 [ 90.738987][ T5385] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.285: Block bitmap for bg 0 marked uninitialized [ 90.739036][ T5385] loop5: lost filesystem error report for type 5 error -117 [ 90.745528][ T5385] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 90.745699][ T5385] loop5: lost filesystem error report for type 5 error -117 [ 90.783496][ T5385] EXT4-fs (loop5): 1 orphan inode deleted [ 90.800346][ T5385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.875684][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 90.875714][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 90.875793][ T5385] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 90.875824][ T5385] iwpm_mapping_info_cb: Unable to parse nlmsg [ 91.111636][ T5381] loop7: detected capacity change from 0 to 1024 [ 91.172369][ T5381] EXT4-fs: Ignoring removed bh option [ 91.202132][ T5381] EXT4-fs: Mount option(s) incompatible with ext2 [ 91.442838][ T4639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.669357][ T5421] syz.0.295 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 91.669440][ T5421] CPU: 0 UID: 0 PID: 5421 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.669469][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.669488][ T5421] Call Trace: [ 91.669494][ T5421] [ 91.669503][ T5421] __dump_stack+0x1d/0x30 [ 91.669528][ T5421] dump_stack_lvl+0x95/0xd0 [ 91.669611][ T5421] dump_stack+0x15/0x1b [ 91.669636][ T5421] dump_header+0x80/0x240 [ 91.669660][ T5421] oom_kill_process+0x294/0x420 [ 91.669686][ T5421] out_of_memory+0x981/0xbc0 [ 91.669721][ T5421] try_charge_memcg+0x6ba/0xae0 [ 91.669766][ T5421] __memcg_kmem_charge_page+0x1af/0x3b0 [ 91.669793][ T5421] __alloc_frozen_pages_noprof+0x21d/0x400 [ 91.669840][ T5421] alloc_pages_bulk_noprof+0x4ca/0x550 [ 91.669862][ T5421] io_region_allocate_pages+0x16e/0x3b0 [ 91.669963][ T5421] io_create_region+0x291/0x300 [ 91.669994][ T5421] io_allocate_scq_urings+0x113/0x3a0 [ 91.670063][ T5421] io_uring_create+0x2ec/0x4f0 [ 91.670138][ T5421] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 91.670224][ T5421] __x64_sys_io_uring_setup+0x31/0x40 [ 91.670257][ T5421] x64_sys_call+0x1fbf/0x2550 [ 91.670284][ T5421] do_syscall_64+0x112/0x360 [ 91.670315][ T5421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.670415][ T5421] RIP: 0033:0x7f155487e1d9 [ 91.670431][ T5421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.670449][ T5421] RSP: 002b:00007f15532d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 91.670468][ T5421] RAX: ffffffffffffffda RBX: 00007f1554b05fa0 RCX: 00007f155487e1d9 [ 91.670482][ T5421] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00000000000037e4 [ 91.670498][ T5421] RBP: 00007f1554915888 R08: 0000000000000000 R09: 0000000000000000 [ 91.670515][ T5421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.670528][ T5421] R13: 00007f1554b06038 R14: 00007f1554b05fa0 R15: 00007fff8d06cde8 [ 91.670548][ T5421] [ 91.738614][ T5448] ALSA: seq fatal error: cannot create timer (-19) [ 91.821586][ T30] kauditd_printk_skb: 297 callbacks suppressed [ 91.821602][ T30] audit: type=1326 audit(1791862652.538:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.827574][ T5421] memory: usage 307200kB, limit 307200kB, failcnt 73141 [ 91.827606][ T5421] memory+swap: usage 432000kB, limit 9007199254740988kB, failcnt 0 [ 91.827791][ T5421] kmem: usage 2360kB, limit 9007199254740988kB, failcnt 0 [ 91.827806][ T5421] Memory cgroup stats for /syz0: [ 91.828037][ T5421] cache 311930880 [ 91.828047][ T5421] rss 225280 [ 91.828055][ T5421] shmem 311930880 [ 91.828069][ T5421] mapped_file 208379904 [ 91.828077][ T5421] dirty 0 [ 91.828084][ T5421] writeback 0 [ 91.828092][ T5421] workingset_refault_anon 146 [ 91.828102][ T5421] workingset_refault_file 496 [ 91.828110][ T5421] swap 127795200 [ 91.828177][ T5421] swapcached 300113920 [ 91.828184][ T5421] pgpgin 289249 [ 91.828191][ T5421] pgpgout 213039 [ 91.828200][ T5421] pgfault 173457 [ 91.828208][ T5421] pgmajfault 39 [ 91.828216][ T5421] inactive_anon 111820800 [ 91.828224][ T5421] active_anon 200335360 [ 91.828233][ T5421] inactive_file 0 [ 91.828298][ T5421] active_file 0 [ 91.828304][ T5421] unevictable 0 [ 91.828310][ T5421] hierarchical_memory_limit 314572800 [ 91.828319][ T5421] hierarchical_memsw_limit 9223372036854771712 [ 91.828330][ T5421] total_cache 311930880 [ 91.828345][ T5421] total_rss 225280 [ 91.828354][ T5421] total_shmem 311930880 [ 91.828363][ T5421] total_mapped_file 208379904 [ 91.828371][ T5421] total_dirty 0 [ 91.828379][ T5421] total_writeback 0 [ 91.828387][ T5421] total_workingset_refault_anon 146 [ 91.828466][ T5421] total_workingset_refault_file 496 [ 91.828476][ T5421] total_swap 127795200 [ 91.828484][ T5421] total_swapcached 300113920 [ 91.828492][ T5421] total_pgpgin 289249 [ 91.828504][ T5421] total_pgpgout 213039 [ 91.828513][ T5421] total_pgfault 173457 [ 91.828521][ T5421] total_pgmajfault 39 [ 91.828530][ T5421] total_inactive_anon 111820800 [ 91.828539][ T5421] total_active_anon 200335360 [ 91.828614][ T5421] total_inactive_file 0 [ 91.828622][ T5421] total_active_file 0 [ 91.828631][ T5421] total_unevictable 0 [ 91.828640][ T5421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.175,pid=4700,uid=0 [ 91.828715][ T5421] Memory cgroup out of memory: Killed process 4700 (syz.0.175) total-vm:192504kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:116016kB, UID:0 pgtables:348kB oom_score_adj:1000 [ 91.830516][ T30] audit: type=1326 audit(1791862652.538:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.835597][ T30] audit: type=1326 audit(1791862652.538:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.837746][ T30] audit: type=1326 audit(1791862652.538:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.839052][ T30] audit: type=1326 audit(1791862652.538:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.843969][ T30] audit: type=1326 audit(1791862652.538:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.845589][ T30] audit: type=1326 audit(1791862652.558:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.847439][ T30] audit: type=1326 audit(1791862652.558:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.850147][ T30] audit: type=1326 audit(1791862652.558:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.851770][ T30] audit: type=1326 audit(1791862652.558:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.6.299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464748ea0e code=0x7ffc0000 [ 91.897158][ T5421] syz.0.295 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 91.897196][ T5421] CPU: 1 UID: 0 PID: 5421 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.897274][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.897286][ T5421] Call Trace: [ 91.897293][ T5421] [ 91.897302][ T5421] __dump_stack+0x1d/0x30 [ 91.897331][ T5421] dump_stack_lvl+0x95/0xd0 [ 91.897388][ T5421] dump_stack+0x15/0x1b [ 91.897410][ T5421] dump_header+0x80/0x240 [ 91.897436][ T5421] oom_kill_process+0x294/0x420 [ 91.897530][ T5421] out_of_memory+0x981/0xbc0 [ 91.897557][ T5421] try_charge_memcg+0x6ba/0xae0 [ 91.897639][ T5421] __memcg_kmem_charge_page+0x1af/0x3b0 [ 91.897670][ T5421] __alloc_frozen_pages_noprof+0x21d/0x400 [ 91.897738][ T5421] alloc_pages_bulk_noprof+0x4ca/0x550 [ 91.897763][ T5421] io_region_allocate_pages+0x16e/0x3b0 [ 91.897797][ T5421] io_create_region+0x291/0x300 [ 91.897901][ T5421] io_allocate_scq_urings+0x113/0x3a0 [ 91.897939][ T5421] io_uring_create+0x2ec/0x4f0 [ 91.898006][ T5421] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 91.898047][ T5421] __x64_sys_io_uring_setup+0x31/0x40 [ 91.898083][ T5421] x64_sys_call+0x1fbf/0x2550 [ 91.898111][ T5421] do_syscall_64+0x112/0x360 [ 91.898188][ T5421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.898214][ T5421] RIP: 0033:0x7f155487e1d9 [ 91.898310][ T5421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.898331][ T5421] RSP: 002b:00007f15532d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 91.898355][ T5421] RAX: ffffffffffffffda RBX: 00007f1554b05fa0 RCX: 00007f155487e1d9 [ 91.898371][ T5421] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00000000000037e4 [ 91.898386][ T5421] RBP: 00007f1554915888 R08: 0000000000000000 R09: 0000000000000000 [ 91.898401][ T5421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.898415][ T5421] R13: 00007f1554b06038 R14: 00007f1554b05fa0 R15: 00007fff8d06cde8 [ 91.898481][ T5421] [ 91.926967][ T5421] memory: usage 307200kB, limit 307200kB, failcnt 73225 [ 91.926986][ T5421] memory+swap: usage 432000kB, limit 9007199254740988kB, failcnt 0 [ 91.927001][ T5421] kmem: usage 2360kB, limit 9007199254740988kB, failcnt 0 [ 91.927015][ T5421] Memory cgroup stats for /syz0: [ 91.927172][ T5421] cache 311930880 [ 91.927255][ T5421] rss 225280 [ 91.927263][ T5421] shmem 311930880 [ 91.927271][ T5421] mapped_file 201801728 [ 91.927279][ T5421] dirty 0 [ 91.927286][ T5421] writeback 0 [ 91.927294][ T5421] workingset_refault_anon 146 [ 91.927310][ T5421] workingset_refault_file 496 [ 91.927319][ T5421] swap 127795200 [ 91.927327][ T5421] swapcached 300113920 [ 91.927335][ T5421] pgpgin 289249 [ 91.927342][ T5421] pgpgout 213039 [ 91.927350][ T5421] pgfault 173458 [ 91.927358][ T5421] pgmajfault 39 [ 91.927366][ T5421] inactive_anon 111820800 [ 91.927374][ T5421] active_anon 200335360 [ 91.927383][ T5421] inactive_file 0 [ 91.927390][ T5421] active_file 0 [ 91.927420][ T5421] unevictable 0 [ 91.927428][ T5421] hierarchical_memory_limit 314572800 [ 91.927438][ T5421] hierarchical_memsw_limit 9223372036854771712 [ 91.927454][ T5421] total_cache 311930880 [ 91.927463][ T5421] total_rss 225280 [ 91.927471][ T5421] total_shmem 311930880 [ 91.927479][ T5421] total_mapped_file 201801728 [ 91.927488][ T5421] total_dirty 0 [ 91.928874][ T5421] total_writeback 0 [ 91.928900][ T5421] total_workingset_refault_anon 146 [ 91.928909][ T5421] total_workingset_refault_file 496 [ 91.928918][ T5421] total_swap 127795200 [ 91.928927][ T5421] total_swapcached 300113920 [ 91.928945][ T5421] total_pgpgin 289249 [ 91.928953][ T5421] total_pgpgout 213039 [ 91.928961][ T5421] total_pgfault 173458 [ 91.928970][ T5421] total_pgmajfault 39 [ 91.928978][ T5421] total_inactive_anon 111820800 [ 91.929017][ T5421] total_active_anon 200335360 [ 91.929025][ T5421] total_inactive_file 0 [ 91.929034][ T5421] total_active_file 0 [ 91.929042][ T5421] total_unevictable 0 [ 91.929051][ T5421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.158,pid=4602,uid=0 [ 91.929200][ T5421] Memory cgroup out of memory: Killed process 4602 (syz.0.158) total-vm:192504kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:87480kB, UID:0 pgtables:312kB oom_score_adj:1000 [ 91.998955][ T5421] syz.0.295 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 91.998992][ T5421] CPU: 1 UID: 0 PID: 5421 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.999019][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.999034][ T5421] Call Trace: [ 91.999043][ T5421] [ 91.999051][ T5421] __dump_stack+0x1d/0x30 [ 91.999122][ T5421] dump_stack_lvl+0x95/0xd0 [ 91.999147][ T5421] dump_stack+0x15/0x1b [ 91.999172][ T5421] dump_header+0x80/0x240 [ 91.999278][ T5421] oom_kill_process+0x294/0x420 [ 91.999306][ T5421] out_of_memory+0x981/0xbc0 [ 91.999387][ T5421] try_charge_memcg+0x6ba/0xae0 [ 91.999504][ T5421] __memcg_kmem_charge_page+0x1af/0x3b0 [ 91.999584][ T5421] __alloc_frozen_pages_noprof+0x21d/0x400 [ 91.999676][ T5421] alloc_pages_bulk_noprof+0x4ca/0x550 [ 91.999702][ T5421] io_region_allocate_pages+0x16e/0x3b0 [ 91.999735][ T5421] io_create_region+0x291/0x300 [ 91.999809][ T5421] io_allocate_scq_urings+0x113/0x3a0 [ 91.999847][ T5421] io_uring_create+0x2ec/0x4f0 [ 91.999974][ T5421] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 92.000117][ T5421] __x64_sys_io_uring_setup+0x31/0x40 [ 92.000153][ T5421] x64_sys_call+0x1fbf/0x2550 [ 92.000181][ T5421] do_syscall_64+0x112/0x360 [ 92.000240][ T5421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.000265][ T5421] RIP: 0033:0x7f155487e1d9 [ 92.000284][ T5421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.000305][ T5421] RSP: 002b:00007f15532d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 92.000382][ T5421] RAX: ffffffffffffffda RBX: 00007f1554b05fa0 RCX: 00007f155487e1d9 [ 92.000398][ T5421] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00000000000037e4 [ 92.000412][ T5421] RBP: 00007f1554915888 R08: 0000000000000000 R09: 0000000000000000 [ 92.000426][ T5421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.000446][ T5421] R13: 00007f1554b06038 R14: 00007f1554b05fa0 R15: 00007fff8d06cde8 [ 92.000511][ T5421] [ 92.023126][ T5421] memory: usage 307200kB, limit 307200kB, failcnt 73306 [ 92.023160][ T5421] memory+swap: usage 432000kB, limit 9007199254740988kB, failcnt 0 [ 92.023176][ T5421] kmem: usage 2360kB, limit 9007199254740988kB, failcnt 0 [ 92.023190][ T5421] Memory cgroup stats for /syz0: [ 92.023428][ T5421] cache 311930880 [ 92.023438][ T5421] rss 225280 [ 92.023445][ T5421] shmem 311930880 [ 92.023453][ T5421] mapped_file 179535872 [ 92.023524][ T5421] dirty 0 [ 92.023532][ T5421] writeback 0 [ 92.023539][ T5421] workingset_refault_anon 146 [ 92.023548][ T5421] workingset_refault_file 496 [ 92.023558][ T5421] swap 127795200 [ 92.023565][ T5421] swapcached 300113920 [ 92.023573][ T5421] pgpgin 289249 [ 92.023581][ T5421] pgpgout 213039 [ 92.023589][ T5421] pgfault 173458 [ 92.023596][ T5421] pgmajfault 39 [ 92.023658][ T5421] inactive_anon 111820800 [ 92.023666][ T5421] active_anon 200335360 [ 92.023718][ T5421] inactive_file 0 [ 92.023725][ T5421] active_file 0 [ 92.023733][ T5421] unevictable 0 [ 92.023740][ T5421] hierarchical_memory_limit 314572800 [ 92.023750][ T5421] hierarchical_memsw_limit 9223372036854771712 [ 92.023760][ T5421] total_cache 311930880 [ 92.023769][ T5421] total_rss 225280 [ 92.023777][ T5421] total_shmem 311930880 [ 92.023786][ T5421] total_mapped_file 179535872 [ 92.023795][ T5421] total_dirty 0 [ 92.023803][ T5421] total_writeback 0 [ 92.023811][ T5421] total_workingset_refault_anon 146 [ 92.023820][ T5421] total_workingset_refault_file 496 [ 92.023829][ T5421] total_swap 127795200 [ 92.023837][ T5421] total_swapcached 300113920 [ 92.023846][ T5421] total_pgpgin 289249 [ 92.023909][ T5421] total_pgpgout 213039 [ 92.023918][ T5421] total_pgfault 173458 [ 92.023926][ T5421] total_pgmajfault 39 [ 92.023934][ T5421] total_inactive_anon 111820800 [ 92.023943][ T5421] total_active_anon 200335360 [ 92.023952][ T5421] total_inactive_file 0 [ 92.023981][ T5421] total_active_file 0 [ 92.023989][ T5421] total_unevictable 0 [ 92.024075][ T5421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.295,pid=5420,uid=0 [ 92.024155][ T5421] Memory cgroup out of memory: Killed process 5420 (syz.0.295) total-vm:94196kB, anon-rss:1452kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 92.073797][ T5381] loop7: detected capacity change from 0 to 512 [ 92.105523][ T5381] ext4: Bad value for 'resgid' [ 92.105623][ T5381] ext4: Bad value for 'resgid' [ 92.597770][ T5468] loop0: detected capacity change from 0 to 512 [ 92.636360][ T5468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.641780][ T5468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 92.641927][ T5468] System zones: 0-2, 18-18, 34-34 [ 92.642368][ T5468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.650883][ T5468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.307: bg 0: block 248: padding at end of block bitmap is not set [ 92.650997][ T5468] loop0: lost filesystem error report for type 5 error -117 [ 92.652728][ T5468] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.307: Failed to acquire dquot type 1 [ 92.652779][ T5468] loop0: lost filesystem error report for type 5 error -117 [ 92.660809][ T5468] EXT4-fs (loop0): 1 truncate cleaned up [ 92.663614][ T5468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.918368][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.309'. [ 92.930382][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.934333][ T3378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.126839][ T5479] fido_id[5479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.321156][ T5461] loop3: detected capacity change from 0 to 512 [ 93.605554][ T5486] ALSA: seq fatal error: cannot create timer (-19) [ 93.675653][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.312'. [ 93.675793][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.312'. [ 93.675884][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.312'. [ 93.696575][ T5461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.705576][ T5461] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.161648][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.302867][ T5517] Illegal XDP return value 4294967277 on prog (id 67) dev syz_tun, expect packet loss! [ 94.365482][ T5512] loop7: detected capacity change from 0 to 128 [ 94.386015][ T5512] vfat: Unknown parameter 'Ê' [ 94.394758][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.460672][ T5521] loop0: detected capacity change from 0 to 256 [ 94.763535][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.6.326'. [ 94.791509][ T5533] loop7: detected capacity change from 0 to 128 [ 94.826321][ T4700] syz.0.175 (4700) used greatest stack depth: 8096 bytes left [ 94.830629][ T5533] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 94.830656][ T5533] FAT-fs (loop7): Filesystem has been set read-only [ 94.923365][ T5540] loop5: detected capacity change from 0 to 1024 [ 94.967152][ T5544] loop5: detected capacity change from 0 to 1024 [ 95.034741][ T5553] loop7: detected capacity change from 0 to 164 [ 95.045987][ T5553] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 95.139766][ T5558] Set syz1 is full, maxelem 256 reached [ 95.154660][ T5531] loop3: p1[EZD] p3 p4 [ 95.156682][ T5531] loop3: p3 start 150994944 is beyond EOD, truncated [ 95.615784][ T5594] netlink: 24 bytes leftover after parsing attributes in process `syz.6.345'. [ 95.901715][ T5623] mmap: syz.7.348 (5623): VmData 35299328 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 96.111419][ T5651] x_tables: ip_tables: osf match: only valid for protocol 6 [ 96.294728][ T5666] set_capacity_and_notify: 2 callbacks suppressed [ 96.294745][ T5666] loop7: detected capacity change from 0 to 1024 [ 96.330279][ T5666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.330427][ T5666] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.387821][ T3982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.394722][ T5597] loop3: detected capacity change from 0 to 512 [ 96.585232][ T5708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5708 comm=syz.7.367 [ 96.629842][ T5597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.636122][ T5597] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.921983][ T30] kauditd_printk_skb: 557 callbacks suppressed [ 96.922011][ T30] audit: type=1400 audit(1791862657.608:1923): avc: denied { create } for pid=5713 comm="syz.7.369" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.922044][ T30] audit: type=1400 audit(1791862657.608:1924): avc: denied { map } for pid=5713 comm="syz.7.369" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.922125][ T30] audit: type=1400 audit(1791862657.608:1925): avc: denied { read write } for pid=5713 comm="syz.7.369" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.027020][ T30] audit: type=1400 audit(1791862657.738:1926): avc: granted { setsecparam } for pid=5715 comm="syz.5.370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 97.256458][ T5737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.295389][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.328376][ T30] audit: type=1400 audit(1791862658.048:1927): avc: denied { read } for pid=5739 comm="syz.3.377" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.328746][ T5737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.380662][ T30] audit: type=1400 audit(1791862658.098:1928): avc: denied { setopt } for pid=5739 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.383537][ T5737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.424702][ T5737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.488719][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.527621][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.527753][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.527940][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.646312][ T5750] syz_tun: entered allmulticast mode [ 97.660715][ T5749] syz_tun: left allmulticast mode [ 97.774746][ T30] audit: type=1400 audit(1791862658.488:1929): avc: denied { write } for pid=5751 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.894013][ T5759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.383'. [ 97.970219][ T30] audit: type=1400 audit(1791862658.688:1930): avc: denied { ioctl } for pid=5760 comm="syz.0.384" path="socket:[12968]" dev="sockfs" ino=12968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.014970][ T30] audit: type=1400 audit(1791862658.728:1931): avc: denied { lock } for pid=5743 comm="syz.6.379" path="socket:[12969]" dev="sockfs" ino=12969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 98.049245][ T30] audit: type=1400 audit(1791862658.768:1932): avc: denied { write } for pid=5760 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.217884][ T5770] random: crng reseeded on system resumption [ 98.317332][ T5781] loop3: detected capacity change from 0 to 732 [ 98.667940][ T5798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.395'. [ 99.043977][ T5825] FAULT_INJECTION: forcing a failure. [ 99.043977][ T5825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.044010][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.3.402 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.044042][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.044054][ T5825] Call Trace: [ 99.044061][ T5825] [ 99.044068][ T5825] __dump_stack+0x1d/0x30 [ 99.044094][ T5825] dump_stack_lvl+0x95/0xd0 [ 99.044129][ T5825] dump_stack+0x15/0x1b [ 99.044183][ T5825] should_fail_ex+0x262/0x280 [ 99.044266][ T5825] should_fail+0xb/0x20 [ 99.044289][ T5825] should_fail_usercopy+0x1a/0x20 [ 99.044320][ T5825] _copy_to_user+0x20/0xa0 [ 99.044397][ T5825] simple_read_from_buffer+0xb5/0x130 [ 99.044422][ T5825] proc_fail_nth_read+0x10e/0x150 [ 99.044456][ T5825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.044479][ T5825] vfs_read+0x18e/0x7c0 [ 99.044575][ T5825] ? __rcu_read_unlock+0x4e/0x70 [ 99.044609][ T5825] ? __fget_files+0x184/0x1c0 [ 99.044703][ T5825] ? mutex_lock+0x57/0x90 [ 99.044749][ T5825] ksys_read+0xdc/0x1a0 [ 99.044780][ T5825] __x64_sys_read+0x40/0x50 [ 99.044877][ T5825] x64_sys_call+0x2135/0x2550 [ 99.044961][ T5825] do_syscall_64+0x112/0x360 [ 99.044992][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.045019][ T5825] RIP: 0033:0x7f849b87ea0e [ 99.045033][ T5825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.045066][ T5825] RSP: 002b:00007f849a316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.045085][ T5825] RAX: ffffffffffffffda RBX: 00007f849a3176c0 RCX: 00007f849b87ea0e [ 99.045102][ T5825] RDX: 000000000000000f RSI: 00007f849a3170a0 RDI: 0000000000000004 [ 99.045170][ T5825] RBP: 00007f849a317090 R08: 0000000000000000 R09: 0000000000000000 [ 99.045184][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.045196][ T5825] R13: 00007f849bb46038 R14: 00007f849bb45fa0 R15: 00007ffcd8d151c8 [ 99.045226][ T5825] [ 99.101360][ T5828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.101442][ T5828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.112982][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 99.113131][ T5828] 8021q: VLANs not supported on wg1 [ 99.297757][ T5798] loop7: detected capacity change from 0 to 8192 [ 99.379045][ T5798] loop7: p1 p2 p3 p4 [ 99.379172][ T5798] loop7: p1 start 65792 is beyond EOD, truncated [ 99.379190][ T5798] loop7: p2 size 590592 extends beyond EOD, truncated [ 99.385223][ T5798] loop7: p3 start 524042 is beyond EOD, truncated [ 99.385247][ T5798] loop7: p4 start 131072 is beyond EOD, truncated [ 99.641963][ T2986] loop7: p1 p2 p3 p4 [ 99.642083][ T2986] loop7: p1 start 65792 is beyond EOD, truncated [ 99.642103][ T2986] loop7: p2 size 590592 extends beyond EOD, truncated [ 99.649718][ T2986] loop7: p3 start 524042 is beyond EOD, truncated [ 99.649766][ T2986] loop7: p4 start 131072 is beyond EOD, truncated [ 