last executing test programs: 1m42.305928333s ago: executing program 1 (id=435): recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/141, 0x8d}], 0x1}, 0x9}], 0x1, 0x42, &(0x7f00000003c0)={0x0, 0x3938700}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 1m42.221584547s ago: executing program 1 (id=437): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r1, 0xffffffffffffffff, 0x5a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000002cc0)=""/4085, 0x4d, 0xff5, 0x9}, 0x6b) 1m42.218944556s ago: executing program 1 (id=438): socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x4, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x21, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r0, 0x0, 0x0) 1m42.18493801s ago: executing program 1 (id=440): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_usbip_server_init(0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) 1m40.643222451s ago: executing program 1 (id=454): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1m38.442124177s ago: executing program 1 (id=461): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[{@noload}, {@nodioread_nolock}], [{@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="020c0c00180000002dbd7000fbdbdf25010014000500000005001a00fc020000000000000000000000000000ac1414260000000000000000000000002b000010090000000002000057f221bc8df170118249402c2869924266d98ea2a023bfc0d03ee3908b394797ae879f3173958e29f9ae1a0d3583437e8ac9a6b6298a21469d998864cc2a641d070019000000000002004e21ac14142000000000000000000a004e2000000009fe8000000000000000000000000000400180000000000000e5dc7e544cdedf7d00f04ee1c10fb5aaa46464d183a522f26268fd6691feb6581ae7b3723247ed25be3d2537928b"], 0xc0}}, 0x20048000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x128, 0x1f8, 0x490, 0x0, 0x128, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x2, 0x78}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2]}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x6010, 0xffffffffffffffff, 0x0) unshare(0x2a060400) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 1m38.407959151s ago: executing program 32 (id=461): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[{@noload}, {@nodioread_nolock}], [{@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="020c0c00180000002dbd7000fbdbdf25010014000500000005001a00fc020000000000000000000000000000ac1414260000000000000000000000002b000010090000000002000057f221bc8df170118249402c2869924266d98ea2a023bfc0d03ee3908b394797ae879f3173958e29f9ae1a0d3583437e8ac9a6b6298a21469d998864cc2a641d070019000000000002004e21ac14142000000000000000000a004e2000000009fe8000000000000000000000000000400180000000000000e5dc7e544cdedf7d00f04ee1c10fb5aaa46464d183a522f26268fd6691feb6581ae7b3723247ed25be3d2537928b"], 0xc0}}, 0x20048000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x128, 0x1f8, 0x490, 0x0, 0x128, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x2, 0x78}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2]}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x6010, 0xffffffffffffffff, 0x0) unshare(0x2a060400) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 58.932887093s ago: executing program 5 (id=825): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,nodots,errors=continue,dots,nfs=nostale_ro,dots,nodots,usefree,sys_immutable,gid=', @ANYRESHEX, @ANYBLOB=',nfs,tz=UTC,nodots,dots,nodots,usefree,nodots,nodots,nodots,nfs=stal,\x00'], 0x1, 0x201, &(0x7f0000001a00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000002000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001000010000000000000000000000000000000000002b0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r3, @ANYBLOB="05002f00eaff00"], 0x2c}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r0, 0x20, &(0x7f0000001980)={&(0x7f0000002340)=""/4096, 0x1000, 0x0, &(0x7f00000018c0)=""/140, 0x8c}}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r6 = add_key$user(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x2}, &(0x7f0000001840)="1944aa67cfba40ebd4bf4a890b370d33c1a1e6191de9e14cf7c9d54500d935ad65bd8e11754eafc5b62e20e4c684507e3d10b614ca79431b15cc0b256f8b5e81293c605f8316b4cd93104ff643d7ffe337", 0x51, 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000004440)='./file0\x00', 0x20840f6, &(0x7f0000002200)={[{@oldalloc}, {@noauto_da_alloc}]}, 0x1, 0x593, &(0x7f0000008e40)="$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") symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='mnt\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='mnt\x00', 0x2000, 0x1) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000040), 0x1) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001740)=[{&(0x7f0000000100)="9dec65e6d405", 0x6}, {&(0x7f0000000140)="1f7ddfb22e39b351c4955b36b557", 0xe}, {&(0x7f0000000240)="e93edb57d2094a5b056fbb4c3e5975cd81e5c1df827d59b1b27c5ebe1a1b83", 0x1f}, {&(0x7f0000000280)="bbe97071372b8006e8ca58933f9c5617b9ce407eb6db9154cad3aaf85b05b4cd14075413e50992228c148a78235061070233fc13ae43f9c8554983cf", 0x3c}, {&(0x7f0000000640)="e96c3258e95de44d4dbee46241f3cf67468fb731052b2209f71509ca88f52874a9194e3c61b27f148ca1d198c48a16da164e0e6c6b51a75cd2cd4103c414897f9d537872d02047383671a0f6b05a2fdec3e8864d03dc4f8b0d78185655a72315daba3ffda413cea3b55230ee32b6099d7f53e2af1862f85e01e31d479633d2eaa5623329f2c1209da95158169d6a168217512b8f8473917c37bca8bd29e8621edd8d72b648933cb6bf54e94234ae3344265c5f9e", 0xb4}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)='7Z4#x', 0x5}], 0x7, r6) r8 = getpid() syz_pidfd_open(r8, 0x0) socket(0x40000000015, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000001c40)=""/247, 0xf7}, {&(0x7f0000001d40)=""/159, 0x9f}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000001e00)=""/228, 0xe4}, {&(0x7f0000000480)=""/6, 0x6}], 0x8, &(0x7f0000007e00)=""/4100, 0x1004}, 0x1}, {{&(0x7f0000001f80)=@un=@abs, 0x80, &(0x7f00000043c0)=[{&(0x7f0000002000)=""/76, 0x4c}, {&(0x7f0000002080)=""/168, 0xa8}, {&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000002140)=""/175, 0xaf}, {&(0x7f0000004340)=""/64, 0x40}, {&(0x7f0000004380)=""/40, 0x28}], 0x6, &(0x7f0000005340)=""/100, 0x64}, 0x3}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000053c0)=""/234, 0xea}, {&(0x7f00000054c0)=""/82, 0x52}, {&(0x7f0000005540)=""/251, 0xfb}, {&(0x7f00000056c0)=""/76, 0x4c}, {&(0x7f0000005740)=""/173, 0xad}, {&(0x7f0000005800)=""/132, 0x84}, {&(0x7f00000058c0)=""/81, 0x51}], 0x7, &(0x7f00000059c0)=""/213, 0xd5}, 0x8}, {{&(0x7f0000005ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005b40)=""/129, 0x81}, {&(0x7f0000005c00)=""/74, 0x4a}, {&(0x7f0000005c80)=""/243, 0xf3}, {&(0x7f0000005d80)=""/245, 0xf5}, {&(0x7f0000005e80)=""/166, 0xa6}], 0x5}, 0xff}, {{&(0x7f0000005fc0)=@nfc, 0x80, &(0x7f0000006500)=[{&(0x7f0000006040)=""/45, 0x2d}, {&(0x7f0000006080)=""/212, 0xd4}, {&(0x7f0000006180)=""/32, 0x20}, {&(0x7f00000061c0)=""/230, 0xe6}, {&(0x7f00000062c0)=""/152, 0x98}, {&(0x7f0000006380)=""/21, 0x15}, {&(0x7f00000063c0)=""/7, 0x7}, {&(0x7f0000006400)=""/82, 0x52}, {&(0x7f0000006480)=""/95, 0x5f}], 0x9}, 0x10001}, {{&(0x7f00000065c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000007b00)=[{&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/147, 0x93}, {&(0x7f0000006780)=""/75, 0x4b}, {&(0x7f0000006800)=""/138, 0x8a}, {&(0x7f00000068c0)=""/238, 0xee}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/60, 0x3c}, {&(0x7f0000007a00)=""/234, 0xea}], 0x8, &(0x7f0000007b80)=""/201, 0xc9}, 0x6}], 0x6, 0x40000000, 0x0) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x11, r9, 0xd2ba1000) 58.779010424s ago: executing program 5 (id=826): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000009a03000038000000016eee9e5a0d56b48400200003"], 0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, &(0x7f00000000c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 58.707643021s ago: executing program 5 (id=827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}]}) (fail_nth: 2) 58.624835485s ago: executing program 5 (id=828): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa88004510001c2627230066000007029078ffffffffac1414aa11ff907800"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r4 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000740)) openat$cgroup_ro(r2, &(0x7f0000000600)='cpuacct.stat\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/31, 0x1f) r7 = socket(0x1d, 0x803, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000010000003e00000140000006c20000008cbfb29303170a148fafcbb86cd5d75de51d2b0b39fe7add3d05427ad8d3ea213c1a4dc1ef4a1cf76c7d8193af6f6a79636f7b9c1f2f8e35df5efe3bbb4d825fde2f3429be62f64bd95581ff5aec1e14a90fb22c63ee48539c49ccddb1a72c0c684dea7ed5e10167fbf45a368948f82fe53cffc430c2fb447cee7be00026256bd64d46964912fe46f8bfe8588503f012f1090121865b3cdfbb2ac2f5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, r8, 0x4}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000580)=""/72, 0x48}], 0x2}, 0x2}], 0x1, 0x2000, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) getdents(r1, 0x0, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001340)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}]}) connect$rds(r7, &(0x7f00000006c0)={0x2, 0x4e24, @empty}, 0x10) socket$unix(0x1, 0x5, 0x0) r10 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r11) openat$cgroup_int(r2, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) 58.421893227s ago: executing program 5 (id=834): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c900200040000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 57.507270626s ago: executing program 5 (id=845): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4VwzcYMgoeiFI5KQnXdYmbdrFtTOfD5zxvnlP854n5zzv3pM3IQEMrLHsn0LEixHxVRJxOCKSvG048saxlf2WH12fzrYkGo2Pf0+a+2X11nO1/u5gXnkhIn75IuJkYX2/tcWluVK5nM7n9fF65cp4bXHp1KVKaTadTS9PTk2deXNq8p2339pKOHs3anzt/J/ffnT3/TNfHl/+5qcHR24ncTYO5W3tcTyFG+2VsRjLX5OROLtmx4k+dLabJDt9AGzLUJ7nI5GNAYdjKM964L/v84hoAAMqkf8woFrzgNa9fZ/ug58bD99buQFaH//wynsjsa95b3RgOXnizii73x3tQ/9ZHz/fv3M726J/70MAbOrGzYg4PTy8fvxL8vFv+073sM/aPox/8OzczeY/r3ea/xRW5z/RYf5zsEPubsfm+V940Iduusrmf+92nP+uLlqNDuW1/zXnfCPJxUvlNBvb/h8RJ2Jkb1bfaD3nzPK9Rre29vlftmX9t+aC+XE8GF6zqjVTqpeeJuZ2D29GvNRx/pusnv+kw/nPXo/zPfZxLL3zSre2zeN/0v2/e42sN40fIl7teP4fr2glG69Pjjevh/HWVbHeH7eO/dqt/63G32/Z+T+wcfyjSft6bW3rfXy/76+0W9sT8Ufv1/+e5JNmeU/+2LVSvT4/EbEn+XD945OP/7ZVb+2fxX/i+MbjX6frf39EfNpj/LeO/vhyT/Hv0Pmf2dL533rh3geffdet/97GvzeapRP5I72Mf70e4NO8dgAAAAAAALDbFCLiUCSF4mq5UCgWVz7fcTQOFMrVWv3kxerC5Zlofld2NEYKrZXuw22fh5jIPw/bqk+uqU9FxJGI+Hpof7NenK6WZ3Y6eAAAAAAAAAAAAAAAAAAAANglDnb5/n/mt6GdPjrgX+cnv2FwbZr//filJ2BX8v8/DC75D4NL/sPgkv8wuOQ/DC75D4NL/sPgkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xvKj69NZfebq4sJc9eqpmbQ2V6wsTBenq/NXirPV6mw5LU5XK5s9X7lavTIxGQvXxutprT5eW1y6UKkuXK5fuFQpzaYX0pFnEhUAAAAAAAAAAAAAAAAAAAA8X2qLS3OlcjmdV1DYVmF4dxyGQp8LOz0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBj/wQAAP//msU5ng==") sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x0, 0x9, 0x0, 0x0, 0x7, 0xf}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x8}}]}, 0x24}}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400", 0x2b}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$nl_route(0x10, 0x3, 0x0) 57.506845045s ago: executing program 33 (id=845): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x0, 0x9, 0x0, 0x0, 0x7, 0xf}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x8}}]}, 0x24}}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400", 0x2b}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$nl_route(0x10, 0x3, 0x0) 6.375063398s ago: executing program 4 (id=1271): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_emit_ethernet(0x16, &(0x7f00000004c0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "bf", "9806e3", 0x88ca}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000001000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.971442204s ago: executing program 6 (id=1285): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 4.723894368s ago: executing program 4 (id=1290): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2efc, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.623421859s ago: executing program 4 (id=1291): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300), 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 3.629694952s ago: executing program 6 (id=1301): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2efc, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.546183896s ago: executing program 6 (id=1302): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="2000770c1100"}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2b92d601", @ANYRES16, @ANYBLOB="060028bd7000ffdbdf25010000000800030006000000080003000300000008000400090000000800040006000000080004000400000005000500d9000000"], 0x44}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)='abort', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000032c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '+]'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) fallocate(r1, 0x10, 0xffff, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x1000}) 3.151887052s ago: executing program 3 (id=1305): syz_emit_ethernet(0xf84, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf4e, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x84, 0x0, 0x0, 0x6}], "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"}}}}}, 0x0) 3.151192932s ago: executing program 3 (id=1306): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x9c, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xffffffffffffffa5, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x3f, 0x8be6, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c810) 3.037679181s ago: executing program 3 (id=1308): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,nodots,errors=continue,dots,nfs=nostale_ro,dots,nodots,usefree,sys_immutable,gid=', @ANYRESHEX, @ANYBLOB=',nfs,tz=UTC,nodots,dots,nodots,usefree,nodots,nodots,nodots,nfs=stal,\x00'], 0x1, 0x201, &(0x7f0000001a00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000002000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001000010000000000000000000000000000000000002b0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r3, @ANYBLOB="05002f00eaff00"], 0x2c}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r0, 0x20, &(0x7f0000001980)={&(0x7f0000002340)=""/4096, 0x1000, 0x0, &(0x7f00000018c0)=""/140, 0x8c}}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r6 = add_key$user(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x2}, &(0x7f0000001840)="1944aa67cfba40ebd4bf4a890b370d33c1a1e6191de9e14cf7c9d54500d935ad65bd8e11754eafc5b62e20e4c684507e3d10b614ca79431b15cc0b256f8b5e81293c605f8316b4cd93104ff643d7ffe337", 0x51, 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000004440)='./file0\x00', 0x20840f6, &(0x7f0000002200)={[{@oldalloc}, {@noauto_da_alloc}]}, 0x1, 0x593, &(0x7f0000008e40)="$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") symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='mnt\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='mnt\x00', 0x2000, 0x1) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000040), 0x1) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001740)=[{&(0x7f0000000100)="9dec65e6d405", 0x6}, {&(0x7f0000000140)="1f7ddfb22e39b351c4955b36b557", 0xe}, {&(0x7f0000000240)="e93edb57d2094a5b056fbb4c3e5975cd81e5c1df827d59b1b27c5ebe1a1b83", 0x1f}, {&(0x7f0000000280)="bbe97071372b8006e8ca58933f9c5617b9ce407eb6db9154cad3aaf85b05b4cd14075413e50992228c148a78235061070233fc13ae43f9c8554983cf", 0x3c}, {&(0x7f0000000640)="e96c3258e95de44d4dbee46241f3cf67468fb731052b2209f71509ca88f52874a9194e3c61b27f148ca1d198c48a16da164e0e6c6b51a75cd2cd4103c414897f9d537872d02047383671a0f6b05a2fdec3e8864d03dc4f8b0d78185655a72315daba3ffda413cea3b55230ee32b6099d7f53e2af1862f85e01e31d479633d2eaa5623329f2c1209da95158169d6a168217512b8f8473917c37bca8bd29e8621edd8d72b648933cb6bf54e94234ae3344265c5f9e", 0xb4}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)='7Z4#x', 0x5}], 0x7, r6) r8 = getpid() syz_pidfd_open(r8, 0x0) socket(0x40000000015, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000001c40)=""/247, 0xf7}, {&(0x7f0000001d40)=""/159, 0x9f}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000001e00)=""/228, 0xe4}, {&(0x7f0000000480)=""/6, 0x6}], 0x8, &(0x7f0000007e00)=""/4100, 0x1004}, 0x1}, {{&(0x7f0000001f80)=@un=@abs, 0x80, &(0x7f00000043c0)=[{&(0x7f0000002000)=""/76, 0x4c}, {&(0x7f0000002080)=""/168, 0xa8}, {&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000002140)=""/175, 0xaf}, {&(0x7f0000004380)=""/40, 0x28}], 0x5, &(0x7f0000005340)=""/100, 0x64}, 0x3}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000053c0)=""/234, 0xea}, {&(0x7f00000054c0)=""/82, 0x52}, {&(0x7f0000005540)=""/251, 0xfb}, {&(0x7f0000005640)=""/109, 0x6d}, {&(0x7f00000056c0)=""/76, 0x4c}, {&(0x7f0000005740)=""/173, 0xad}, {&(0x7f0000005800)=""/132, 0x84}, {&(0x7f00000058c0)=""/81, 0x51}], 0x8, &(0x7f00000059c0)=""/213, 0xd5}, 0x8}, {{&(0x7f0000005ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005b40)=""/129, 0x81}, {&(0x7f0000005c00)=""/74, 0x4a}, {&(0x7f0000005c80)=""/243, 0xf3}, {&(0x7f0000005d80)=""/245, 0xf5}, {&(0x7f0000005e80)=""/166, 0xa6}], 0x5}, 0xff}, {{&(0x7f0000005fc0)=@nfc, 0x80, &(0x7f0000006500)=[{&(0x7f0000006040)=""/45, 0x2d}, {&(0x7f0000006080)=""/212, 0xd4}, {&(0x7f0000006180)=""/32, 0x20}, {&(0x7f00000061c0)=""/230, 0xe6}, {&(0x7f00000062c0)=""/152, 0x98}, {&(0x7f0000006380)=""/21, 0x15}, {&(0x7f00000063c0)=""/7, 0x7}, {&(0x7f0000006400)=""/82, 0x52}, {&(0x7f0000006480)=""/95, 0x5f}], 0x9}, 0x10001}, {{&(0x7f00000065c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000007b00)=[{&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/147, 0x93}, {&(0x7f0000006780)=""/75, 0x4b}, {&(0x7f0000006800)=""/138, 0x8a}, {&(0x7f00000068c0)=""/238, 0xee}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/60, 0x3c}, {&(0x7f0000007a00)=""/234, 0xea}], 0x8, &(0x7f0000007b80)=""/201, 0xc9}, 0x6}], 0x6, 0x40000000, 0x0) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x11, r9, 0xd2ba1000) 3.036471161s ago: executing program 6 (id=1309): unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x2000015f, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000fc85000000a000000085000000a00000009500000000000000929caaa99d7a198f66f29fc7f32d3b4d7ef0d332430900000000000000e6eb32f612bc0761b855f9758b661ecebd956671880d750014fbd3eeb55c9e1390811637ee8c4ff8a04946dfa64f6ea68b5bc0123150ddcc95e8c6655c00aeddb721a064209bb09c7bc366c0dfcfec6d8579880000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xfffffffffffffe1e, &(0x7f0000000000)="f7edad02000000f9000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9, 0x3}, 0x50) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000006800e97804000000000000000a0000000000000004000400262f626f46a491a9e909988ae28f7fa820469527a42a400ab5df9874710133cda854d2cd54d7489007000000d25b524e303e0d3e8666b0f0bf0cb5e90cfb4bf7bb6d8d9ac450763ae876c863f121a35b48241ae9d3d89eb0c4f1b05c91f0bdcd49554d01495ce8c5ce54ed33957791260257"], 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x2, 0x3c, 0x8, 0x2, 0x0, 0xe075, 0x4004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x8, 0x8000000000000000, 0x1, 0x3, 0x6, 0xfffffffb, 0x5, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x35, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x98b2, 0x4, 0x6, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4da5}, 0x94) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}, @sndinfo={0x20, 0x84, 0x2, {0xf8c, 0x820a, 0x8, 0xa7}}], 0x38, 0x8080}, 0x28008841) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r7 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) r8 = socket(0x10, 0x3, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0)=0xb, 0x4594) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000009c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0x400, 0x37f, 0x5e71, 0x2, 0x0, 0x7, 0x1, 0xc098, 0xd3e, 0x20c5, 0xffffffff, 0x80, 0xa6, 0xf042, 0xf328, 0x3, 0x200, 0x856f, 0x1, 0x1, 0x5b2, 0x0, 0x5be, 0x0, 0x1, 0x2, 0x9, 0x6, 0x200, 0xa62, 0xb, 0x0, 0x9e280, 0x3723, 0x713, 0x4f80, 0x9, 0x3, 0x6, 0x1, 0xff, 0xc000000, 0xf, 0x6, 0x7fffffff, 0xc00000, 0xfffffc51, 0xed, 0x9, 0x1, 0x7, 0x9, 0x1c, 0x3, 0x5, 0x8, 0xfffffffc, 0x0, 0x2, 0x3, 0x3, 0x8, 0xa8, 0x6, 0x8, 0x6, 0x0, 0x7, 0x3, 0x80, 0x0, 0x5, 0x0, 0x44d, 0x3, 0x3, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x8, 0x7f, 0xfffffffc, 0xc, 0x7f, 0x200, 0x7, 0x9, 0x4, 0x200, 0x10, 0xffff, 0x7, 0x6, 0x10, 0x8, 0x7fffffff, 0x40, 0x5, 0x3, 0x2, 0xfc3, 0x85, 0x7ff, 0x8, 0x9, 0x6, 0x5, 0x4, 0xfffffbf3, 0x0, 0xda1, 0x80, 0x8001, 0x8, 0x9, 0x0, 0x3b, 0x10001, 0x0, 0x8001, 0x3, 0x3, 0x1, 0x7, 0x7], "09508942095f5ac1ae92b6eb"}}) (async) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x24}}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) 2.931330401s ago: executing program 3 (id=1313): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519fd6e5e701"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r5, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7e9}, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 2.896100564s ago: executing program 2 (id=1315): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000003040)={@broadcast, @remote, @local}, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002f80), &(0x7f0000003000)=0x68) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r6, r6, 0x0, 0x548) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x13}], 0x1}}], 0x400000000000126, 0x20000800) 2.770124451s ago: executing program 4 (id=1316): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008004) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x786}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x83}, 0xc824) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff7525206cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651dde583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467c8a7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080000000000000000000000000400000000000000000000000000000000000000100000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x7a}, 0x8) 2.718228901s ago: executing program 3 (id=1317): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r6, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r7 = dup(r2) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x8000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1441, 0x0) pwritev2(r8, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) 2.053515486s ago: executing program 0 (id=1318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ebd2c1a20a1ed7251e211a93fce95097df"}]}, @NFTA_RANGE_FROM_DATA={0x48, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xe0}}, 0x0) 1.850937958s ago: executing program 0 (id=1319): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x2008, 0x11}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x10000, 0x6}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) socket$rds(0x15, 0x5, 0x0) futex(&(0x7f0000004000)=0x7, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x4, 0xb2020000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) copy_file_range(r3, 0x0, r3, 0x0, 0xfffffffffffffffe, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x240000, 0x9, 0x7, 0x3ff, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x5, 0x1009, 0x140, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x80ff, 0x20, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}]}, 0xa0}}, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_pgetevents(r5, 0x1, 0x1, &(0x7f0000000200)=[{}], 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0d001800"], 0x50) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 1.791402187s ago: executing program 4 (id=1320): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xfcffffff, 0xa9e7, 0x3, &(0x7f0000000040)={[0xfffffffffffffffa]}, 0x8) 1.577409916s ago: executing program 6 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d, 0xfffffffffffffff9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r4}, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) 643.737781ms ago: executing program 2 (id=1322): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e5", 0x46}], 0x1}, 0x4000000) 581.759699ms ago: executing program 4 (id=1323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b3be80ae00000000000000000010000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0xfffffffffffffece, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000200), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 571.749318ms ago: executing program 2 (id=1324): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,nodots,errors=continue,dots,nfs=nostale_ro,dots,nodots,usefree,sys_immutable,gid=', @ANYRESHEX, @ANYBLOB=',nfs,tz=UTC,nodots,dots,nodots,usefree,nodots,nodots,nodots,nfs=stal,\x00'], 0x1, 0x201, &(0x7f0000001a00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000002000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001000010000000000000000000000000000000000002b0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r3, @ANYBLOB="05002f00eaff00"], 