99.810730][ T5838] random: crng reseeded on system resumption [ 100.136197][ T5867] loop5: detected capacity change from 0 to 512 [ 100.207926][ T5867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.208040][ T5867] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.262709][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 100.262798][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 100.262841][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 100.386226][ T5880] netlink: 'syz.6.416': attribute type 3 has an invalid length. [ 100.386250][ T5880] netlink: 132 bytes leftover after parsing attributes in process `syz.6.416'. [ 100.404468][ T5879] FAULT_INJECTION: forcing a failure. [ 100.404468][ T5879] name failslab, interval 1, probability 0, space 0, times 0 [ 100.404501][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz.3.415 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.404530][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.404544][ T5879] Call Trace: [ 100.404552][ T5879] [ 100.404561][ T5879] __dump_stack+0x1d/0x30 [ 100.404630][ T5879] dump_stack_lvl+0x95/0xd0 [ 100.404735][ T5879] dump_stack+0x15/0x1b [ 100.404764][ T5879] should_fail_ex+0x262/0x280 [ 100.404807][ T5879] ? sctp_association_new+0x6d/0x1160 [ 100.404835][ T5879] should_failslab+0x8c/0xb0 [ 100.404889][ T5879] __kmalloc_cache_noprof+0x7a/0x400 [ 100.404928][ T5879] ? sctp_association_new+0x6d/0x1160 [ 100.404958][ T5879] sctp_association_new+0x6d/0x1160 [ 100.405056][ T5879] ? sctp_v4_scope+0x140/0x150 [ 100.405077][ T5879] sctp_connect_new_asoc+0x1a8/0x3a0 [ 100.405105][ T5879] __sctp_connect+0x428/0x7a0 [ 100.405126][ T5879] ? release_sock+0x10c/0x180 [ 100.405196][ T5879] ? lock_sock_nested+0x84/0x110 [ 100.405292][ T5879] sctp_inet_connect+0xe7/0x110 [ 100.405330][ T5879] __sys_connect+0x1ef/0x2a0 [ 100.405360][ T5879] __x64_sys_connect+0x3f/0x50 [ 100.405432][ T5879] x64_sys_call+0x1c0b/0x2550 [ 100.405461][ T5879] do_syscall_64+0x112/0x360 [ 100.405497][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.405523][ T5879] RIP: 0033:0x7f849b8be1d9 [ 100.405542][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.405562][ T5879] RSP: 002b:00007f849a317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 100.405612][ T5879] RAX: ffffffffffffffda RBX: 00007f849bb45fa0 RCX: 00007f849b8be1d9 [ 100.405630][ T5879] RDX: 0000000000000010 RSI: 0000200000000940 RDI: 0000000000000004 [ 100.405645][ T5879] RBP: 00007f849b955888 R08: 0000000000000000 R09: 0000000000000000 [ 100.405659][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.405673][ T5879] R13: 00007f849bb46038 R14: 00007f849bb45fa0 R15: 00007ffcd8d151c8 [ 100.405696][ T5879] [ 100.644008][ T4639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.720621][ T5905] netlink: 60 bytes leftover after parsing attributes in process `syz.7.425'. [ 100.721064][ T5905] netlink: 60 bytes leftover after parsing attributes in process `syz.7.425'. [ 100.813096][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.426'. [ 101.105214][ T5938] loop5: detected capacity change from 0 to 128 [ 101.163374][ T5911] syz.3.428 (5911): drop_caches: 2 [ 101.238943][ T5942] ip_tables: iptables: counters copy to user failed while replacing table [ 101.447997][ T5951] random: crng reseeded on system resumption [ 101.718370][ T5953] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 101.874598][ T5958] loop3: detected capacity change from 0 to 512 [ 101.936990][ T5958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.937135][ T5958] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.937408][ T30] kauditd_printk_skb: 528 callbacks suppressed [ 101.937434][ T30] audit: type=1326 audit(1791862662.648:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f849b87ea0e code=0x7ffc0000 [ 101.996843][ T30] audit: type=1326 audit(1791862662.718:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f849b8bc617 code=0x7ffc0000 [ 101.997017][ T30] audit: type=1326 audit(1791862662.718:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f849b87ea0e code=0x7ffc0000 [ 101.997282][ T30] audit: type=1326 audit(1791862662.718:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f849b8bde6b code=0x7ffc0000 [ 102.080005][ T30] audit: type=1326 audit(1791862662.718:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f849b87ea0e code=0x7ffc0000 [ 102.082290][ T30] audit: type=1326 audit(1791862662.798:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 102.082453][ T30] audit: type=1326 audit(1791862662.798:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 102.083862][ T30] audit: type=1326 audit(1791862662.798:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 102.084359][ T30] audit: type=1326 audit(1791862662.798:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 102.084750][ T30] audit: type=1326 audit(1791862662.798:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.3.441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 102.269090][ T5953] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 102.410695][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.466176][ T5964] loop7: detected capacity change from 0 to 512 [ 102.501757][ T5964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.501846][ T5964] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.621254][ T5965] loop5: detected capacity change from 0 to 512 [ 102.651368][ T5968] FAULT_INJECTION: forcing a failure. [ 102.651368][ T5968] name failslab, interval 1, probability 0, space 0, times 0 [ 102.651447][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.651476][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.651492][ T5968] Call Trace: [ 102.651500][ T5968] [ 102.651510][ T5968] __dump_stack+0x1d/0x30 [ 102.651541][ T5968] dump_stack_lvl+0x95/0xd0 [ 102.651640][ T5968] dump_stack+0x15/0x1b [ 102.651665][ T5968] should_fail_ex+0x262/0x280 [ 102.651699][ T5968] should_failslab+0x8c/0xb0 [ 102.651776][ T5968] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 102.651890][ T5968] ? sock_alloc_inode+0x36/0xf0 [ 102.651927][ T5968] ? sock_alloc_inode+0x36/0xf0 [ 102.651963][ T5968] ? alloc_inode+0x34/0x170 [ 102.651990][ T5968] ? __pfx_sock_alloc_inode+0x10/0x10 [ 102.652034][ T5968] sock_alloc_inode+0x36/0xf0 [ 102.652064][ T5968] alloc_inode+0x40/0x170 [ 102.652085][ T5968] sock_create_lite+0x79/0x290 [ 102.652217][ T5968] __netlink_kernel_create+0x8d/0x550 [ 102.652287][ T5968] ? ops_init+0x4b/0x2e0 [ 102.652350][ T5968] nfnetlink_net_init+0x8d/0xd0 [ 102.652381][ T5968] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 102.652457][ T5968] ? __pfx_nfnetlink_bind+0x10/0x10 [ 102.652494][ T5968] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 102.652530][ T5968] ops_init+0x22a/0x2e0 [ 102.652547][ T5968] ? setup_net+0xb6/0x230 [ 102.652655][ T5968] setup_net+0x9f/0x230 [ 102.652744][ T5968] copy_net_ns+0x333/0x490 [ 102.652781][ T5968] create_new_namespaces+0x1f6/0x420 [ 102.652822][ T5968] unshare_nsproxy_namespaces+0x115/0x150 [ 102.652866][ T5968] ksys_unshare+0x3fd/0x6f0 [ 102.652899][ T5968] __x64_sys_unshare+0x1f/0x30 [ 102.652927][ T5968] x64_sys_call+0x1e33/0x2550 [ 102.653006][ T5968] do_syscall_64+0x112/0x360 [ 102.653038][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.653062][ T5968] RIP: 0033:0x7f849b8be1d9 [ 102.653109][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.653177][ T5968] RSP: 002b:00007f849a317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.653276][ T5968] RAX: ffffffffffffffda RBX: 00007f849bb45fa0 RCX: 00007f849b8be1d9 [ 102.653294][ T5968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 102.653310][ T5968] RBP: 00007f849b955888 R08: 0000000000000000 R09: 0000000000000000 [ 102.653334][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.653419][ T5968] R13: 00007f849bb46038 R14: 00007f849bb45fa0 R15: 00007ffcd8d151c8 [ 102.653442][ T5968] [ 102.969082][ T5985] __nla_validate_parse: 6 callbacks suppressed [ 102.969098][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 102.999167][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 103.137305][ T5990] loop5: detected capacity change from 0 to 1024 [ 103.160917][ T5990] EXT4-fs: Ignoring removed bh option [ 103.174204][ T5990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 103.217750][ T5990] loop5: detected capacity change from 1024 to 64 [ 103.310684][ T3982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.426703][ T6001] SELinux: failed to load policy [ 103.599718][ T4639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 103.600565][ T5991] kmmpd-loop5: attempt to access beyond end of device [ 103.600565][ T5991] loop5: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 103.600591][ T5991] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 103.634552][ T32] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.674376][ T32] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.707111][ T6004] xt_hashlimit: size too large, truncated to 1048576 [ 103.744418][ T32] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.778385][ T6012] hsr0: entered allmulticast mode [ 103.778406][ T6012] hsr_slave_0: entered allmulticast mode [ 103.778421][ T6012] hsr_slave_1: entered allmulticast mode [ 103.788262][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.455'. [ 103.797680][ T6018] hsr_slave_0: left promiscuous mode [ 103.799157][ T6018] hsr_slave_1: left promiscuous mode [ 103.843089][ T6018] hsr0 (unregistering): left allmulticast mode [ 103.889506][ T32] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.916838][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 104.041182][ T32] bridge_slave_1: left allmulticast mode [ 104.041207][ T32] bridge_slave_1: left promiscuous mode [ 104.041437][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.043364][ T32] bridge_slave_0: left allmulticast mode [ 104.043391][ T32] bridge_slave_0: left promiscuous mode [ 104.043551][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.082616][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 104.082636][ T6039] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 104.150085][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.151953][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.152805][ T32] bond0 (unregistering): Released all slaves [ 104.265315][ T32] hsr_slave_0: left promiscuous mode [ 104.265833][ T32] hsr_slave_1: left promiscuous mode [ 104.266215][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.266245][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.266754][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.266904][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.275474][ T32] veth1_macvtap: left promiscuous mode [ 104.275502][ T32] veth0_macvtap: left promiscuous mode [ 104.275558][ T32] veth1_vlan: left promiscuous mode [ 104.275591][ T32] veth0_vlan: left promiscuous mode [ 104.509854][ T6055] loop3: detected capacity change from 0 to 128 [ 104.542203][ T6055] ext4: Unknown parameter 'smackfsdef' [ 104.588572][ T32] team0 (unregistering): Port device team_slave_1 removed [ 104.592867][ T6006] xt_hashlimit: size too large, truncated to 1048576 [ 104.612782][ T32] team0 (unregistering): Port device team_slave_0 removed [ 104.718418][ T3025] 8021q: adding VLAN 0 to HW filter on device eth13 [ 104.902767][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.469'. [ 104.902804][ T6075] netlink: 'syz.6.469': attribute type 1 has an invalid length. [ 104.902868][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.469'. [ 104.902895][ T6075] netlink: 'syz.6.469': attribute type 1 has an invalid length. [ 104.943026][ T6080] loop7: detected capacity change from 0 to 512 [ 105.016503][ T6080] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.470: bad orphan inode 15 [ 105.016535][ T6080] loop7: lost filesystem error report for type 5 error -117 [ 105.016938][ T6080] ext4_test_bit(bit=14, block=5) = 0 [ 105.046880][ T6080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.070135][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 105.070172][ T6089] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 105.070227][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 105.070249][ T6089] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 105.122188][ T6084] tipc: Started in network mode [ 105.122339][ T6084] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 105.122679][ T6084] tipc: Enabled bearer , priority 0 [ 105.143300][ T6080] EXT4-fs error (device loop7): __ext4_new_inode:1083: comm syz.7.470: reserved inode found cleared - inode=1 [ 105.173779][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.173817][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.173884][ T6019] bridge_slave_0: entered allmulticast mode [ 105.174370][ T6019] bridge_slave_0: entered promiscuous mode [ 105.184556][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.184590][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.184655][ T6019] bridge_slave_1: entered allmulticast mode [ 105.185151][ T6019] bridge_slave_1: entered promiscuous mode [ 105.243420][ T3982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.413707][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.414488][ T3025] 8021q: adding VLAN 0 to HW filter on device eth14 [ 105.429010][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.488358][ T6019] team0: Port device team_slave_0 added [ 105.495239][ T6019] team0: Port device team_slave_1 added [ 105.561424][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.561438][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.561545][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.568500][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.568514][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.568544][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.687340][ T6019] hsr_slave_0: entered promiscuous mode [ 105.694601][ T6019] hsr_slave_1: entered promiscuous mode [ 105.694916][ T6019] debugfs: 'hsr0' already exists in 'hsr' [ 105.694928][ T6019] Cannot create hsr debugfs directory [ 105.898899][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 106.012859][ T6116] loop7: detected capacity change from 0 to 512 [ 106.174105][ T6143] batadv1: entered promiscuous mode [ 106.174146][ T6143] batadv1: entered allmulticast mode [ 106.204621][ T6154] loop7: detected capacity change from 0 to 1024 [ 106.205028][ T6154] EXT4-fs: Ignoring removed orlov option [ 106.210270][ T6154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.280674][ T3025] 8021q: adding VLAN 0 to HW filter on device eth15 [ 106.280996][ T3417] tipc: Node number set to 43690 [ 106.293953][ T6019] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 106.296605][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.298191][ T6019] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 106.302983][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.305462][ T6019] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 106.316280][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.317043][ T6019] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 106.331337][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.476155][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.494931][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.499800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.499834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.505206][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.505239][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.547854][ T6019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.648637][ T3982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.767437][ T3025] 8021q: adding VLAN 0 to HW filter on device eth16 [ 106.942638][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.050500][ T6126] loop3: detected capacity change from 0 to 8192 [ 107.108623][ T6126] loop3: p1 p2 p3 p4 [ 107.108745][ T6126] loop3: p1 start 65792 is beyond EOD, truncated [ 107.108765][ T6126] loop3: p2 size 590592 extends beyond EOD, truncated [ 107.109429][ T6126] loop3: p3 start 524042 is beyond EOD, truncated [ 107.109449][ T6126] loop3: p4 start 131072 is beyond EOD, truncated [ 107.415009][ T6019] veth0_vlan: entered promiscuous mode [ 107.422324][ T6019] veth1_vlan: entered promiscuous mode [ 107.447864][ T6019] veth0_macvtap: entered promiscuous mode [ 107.450940][ T6019] veth1_macvtap: entered promiscuous mode [ 107.470666][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.481556][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.507604][ T365] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.508076][ T365] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.508111][ T365] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.508178][ T365] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.572820][ T30] kauditd_printk_skb: 574 callbacks suppressed [ 107.572848][ T30] audit: type=1400 audit(1791862668.288:3045): avc: denied { mount } for pid=6019 comm="syz-executor" name="/" dev="gadgetfs" ino=4965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 107.742610][ T30] audit: type=1326 audit(1791862668.458:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.742703][ T30] audit: type=1326 audit(1791862668.458:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.773616][ T30] audit: type=1326 audit(1791862668.468:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.773666][ T30] audit: type=1326 audit(1791862668.468:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.773799][ T30] audit: type=1326 audit(1791862668.468:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.809089][ T30] audit: type=1326 audit(1791862668.518:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.809127][ T30] audit: type=1326 audit(1791862668.518:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.809156][ T30] audit: type=1326 audit(1791862668.518:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 107.809223][ T30] audit: type=1326 audit(1791862668.518:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.3.496" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 108.222084][ T6263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.770326][ T6282] __nla_validate_parse: 3 callbacks suppressed [ 108.770346][ T6282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.508'. [ 109.182404][ T6296] loop8: detected capacity change from 0 to 512 [ 109.194366][ T6296] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 109.194382][ T6296] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 109.224426][ T6296] EXT4-fs (loop8): 1 truncate cleaned up [ 109.224775][ T6296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.230753][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.514'. [ 109.347361][ T6309] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.405823][ T6019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.572161][ T6320] loop3: detected capacity change from 0 to 1024 [ 109.589103][ T6320] EXT4-fs (loop3): unable to read superblock [ 109.591397][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 109.591416][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 109.691362][ T6323] ip_tables: iptables: counters copy to user failed while replacing table [ 110.535609][ T6341] FAULT_INJECTION: forcing a failure. [ 110.535609][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 110.535643][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.8.529 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.535748][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.535761][ T6341] Call Trace: [ 110.535769][ T6341] [ 110.535778][ T6341] __dump_stack+0x1d/0x30 [ 110.535836][ T6341] dump_stack_lvl+0x95/0xd0 [ 110.535885][ T6341] dump_stack+0x15/0x1b [ 110.535904][ T6341] should_fail_ex+0x262/0x280 [ 110.535932][ T6341] ? skb_clone+0x151/0x1f0 [ 110.535986][ T6341] should_failslab+0x8c/0xb0 [ 110.536023][ T6341] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 110.536059][ T6341] ? skb_clone+0x151/0x1f0 [ 110.536134][ T6341] skb_clone+0x151/0x1f0 [ 110.536159][ T6341] __netlink_deliver_tap+0x2be/0x510 [ 110.536188][ T6341] netlink_unicast+0x656/0x680 [ 110.536264][ T6341] netlink_sendmsg+0x5be/0x6f0 [ 110.536292][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.536325][ T6341] ____sys_sendmsg+0x532/0x580 [ 110.536352][ T6341] ___sys_sendmsg+0x195/0x1e0 [ 110.536385][ T6341] __x64_sys_sendmsg+0xd4/0x160 [ 110.536433][ T6341] x64_sys_call+0x22ab/0x2550 [ 110.536471][ T6341] do_syscall_64+0x112/0x360 [ 110.536502][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.536597][ T6341] RIP: 0033:0x7fb28efee1d9 [ 110.536612][ T6341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.536679][ T6341] RSP: 002b:00007fb28da47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.536703][ T6341] RAX: ffffffffffffffda RBX: 00007fb28f275fa0 RCX: 00007fb28efee1d9 [ 110.536721][ T6341] RDX: 3500000000000000 RSI: 00002000000009c0 RDI: 0000000000000005 [ 110.536737][ T6341] RBP: 00007fb28da47090 R08: 0000000000000000 R09: 0000000000000000 [ 110.536753][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.536768][ T6341] R13: 00007fb28f276038 R14: 00007fb28f275fa0 R15: 00007ffedc384cc8 [ 110.536825][ T6341] [ 110.546072][ T6341] netlink: 'syz.8.529': attribute type 6 has an invalid length. [ 110.546092][ T6341] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.529'. [ 110.816872][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 110.817034][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.8.531'. [ 110.832714][ T6348] ip6gre1: entered promiscuous mode [ 110.832734][ T6348] ip6gre1: entered allmulticast mode [ 111.341179][ T6358] loop8: detected capacity change from 0 to 512 [ 111.459421][ T6360] FAULT_INJECTION: forcing a failure. [ 111.459421][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 111.459454][ T6360] CPU: 1 UID: 60928 PID: 6360 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.459484][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.459521][ T6360] Call Trace: [ 111.459528][ T6360] [ 111.459536][ T6360] __dump_stack+0x1d/0x30 [ 111.459560][ T6360] dump_stack_lvl+0x95/0xd0 [ 111.459580][ T6360] dump_stack+0x15/0x1b [ 111.459646][ T6360] should_fail_ex+0x262/0x280 [ 111.459703][ T6360] ? cred_alloc_blank+0x2a/0xe0 [ 111.459732][ T6360] should_failslab+0x8c/0xb0 [ 111.459886][ T6360] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 111.459918][ T6360] ? cred_alloc_blank+0x2a/0xe0 [ 111.459945][ T6360] cred_alloc_blank+0x2a/0xe0 [ 111.460052][ T6360] keyctl_session_to_parent+0x42/0x4c0 [ 111.460090][ T6360] __se_sys_keyctl+0x484/0xb70 [ 111.460124][ T6360] ? __se_sys_futex+0x2f6/0x370 [ 111.460161][ T6360] ? xfd_validate_state+0x45/0xf0 [ 111.460255][ T6360] ? restore_fpregs_from_fpstate+0x61/0x110 [ 111.460289][ T6360] __x64_sys_keyctl+0x67/0x80 [ 111.460349][ T6360] x64_sys_call+0x1fe0/0x2550 [ 111.460375][ T6360] do_syscall_64+0x112/0x360 [ 111.460410][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.460486][ T6360] RIP: 0033:0x7f849b8be1d9 [ 111.460503][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.460526][ T6360] RSP: 002b:00007f849a317028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 111.460550][ T6360] RAX: ffffffffffffffda RBX: 00007f849bb45fa0 RCX: 00007f849b8be1d9 [ 111.460568][ T6360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 111.460584][ T6360] RBP: 00007f849b955888 R08: 0000000000000000 R09: 0000000000000000 [ 111.460690][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.460705][ T6360] R13: 00007f849bb46038 R14: 00007f849bb45fa0 R15: 00007ffcd8d151c8 [ 111.460728][ T6360] [ 111.660783][ T6366] netlink: 'syz.7.536': attribute type 1 has an invalid length. [ 111.690888][ T6366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.747423][ T6366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6366 comm=syz.7.536 [ 111.759077][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.536'. [ 112.578097][ T30] kauditd_printk_skb: 1094 callbacks suppressed [ 112.578112][ T30] audit: type=1326 audit(1791862673.298:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.578578][ T6390] netlink: 'syz.6.543': attribute type 6 has an invalid length. [ 112.579374][ T30] audit: type=1326 audit(1791862673.298:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.582084][ T30] audit: type=1326 audit(1791862673.298:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.583885][ T30] audit: type=1326 audit(1791862673.298:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.585079][ T30] audit: type=1326 audit(1791862673.298:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.654424][ T30] audit: type=1326 audit(1791862673.348:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.654476][ T30] audit: type=1326 audit(1791862673.348:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.654519][ T30] audit: type=1326 audit(1791862673.348:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.654570][ T30] audit: type=1326 audit(1791862673.348:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 112.654610][ T30] audit: type=1326 audit(1791862673.348:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.8.