0x2c}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r0, 0x20, &(0x7f0000001980)={&(0x7f0000002340)=""/4096, 0x1000, 0x0, &(0x7f00000018c0)=""/140, 0x8c}}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r6 = add_key$user(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x2}, &(0x7f0000001840)="1944aa67cfba40ebd4bf4a890b370d33c1a1e6191de9e14cf7c9d54500d935ad65bd8e11754eafc5b62e20e4c684507e3d10b614ca79431b15cc0b256f8b5e81293c605f8316b4cd93104ff643d7ffe337", 0x51, 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000004440)='./file0\x00', 0x20840f6, &(0x7f0000002200)={[{@oldalloc}, {@noauto_da_alloc}]}, 0x1, 0x593, &(0x7f0000008e40)="$eJzs3c9vI1cdAPDvTBLH+6PNLvQAFbALFBa0WmfjbVdVLy0SAqGqCFFxQBy2IfFGYZ31EielCZGa/g0ggcQJ/gQOSByQeuLArUckDoAoB6QCEShF4jDVjJ2fa++6sdfuxp+PNOs382b8fc/OzHvz7PULYGxdjojtiChFxGsRMdPenrSXeKm15Pvt7mylsbO1kESWvfqvpMjf3dkqxaFjcufaz1mOiG9/PeL7yf1xmxubd+br9dpqe312beXebHNj89ryyvxSbal2t1q9OXfz+vM3nqsOrK6XVn793teWX/7O73776Xff2f7yj/NinW/n7e5sLQws0CGtqk/tx8lNRsTLjyLYCEy0H0sjLgcnk0bExyLic8X5PxMTxV8nAHCaZdlMZDOH1wGA0y4txsCStBIRadruBFRaY3hPxdm03miuXb3dWL+72BoruxBT6e3leu36xek//bDYeSrJ1+eKvCK/WK8eW78RERcj4qfTZ4r1ykKjvjiaLg8AjL1zh9v/iPjvdJpWKj0d2uFTPQDgsVEedQEAgKHT/gPA+NH+A8D46aH9b3/Yv/3IywIADIf7fwAYPwftv/t7ABgX7v8BYKx865VX8iV7v/3714uvb6zfabx+bbHWvFNZWV+oLDRW71WWGo2l4jd7Vh72fPVG497cs7H+xuxarbk229zYvLXSWL+7dqv4Xe9btamh1AoAeJCLl97+YxIR2y+cKZY4NJeDthpOt7TL9jM97QU8zib6OVgHAR5rZvuC8dVTE150Ev7QKcc3B+AU6Phj3uWOyaN+/iGCuFrAR8qVT/Y+/m+OZzhdjOzD+DrZ+P+LAy8HMHwnHv//y2DLAQxfliXH5/wv7WcBAKdSH1/hy94cVCcEGKmHTOY93TXn2Of/33xn46sDKhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB85J2PiB9EklaKucDT/N+0Uol4IiIuxFRye7leux4RT8aliJiaztfnRl1oAKBP6T+S9vxfV2aeOX88t5T8r5j7qxQRP/rFqz97Y35tbXUu3/7v/e3Te9OHVQ+O62NeQQCgd387SHZvfYv2u9p+PHQjv7uztbC3POJyHvHeV/YnH114f2erWFo5k5FlWRZRLmpz9j9JTLaPKUfE0xExMYD4229FxCc61T8pxkYuFNGOxo927CeGGj89Ej8t8lqP+cv38QGUBcbN2/n156Xj599EcWZdLvbofP6XiytU/4rrXzli79p3cP0rzvdSnjnRIX5+zl/uNcazv//GfRuzmVbeWxFPT3aKvxevXMTqFP+ZHuP/+VOf+cmLXfKyX0Zcic7xD8eaXVu5N9vc2Ly2vDK/VFuq3a1Wb87dvP78jeeqs8UY9ezeSPX9/vnC1Se7lS2v/9ku8Vvv/Llj9S/tH/uFHuv/q/+/9r3PHqxOH4//pc93fv+fKh47v/55m/jFHuPPn/1NuVteHn+xS/0f9v5f7TH+u3/fXOxxVwBgCJpn4s58vV5bbW5snjyR34V++KOyLHszL8MD9smze3vCve5iH7WorTb/2no1Yn9LEkn0//ocTeSdsV52nuq7OkcSe8Mlg65Oh8Tkfl9xsM/83Qf/tXRLlPoJmg68FidJxIV2YndYQUdyOQKG6OCkH3VJAAAAAAAAAAAAAACAbobxf5hGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOrw8CAAD//1TYvgU=") symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='mnt\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='mnt\x00', 0x2000, 0x1) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000040), 0x1) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001740)=[{&(0x7f0000000100)="9dec65e6d405", 0x6}, {&(0x7f0000000140)="1f7ddfb22e39b351c4955b36b557", 0xe}, {&(0x7f0000000240)="e93edb57d2094a5b056fbb4c3e5975cd81e5c1df827d59b1b27c5ebe1a1b83", 0x1f}, {&(0x7f0000000280)="bbe97071372b8006e8ca58933f9c5617b9ce407eb6db9154cad3aaf85b05b4cd14075413e50992228c148a78235061070233fc13ae43f9c8554983cf", 0x3c}, {&(0x7f0000000640)="e96c3258e95de44d4dbee46241f3cf67468fb731052b2209f71509ca88f52874a9194e3c61b27f148ca1d198c48a16da164e0e6c6b51a75cd2cd4103c414897f9d537872d02047383671a0f6b05a2fdec3e8864d03dc4f8b0d78185655a72315daba3ffda413cea3b55230ee32b6099d7f53e2af1862f85e01e31d479633d2eaa5623329f2c1209da95158169d6a168217512b8f8473917c37bca8bd29e8621edd8d72b648933cb6bf54e94234ae3344265c5f9e", 0xb4}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)='7Z4#x', 0x5}], 0x7, r6) r8 = getpid() syz_pidfd_open(r8, 0x0) socket(0x40000000015, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000001c40)=""/247, 0xf7}, {&(0x7f0000001d40)=""/159, 0x9f}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000001e00)=""/228, 0xe4}, {&(0x7f0000000480)=""/6, 0x6}], 0x8, &(0x7f0000007e00)=""/4100, 0x1004}, 0x1}, {{&(0x7f0000001f80)=@un=@abs, 0x80, &(0x7f00000043c0)=[{&(0x7f0000002000)=""/76, 0x4c}, {&(0x7f0000002080)=""/168, 0xa8}, {&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000002140)=""/175, 0xaf}, {&(0x7f0000004380)=""/40, 0x28}], 0x5, &(0x7f0000005340)=""/100, 0x64}, 0x3}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000053c0)=""/234, 0xea}, {&(0x7f00000054c0)=""/82, 0x52}, {&(0x7f0000005540)=""/251, 0xfb}, {&(0x7f0000005640)=""/109, 0x6d}, {&(0x7f00000056c0)=""/76, 0x4c}, {&(0x7f0000005740)=""/173, 0xad}, {&(0x7f0000005800)=""/132, 0x84}, {&(0x7f00000058c0)=""/81, 0x51}], 0x8, &(0x7f00000059c0)=""/213, 0xd5}, 0x8}, {{&(0x7f0000005ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005b40)=""/129, 0x81}, {&(0x7f0000005c00)=""/74, 0x4a}, {&(0x7f0000005c80)=""/243, 0xf3}, {&(0x7f0000005d80)=""/245, 0xf5}, {&(0x7f0000005e80)=""/166, 0xa6}], 0x5}, 0xff}, {{&(0x7f0000005fc0)=@nfc, 0x80, &(0x7f0000006500)=[{&(0x7f0000006040)=""/45, 0x2d}, {&(0x7f0000006080)=""/212, 0xd4}, {&(0x7f0000006180)=""/32, 0x20}, {&(0x7f00000061c0)=""/230, 0xe6}, {&(0x7f00000062c0)=""/152, 0x98}, {&(0x7f0000006380)=""/21, 0x15}, {&(0x7f00000063c0)=""/7, 0x7}, {&(0x7f0000006400)=""/82, 0x52}, {&(0x7f0000006480)=""/95, 0x5f}], 0x9}, 0x10001}, {{&(0x7f00000065c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000007b00)=[{&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/147, 0x93}, {&(0x7f0000006780)=""/75, 0x4b}, {&(0x7f0000006800)=""/138, 0x8a}, {&(0x7f00000068c0)=""/238, 0xee}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/60, 0x3c}, {&(0x7f0000007a00)=""/234, 0xea}], 0x8, &(0x7f0000007b80)=""/201, 0xc9}, 0x6}], 0x6, 0x40000000, 0x0) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x11, r9, 0xd2ba1000) 469.533209ms ago: executing program 0 (id=1325): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) syz_open_pts(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) 407.269327ms ago: executing program 3 (id=1326): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 399.975515ms ago: executing program 0 (id=1327): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519fd6e5e701"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r5, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7e9}, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 365.478049ms ago: executing program 2 (id=1328): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) 245.340116ms ago: executing program 2 (id=1329): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x11801, &(0x7f0000001180)=ANY=[@ANYRES16], 0x25, 0x36e, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = eventfd2(0x8, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080)=0xcd6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xc0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x8000, 0xffffffffffffffff, 0xfffffffffffffffe}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$eventfd(r1, 0x0, 0x0) 215.65669ms ago: executing program 0 (id=1330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ebd2c1a20a1ed7251e211a93fce95097df"}]}, @NFTA_RANGE_FROM_DATA={0x48, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xe0}}, 0x0) 132.290045ms ago: executing program 0 (id=1331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b3be80ae00000000000000000010000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0xfffffffffffffece, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 79.551085ms ago: executing program 2 (id=1332): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000009a03000038000000016eee9e5a0d56b48400200003"], 0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 6 (id=1333): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000480), 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20c200a2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES8=r1, @ANYRES32=r2, @ANYRES64=r2, @ANYBLOB="b97a904ec98aa3f7915818eecb85d936f5998876445946ef2529e453", @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES8, @ANYRESHEX=r2], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rfcomm\x00') getdents64(r3, &(0x7f0000000000)=""/77, 0x4d) getdents64(r3, 0xffffffffffffffff, 0x43) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4, r4}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) socket$inet_smc(0x2b, 0x1, 0x0) inotify_init1(0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000004040)=@newtfilter={0x6c, 0x2c, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x2, 0x6}, {0x3, 0xfff1}, {0xfff1, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007bc, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0xffffffffffffff46) sendto(r7, &(0x7f0000000740)="278d695adcd4c1f03e6a569fbf0770b11c5b6d878a00b222ca5eb5e27c79fd638c3ea0a08e1f4d552881339ef79f96d6d7211bfc04f449119bf4be6da6795771d25a540e9e13fb46626c777b8b20b1efe67b98f7cf7c926bf3ab9b0a8c96cc11aee637", 0x63, 0x40040, &(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80) sendmmsg$inet(r7, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d0600080000000000197970cb347b70a243bf772d9a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804e048f29696e524b2934126c443ce93d82e931eb9918720d649ea7585731d2e02c9210fd8048f04ad6614940ef81fd73272a36", 0x7b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440), 0x1e}}], 0x2, 0x2010) sendto$inet(r7, &(0x7f0000000300)="143e0c5570bffc87ec8e017e8184cc607cfede30534ecaf5dd181b14a23b5b36a8b07cc3622faefa88078c6a273305c2f052d30b19a5b951141586210bdc75e91396", 0x42, 0x408d0, 0x0, 0x0) kernel console output (not intermixed with test programs): ig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6ce0c799 code=0x7ffc0000 [ 102.517101][ T5427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.575'. [ 102.540977][ T28] audit: type=1326 audit(1772728010.777:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c6ce0c799 code=0x7ffc0000 [ 102.541064][ T28] audit: type=1326 audit(1772728010.777:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6ce0c799 code=0x7ffc0000 [ 102.541086][ T28] audit: type=1326 audit(1772728010.787:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6ce0c799 code=0x7ffc0000 [ 102.618728][ T28] audit: type=1326 audit(1772728010.787:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f5c6ce0c799 code=0x7ffc0000 [ 102.642491][ T28] audit: type=1326 audit(1772728010.787:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6ce0c799 code=0x7ffc0000 [ 102.676220][ T5431] pimreg0: tun_chr_ioctl cmd 35111 [ 102.986697][ T5439] loop5: detected capacity change from 0 to 8192 [ 103.282280][ T5451] loop5: detected capacity change from 0 to 512 [ 103.292725][ T5451] EXT4-fs: inline encryption not supported [ 103.308967][ T5451] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.582: bad orphan inode 15 [ 103.380553][ T5451] loop5: lost filesystem error report for type 5 error -117 [ 103.380912][ T5451] ext4_test_bit(bit=14, block=5) = 0 [ 103.393614][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 103.393635][ C1] EXT4-fs (loop5): initial error at time 1772728011: ext4_orphan_get:1417 [ 103.393655][ C1] EXT4-fs (loop5): last error at time 1772728011: ext4_orphan_get:1417 [ 103.423519][ T5451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.465365][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'. [ 103.474603][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.582'. [ 103.487144][ T5451] netlink: 'syz.5.582': attribute type 6 has an invalid length. [ 103.499338][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'. [ 103.516879][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.582'. [ 103.537584][ T5451] netlink: 'syz.5.582': attribute type 6 has an invalid length. [ 103.547515][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.584380][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.638793][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'. [ 103.648115][ T5462] loop4: detected capacity change from 0 to 8192 [ 103.788189][ T5481] loop5: detected capacity change from 0 to 512 [ 103.820994][ T5481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.225372][ T5520] IPv6: sit1: Disabled Multicast RS [ 104.231833][ T5520] sit1: entered allmulticast mode [ 104.650616][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.890728][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 104.925792][ T5568] process 'syz.0.614' launched './file1' with NULL argv: empty string added [ 104.960811][ T5572] loop5: detected capacity change from 0 to 512 [ 104.975376][ T5572] EXT4-fs: inline encryption not supported [ 104.991147][ T5572] EXT4-fs: Ignoring removed i_version option [ 105.004704][ T5575] sctp: [Deprecated]: syz.0.615 (pid 5575) Use of int in max_burst socket option. [ 105.004704][ T5575] Use struct sctp_assoc_value instead [ 105.021342][ T5572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e001e09c, mo2=0002] [ 105.029340][ T5572] System zones: 1-12 [ 105.035611][ T5572] EXT4-fs (loop5): 1 orphan inode deleted [ 105.042219][ T5572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.181271][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.362344][ T5618] loop4: detected capacity change from 0 to 256 [ 105.382396][ T5618] msdos: Bad value for 'gid' [ 105.389550][ T5618] msdos: Bad value for 'gid' [ 105.400254][ T5618] loop4: detected capacity change from 0 to 512 [ 105.490971][ T5624] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 105.511180][ T5624] EXT4-fs (loop4): mount failed [ 105.589600][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 105.589614][ T28] audit: type=1400 audit(1772728014.027:1357): avc: denied { append } for pid=5630 comm="syz.5.625" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.646615][ T3392] IPVS: starting estimator thread 0... [ 105.687307][ T5638] lo speed is unknown, defaulting to 1000 [ 105.704276][ T5634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5634 comm=syz.4.624 [ 105.709441][ T28] audit: type=1400 audit(1772728014.057:1358): avc: denied { ioctl } for pid=5630 comm="syz.5.625" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.786131][ T5641] lo speed is unknown, defaulting to 1000 [ 105.799492][ T5633] IPVS: using max 2304 ests per chain, 115200 per kthread [ 105.850454][ T5659] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 106.000150][ T28] audit: type=1400 audit(1772728014.437:1359): avc: denied { create } for pid=5670 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.062762][ T5651] __nla_validate_parse: 1 callbacks suppressed [ 106.062780][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 106.090276][ T5677] netlink: 14 bytes leftover after parsing attributes in process `syz.4.630'. [ 106.111335][ T5668] bond2: (slave veth3): Enslaving as an active interface with a down link [ 106.202600][ T5682] set_capacity_and_notify: 2 callbacks suppressed [ 106.202627][ T5682] loop5: detected capacity change from 0 to 1024 [ 106.268699][ T5682] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 106.440236][ T5659] bond2: (slave dummy0): making interface the new active one [ 106.570208][ T5659] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 106.589046][ T5677] bond2: (slave dummy0): Releasing active interface [ 106.596301][ T28] audit: type=1400 audit(1772728014.577:1360): avc: denied { wake_alarm } for pid=5670 comm="syz.3.631" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.624061][ T28] audit: type=1400 audit(1772728014.657:1361): avc: denied { mounton } for pid=5637 comm="syz.5.626" path="/syzcgroup/unified/syz5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.696741][ T5692] loop4: detected capacity change from 0 to 256 [ 106.835524][ T5692] msdos: Bad value for 'gid' [ 106.866875][ T5692] msdos: Bad value for 'gid' [ 106.890132][ T5692] loop4: detected capacity change from 0 to 512 [ 107.542062][ T5698] loop4: detected capacity change from 0 to 512 [ 107.548696][ T5698] ext2: Unknown parameter 'measure' [ 107.564086][ T28] audit: type=1400 audit(1772728015.917:1362): avc: denied { setattr } for pid=5697 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 107.640456][ T28] audit: type=1400 audit(1772728015.967:1363): avc: denied { getopt } for pid=5697 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.669642][ T28] audit: type=1400 audit(1772728015.967:1364): avc: denied { ioctl } for pid=5697 comm="syz.4.635" path="socket:[12886]" dev="sockfs" ino=12886 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 107.764866][ T28] audit: type=1400 audit(1772728016.197:1365): avc: denied { mounton } for pid=5715 comm="syz.3.642" path=2F3132362FE91F7189591E9233614B dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 107.764904][ T5716] 9p: Could not find request transport: uni^ek}¨útoرÞ—½Òò)ê&KªpñJwÍs ¶A²ßÌ4}(3‰…†ëÝ’Ù [ 107.847311][ T28] audit: type=1400 audit(1772728016.277:1366): avc: denied { mounton } for pid=5722 comm="syz.5.646" path="/proc/102/task" dev="proc" ino=12925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 107.926852][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 108.199797][ T5736] IPv6: sit1: Disabled Multicast RS [ 108.206110][ T5736] sit1: entered allmulticast mode [ 109.505077][ T5752] hub 8-0:1.0: USB hub found [ 109.509899][ T5752] hub 8-0:1.0: 8 ports detected [ 109.539538][ T5752] all (unregistering): Released all slaves [ 109.751153][ T5754] team0 (unregistering): Failed to send options change via netlink (err -105) [ 109.782411][ T5762] loop5: detected capacity change from 0 to 512 [ 109.811666][ T5754] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 109.884558][ T5761] xt_hashlimit: size too large, truncated to 1048576 [ 109.910469][ T5754] team0 (unregistering): Port device team_slave_0 removed [ 109.930223][ T5754] team0 (unregistering): Failed to send options change via netlink (err -105) [ 109.939314][ T5754] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 109.950388][ T5754] team0 (unregistering): Port device team_slave_1 removed [ 109.975236][ T5769] loop4: detected capacity change from 0 to 256 [ 110.093871][ T5769] FAT-fs (loop4): Directory bread(block 64) failed [ 110.117384][ T5774] netlink: 'syz.3.657': attribute type 1 has an invalid length. [ 110.121343][ T5769] FAT-fs (loop4): Directory bread(block 65) failed [ 110.169938][ T5769] FAT-fs (loop4): Directory bread(block 66) failed [ 110.193999][ T5769] FAT-fs (loop4): Directory bread(block 67) failed [ 110.260494][ T5769] FAT-fs (loop4): Directory bread(block 68) failed [ 110.329586][ T5769] FAT-fs (loop4): Directory bread(block 69) failed [ 110.443911][ T5769] FAT-fs (loop4): Directory bread(block 70) failed [ 110.458434][ T5769] FAT-fs (loop4): Directory bread(block 71) failed [ 110.485076][ T5769] FAT-fs (loop4): Directory bread(block 72) failed [ 110.559852][ T5782] IPv6: sit1: Disabled Multicast RS [ 110.566673][ T5782] sit1: entered allmulticast mode [ 110.643551][ T5769] FAT-fs (loop4): Directory bread(block 73) failed [ 111.033484][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 111.033499][ T28] audit: type=1400 audit(1772728019.467:1375): avc: denied { setopt } for pid=5768 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.119416][ T28] audit: type=1400 audit(1772728019.497:1376): avc: denied { connect } for pid=5768 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.396745][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.414709][ T5788] loop5: detected capacity change from 0 to 32768 [ 111.421505][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.428321][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.436421][ T5797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.454726][ T5797] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 111.640905][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.708754][ T28] audit: type=1400 audit(1772728020.137:1377): avc: denied { mount } for pid=5801 comm="syz.5.666" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.749834][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.807329][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.813643][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.826925][ T5797] hsr0 speed is unknown, defaulting to 1000 [ 111.941933][ T5817] loop4: detected capacity change from 0 to 512 [ 111.970885][ T5817] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 112.216462][ T5827] all (unregistering): Released all slaves [ 112.400421][ T5838] xt_hashlimit: size too large, truncated to 1048576 [ 112.526242][ T5817] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 112.535133][ T5817] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.668: bad orphan inode 4 [ 112.569170][ T5817] loop4: lost filesystem error report for type 5 error -117 [ 112.569300][ T5817] EXT4-fs (loop4): 1 orphan inode deleted [ 112.569389][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 112.590457][ C0] EXT4-fs (loop4): initial error at time 1772728020: ext4_orphan_get:1417 [ 112.598958][ C0] EXT4-fs (loop4): last error at time 1772728020: ext4_orphan_get:1417 [ 112.618223][ T5817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.787512][ T5824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 113.377064][ T5851] IPv6: sit1: Disabled Multicast RS [ 113.384003][ T5851] sit1: entered allmulticast mode [ 113.515467][ T5855] xt_hashlimit: size too large, truncated to 1048576 [ 113.580258][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.616584][ T5858] loop4: detected capacity change from 0 to 256 [ 113.644016][ T5858] msdos: Bad value for 'gid' [ 113.648655][ T5858] msdos: Bad value for 'gid' [ 113.689161][ T5858] loop4: detected capacity change from 0 to 512 [ 114.515450][ T5853] syz.5.677 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 114.565447][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz.5.677 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.565482][ T5853] Tainted: [W]=WARN [ 114.565488][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.565498][ T5853] Call Trace: [ 114.565505][ T5853] [ 114.565513][ T5853] __dump_stack+0x1d/0x30 [ 114.565539][ T5853] dump_stack_lvl+0x95/0xd0 [ 114.565698][ T5853] dump_stack+0x15/0x1b [ 114.565716][ T5853] dump_header+0x80/0x240 [ 114.565777][ T5853] oom_kill_process+0x295/0x350 [ 114.565800][ T5853] out_of_memory+0x97d/0xb80 [ 114.565894][ T5853] try_charge_memcg+0x62e/0xa10 [ 114.565957][ T5853] obj_cgroup_charge_pages+0x23/0xc0 [ 114.566031][ T5853] __memcg_kmem_charge_page+0x9e/0x170 [ 114.566054][ T5853] __alloc_frozen_pages_noprof+0x18a/0x360 [ 114.566197][ T5853] alloc_pages_mpol+0xb3/0x260 [ 114.566268][ T5853] alloc_pages_noprof+0x8f/0x130 [ 114.566301][ T5853] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 114.566377][ T5853] __kvmalloc_node_noprof+0x3d4/0x650 [ 114.566410][ T5853] ? futex_hash_allocate+0x190/0x9d0 [ 114.566439][ T5853] ? futex_hash_allocate+0x190/0x9d0 [ 114.566470][ T5853] futex_hash_allocate+0x190/0x9d0 [ 114.566531][ T5853] ? cap_task_prctl+0x13f/0x6e0 [ 114.566550][ T5853] futex_hash_prctl+0xd8/0xf0 [ 114.566571][ T5853] __se_sys_prctl+0xa3d/0x13f0 [ 114.566593][ T5853] __x64_sys_prctl+0x67/0x80 [ 114.566635][ T5853] x64_sys_call+0x2533/0x3020 [ 114.566657][ T5853] do_syscall_64+0x12c/0x370 [ 114.566679][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.566752][ T5853] RIP: 0033:0x7f5c6ce0c799 [ 114.566826][ T5853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.566843][ T5853] RSP: 002b:00007f5c6b85f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 114.566864][ T5853] RAX: ffffffffffffffda RBX: 00007f5c6d085fa0 RCX: 00007f5c6ce0c799 [ 114.566879][ T5853] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 114.566893][ T5853] RBP: 00007f5c6cea2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 114.566907][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.566981][ T5853] R13: 00007f5c6d086038 R14: 00007f5c6d085fa0 R15: 00007ffed3749d78 [ 114.566997][ T5853] [ 114.843322][ T5853] memory: usage 221660kB, limit 307200kB, failcnt 179 [ 114.853441][ T5853] memory+swap: usage 212956kB, limit 9007199254740988kB, failcnt 0 [ 114.864131][ T5853] kmem: usage 190912kB, limit 9007199254740988kB, failcnt 0 [ 114.871528][ T5853] Memory cgroup stats for /syz5: [ 114.871765][ T5853] cache 0 [ 114.879986][ T5853] rss 0 [ 114.882793][ T5853] shmem 0 [ 114.885763][ T5853] mapped_file 0 [ 114.889203][ T5853] dirty 0 [ 114.898970][ T5853] writeback 0 [ 114.902532][ T5853] workingset_refault_anon 88 [ 114.907743][ T5853] workingset_refault_file 0 [ 114.951878][ T5887] loop4: detected capacity change from 0 to 512 [ 114.959529][ T5853] swap 405504 [ 114.988450][ T5887] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.689: invalid indirect mapped block 256 (level 2) [ 115.004054][ T5853] swapcached 405504 [ 115.019456][ T5887] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.022497][ T5887] EXT4-fs (loop4): 2 truncates cleaned up [ 115.031935][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 115.031961][ C1] EXT4-fs (loop4): initial error at time 1772728023: ext4_free_branches:1023: inode 11 [ 115.031997][ C1] EXT4-fs (loop4): last error at time 1772728023: ext4_free_branches:1023: inode 11 [ 115.065044][ T5853] pgpgin 14965 [ 115.068536][ T5853] pgpgout 14965 [ 115.072250][ T5853] pgfault 19115 [ 115.079868][ T5887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.093863][ T5853] pgmajfault 58 [ 115.097348][ T5853] inactive_anon 0 [ 115.113375][ T28] audit: type=1400 audit(1772728023.527:1378): avc: denied { ioctl } for pid=5886 comm="syz.4.689" path="/123/file1/cgroup.controllers" dev="loop4" ino=18 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 115.144107][ T5893] lo speed is unknown, defaulting to 1000 [ 115.149943][ T5853] active_anon 0 [ 115.153511][ T5853] inactive_file 0 [ 115.157136][ T5853] active_file 0 [ 115.179456][ T5853] unevictable 0 [ 115.199562][ T5853] hierarchical_memory_limit 314572800 [ 115.208309][ T5853] hierarchical_memsw_limit 9223372036854771712 [ 115.239428][ T5853] total_cache 0 [ 115.240165][ T4721] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 115.242972][ T5853] total_rss 0 [ 115.242980][ T5853] total_shmem 0 [ 115.242988][ T5853] total_mapped_file 0 [ 115.243089][ T5853] total_dirty 0 [ 115.269744][ T5853] total_writeback 0 [ 115.273790][ T5853] total_workingset_refault_anon 88 [ 115.278941][ T5853] total_workingset_refault_file 0 [ 115.290106][ T4721] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 115.334529][ T5893] hsr0 speed is unknown, defaulting to 1000 [ 115.347102][ T5900] IPv6: sit1: Disabled Multicast RS [ 115.354254][ T5900] sit1: entered allmulticast mode [ 115.404485][ T4721] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.404485][ T4721] [ 115.438550][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 115.457082][ T5853] total_swap 405504 [ 115.472820][ T5853] total_swapcached 405504 [ 115.523404][ T5853] total_pgpgin 14965 [ 115.568113][ T5853] total_pgpgout 14965 [ 115.620748][ T5853] total_pgfault 19115 [ 115.652225][ T4721] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 556 with error 28 [ 115.699077][ T5853] total_pgmajfault 58 [ 115.728214][ T4721] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.728214][ T4721] [ 115.737934][ T4721] EXT4-fs (loop4): Total free blocks count 0 [ 115.744066][ T4721] EXT4-fs (loop4): Free/Dirty block details [ 115.745981][ T5853] total_inactive_anon 0 [ 115.754939][ T4721] EXT4-fs (loop4): free_blocks=0 [ 115.760227][ T4721] EXT4-fs (loop4): dirty_blocks=556 [ 115.765578][ T4721] EXT4-fs (loop4): Block reservation details [ 115.771660][ T5853] total_active_anon 0 [ 115.780867][ T5853] total_inactive_file 0 [ 115.788009][ T5853] total_active_file 0 [ 115.794070][ T28] audit: type=1400 audit(1772728024.217:1379): avc: denied { connect } for pid=5892 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.806260][ T5853] total_unevictable 0 [ 115.817574][ T28] audit: type=1400 audit(1772728024.217:1380): avc: denied { write } for pid=5892 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.822298][ T5853] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.677,pid=5852,uid=0 [ 115.856123][ T5853] Memory cgroup out of memory: Killed process 5852 (syz.5.677) total-vm:96340kB, anon-rss:1224kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 116.061588][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 116.281232][ T5941] loop4: detected capacity change from 0 to 512 [ 116.315853][ T5941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.470264][ T5951] af_packet: tpacket_rcv: packet too big, clamped from 376 to 4294967272. macoff=96 [ 116.489772][ T28] audit: type=1400 audit(1772728024.897:1381): avc: denied { bind } for pid=5948 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.918696][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.926069][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.009345][ T5969] netlink: 324 bytes leftover after parsing attributes in process `syz.5.707'. [ 117.105246][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.251308][ T5952] bridge_slave_0: left allmulticast mode [ 117.256987][ T5952] bridge_slave_0: left promiscuous mode [ 117.268990][ T5975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5975 comm=syz.4.709 [ 117.281482][ T5974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5974 comm=syz.4.709 [ 117.282897][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.344942][ T5952] bridge_slave_1: left allmulticast mode [ 117.363788][ T5952] bridge_slave_1: left promiscuous mode [ 117.381556][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.428346][ T5952] bond0: (slave bond_slave_0): Releasing backup interface [ 117.451859][ T5952] bond0: (slave bond_slave_1): Releasing backup interface [ 117.493414][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 117.501875][ T5952] team0: Port device team_slave_0 removed [ 117.508596][ T28] audit: type=1400 audit(1772728025.927:1382): avc: denied { read } for pid=5977 comm="syz.3.710" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.551090][ T5952] team0: Port device team_slave_1 removed [ 117.567507][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.581302][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.591139][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.605341][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.625056][ T5987] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 117.630532][ T5952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.662907][ T5978] batadv1: entered promiscuous mode [ 117.760925][ T5987] veth0_vlan: left promiscuous mode [ 117.782948][ T28] audit: type=1400 audit(1772728026.217:1383): avc: denied { read } for pid=5995 comm="syz.5.715" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.784383][ T5987] veth0_vlan: entered promiscuous mode [ 117.824915][ T28] audit: type=1400 audit(1772728026.217:1384): avc: denied { open } for pid=5995 comm="syz.5.715" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.825398][ T5987] team0: Device veth0_vlan failed to register rx_handler [ 117.879784][ T28] audit: type=1400 audit(1772728026.257:1385): avc: denied { bind } for pid=5998 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.927938][ T5997] netlink: 'syz.5.715': attribute type 2 has an invalid length. [ 117.936736][ T28] audit: type=1400 audit(1772728026.257:1386): avc: denied { setopt } for pid=5998 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.947504][ T5997] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.715'. [ 117.983050][ T28] audit: type=1400 audit(1772728026.257:1387): avc: denied { write } for pid=5998 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.111139][ T6012] team0 (unregistering): Port device team_slave_0 removed [ 118.472239][ T6012] team0 (unregistering): Port device team_slave_1 removed [ 119.084852][ T28] audit: type=1400 audit(1772728540.503:1388): avc: denied { append } for pid=6028 comm="syz.4.727" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.126355][ T6030] 9p: Bad value for 'wfdno' [ 119.167186][ T6030] usb usb8: check_ctrlrecip: process 6030 (syz.4.727) requesting ep 01 but needs 81 [ 119.189280][ T6030] usb usb8: usbfs: process 6030 (syz.4.727) did not claim interface 0 before use [ 119.217420][ T6043] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.240545][ T28] audit: type=1326 audit(1772728540.649:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 119.269855][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'. [ 119.285763][ T6043] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 119.307275][ T28] audit: type=1326 audit(1772728540.658:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 119.351148][ T6048] loop4: detected capacity change from 0 to 1024 [ 119.368712][ T6048] EXT4-fs: inline encryption not supported [ 119.376421][ T6050] loop5: detected capacity change from 0 to 512 [ 119.389042][ T6048] EXT4-fs: Ignoring removed i_version option [ 119.405126][ T6050] EXT4-fs (loop5): 1 truncate cleaned up [ 119.421942][ T6050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.439288][ T6050] xt_TCPMSS: Only works on TCP SYN packets [ 119.553994][ T6048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.634250][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.204076][ T6080] macvlan0: entered promiscuous mode [ 120.244599][ T6080] dummy0: entered promiscuous mode [ 120.257662][ T6080] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 120.279857][ T6080] hsr1: entered promiscuous mode [ 120.290801][ T6080] hsr1: entered allmulticast mode [ 120.301872][ T6080] macvlan0: entered allmulticast mode [ 120.313096][ T6080] veth1_vlan: entered allmulticast mode [ 120.604184][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.751'. [ 120.984918][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 121.180485][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.270243][ T6124] loop5: detected capacity change from 0 to 512 [ 121.292591][ T6124] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.579383][ T6124] EXT4-fs (loop5): 1 truncate cleaned up [ 121.617637][ T6124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.911604][ T6143] IPv6: sit1: Disabled Multicast RS [ 121.918065][ T6143] sit1: entered allmulticast mode [ 122.828209][ T6155] loop4: detected capacity change from 0 to 1024 [ 122.841289][ T6155] EXT4-fs: Ignoring removed bh option [ 122.902831][ T6155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.932519][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 122.932535][ T28] audit: type=1400 audit(1772728544.237:1485): avc: denied { mounton } for pid=6154 comm="syz.4.765" path="/137/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.943186][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 123.004277][ T6164] lo speed is unknown, defaulting to 1000 [ 123.005028][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.045259][ T28] audit: type=1400 audit(1772728544.246:1486): avc: denied { write } for pid=6154 comm="syz.4.765" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.053731][ T6164] hsr0 speed is unknown, defaulting to 1000 [ 123.092393][ T28] audit: type=1400 audit(1772728544.354:1487): avc: denied { lock } for pid=6147 comm="syz.0.764" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.141282][ T6167] lo speed is unknown, defaulting to 1000 [ 123.257559][ T6167] hsr0 speed is unknown, defaulting to 1000 [ 123.267678][ T6168] v: renamed from ip6_vti0 (while UP) [ 123.278933][ T6175] loop4: detected capacity change from 0 to 1024 [ 123.330913][ T28] audit: type=1400 audit(1772728544.559:1488): avc: denied { setopt } for pid=6162 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.438637][ T6175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.518695][ T28] audit: type=1400 audit(1772728544.822:1489): avc: denied { map } for pid=6174 comm="syz.4.772" path="/139/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.655782][ T6175] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 123.690880][ T28] audit: type=1400 audit(1772728544.822:1490): avc: denied { execute } for pid=6174 comm="syz.4.772" path="/139/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.715878][ T6175] File: /139/file1/file1 PID: 6175 Comm: syz.4.772 [ 123.732071][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.771718][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.146779][ T28] audit: type=1400 audit(1772728545.398:1491): avc: denied { getopt } for pid=6191 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.411780][ T6197] IPv6: Can't replace route, no match found [ 124.448281][ T28] audit: type=1400 audit(1772728545.701:1492): avc: denied { create } for pid=6198 comm="syz.5.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.468282][ T43] Bluetooth: hci0: sending frame failed (-49) [ 124.474527][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 124.625047][ T6208] loop5: detected capacity change from 0 to 512 [ 125.002398][ T28] audit: type=1400 audit(1772728546.269:1493): avc: denied { bind } for pid=6230 comm="syz.5.