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb28efaea0e code=0x7ffc0000 [ 113.360473][ T6411] netlink: 24 bytes leftover after parsing attributes in process `syz.6.549'. [ 113.617397][ T6421] loop3: detected capacity change from 0 to 512 [ 113.724020][ T6418] random: crng reseeded on system resumption [ 114.248530][ T6432] loop3: detected capacity change from 0 to 512 [ 114.729052][ T6453] loop3: detected capacity change from 0 to 512 [ 114.780996][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.781097][ T6453] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.892575][ T6463] loop8: detected capacity change from 0 to 512 [ 114.905313][ T6463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 114.905347][ T6463] System zones: 1-12 [ 114.907588][ T6463] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.563: missing EA_INODE flag [ 114.907694][ T6463] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 114.908478][ T6463] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.563: error while reading EA inode 12 err=-117 [ 114.908506][ T6463] loop8: lost filesystem error report for type 5 error -117 [ 114.908614][ T6463] EXT4-fs (loop8): 1 orphan inode deleted [ 114.908995][ T6463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.093878][ T6463] syzkaller0: entered promiscuous mode [ 115.093899][ T6463] syzkaller0: entered allmulticast mode [ 115.270973][ T6472] x_tables: duplicate entry at hook 2 [ 115.386068][ T6019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.534896][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.571'. [ 115.961239][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.345296][ T6505] loop3: detected capacity change from 0 to 128 [ 116.415904][ T6505] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 116.491168][ T6505] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.504220][ T6505] ext2 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.737435][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.584'. [ 117.038525][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.160009][ T6500] loop8: detected capacity change from 0 to 1024 [ 117.214863][ T6500] EXT4-fs: Ignoring removed i_version option [ 117.222608][ T6500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.223641][ T6500] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.259688][ T6500] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 117.265085][ T6500] EXT4-fs (loop8): orphan cleanup on readonly fs [ 117.283972][ T6500] EXT4-fs error (device loop8): ext4_free_blocks:6719: comm syz.8.578: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.284062][ T6500] loop8: lost filesystem error report for type 5 error -117 [ 117.286053][ T6500] EXT4-fs (loop8): Remounting filesystem read-only [ 117.286424][ T6500] EXT4-fs (loop8): 1 orphan inode deleted [ 117.319069][ T6525] loop3: detected capacity change from 0 to 512 [ 117.322978][ T6525] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 117.322994][ T6525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.351286][ T6525] EXT4-fs (loop3): 1 truncate cleaned up [ 117.364410][ T6500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.367138][ T6525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.710070][ T30] kauditd_printk_skb: 729 callbacks suppressed [ 117.710087][ T30] audit: type=1400 audit(1791862678.428:4888): avc: denied { write } for pid=6530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.760346][ T30] audit: type=1326 audit(1791862678.478:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.3.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 117.816737][ T30] audit: type=1400 audit(1791862678.528:4890): avc: denied { write } for pid=6550 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.827265][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.591'. [ 117.840801][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.912979][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.920131][ T6548] bridge_slave_1 (unregistering): left allmulticast mode [ 117.920178][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.967031][ T6019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.013966][ T6557] SELinux: Context #! ./dev [ 118.013966][ T6557] 'h¶)ëŠ is not valid (left unmapped). [ 118.014013][ T30] audit: type=1400 audit(1791862678.728:4891): avc: denied { mac_admin } for pid=6555 comm="syz.3.592" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.042050][ T6562] loop3: detected capacity change from 0 to 128 [ 118.048451][ T6562] FAT-fs (loop3): bogus number of FAT structure [ 118.048470][ T6562] FAT-fs (loop3): Can't find a valid FAT filesystem [ 118.153389][ T6557] netlink: 156 bytes leftover after parsing attributes in process `syz.3.592'. [ 118.161862][ T6552] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.272221][ T6552] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.365061][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.8.596'. [ 118.397098][ T6552] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.451418][ T30] audit: type=1400 audit(1791862679.168:4892): avc: denied { write } for pid=6571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.486493][ T6552] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.535481][ T30] audit: type=1400 audit(1791862679.248:4893): avc: denied { write } for pid=6587 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.631615][ T6584] netlink: 68 bytes leftover after parsing attributes in process `syz.7.595'. [ 118.718311][ T365] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.727917][ T365] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.773563][ T32] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.828875][ T32] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.856265][ T30] audit: type=1400 audit(1791862679.568:4894): avc: denied { write } for pid=6592 comm="syz.8.597" name="core" dev="configfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.976687][ T30] audit: type=1400 audit(1791862679.688:4895): avc: denied { write } for pid=6592 comm="syz.8.597" name="core" dev="configfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.047204][ T30] audit: type=1326 audit(1791862679.758:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.599" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 119.050071][ T30] audit: type=1326 audit(1791862679.768:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.599" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b8be1d9 code=0x7ffc0000 [ 119.189941][ T6599] loop8: detected capacity change from 0 to 512 [ 119.312288][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.8.597'. [ 119.436568][ T6605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6605 comm=syz.6.598 [ 119.450875][ T6605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=6605 comm=syz.6.598 [ 119.527107][ T6616] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 119.527150][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 119.555185][ T6621] loop8: detected capacity change from 0 to 512 [ 119.560466][ T6621] EXT4-fs: Ignoring removed orlov option [ 119.577999][ T6621] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.599707][ T6621] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4223: comm syz.8.601: Allocating blocks 41-42 which overlap fs metadata [ 119.599742][ T6621] loop8: lost filesystem error report for type 5 error -117 [ 119.599884][ T6621] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4223: comm syz.8.601: Allocating blocks 41-42 which overlap fs metadata [ 119.599920][ T6621] loop8: lost filesystem error report for type 5 error -117 [ 119.600158][ T6621] EXT4-fs error (device loop8): ext4_acquire_dquot:7070: comm syz.8.601: Failed to acquire dquot type 1 [ 119.600256][ T6621] loop8: lost filesystem error report for type 5 error -117 [ 119.600512][ T6621] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 119.600561][ T6621] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.601: corrupted inode contents [ 119.600603][ T6621] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.602328][ T6621] EXT4-fs error (device loop8): ext4_dirty_inode:6736: inode #12: comm syz.8.601: mark_inode_dirty error [ 119.602357][ T6621] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.603991][ T6621] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.601: corrupted inode contents [ 119.604015][ T6621] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.604258][ T6621] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #12: comm syz.8.601: mark_inode_dirty error [ 119.604329][ T6621] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.604439][ T6621] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.601: corrupted inode contents [ 119.604539][ T6621] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.604746][ T6621] EXT4-fs error (device loop8) in ext4_orphan_del:304: Corrupt filesystem [ 119.604766][ T6621] loop8: lost filesystem error report for type 5 error -117 [ 119.606312][ T6621] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.601: corrupted inode contents [ 119.606363][ T6621] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.606546][ T6621] EXT4-fs error (device loop8): ext4_truncate:4721: inode #12: comm syz.8.601: mark_inode_dirty error [ 119.606639][ T6621] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.606739][ T6621] EXT4-fs error (device loop8) in ext4_process_orphan:346: Corrupt filesystem [ 119.606757][ T6621] loop8: lost filesystem error report for type 5 error -117 [ 119.606970][ T6621] EXT4-fs (loop8): 1 truncate cleaned up [ 119.607341][ T6621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.662488][ T6621] EXT4-fs error (device loop8): __ext4_remount:6873: comm syz.8.601: Abort forced by user [ 119.662681][ T6621] EXT4-fs (loop8): Remounting filesystem read-only [ 119.662696][ T6621] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 119.764392][ T6019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.823698][ T6634] netlink: 'syz.7.602': attribute type 4 has an invalid length. [ 119.823719][ T6634] netlink: 152 bytes leftover after parsing attributes in process `syz.7.602'. [ 119.878466][ T6637] loop8: detected capacity change from 0 to 512 [ 119.886325][ T6637] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 119.886408][ T6637] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #13: comm syz.8.603: iget: bad i_size value: 12154757448730 [ 119.886436][ T6637] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 119.887504][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 119.887529][ C1] EXT4-fs (loop8): initial error at time 1791862680: ext4_orphan_get:1403: inode 13 [ 119.887563][ C1] EXT4-fs (loop8): last error at time 1791862680: ext4_orphan_get:1403: inode 13 [ 119.887606][ T6637] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.603: couldn't read orphan inode 13 (err -117) [ 119.887632][ T6637] loop8: lost filesystem error report for type 5 error -117 [ 119.888435][ T6637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.951588][ T6637] FAULT_INJECTION: forcing a failure. [ 119.951588][ T6637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.951650][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.8.603 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.951677][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.951691][ T6637] Call Trace: [ 119.951700][ T6637] [ 119.951709][ T6637] __dump_stack+0x1d/0x30 [ 119.951736][ T6637] dump_stack_lvl+0x95/0xd0 [ 119.951760][ T6637] dump_stack+0x15/0x1b [ 119.951912][ T6637] should_fail_ex+0x262/0x280 [ 119.951942][ T6637] should_fail+0xb/0x20 [ 119.951968][ T6637] should_fail_usercopy+0x1a/0x20 [ 119.952000][ T6637] strncpy_from_user+0x27/0x250 [ 119.952043][ T6637] do_getname+0x59/0x1c0 [ 119.952106][ T6637] __se_sys_symlink+0x2f/0x1b0 [ 119.952131][ T6637] __x64_sys_symlink+0x31/0x40 [ 119.952156][ T6637] x64_sys_call+0x211f/0x2550 [ 119.952198][ T6637] do_syscall_64+0x112/0x360 [ 119.952262][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.952286][ T6637] RIP: 0033:0x7fb28efee1d9 [ 119.952309][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.952330][ T6637] RSP: 002b:00007fb28da47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 119.952352][ T6637] RAX: ffffffffffffffda RBX: 00007fb28f275fa0 RCX: 00007fb28efee1d9 [ 119.952385][ T6637] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000200000000f40 [ 119.952400][ T6637] RBP: 00007fb28da47090 R08: 0000000000000000 R09: 0000000000000000 [ 119.952428][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.952496][ T6637] R13: 00007fb28f276038 R14: 00007fb28f275fa0 R15: 00007ffedc384cc8 [ 119.952515][ T6637] [ 120.121776][ T6019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.280188][ T6643] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 120.280242][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.280277][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 120.299549][ T6643] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 120.299655][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.299682][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 120.318873][ T6643] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 120.318926][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.318954][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 120.322595][ T6643] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 120.322694][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.322721][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 120.330618][ T6644] vhci_hcd: connection closed [ 120.330781][ T12] vhci_hcd vhci_hcd.8: stop threads [ 120.330800][ T12] vhci_hcd vhci_hcd.8: release socket [ 120.330814][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 120.330868][ T6652] vhci_hcd: connection closed [ 120.331588][ T12] vhci_hcd vhci_hcd.8: stop threads [ 120.331604][ T12] vhci_hcd vhci_hcd.8: release socket [ 120.331620][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 120.331791][ T6649] vhci_hcd: connection closed [ 120.331964][ T12] vhci_hcd vhci_hcd.8: stop threads [ 120.331979][ T12] vhci_hcd vhci_hcd.8: release socket [ 120.331994][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 120.338306][ T6654] vhci_hcd: connection closed [ 120.338700][ T12] vhci_hcd vhci_hcd.8: stop threads [ 120.338717][ T12] vhci_hcd vhci_hcd.8: release socket [ 120.338732][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 120.608360][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 120.743477][ T3407] kernel read not supported for file /avc/cache_stats (pid: 3407 comm: kworker/0:7) [ 121.259506][ T6674] loop8: detected capacity change from 0 to 512 [ 121.864066][ T6689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6928 sclass=netlink_route_socket pid=6689 comm=syz.0.628 [ 122.271037][ T6696] loop7: detected capacity change from 0 to 2048 [ 122.342334][ T6696] Alternate GPT is invalid, using primary GPT. [ 122.342521][ T6696] loop7: p2 p3 p7 [ 122.555694][ T6712] netlink: 32 bytes leftover after parsing attributes in process `syz.7.623'. [ 122.751550][ T6720] loop8: detected capacity change from 0 to 2048 [ 122.783114][ T6720] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.801605][ T6716] syz.3.626 (6716) used greatest stack depth: 7992 bytes left [ 122.845692][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 122.845709][ T30] audit: type=1326 audit(1791862683.558:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46474ce1d9 code=0x7ffc0000 [ 122.847237][ T30] audit: type=1326 audit(1791862683.558:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46474ce1d9 code=0x7ffc0000 [ 122.861134][ T30] audit: type=1326 audit(1791862683.568:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46474ce1d9 code=0x7ffc0000 [ 122.862616][ T30] audit: type=1326 audit(1791862683.568:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f46474ce1d9 code=0x7ffc0000 [ 122.864294][ T30] audit: type=1326 audit(1791862683.568:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46474ce1d9 code=0x7ffc0000 [ 122.892715][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'. [ 122.929425][ T30] audit: type=1326 audit(1791862683.628:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46474ce1d9 code=0x7ffc0000 [ 122.929522][ T30] audit: type=1326 audit(1791862683.628:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46474cdf42 code=0x7ffc0000 [ 122.929550][ T30] audit: type=1326 audit(1791862683.628:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f46474cdfd7 code=0x7ffc0000 [ 122.929637][ T30] audit: type=1326 audit(1791862683.628:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f464748aed1 code=0x7ffc0000 [ 122.929664][ T30] audit: type=1326 audit(1791862683.628:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.6.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f46474cefc9 code=0x7ffc0000 [ 123.599328][ T6724] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 123.765831][ T6739] loop7: detected capacity change from 0 to 512 [ 123.793606][ T6739] EXT4-fs: Ignoring removed bh option [ 123.803623][ T6739] EXT4-fs: quotafile must be on filesystem root [ 124.284040][ T6757] netlink: 'syz.7.639': attribute type 5 has an invalid length. [ 124.492463][ T6764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.642'. [ 124.592350][ T6767] xt_hashlimit: size too large, truncated to 1048576 [ 124.644218][ T6764] –: renamed from vxcan1 (while UP) [ 124.682394][ T6764] netlink: 2 bytes leftover after parsing attributes in process `syz.0.642'. [ 125.188356][ T6328] syz.6.520 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 125.188386][ T6328] CPU: 0 UID: 0 PID: 6328 Comm: syz.6.520 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.188467][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.188480][ T6328] Call Trace: [ 125.188487][ T6328] [ 125.188495][ T6328] __dump_stack+0x1d/0x30 [ 125.188519][ T6328] dump_stack_lvl+0x95/0xd0 [ 125.188542][ T6328] dump_stack+0x15/0x1b [ 125.188645][ T6328] dump_header+0x80/0x240 [ 125.188671][ T6328] oom_kill_process+0x294/0x420 [ 125.188699][ T6328] out_of_memory+0x981/0xbc0 [ 125.188752][ T6328] try_charge_memcg+0x6ba/0xae0 [ 125.188791][ T6328] charge_memcg+0x16f/0x220 [ 125.188818][ T6328] __mem_cgroup_charge+0x28/0xb0 [ 125.188902][ T6328] shmem_get_folio_gfp+0x49f/0xd90 [ 125.188937][ T6328] shmem_fault+0xf6/0x250 [ 125.188983][ T6328] handle_mm_fault+0x2310/0x3bb0 [ 125.189021][ T6328] __get_user_pages+0x12e9/0x1eb0 [ 125.189089][ T6328] ? up_write+0x19/0x60 [ 125.189124][ T6328] get_dump_page+0xb4/0x240 [ 125.189148][ T6328] dump_user_range+0x142/0xd00 [ 125.189173][ T6328] elf_core_dump+0x21c0/0x2340 [ 125.189245][ T6328] ? 0xffffffffff600000 [ 125.189271][ T6328] coredump_write+0xafb/0xdd0 [ 125.189293][ T6328] vfs_coredump+0x2762/0x3270 [ 125.189341][ T6328] ? proc_coredump_connector+0x160/0x2c0 [ 125.189367][ T6328] ? kmem_cache_free+0x106/0x3b0 [ 125.189387][ T6328] get_signal+0xd33/0xf10 [ 125.189426][ T6328] arch_do_signal_or_restart+0x96/0x480 [ 125.189584][ T6328] irqentry_exit+0x14d/0x610 [ 125.189610][ T6328] asm_exc_page_fault+0x26/0x30 [ 125.189635][ T6328] RIP: 0033:0x7f4647383c07 [ 125.189661][ T6328] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ea 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 125.189682][ T6328] RSP: 002b:00007f4645f08120 EFLAGS: 00010202 [ 125.189702][ T6328] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f46474ce1d9 [ 125.189790][ T6328] RDX: 00007f4645f08140 RSI: 00007f4645f08270 RDI: 000000000000000b [ 125.189805][ T6328] RBP: 00007f4647565888 R08: 0000000000000000 R09: 0000000000000000 [ 125.189873][ T6328] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.189887][ T6328] R13: 00007f4647756038 R14: 00007f4647755fa0 R15: 00007ffc425907e8 [ 125.189908][ T6328] [ 125.249369][ T6328] memory: usage 307200kB, limit 307200kB, failcnt 15312 [ 125.447865][ T6328] memory+swap: usage 398540kB, limit 9007199254740988kB, failcnt 0 [ 125.447892][ T6328] kmem: usage 2328kB, limit 9007199254740988kB, failcnt 0 [ 125.447915][ T6328] Memory cgroup stats for /syz6: [ 125.448365][ T6328] cache 311730176 [ 125.448373][ T6328] rss 458752 [ 125.448379][ T6328] shmem 311730176 [ 125.448470][ T6328] mapped_file 202448896 [ 125.448560][ T6328] dirty 0 [ 125.448566][ T6328] writeback 0 [ 125.448573][ T6328] workingset_refault_anon 111 [ 125.448580][ T6328] workingset_refault_file 128 [ 125.448598][ T6328] swap 93532160 [ 125.448617][ T6328] swapcached 96473088 [ 125.448688][ T6328] pgpgin 138087 [ 125.448704][ T6328] pgpgout 61869 [ 125.448711][ T6328] pgfault 92551 [ 125.448764][ T6328] pgmajfault 17 [ 125.448780][ T6328] inactive_anon 149467136 [ 125.448800][ T6328] active_anon 162721792 [ 125.448815][ T6328] inactive_file 0 [ 125.448822][ T6328] active_file 0 [ 125.448828][ T6328] unevictable 0 [ 125.448843][ T6328] hierarchical_memory_limit 314572800 [ 125.448861][ T6328] hierarchical_memsw_limit 9223372036854771712 [ 125.448870][ T6328] total_cache 311730176 [ 125.448877][ T6328] total_rss 458752 [ 125.448955][ T6328] total_shmem 311730176 [ 125.448962][ T6328] total_mapped_file 202448896 [ 125.448969][ T6328] total_dirty 0 [ 125.448976][ T6328] total_writeback 0 [ 125.449021][ T6328] total_workingset_refault_anon 111 [ 125.449038][ T6328] total_workingset_refault_file 128 [ 125.449046][ T6328] total_swap 93532160 [ 125.449053][ T6328] total_swapcached 96473088 [ 125.449060][ T6328] total_pgpgin 138087 [ 125.449095][ T6328] total_pgpgout 61869 [ 125.449102][ T6328] total_pgfault 92551 [ 125.449109][ T6328] total_pgmajfault 17 [ 125.449126][ T6328] total_inactive_anon 149467136 [ 125.449144][ T6328] total_active_anon 162721792 [ 125.449159][ T6328] total_inactive_file 0 [ 125.449166][ T6328] total_active_file 0 [ 125.449193][ T6328] total_unevictable 0 [ 125.449219][ T6328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.520,pid=6328,uid=0 [ 125.449360][ T6328] Memory cgroup out of memory: Killed process 6328 (syz.6.520) total-vm:194552kB, anon-rss:1376kB, file-rss:20612kB, shmem-rss:102996kB, UID:0 pgtables:312kB oom_score_adj:0 [ 125.618977][ T6355] ================================================================== [ 125.619010][ T6355] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 125.619046][ T6355] [ 125.619050][ T6355] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 0: [ 125.619067][ T6355] tick_do_update_jiffies64+0x113/0x1c0 [ 125.619097][ T6355] tick_nohz_handler+0x88/0x380 [ 125.619125][ T6355] __hrtimer_run_queues+0x1f8/0x510 [ 125.619146][ T6355] hrtimer_interrupt+0x27b/0x860 [ 125.619168][ T6355] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 125.619194][ T6355] sysvec_apic_timer_interrupt+0x6f/0x80 [ 125.619231][ T6355] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.619256][ T6355] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 125.619288][ T6355] univ8250_console_device_unlock+0x36/0x40 [ 125.619323][ T6355] nbcon_kthread_func+0x595/0x690 [ 125.619349][ T6355] kthread+0x223/0x270 [ 125.619369][ T6355] ret_from_fork+0x146/0x330 [ 125.619398][ T6355] ret_from_fork_asm+0x1a/0x30 [ 125.619426][ T6355] [ 125.619432][ T6355] read to 0xffffffff86e07a00 of 8 bytes by task 6355 on cpu 1: [ 125.619449][ T6355] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 125.619479][ T6355] count_shadow_nodes+0x6a/0x250 [ 125.619501][ T6355] do_shrink_slab+0x61/0x650 [ 125.619529][ T6355] shrink_slab+0x53b/0x8e0 [ 125.619555][ T6355] shrink_node+0x6b8/0x2000 [ 125.619580][ T6355] do_try_to_free_pages+0x408/0xca0 [ 125.619599][ T6355] try_to_free_mem_cgroup_pages+0x201/0x420 [ 125.619621][ T6355] try_charge_memcg+0x422/0xae0 [ 125.619651][ T6355] charge_memcg+0x16f/0x220 [ 125.619679][ T6355] __mem_cgroup_charge+0x28/0xb0 [ 125.619707][ T6355] shmem_get_folio_gfp+0x49f/0xd90 [ 125.619739][ T6355] shmem_fault+0xf6/0x250 [ 125.619770][ T6355] handle_mm_fault+0x2310/0x3bb0 [ 125.619795][ T6355] __get_user_pages+0x12e9/0x1eb0 [ 125.619818][ T6355] get_dump_page+0xb4/0x240 [ 125.619854][ T6355] dump_user_range+0x142/0xd00 [ 125.619873][ T6355] elf_core_dump+0x21c0/0x2340 [ 125.619896][ T6355] coredump_write+0xafb/0xdd0 [ 125.619914][ T6355] vfs_coredump+0x2762/0x3270 [ 125.619947][ T6355] get_signal+0xd33/0xf10 [ 125.619982][ T6355] arch_do_signal_or_restart+0x96/0x480 [ 125.620030][ T6355] irqentry_exit+0x14d/0x610 [ 125.620049][ T6355] asm_exc_page_fault+0x26/0x30 [ 125.620069][ T6355] [ 125.620073][ T6355] value changed: 0x00000000ffffbb89 -> 0x00000000ffffbb8a [ 125.620086][ T6355] [ 125.620090][ T6355] Reported by Kernel Concurrency Sanitizer on: [ 125.620102][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.3.526 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.620128][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.620141][ T6355] ================================================================== [ 125.717056][ T6352] syz.6.525 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 125.717088][ T6352] CPU: 1 UID: 0 PID: 6352 Comm: syz.6.525 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.717182][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.717196][ T6352] Call Trace: [ 125.717204][ T6352] [ 125.717213][ T6352] __dump_stack+0x1d/0x30 [ 125.717239][ T6352] dump_stack_lvl+0x95/0xd0 [ 125.717375][ T6352] dump_stack+0x15/0x1b [ 125.717396][ T6352] dump_header+0x80/0x240 [ 125.717421][ T6352] oom_kill_process+0x294/0x420 [ 125.717550][ T6352] out_of_memory+0x981/0xbc0 [ 125.717577][ T6352] try_charge_memcg+0x6ba/0xae0 [ 125.717615][ T6352] charge_memcg+0x16f/0x220 [ 125.717681][ T6352] __mem_cgroup_charge+0x28/0xb0 [ 125.717711][ T6352] shmem_get_folio_gfp+0x49f/0xd90 [ 125.717823][ T6352] shmem_fault+0xf6/0x250 [ 125.717942][ T6352] handle_mm_fault+0x2310/0x3bb0 [ 125.717975][ T6352] __get_user_pages+0x12e9/0x1eb0 [ 125.718064][ T6352] ? up_write+0x19/0x60 [ 125.718101][ T6352] get_dump_page+0xb4/0x240 [ 125.718127][ T6352] dump_user_range+0x142/0xd00 [ 125.718186][ T6352] elf_core_dump+0x21c0/0x2340 [ 125.718214][ T6352] ? 0xffffffffff600000 [ 125.718295][ T6352] coredump_write+0xafb/0xdd0 [ 125.718382][ T6352] vfs_coredump+0x2762/0x3270 [ 125.718420][ T6352] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 125.718462][ T6352] ? proc_coredump_connector+0x160/0x2c0 [ 125.718548][ T6352] ? kmem_cache_free+0x106/0x3b0 [ 125.718571][ T6352] get_signal+0xd33/0xf10 [ 125.718608][ T6352] arch_do_signal_or_restart+0x96/0x480 [ 125.718680][ T6352] irqentry_exit+0x14d/0x610 [ 125.718704][ T6352] asm_exc_page_fault+0x26/0x30 [ 125.718771][ T6352] RIP: 0033:0x7f4647383c07 [ 125.718788][ T6352] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ea 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 125.718808][ T6352] RSP: 002b:00007f4645f08120 EFLAGS: 00010202 [ 125.718826][ T6352] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f46474ce1d9 [ 125.718840][ T6352] RDX: 00007f4645f08140 RSI: 00007f4645f08270 RDI: 000000000000000b [ 125.718927][ T6352] RBP: 00007f4647565888 R08: 0000000000000000 R09: 0000000000000000 [ 125.718941][ T6352] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.718955][ T6352] R13: 00007f4647756038 R14: 00007f4647755fa0 R15: 00007ffc425907e8 [ 125.718974][ T6352] [ 125.756248][ T6352] memory: usage 307200kB, limit 307200kB, failcnt 15368 [ 125.756294][ T6352] memory+swap: usage 398540kB, limit 9007199254740988kB, failcnt 0 [ 125.756308][ T6352] kmem: usage 2328kB, limit 9007199254740988kB, failcnt 0 [ 125.756322][ T6352] Memory cgroup stats for /syz6: [ 125.756535][ T6352] cache 311730176 [ 125.756545][ T6352] rss 458752 [ 125.756552][ T6352] shmem 311730176 [ 125.756560][ T6352] mapped_file 192405504 [ 125.756597][ T6352] dirty 0 [ 125.756639][ T6352] writeback 0 [ 125.756646][ T6352] workingset_refault_anon 111 [ 125.756655][ T6352] workingset_refault_file 128 [ 125.756663][ T6352] swap 93532160 [ 125.756680][ T6352] swapcached 96473088 [ 125.756688][ T6352] pgpgin 138087 [ 125.756695][ T6352] pgpgout 61869 [ 125.756750][ T6352] pgfault 92552 [ 125.756758][ T6352] pgmajfault 17 [ 125.756765][ T6352] inactive_anon 149467136 [ 125.756773][ T6352] active_anon 162721792 [ 125.756781][ T6352] inactive_file 0 [ 125.756788][ T6352] active_file 0 [ 125.756796][ T6352] unevictable 0 [ 125.756803][ T6352] hierarchical_memory_limit 314572800 [ 125.756813][ T6352] hierarchical_memsw_limit 9223372036854771712 [ 125.756823][ T6352] total_cache 311730176 [ 125.756830][ T6352] total_rss 458752 [ 125.756875][ T6352] total_shmem 311730176 [ 125.756883][ T6352] total_mapped_file 192405504 [ 125.756892][ T6352] total_dirty 0 [ 125.756899][ T6352] total_writeback 0 [ 125.756907][ T6352] total_workingset_refault_anon 111 [ 125.756916][ T6352] total_workingset_refault_file 128 [ 125.756925][ T6352] total_swap 93532160 [ 125.756945][ T6352] total_swapcached 96473088 [ 125.756953][ T6352] total_pgpgin 138087 [ 125.756961][ T6352] total_pgpgout 61869 [ 125.756969][ T6352] total_pgfault 92552 [ 125.756976][ T6352] total_pgmajfault 17 [ 125.756984][ T6352] total_inactive_anon 149467136 [ 125.756992][ T6352] total_active_anon 162721792 [ 125.757000][ T6352] total_inactive_file 0 [ 125.757013][ T6352] total_active_file 0 [ 125.757021][ T6352] total_unevictable 0 [ 125.757063][ T6352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.525,pid=6352,uid=0 [ 125.757201][ T6352] Memory cgroup out of memory: Killed process 6352 (syz.6.525) total-vm:194552kB, anon-rss:1376kB, file-rss:20612kB, shmem-rss:94708kB, UID:0 pgtables:296kB oom_score_adj:0 [ 125.799944][ T6391] syz.3.535 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 125.806323][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.3.535 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.806351][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.806365][ T6391] Call Trace: [ 125.806373][ T6391] [ 125.806382][ T6391] __dump_stack+0x1d/0x30 [ 125.806448][ T6391] dump_stack_lvl+0x95/0xd0 [ 125.806471][ T6391] dump_stack+0x15/0x1b [ 125.806493][ T6391] dump_header+0x80/0x240 [ 125.806517][ T6391] oom_kill_process+0x294/0x420 [ 125.806545][ T6391] out_of_memory+0x981/0xbc0 [ 125.806583][ T6391] try_charge_memcg+0x6ba/0xae0 [ 125.806729][ T6391] charge_memcg+0x16f/0x220 [ 125.806761][ T6391] __mem_cgroup_charge+0x28/0xb0 [ 125.806849][ T6391] shmem_get_folio_gfp+0x49f/0xd90 [ 125.806888][ T6391] shmem_write_begin+0xfc/0x1f0 [ 125.806925][ T6391] generic_perform_write+0x186/0x490 [ 125.806980][ T6391] shmem_file_write_iter+0xc5/0xf0 [ 125.807020][ T6391] __kernel_write_iter+0x30f/0x590 [ 125.807081][ T6391] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 125.807111][ T6391] dump_user_range+0xa73/0xd00 [ 125.807137][ T6391] elf_core_dump+0x21c0/0x2340 [ 125.807228][ T6391] ? 0xffffffffff600000 [ 125.807254][ T6391] coredump_write+0xafb/0xdd0 [ 125.807280][ T6391] vfs_coredump+0x2762/0x3270 [ 125.807363][ T6391] ? proc_coredump_connector+0x160/0x2c0 [ 125.807390][ T6391] ? kmem_cache_free+0x106/0x3b0 [ 125.807413][ T6391] get_signal+0xd33/0xf10 [ 125.807527][ T6391] arch_do_signal_or_restart+0x96/0x480 [ 125.807564][ T6391] irqentry_exit+0x14d/0x610 [ 125.807611][ T6391] asm_exc_page_fault+0x26/0x30 [ 125.807634][ T6391] RIP: 0033:0x7f849b773c07 [ 125.807652][ T6391] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ea 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 125.807727][ T6391] RSP: 002b:00007f849a2f8120 EFLAGS: 00010202 [ 125.807746][ T6391] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f849b8be1d9 [ 125.807761][ T6391] RDX: 00007f849a2f8140 RSI: 00007f849a2f8270 RDI: 000000000000000b [ 125.807776][ T6391] RBP: 00007f849b955888 R08: 0000000000000000 R09: 0000000000000000 [ 125.807790][ T6391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.807832][ T6391] R13: 00007f849bb46038 R14: 00007f849bb45fa0 R15: 00007ffcd8d151c8 [ 125.807862][ T6391] [ 125.920116][ T6391] memory: usage 307200kB, limit 307200kB, failcnt 12914 [ 125.920135][ T6391] memory+swap: usage 340580kB, limit 9007199254740988kB, failcnt 0 [ 125.920150][ T6391] kmem: usage 2064kB, limit 9007199254740988kB, failcnt 0 [ 125.920163][ T6391] Memory cgroup stats for /syz3: [ 125.920456][ T6391] cache 312078336 [ 125.920465][ T6391] rss 380928 [ 125.920547][ T6391] shmem 312074240 [ 125.920555][ T6391] mapped_file 170795008 [ 125.920563][ T6391] dirty 0 [ 125.920570][ T6391] writeback 0 [ 125.920578][ T6391] workingset_refault_anon 0 [ 125.920587][ T6391] workingset_refault_file 377 [ 125.920595][ T6391] swap 34181120 [ 125.920603][ T6391] swapcached 34181120 [ 125.920691][ T6391] pgpgin 284904 [ 125.920699][ T6391] pgpgout 208620 [ 125.920707][ T6391] pgfault 175295 [ 125.920784][ T6391] pgmajfault 9 [ 125.920792][ T6391] inactive_anon 18247680 [ 125.920800][ T6391] active_anon 294207488 [ 125.920808][ T6391] inactive_file 0 [ 125.920816][ T6391] active_file 4096 [ 125.920830][ T6391] unevictable 0 [ 125.920838][ T6391] hierarchical_memory_limit 314572800 [ 125.920847][ T6391] hierarchical_memsw_limit 9223372036854771712 [ 125.920868][ T6391] total_cache 312078336 [ 125.920877][ T6391] total_rss 380928 [ 125.920885][ T6391] total_shmem 312074240 [ 125.920893][ T6391] total_mapped_file 170795008 [ 125.920902][ T6391] total_dirty 0 [ 125.920910][ T6391] total_writeback 0 [ 125.920918][ T6391] total_workingset_refault_anon 0 [ 125.920927][ T6391] total_workingset_refault_file 377 [ 125.920986][ T6391] total_swap 34181120 [ 125.920994][ T6391] total_swapcached 34181120 [ 125.921003][ T6391] total_pgpgin 284904 [ 125.921011][ T6391] total_pgpgout 208620 [ 125.921019][ T6391] total_pgfault 175295 [ 125.921027][ T6391] total_pgmajfault 9 [ 125.921035][ T6391] total_inactive_anon 18247680 [ 125.921044][ T6391] total_active_anon 294207488 [ 125.921053][ T6391] total_inactive_file 0 [ 125.921062][ T6391] total_active_file 4096 [ 125.921126][ T6391] total_unevictable 0 [ 125.921134][ T6391] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.526,pid=6355,uid=0 [ 125.921297][ T6391] Memory cgroup out of memory: Killed process 6355 (syz.3.526) total-vm:194552kB, anon-rss:1368kB, file-rss:20612kB, shmem-rss:92288kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 125.969273][ T6782] syz.6.648 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 125.969306][ T6782] CPU: 1 UID: 0 PID: 6782 Comm: syz.6.648 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.969331][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.969345][ T6782] Call Trace: [ 125.969363][ T6782] [ 125.969372][ T6782] __dump_stack+0x1d/0x30 [ 125.969398][ T6782] dump_stack_lvl+0x95/0xd0 [ 125.969422][ T6782] dump_stack+0x15/0x1b [ 125.969450][ T6782] dump_header+0x80/0x240 [ 125.969477][ T6782] oom_kill_process+0x294/0x420 [ 125.969558][ T6782] out_of_memory+0x981/0xbc0 [ 125.969584][ T6782] try_charge_memcg+0x6ba/0xae0 [ 125.969624][ T6782] charge_memcg+0x16f/0x220 [ 125.969732][ T6782] __mem_cgroup_charge+0x28/0xb0 [ 125.969763][ T6782] filemap_add_folio+0x109/0x380 [ 125.969852][ T6782] __filemap_get_folio_mpol+0x32e/0x840 [ 125.969972][ T6782] filemap_fault+0x458/0xb60 [ 125.969998][ T6782] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 125.970036][ T6782] ? __pfx_filemap_fault+0x10/0x10 [ 125.970064][ T6782] handle_mm_fault+0x2672/0x3bb0 [ 125.970126][ T6782] do_user_addr_fault+0x636/0x1060 [ 125.970162][ T6782] ? trace_page_fault_user+0x1f/0xa0 [ 125.970196][ T6782] exc_page_fault+0x62/0xa0 [ 125.970241][ T6782] asm_exc_page_fault+0x26/0x30 [ 125.970263][ T6782] RIP: 0033:0x7f46473a2889 [ 125.970378][ T6782] Code: 89 dc 41 83 e4 03 0f 85 c9 01 00 00 4c 89 ff be 04 00 00 00 e8 18 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 125.970399][ T6782] RSP: 002b:00007ffc42590880 EFLAGS: 00010206 [ 125.970417][ T6782] RAX: 0000001b2e5237bc RBX: fffffffffffff7bc RCX: ffffffff815e9001 [ 125.970464][ T6782] RDX: 0000001b2e5237b8 RSI: 0000000000000004 RDI: 00007f4648285720 [ 125.970479][ T6782] RBP: 0000000000000000 R08: 00007f4647740000 R09: 00007f4647742000 [ 125.970494][ T6782] R10: 00000000815e9005 R11: 0000000000000003 R12: 0000000000000000 [ 125.970517][ T6782] R13: 0000000000000412 R14: ffffffff815e9d71 R15: 00007f4648285720 [ 125.970580][ T6782] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 125.970678][ T6782] ? trace_pid_list_free+0x81/0x170 [ 125.970744][ T6782] [ 125.993026][ T6782] memory: usage 307200kB, limit 307200kB, failcnt 15407 [ 125.993045][ T6782] memory+swap: usage 398540kB, limit 9007199254740988kB, failcnt 0 [ 125.993059][ T6782] kmem: usage 2328kB, limit 9007199254740988kB, failcnt 0 [ 125.993093][ T6782] Memory cgroup stats for /syz6: [ 125.993284][ T6782] cache 311730176 [ 125.993293][ T6782] rss 458752 [ 125.993300][ T6782] shmem 311730176 [ 125.993307][ T6782] mapped_file 161042432 [ 125.993315][ T6782] dirty 0 [ 125.993322][ T6782] writeback 0 [ 125.993330][ T6782] workingset_refault_anon 111 [ 125.993339][ T6782] workingset_refault_file 128 [ 125.993347][ T6782] swap 93532160 [ 125.993385][ T6782] swapcached 96473088 [ 125.993393][ T6782] pgpgin 138087 [ 125.993400][ T6782] pgpgout 61869 [ 125.993407][ T6782] pgfault 92553 [ 125.993492][ T6782] pgmajfault 18 [ 125.993499][ T6782] inactive_anon 149467136 [ 125.993518][ T6782] active_anon 162721792 [ 125.993526][ T6782] inactive_file 0 [ 125.993533][ T6782] active_file 0 [ 125.993613][ T6782] unevictable 0 [ 125.993620][ T6782] hierarchical_memory_limit 314572800 [ 125.993630][ T6782] hierarchical_memsw_limit 9223372036854771712 [ 125.993640][ T6782] total_cache 311730176 [ 125.993648][ T6782] total_rss 458752 [ 125.993656][ T6782] total_shmem 311730176 [ 125.993664][ T6782] total_mapped_file 161042432 [ 125.993727][ T6782] total_dirty 0 [ 125.993734][ T6782] total_writeback 0 [ 125.993746][ T6782] total_workingset_refault_anon 111 [ 125.993755][ T6782] total_workingset_refault_file 128 [ 125.993764][ T6782] total_swap 93532160 [ 125.993772][ T6782] total_swapcached 96473088 [ 125.993782][ T6782] total_pgpgin 138087 [ 125.993789][ T6782] total_pgpgout 61869 [ 125.993797][ T6782] total_pgfault 92553 [ 125.993804][ T6782] total_pgmajfault 18 [ 125.993811][ T6782] total_inactive_anon 149467136 [ 125.993819][ T6782] total_active_anon 162721792 [ 125.993827][ T6782] total_inactive_file 0 [ 125.993835][ T6782] total_active_file 0 [ 125.993842][ T6782] total_unevictable 0 [ 125.993849][ T6782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.648,pid=6782,uid=0 [ 125.993935][ T6782] Memory cgroup out of memory: Killed process 6782 (syz.6.648) total-vm:94196kB, anon-rss:1432kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 126.211126][ T6391] syz.3.535 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 126.211233][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.3.535 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.211331][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.211345][ T6391] Call Trace: [ 126.211359][ T6391] [ 126.211367][ T6391] __dump_stack+0x1d/0x30 [ 126.211394][ T6391] dump_stack_lvl+0x95/0xd0 [ 126.211438][ T6391] dump_stack+0x15/0x1b [ 126.211478][ T6391] dump_header+0x80/0x240 [ 126.211503][ T6391] oom_kill_process+0x294/0x420 [ 126.211567][ T6391] out_of_memory+0x981/0xbc0 [ 126.211593][ T6391] try_charge_memcg+0x6ba/0xae0 [ 126.211701][ T6391] charge_memcg+0x16f/0x220 [ 126.211734][ T6391] __mem_cgroup_charge+0x28/0xb0 [ 126.211809][ T6391] shmem_get_folio_gfp+0x49f/0xd90 [ 126.211849][ T6391] shmem_write_begin+0xfc/0x1f0 [ 126.211884][ T6391] generic_perform_write+0x186/0x490 [ 126.212033][ T6391] shmem_file_write_iter+0xc5/0xf0 [ 126.212059][ T6391] __kernel_write_iter+0x30f/0x590 [ 126.212151][ T6391] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 126.212181][ T6391] dump_user_range+0xa73/0xd00 [ 126.212206][ T6391] elf_core_dump+0x21c0/0x2340 [ 126.212321][ T6391] ? 0xffffffffff600000 [ 126.212346][ T6391] coredump_write+0xafb/0xdd0 [ 126.212372][ T6391] vfs_coredump+0x2762/0x3270 [ 126.212479][ T6391] ? proc_coredump_connector+0x160/0x2c0 [ 126.212505][ T6391] ? kmem_cache_free+0x106/0x3b0 [ 126.212525][ T6391] get_signal+0xd33/0xf10 [ 126.212683][ T6391] arch_do_signal_or_restart+0x96/0x480 [ 126.212717][ T6391] irqentry_exit+0x14d/0x610 [ 126.212740][ T6391] asm_exc_page_fault+0x26/0x30 [ 126.212763][ T6391] RIP: 0033:0x7f849b773c07 [ 126.212780][ T6391] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ea 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 126.212807][ T6391] RSP: 002b:00007f849a2f8120 EFLAGS: 00010202 [ 126.212826][ T6391] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f849b8be1d9 [ 126.212841][ T6391] RDX: 00007f849a2f8140 RSI: 00007f849a2f8270 RDI: 000000000000000b [ 126.212857][ T6391] RBP: 00007f849b955888 R08: 0000000000000000 R09: 0000000000000000 [ 126.212926][ T6391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.213010][ T6391] R13: 00007f849bb46038 R14: 00007f849bb45fa0 R15: 00007ffcd8d151c8 [ 126.213030][ T6391] [ 126.245389][ T6391] memory: usage 307200kB, limit 307200kB, failcnt 12999 [ 126.245411][ T6391] memory+swap: usage 340580kB, limit 9007199254740988kB, failcnt 0 [ 126.245467][ T6391] kmem: usage 2064kB, limit 9007199254740988kB, failcnt 0 [ 126.245481][ T6391] Memory cgroup stats for /syz3: [ 126.245758][ T6391] cache 312078336 [ 126.245767][ T6391] rss 380928 [ 126.245775][ T6391] shmem 312074240 [ 126.245782][ T6391] mapped_file 148295680 [ 126.245790][ T6391] dirty 0 [ 126.245797][ T6391] writeback 0 [ 126.245804][ T6391] workingset_refault_anon 0 [ 126.245812][ T6391] workingset_refault_file 377 [ 126.245821][ T6391] swap 34181120 [ 126.245828][ T6391] swapcached 34181120 [ 126.245870][ T6391] pgpgin 284904 [ 126.245877][ T6391] pgpgout 208620 [ 126.245884][ T6391] pgfault 175295 [ 126.245892][ T6391] pgmajfault 9 [ 126.245964][ T6391] inactive_anon 10735616 [ 126.245972][ T6391] active_anon 301719552 [ 126.245980][ T6391] inactive_file 0 [ 126.245988][ T6391] active_file 4096 [ 126.245995][ T6391] unevictable 0 [ 126.246002][ T6391] hierarchical_memory_limit 314572800 [ 126.246091][ T6391] hierarchical_memsw_limit 9223372036854771712 [ 126.246100][ T6391] total_cache 312078336 [ 126.246108][ T6391] total_rss 380928 [ 126.246115][ T6391] total_shmem 312074240 [ 126.246124][ T6391] total_mapped_file 148295680 [ 126.246144][ T6391] total_dirty 0 [ 126.246216][ T6391] total_writeback 0 [ 126.246224][ T6391] total_workingset_refault_anon 0 [ 126.246233][ T6391] total_workingset_refault_file 377 [ 126.246266][ T6391] total_swap 34181120 [ 126.246274][ T6391] total_swapcached 34181120 [ 126.246288][ T6391] total_pgpgin 284904 [ 126.246296][ T6391] total_pgpgout 208620 [ 126.246304][ T6391] total_pgfault 175295 [ 126.246312][ T6391] total_pgmajfault 9 [ 126.246320][ T6391] total_inactive_anon 10735616 [ 126.246329][ T6391] total_active_anon 301719552 [ 126.246389][ T6391] total_inactive_file 0 [ 126.246397][ T6391] total_active_file 4096 [ 126.246440][ T6391] total_unevictable 0 [ 126.246448][ T6391] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.535,pid=6391,uid=0 [ 126.246517][ T6391] Memory cgroup out of memory: Killed process 6391 (syz.3.535) total-vm:194552kB, anon-rss:1304kB, file-rss:20612kB, shmem-rss:74500kB, UID:0 pgtables:256kB oom_score_adj:1000 [ 126.442252][ T6780] syz.3.647 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 126.442291][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.3.647 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.442322][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.442336][ T6780] Call Trace: [ 126.442344][ T6780] [ 126.442356][ T6780] __dump_stack+0x1d/0x30 [ 126.442389][ T6780] dump_stack_lvl+0x95/0xd0 [ 126.442477][ T6780] dump_stack+0x15/0x1b [ 126.442639][ T6780] dump_header+0x80/0x240 [ 126.442663][ T6780] oom_kill_process+0x294/0x420 [ 126.442690][ T6780] out_of_memory+0x981/0xbc0 [ 126.442788][ T6780] try_charge_memcg+0x6ba/0xae0 [ 126.442826][ T6780] __obj_cgroup_charge+0x120/0x250 [ 126.442893][ T6780] __memcg_slab_post_alloc_hook+0x4c4/0x8d0 [ 126.442927][ T6780] ? alloc_buffer_head+0x35/0x1f0 [ 126.443156][ T6780] kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 126.443190][ T6780] ? alloc_buffer_head+0x35/0x1f0 [ 126.443222][ T6780] alloc_buffer_head+0x35/0x1f0 [ 126.443353][ T6780] folio_alloc_buffers+0x11d/0x3d0 [ 126.443392][ T6780] create_empty_buffers+0x2c/0x200 [ 126.443436][ T6780] __block_write_begin_int+0x1d4/0xf90 [ 126.443472][ T6780] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 126.443512][ T6780] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 126.443546][ T6780] ? _raw_spin_unlock+0x9/0x30 [ 126.443598][ T6780] ? __mark_inode_dirty+0x496/0x700 [ 126.443666][ T6780] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 126.443696][ T6780] block_page_mkwrite+0x184/0x1d0 [ 126.443797][ T6780] ext4_page_mkwrite+0x828/0xa90 [ 126.443849][ T6780] ? folio_unlock+0xfe/0x150 [ 126.443874][ T6780] handle_mm_fault+0x281e/0x3bb0 [ 126.443906][ T6780] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 126.444018][ T6780] do_user_addr_fault+0x404/0x1060 [ 126.444053][ T6780] ? irqentry_exit+0x40/0x610 [ 126.444075][ T6780] exc_page_fault+0x62/0xa0 [ 126.444173][ T6780] asm_exc_page_fault+0x26/0x30 [ 126.444195][ T6780] RIP: 0033:0x7f849b786908 [ 126.444213][ T6780] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 6f ee ee 00 44 88 78 ff 44 8b 3d 54 ee ee 00 e8 8f 51 ff ff 48 8b 05 60 ee ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 4f ee [ 126.444233][ T6780] RSP: 002b:00007ffcd8d15270 EFLAGS: 00010202 [ 126.444277][ T6780] RAX: 0000001b32c24218 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.444316][ T6780] RDX: 0000001b32c24218 RSI: 0000000000000008 RDI: 00007f849c675720 [ 126.444401][ T6780] RBP: 00007f849c675720 R08: 0000000000000000 R09: 00007f849bb46038 [ 126.444415][ T6780] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 126.444497][ T6780] R13: 0000000000000004 R14: 0000000000000d0c R15: 0000000000000d0d [ 126.444515][ T6780] [ 126.474627][ T6780] memory: usage 307200kB, limit 307200kB, failcnt 13050 [ 126.474648][ T6780] memory+swap: usage 340580kB, limit 9007199254740988kB, failcnt 0 [ 126.474662][ T6780] kmem: usage 2064kB, limit 9007199254740988kB, failcnt 0 [ 126.474676][ T6780] Memory cgroup stats for /syz3: [ 126.475024][ T6780] cache 312078336 [ 126.475032][ T6780] rss 380928 [ 126.475051][ T6780] shmem 312074240 [ 126.475059][ T6780] mapped_file 100466688 [ 126.475067][ T6780] dirty 0 [ 126.475074][ T6780] writeback 0 [ 126.475081][ T6780] workingset_refault_anon 0 [ 126.475090][ T6780] workingset_refault_file 377 [ 126.475098][ T6780] swap 34181120 [ 126.475138][ T6780] swapcached 34181120 [ 126.475146][ T6780] pgpgin 284904 [ 126.475153][ T6780] pgpgout 208620 [ 126.475159][ T6780] pgfault 175295 [ 126.475165][ T6780] pgmajfault 9 [ 126.475171][ T6780] inactive_anon 294207488 [ 126.475179][ T6780] active_anon 18247680 [ 126.475186][ T6780] inactive_file 0 [ 126.475192][ T6780] active_file 4096 [ 126.475198][ T6780] unevictable 0 [ 126.475213][ T6780] hierarchical_memory_limit 314572800 [ 126.475229][ T6780] hierarchical_memsw_limit 9223372036854771712 [ 126.475252][ T6780] total_cache 312078336 [ 126.475260][ T6780] total_rss 380928 [ 126.475268][ T6780] total_shmem 312074240 [ 126.475276][ T6780] total_mapped_file 100466688 [ 126.475285][ T6780] total_dirty 0 [ 126.475392][ T6780] total_writeback 0 [ 126.475400][ T6780] total_workingset_refault_anon 0 [ 126.475409][ T6780] total_workingset_refault_file 377 [ 126.475418][ T6780] total_swap 34181120 [ 126.475426][ T6780] total_swapcached 34181120 [ 126.475434][ T6780] total_pgpgin 284904 [ 126.475516][ T6780] total_pgpgout 208620 [ 126.475524][ T6780] total_pgfault 175295 [ 126.475532][ T6780] total_pgmajfault 9 [ 126.475539][ T6780] total_inactive_anon 294207488 [ 126.475560][ T6780] total_active_anon 18247680 [ 126.475565][ T6780] total_inactive_file 0 [ 126.475569][ T6780] total_active_file 4096 [ 126.475574][ T6780] total_unevictable 0 [ 126.475579][ T6780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.647,pid=6780,uid=0 [ 126.475721][ T6780] Memory cgroup out of memory: Killed process 6780 (syz.3.647) total-vm:96112kB, anon-rss:1420kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 126.620056][ T6019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.