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.420914][ T6241] FAULT_INJECTION: forcing a failure. [ 125.420914][ T6241] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.439348][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.5.794 Tainted: G W syzkaller #0 PREEMPT(full) [ 125.439377][ T6241] Tainted: [W]=WARN [ 125.439382][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.439393][ T6241] Call Trace: [ 125.439399][ T6241] [ 125.439520][ T6241] __dump_stack+0x1d/0x30 [ 125.439609][ T6241] dump_stack_lvl+0x95/0xd0 [ 125.439630][ T6241] dump_stack+0x15/0x1b [ 125.439646][ T6241] should_fail_ex+0x263/0x280 [ 125.439667][ T6241] should_fail+0xb/0x20 [ 125.439685][ T6241] should_fail_usercopy+0x1a/0x20 [ 125.439778][ T6241] _copy_from_iter+0xcf/0xea0 [ 125.439800][ T6241] ? should_fail_ex+0xd9/0x280 [ 125.439818][ T6241] ? should_failslab+0x8c/0xb0 [ 125.439836][ T6241] ? __kmalloc_noprof+0x1e3/0x4e0 [ 125.439915][ T6241] ? kernfs_fop_write_iter+0xe2/0x300 [ 125.439996][ T6241] kernfs_fop_write_iter+0x125/0x300 [ 125.440023][ T6241] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.440052][ T6241] vfs_write+0x5a6/0x9f0 [ 125.440080][ T6241] ksys_write+0xdc/0x1a0 [ 125.440139][ T6241] __x64_sys_write+0x40/0x50 [ 125.440163][ T6241] x64_sys_call+0x27e1/0x3020 [ 125.440187][ T6241] do_syscall_64+0x12c/0x370 [ 125.440209][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.440228][ T6241] RIP: 0033:0x7f5c6ce0c799 [ 125.440333][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.440350][ T6241] RSP: 002b:00007f5c6b85f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.440376][ T6241] RAX: ffffffffffffffda RBX: 00007f5c6d085fa0 RCX: 00007f5c6ce0c799 [ 125.440389][ T6241] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000004 [ 125.440400][ T6241] RBP: 00007f5c6b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.440450][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.440462][ T6241] R13: 00007f5c6d086038 R14: 00007f5c6d085fa0 R15: 00007ffed3749d78 [ 125.440480][ T6241] [ 125.771199][ T28] audit: type=1326 audit(1772728547.013:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.4.799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21bde1c799 code=0x0 [ 125.815093][ T6253] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.800'. [ 127.082870][ T6304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.339979][ T6321] loop5: detected capacity change from 0 to 256 [ 127.364904][ T6321] msdos: Bad value for 'gid' [ 127.397899][ T6321] msdos: Bad value for 'gid' [ 127.430185][ T6321] loop5: detected capacity change from 0 to 512 [ 127.672723][ T6329] loop5: detected capacity change from 0 to 128 [ 127.740367][ T6329] can: request_module (can-proto-0) failed. [ 127.828410][ T6332] Cannot find set identified by id 0 to match [ 127.898903][ T6348] netlink: 'syz.2.836': attribute type 29 has an invalid length. [ 127.935782][ T6348] netlink: 'syz.2.836': attribute type 29 has an invalid length. [ 127.969036][ T6354] loop4: detected capacity change from 0 to 1024 [ 127.976105][ T6354] EXT4-fs: Ignoring removed bh option [ 128.025060][ T6354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.082629][ T6348] netlink: 'syz.2.836': attribute type 29 has an invalid length. [ 128.101863][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.151451][ T6361] loop4: detected capacity change from 0 to 1024 [ 128.158365][ T6361] EXT4-fs: inline encryption not supported [ 128.160691][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 128.160704][ T28] audit: type=1400 audit(1772728549.347:1497): avc: denied { ioctl } for pid=6360 comm="syz.4.839" path="socket:[14060]" dev="sockfs" ino=14060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.171903][ T6361] EXT4-fs: Ignoring removed nobh option [ 128.212320][ T28] audit: type=1400 audit(1772728549.347:1498): avc: denied { nlmsg_tty_audit } for pid=6360 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 128.243348][ T6361] EXT4-fs: Ignoring removed nobh option [ 128.297232][ T6361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.312590][ T5840] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.348337][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.841'. [ 128.379047][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.389807][ T5840] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.471928][ T6373] FAULT_INJECTION: forcing a failure. [ 128.471928][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 128.489907][ T5840] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.528348][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.4.842 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.528383][ T6373] Tainted: [W]=WARN [ 128.528389][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.528400][ T6373] Call Trace: [ 128.528407][ T6373] [ 128.528422][ T6373] __dump_stack+0x1d/0x30 [ 128.528458][ T6373] dump_stack_lvl+0x95/0xd0 [ 128.528478][ T6373] dump_stack+0x15/0x1b [ 128.528496][ T6373] should_fail_ex+0x263/0x280 [ 128.528521][ T6373] should_failslab+0x8c/0xb0 [ 128.528543][ T6373] __kmalloc_cache_node_noprof+0x6b/0x480 [ 128.528625][ T6373] ? __get_vm_area_node+0x106/0x1d0 [ 128.528646][ T6373] __get_vm_area_node+0x106/0x1d0 [ 128.528669][ T6373] __vmalloc_node_range_noprof+0x291/0x12b0 [ 128.528736][ T6373] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 128.528752][ T6373] ? selinux_file_open+0x2e6/0x330 [ 128.528773][ T6373] ? __rcu_read_unlock+0x4e/0x70 [ 128.528791][ T6373] ? avc_has_perm_noaudit+0xab/0x130 [ 128.528873][ T6373] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 128.528889][ T6373] __vmalloc_noprof+0xa4/0xf0 [ 128.528917][ T6373] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 128.528934][ T6373] bpf_prog_alloc_no_stats+0x47/0x390 [ 128.529017][ T6373] ? bpf_prog_alloc+0x2a/0x150 [ 128.529033][ T6373] bpf_prog_alloc+0x3c/0x150 [ 128.529049][ T6373] bpf_prog_load+0x506/0x1140 [ 128.529092][ T6373] ? security_bpf+0x2b/0x90 [ 128.529121][ T6373] __sys_bpf+0x505/0x7e0 [ 128.529148][ T6373] __x64_sys_bpf+0x41/0x50 [ 128.529171][ T6373] x64_sys_call+0x10cb/0x3020 [ 128.529217][ T6373] do_syscall_64+0x12c/0x370 [ 128.529235][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.529255][ T6373] RIP: 0033:0x7f21bde1c799 [ 128.529274][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.529368][ T6373] RSP: 002b:00007f21bc86f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.529390][ T6373] RAX: ffffffffffffffda RBX: 00007f21be095fa0 RCX: 00007f21bde1c799 [ 128.529402][ T6373] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 128.529413][ T6373] RBP: 00007f21bc86f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.529477][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.529490][ T6373] R13: 00007f21be096038 R14: 00007f21be095fa0 R15: 00007ffc5172b318 [ 128.529507][ T6373] [ 128.529526][ T6373] syz.4.842: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 128.660950][ T6374] lo speed is unknown, defaulting to 1000 [ 128.665723][ T6373] ,cpuset= [ 128.793440][ T6374] hsr0 speed is unknown, defaulting to 1000 [ 128.802924][ T6373] /,mems_allowed=0 [ 128.806754][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.4.842 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.806782][ T6373] Tainted: [W]=WARN [ 128.806790][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.806802][ T6373] Call Trace: [ 128.806808][ T6373] [ 128.806815][ T6373] __dump_stack+0x1d/0x30 [ 128.806836][ T6373] dump_stack_lvl+0x95/0xd0 [ 128.806872][ T6373] dump_stack+0x15/0x1b [ 128.806891][ T6373] warn_alloc+0x145/0x1c0 [ 128.806956][ T6373] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 128.806976][ T6373] ? selinux_file_open+0x2e6/0x330 [ 128.807073][ T6373] ? __rcu_read_unlock+0x4e/0x70 [ 128.807090][ T6373] ? avc_has_perm_noaudit+0xab/0x130 [ 128.807114][ T6373] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 128.807131][ T6373] __vmalloc_noprof+0xa4/0xf0 [ 128.807204][ T6373] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 128.807223][ T6373] bpf_prog_alloc_no_stats+0x47/0x390 [ 128.807237][ T6373] ? bpf_prog_alloc+0x2a/0x150 [ 128.807252][ T6373] bpf_prog_alloc+0x3c/0x150 [ 128.807341][ T6373] bpf_prog_load+0x506/0x1140 [ 128.807414][ T6373] ? security_bpf+0x2b/0x90 [ 128.807438][ T6373] __sys_bpf+0x505/0x7e0 [ 128.807458][ T6373] __x64_sys_bpf+0x41/0x50 [ 128.807486][ T6373] x64_sys_call+0x10cb/0x3020 [ 128.807531][ T6373] do_syscall_64+0x12c/0x370 [ 128.807552][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.807638][ T6373] RIP: 0033:0x7f21bde1c799 [ 128.807653][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.807693][ T6373] RSP: 002b:00007f21bc86f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.807723][ T6373] RAX: ffffffffffffffda RBX: 00007f21be095fa0 RCX: 00007f21bde1c799 [ 128.807738][ T6373] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 128.807818][ T6373] RBP: 00007f21bc86f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.807831][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.807843][ T6373] R13: 00007f21be096038 R14: 00007f21be095fa0 R15: 00007ffc5172b318 [ 128.807872][ T6373] [ 129.020509][ T6373] Mem-Info: [ 129.023606][ T6373] active_anon:41627 inactive_anon:21664 isolated_anon:0 [ 129.023606][ T6373] active_file:20873 inactive_file:6416 isolated_file:0 [ 129.023606][ T6373] unevictable:0 dirty:634 writeback:0 [ 129.023606][ T6373] slab_reclaimable:3791 slab_unreclaimable:18899 [ 129.023606][ T6373] mapped:29757 shmem:56192 pagetables:3347 [ 129.023606][ T6373] sec_pagetables:0 bounce:0 [ 129.023606][ T6373] kernel_misc_reclaimable:0 [ 129.023606][ T6373] free:1781361 free_pcp:45192 free_cma:0 [ 129.069405][ T6373] Node 0 active_anon:166508kB inactive_anon:86656kB active_file:83492kB inactive_file:25664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127148kB dirty:2536kB writeback:0kB shmem:224768kB kernel_stack:4096kB pagetables:13504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.097972][ T6373] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.138647][ T5840] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.171284][ T6373] lowmem_reserve[]: 0 2879 7857 7857 [ 129.177170][ T6373] Node 0 DMA32 free:2944556kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948184kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 129.190061][ T28] audit: type=1400 audit(1772728550.379:1499): avc: denied { setopt } for pid=6384 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.209221][ T6373] lowmem_reserve[]: 0 0 4978 4978 [ 129.234569][ T6373] Node 0 Normal free:4153284kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:166624kB inactive_anon:86656kB active_file:83492kB inactive_file:25664kB unevictable:0kB writepending:3000kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:176892kB local_pcp:96352kB free_cma:0kB [ 129.269278][ T6373] lowmem_reserve[]: 0 0 0 0 [ 129.274070][ T6373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.288429][ T6373] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944556kB [ 129.305339][ T6373] Node 0 Normal: 711*4kB (UME) 767*8kB (UM) 557*16kB (UME) 689*32kB (UME) 475*64kB (UM) 292*128kB (UM) 267*256kB (UM) 238*512kB (UME) 209*1024kB (UM) 176*2048kB (UM) 801*4096kB (UM) = 4153284kB [ 129.331101][ T5840] bridge_slave_1: left allmulticast mode [ 129.332910][ T6373] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 129.343156][ T5840] bridge_slave_1: left promiscuous mode [ 129.364620][ T6373] 83751 total pagecache pages [ 129.366877][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.369374][ T6373] 76 pages in swap cache [ 129.380889][ T6373] Free swap = 109472kB [ 129.385173][ T6373] Total swap = 124996kB [ 129.389412][ T6373] 2097051 pages RAM [ 129.393574][ T6373] 0 pages HighMem/MovableOnly [ 129.398301][ T6373] 81605 pages reserved [ 129.450576][ T6402] loop4: detected capacity change from 0 to 256 [ 129.465609][ T6402] msdos: Bad value for 'gid' [ 129.474580][ T6402] msdos: Bad value for 'gid' [ 129.484337][ T5840] bridge_slave_0: left allmulticast mode [ 129.497087][ T5840] bridge_slave_0: left promiscuous mode [ 129.502831][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.508452][ T6402] loop4: detected capacity change from 0 to 512 [ 131.315192][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.329383][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.339695][ T5840] bond0 (unregistering): Released all slaves [ 131.350404][ T6412] IPv6: sit1: Disabled Multicast RS [ 131.356854][ T6412] sit1: entered allmulticast mode [ 131.410047][ T6423] IPv6: sit1: Disabled Multicast RS [ 131.416129][ T6423] sit1: entered allmulticast mode [ 131.427191][ T6425] IPv6: sit1: Disabled Multicast RS [ 131.433472][ T6425] sit1: entered allmulticast mode [ 131.564482][ T6379] lo speed is unknown, defaulting to 1000 [ 131.625423][ T28] audit: type=1400 audit(1772728552.743:1500): avc: denied { bind } for pid=6447 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.779042][ T5840] hsr_slave_0: left promiscuous mode [ 131.805116][ T5840] hsr_slave_1: left promiscuous mode [ 131.813225][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.821319][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.828912][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.837018][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.949587][ T5840] veth1_macvtap: left promiscuous mode [ 131.976436][ T5840] veth0_macvtap: left promiscuous mode [ 132.008201][ T5840] veth1_vlan: left promiscuous mode [ 132.040584][ T5840] veth0_vlan: left promiscuous mode [ 132.054487][ T6464] loop4: detected capacity change from 0 to 8192 [ 132.135020][ T3295] loop4: p1 < > p2 p4 < p5 > [ 132.158448][ T3295] loop4: partition table partially beyond EOD, truncated [ 132.204692][ T28] audit: type=1400 audit(1772728553.314:1501): avc: denied { ioctl } for pid=6469 comm="syz.0.869" path="socket:[15255]" dev="sockfs" ino=15255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.251853][ T3295] loop4: p1 start 134217728 is beyond EOD, truncated [ 132.258750][ T3295] loop4: p2 size 591360 extends beyond EOD, truncated [ 132.266441][ T3295] loop4: p5 size 591360 extends beyond EOD, truncated [ 132.281742][ T6464] loop4: p1 < > p2 p4 < p5 > [ 132.314861][ T28] audit: type=1400 audit(1772728553.453:1502): avc: denied { mount } for pid=6469 comm="syz.0.869" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.325803][ T6464] loop4: partition table partially beyond EOD, truncated [ 132.369584][ T6464] loop4: p1 start 134217728 is beyond EOD, truncated [ 132.385171][ T6464] loop4: p2 size 591360 extends beyond EOD, truncated [ 132.402078][ T6464] loop4: p5 size 591360 extends beyond EOD, truncated [ 132.484745][ T28] audit: type=1400 audit(1772728553.620:1503): avc: denied { listen } for pid=6473 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.515471][ T6379] hsr0 speed is unknown, defaulting to 1000 [ 132.673717][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 132.892128][ T5840] IPVS: stop unused estimator thread 0... [ 132.906407][ T6463] lo speed is unknown, defaulting to 1000 [ 132.912668][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'. [ 133.141579][ T6490] IPv6: sit1: Disabled Multicast RS [ 133.148526][ T6490] sit1: entered allmulticast mode [ 133.637822][ T6379] chnl_net:caif_netlink_parms(): no params data found [ 134.020608][ T28] audit: type=1400 audit(1772728555.052:1504): avc: denied { setopt } for pid=6512 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.223789][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.234084][ T6463] hsr0 speed is unknown, defaulting to 1000 [ 134.268136][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.288868][ T6379] bridge_slave_0: entered allmulticast mode [ 134.295855][ T6379] bridge_slave_0: entered promiscuous mode [ 134.302569][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.309763][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.316995][ T6379] bridge_slave_1: entered allmulticast mode [ 134.342624][ T6379] bridge_slave_1: entered promiscuous mode [ 134.399283][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.430058][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.519397][ T6379] team0: Port device team_slave_0 added [ 134.625513][ T6379] team0: Port device team_slave_1 added [ 134.807211][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.836801][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.926190][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.951277][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.958239][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.991872][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.031083][ T6379] hsr_slave_0: entered promiscuous mode [ 135.038609][ T6379] hsr_slave_1: entered promiscuous mode [ 135.044996][ T6379] debugfs: 'hsr0' already exists in 'hsr' [ 135.050936][ T6379] Cannot create hsr debugfs directory [ 135.247107][ T6547] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 135.263709][ T6547] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.327848][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 135.352429][ T6379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.372699][ T6379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.413704][ T6379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.440511][ T6379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 136.089762][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 136.102482][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 136.117798][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.181764][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 136.192078][ T6379] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.234878][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.242006][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.279097][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.286202][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.361820][ T6379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.485448][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.761979][ T6379] veth0_vlan: entered promiscuous mode [ 136.782366][ T6379] veth1_vlan: entered promiscuous mode [ 136.824530][ T6379] veth0_macvtap: entered promiscuous mode [ 136.842108][ T6379] veth1_macvtap: entered promiscuous mode [ 136.869429][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.892573][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.914626][ T5227] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.942173][ T5227] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.973400][ T5227] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.991383][ T5227] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.031946][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.6.855'. [ 137.041218][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.6.855'. [ 137.171015][ T6624] xt_hashlimit: size too large, truncated to 1048576 [ 137.279250][ T6625] loop6: detected capacity change from 0 to 512 [ 137.290632][ T6625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.695243][ T6625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.707812][ T6625] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.470662][ T6643] loop4: detected capacity change from 0 to 512 [ 139.840211][ T6643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.914156][ T6643] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.895: bg 0: block 393: padding at end of block bitmap is not set [ 139.928446][ T6643] loop4: lost filesystem error report for type 5 error -117 [ 139.929157][ T6643] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 139.945226][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 139.945243][ C1] EXT4-fs (loop4): initial error at time 1772728560: ext4_validate_block_bitmap:441 [ 139.945270][ C1] EXT4-fs (loop4): last error at time 1772728560: ext4_validate_block_bitmap:441 [ 139.970259][ T6643] loop4: lost filesystem error report for type 5 error -117 [ 139.974633][ T6643] EXT4-fs (loop4): 2 truncates cleaned up [ 139.988117][ T6643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.100043][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.510055][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.625219][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.897'. [ 140.642667][ T6674] netlink: 196 bytes leftover after parsing attributes in process `syz.6.897'. [ 140.656494][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.897'. [ 140.666180][ T6674] netlink: 196 bytes leftover after parsing attributes in process `syz.6.897'. [ 140.851260][ T28] audit: type=1400 audit(1772728561.903:1505): avc: denied { write } for pid=6687 comm="syz.6.910" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.896094][ T28] audit: type=1400 audit(1772728561.933:1506): avc: denied { ioctl } for pid=6687 comm="syz.6.910" path="socket:[17051]" dev="sockfs" ino=17051 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.313295][ T6698] loop6: detected capacity change from 0 to 1024 [ 141.331574][ T6698] EXT4-fs: Ignoring removed orlov option [ 141.337454][ T6698] EXT4-fs: inline encryption not supported [ 141.344135][ T6698] EXT4-fs (loop6): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 141.451169][ T6702] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.472591][ T6704] loop4: detected capacity change from 0 to 256 [ 141.499633][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.6.916'. [ 141.502422][ T6704] msdos: Bad value for 'gid' [ 141.542352][ T6704] msdos: Bad value for 'gid' [ 141.563195][ T28] audit: type=1400 audit(1772728562.598:1507): avc: denied { create } for pid=6701 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.590640][ T6704] loop4: detected capacity change from 0 to 512 [ 141.629738][ T28] audit: type=1400 audit(1772728562.667:1508): avc: denied { create } for pid=6701 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.731804][ T6709] loop4: detected capacity change from 0 to 8192 [ 141.792875][ T3295] loop4: p2 p3 p4[EZD] [ 141.798719][ T3295] loop4: p3 start 331781 is beyond EOD, truncated [ 141.811828][ T3295] loop4: p4 size 197376 extends beyond EOD, truncated [ 141.828432][ T6709] loop4: p2 p3 p4[EZD] [ 141.992920][ T6709] loop4: p3 start 331781 is beyond EOD, truncated [ 142.094253][ T6709] loop4: p4 size 197376 extends beyond EOD, truncated [ 142.389330][ T6722] loop6: detected capacity change from 0 to 1024 [ 142.406408][ T6722] EXT4-fs: Ignoring removed bh option [ 142.467847][ T6722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.525546][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.696716][ T6740] loop4: detected capacity change from 0 to 1024 [ 142.706381][ T6740] EXT4-fs: Ignoring removed orlov option [ 142.714159][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.928'. [ 142.723593][ T6740] EXT4-fs: inline encryption not supported [ 142.724160][ T6740] EXT4-fs (loop4): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 142.743600][ T6737] netlink: 'syz.6.928': attribute type 26 has an invalid length. [ 142.751785][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.928'. [ 142.789713][ T6744] loop4: detected capacity change from 0 to 256 [ 142.799453][ T6744] msdos: Bad value for 'gid' [ 142.804657][ T6744] msdos: Bad value for 'gid' [ 142.850471][ T6744] loop4: detected capacity change from 0 to 512 [ 142.898358][ T6752] loop4: detected capacity change from 0 to 1024 [ 142.920896][ T6752] EXT4-fs: inline encryption not supported [ 142.926883][ T6752] EXT4-fs: Ignoring removed nobh option [ 142.944840][ T6752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 142.973319][ T6752] System zones: 0-1, 3-12 [ 142.979760][ T6752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.995239][ T6756] 9p: Bad value for 'wfdno' [ 143.482683][ T6764] FAULT_INJECTION: forcing a failure. [ 143.482683][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 143.517406][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.6.935 Tainted: G W syzkaller #0 PREEMPT(full) [ 143.517461][ T6764] Tainted: [W]=WARN [ 143.517467][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.517548][ T6764] Call Trace: [ 143.517554][ T6764] [ 143.517563][ T6764] __dump_stack+0x1d/0x30 [ 143.517592][ T6764] dump_stack_lvl+0x95/0xd0 [ 143.517614][ T6764] dump_stack+0x15/0x1b [ 143.517634][ T6764] should_fail_ex+0x263/0x280 [ 143.517656][ T6764] should_failslab+0x8c/0xb0 [ 143.517741][ T6764] kmem_cache_alloc_noprof+0x66/0x400 [ 143.517763][ T6764] ? security_inode_alloc+0x37/0x100 [ 143.517852][ T6764] security_inode_alloc+0x37/0x100 [ 143.517874][ T6764] inode_init_always_gfp+0x4b7/0x500 [ 143.517925][ T6764] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 143.517951][ T6764] alloc_inode+0x58/0x170 [ 143.517972][ T6764] new_inode+0x1d/0xe0 [ 143.517991][ T6764] shmem_get_inode+0x246/0x750 [ 143.518075][ T6764] __shmem_file_setup+0x112/0x210 [ 143.518098][ T6764] shmem_file_setup+0x3b/0x50 [ 143.518117][ T6764] memfd_alloc_file+0x4e/0x300 [ 143.518214][ T6764] __se_sys_memfd_create+0x2e1/0x3b0 [ 143.518242][ T6764] __x64_sys_memfd_create+0x31/0x40 [ 143.518365][ T6764] x64_sys_call+0x1f22/0x3020 [ 143.518385][ T6764] do_syscall_64+0x12c/0x370 [ 143.518403][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.518424][ T6764] RIP: 0033:0x7fae6a97c799 [ 143.518505][ T6764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.518519][ T6764] RSP: 002b:00007fae693cee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 143.518540][ T6764] RAX: ffffffffffffffda RBX: 0000000000000240 RCX: 00007fae6a97c799 [ 143.518555][ T6764] RDX: 00007fae693ceee0 RSI: 0000000000000000 RDI: 00007fae6aa12db9 [ 143.518570][ T6764] RBP: 0000200000000500 R08: 00000000ffffffff R09: 0000000000000000 [ 143.518583][ T6764] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000280 [ 143.518610][ T6764] R13: 00007fae693ceee0 R14: 00007fae693ceea0 R15: 00002000000002c0 [ 143.518627][ T6764] [ 143.931340][ T6780] loop6: detected capacity change from 0 to 256 [ 143.966583][ T6780] msdos: Bad value for 'gid' [ 143.983361][ T6780] msdos: Bad value for 'gid' [ 144.036647][ T6780] loop6: detected capacity change from 0 to 512 [ 144.469913][ T28] audit: type=1400 audit(1772728565.478:1509): avc: denied { create } for pid=6791 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 144.517376][ T28] audit: type=1400 audit(1772728565.488:1510): avc: denied { bind } for pid=6791 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.574170][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.673528][ T6815] loop4: detected capacity change from 0 to 256 [ 144.686453][ T6815] msdos: Unknown parameter 'showexe74' [ 144.714124][ T6815] netlink: 52 bytes leftover after parsing attributes in process `syz.4.949'. [ 144.729681][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 145.002336][ T6830] loop6: detected capacity change from 0 to 1024 [ 145.031736][ T5956] IPVS: starting estimator thread 0... [ 145.052055][ T6830] EXT4-fs: Ignoring removed bh option [ 145.060472][ T28] audit: type=1326 audit(1772728566.084:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5a3c799 code=0x7ffc0000 [ 145.088302][ T28] audit: type=1326 audit(1772728566.084:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cc5a3c799 code=0x7ffc0000 [ 145.098869][ T6837] xt_hashlimit: size too large, truncated to 1048576 [ 145.144953][ T6833] IPVS: using max 2448 ests per chain, 122400 per kthread [ 145.167670][ T6830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.195593][ T28] audit: type=1326 audit(1772728566.084:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5a3c799 code=0x7ffc0000 [ 145.219479][ T28] audit: type=1326 audit(1772728566.084:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f3cc5a3c799 code=0x7ffc0000 [ 145.288782][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.353972][ T6851] hub 9-0:1.0: USB hub found [ 145.359049][ T6851] hub 9-0:1.0: 8 ports detected [ 145.725442][ T6878] lo speed is unknown, defaulting to 1000 [ 145.760634][ T6878] hsr0 speed is unknown, defaulting to 1000 [ 146.253654][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 146.253670][ T28] audit: type=1400 audit(1772728567.267:1530): avc: denied { nlmsg_write } for pid=6868 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 146.797302][ T6911] loop6: detected capacity change from 0 to 1024 [ 146.876445][ T6915] msdos: Bad value for 'gid' [ 146.883718][ T6915] msdos: Bad value for 'gid' [ 146.976591][ T6922] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.981: inode has both inline data and extents flags [ 146.999999][ T6922] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.000178][ T6922] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.981: couldn't read orphan inode 15 (err -117) [ 147.009393][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 147.009419][ C0] EXT4-fs (loop6): initial error at time 1772728568: ext4_orphan_get:1391: inode 15 [ 147.009456][ C0] EXT4-fs (loop6): last error at time 1772728568: ext4_orphan_get:1391: inode 15 [ 147.068090][ T6922] loop6: lost filesystem error report for type 5 error -117 [ 147.068714][ T6922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.216769][ T6933] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.984'. [ 147.228588][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 147.292245][ T6934] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 147.652255][ T6936] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.981: Directory hole found for htree leaf block 0 [ 147.756063][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.981'. [ 147.957580][ T6940] xt_hashlimit: size too large, truncated to 1048576 [ 148.014649][ T6943] set_capacity_and_notify: 3 callbacks suppressed [ 148.014668][ T6943] loop4: detected capacity change from 0 to 4096 [ 148.091469][ T6943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.135170][ T6943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.180076][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.181229][ T28] audit: type=1326 audit(1772728569.177:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bde1c799 code=0x7ffc0000 [ 148.303529][ T28] audit: type=1326 audit(1772728569.177:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bde1c799 code=0x7ffc0000 [ 148.378764][ T28] audit: type=1326 audit(1772728569.177:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bde1c799 code=0x7ffc0000 [ 148.406994][ T6966] xt_hashlimit: size too large, truncated to 1048576 [ 148.462501][ T28] audit: type=1326 audit(1772728569.177:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f21bde1c799 code=0x7ffc0000 [ 148.613593][ T28] audit: type=1326 audit(1772728569.615:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bde1c799 code=0x7ffc0000 [ 148.696321][ T28] audit: type=1326 audit(1772728569.615:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21bde1c799 code=0x7ffc0000 [ 148.744360][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.716282][ T7027] xt_hashlimit: size too large, truncated to 1048576 [ 149.907759][ T7034] loop6: detected capacity change from 0 to 512 [ 149.914657][ T7034] ext2: Unknown parameter 'measure' [ 150.230725][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7040 comm=syz.0.1012 [ 150.604199][ T7083] loop6: detected capacity change from 0 to 1024 [ 150.743556][ T7083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.891027][ T28] audit: type=1326 audit(1772728571.885:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 150.924777][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 150.928531][ T28] audit: type=1326 audit(1772728571.925:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 150.969104][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 151.001057][ T28] audit: type=1326 audit(1772728571.925:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 151.030719][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.057590][ T7098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.073408][ T7103] loop4: detected capacity change from 0 to 1024 [ 151.109566][ T7103] EXT4-fs: inline encryption not supported [ 151.130634][ T7098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.144696][ T7103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.159043][ T7105] loop6: detected capacity change from 0 to 1024 [ 151.182006][ T7105] EXT4-fs: Ignoring removed bh option [ 151.306804][ T7105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.329496][ T7098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.482862][ T7098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.600895][ T5227] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.610413][ T5227] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.658717][ T5227] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.722195][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.745909][ T5227] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.934529][ T7132] netlink: 'syz.6.1037': attribute type 4 has an invalid length. [ 151.963417][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.802292][ T7144] IPv6: sit1: Disabled Multicast RS [ 153.808956][ T7144] sit1: entered allmulticast mode [ 154.182228][ T7160] loop6: detected capacity change from 0 to 1024 [ 154.234940][ T7160] EXT4-fs: Ignoring removed orlov option [ 154.253344][ T7160] EXT4-fs: inline encryption not supported [ 154.270505][ T7160] EXT4-fs (loop6): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 154.413670][ T7168] lo speed is unknown, defaulting to 1000 [ 154.419525][ T7168] lo speed is unknown, defaulting to 1000 [ 154.425866][ T7168] lo speed is unknown, defaulting to 1000 [ 154.433200][ T7168] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 154.446334][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1044'. [ 154.471697][ T7169] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 154.482150][ T7169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1050'. [ 154.604004][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 154.604030][ T28] audit: type=1400 audit(1772728575.572:1544): avc: denied { sqpoll } for pid=7171 comm="syz.6.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.673272][ T7168] lo speed is unknown, defaulting to 1000 [ 154.679916][ T7168] lo speed is unknown, defaulting to 1000 [ 154.686706][ T7168] lo speed is unknown, defaulting to 1000 [ 154.693026][ T7168] lo speed is unknown, defaulting to 1000 [ 154.699676][ T7168] lo speed is unknown, defaulting to 1000 [ 154.844498][ T7177] program syz.6.1053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.049853][ T28] audit: type=1400 audit(1772728576.020:1545): avc: denied { create } for pid=7183 comm="syz.6.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.153144][ T28] audit: type=1400 audit(1772728576.110:1546): avc: denied { write } for pid=7183 comm="syz.6.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.337190][ T7184] loop6: detected capacity change from 0 to 4096 [ 155.396564][ T7184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.422193][ T28] audit: type=1400 audit(1772728576.399:1547): avc: denied { remove_name } for pid=7183 comm="syz.6.1056" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.449732][ T7184] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz.6.1056: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 155.470780][ T28] audit: type=1400 audit(1772728576.399:1548): avc: denied { rmdir } for pid=7183 comm="syz.6.1056" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.470929][ T7184] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz.6.1056: directory missing '..' [ 155.543449][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.578497][ T7202] loop6: detected capacity change from 0 to 1024 [ 155.651793][ T7202] EXT4-fs: Ignoring removed orlov option [ 155.663757][ T7202] EXT4-fs: inline encryption not supported [ 155.670336][ T7202] EXT4-fs (loop6): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 155.792766][ T7212] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1061'. [ 155.882208][ T7216] loop6: detected capacity change from 0 to 512 [ 155.915506][ T7216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.944671][ T7216] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.016430][ T28] audit: type=1400 audit(1772728576.987:1549): avc: denied { setattr } for pid=7215 comm="syz.6.1067" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.230991][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.349423][ T28] audit: type=1400 audit(1772728577.316:1550): avc: denied { create } for pid=7227 comm="syz.6.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 156.448888][ T7233] IPv6: sit1: Disabled Multicast RS [ 156.455279][ T7233] sit1: entered allmulticast mode [ 156.908230][ T7242] xt_hashlimit: size too large, truncated to 1048576 [ 157.091730][ T7253] loop6: detected capacity change from 0 to 1024 [ 157.108542][ T7253] EXT4-fs: Ignoring removed bh option [ 157.137511][ T7253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.212205][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.777633][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1084'. [ 157.786987][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1084'. [ 157.796166][ T7267] loop6: detected capacity change from 0 to 512 [ 157.798293][ T7270] sit1: entered allmulticast mode [ 157.802832][ T7267] ext2: Unknown parameter 'measure' [ 158.186465][ T7283] xt_hashlimit: size too large, truncated to 1048576 [ 158.965441][ T7300] lo speed is unknown, defaulting to 1000 [ 159.014257][ T7300] hsr0 speed is unknown, defaulting to 1000 [ 159.023131][ T7300] lo speed is unknown, defaulting to 1000 [ 159.036577][ T7303] xt_hashlimit: size too large, truncated to 1048576 [ 159.359483][ T7322] xt_hashlimit: size too large, truncated to 1048576 [ 159.976453][ T28] audit: type=1400 audit(1772728580.937:1551): avc: denied { write } for pid=7340 comm="syz.6.1110" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 160.342583][ T7350] IPv6: sit1: Disabled Multicast RS [ 160.349042][ T7350] sit1: entered allmulticast mode [ 160.804228][ T7356] xt_hashlimit: size too large, truncated to 1048576 [ 160.883263][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'. [ 160.892619][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'. [ 160.905706][ T7357] sit1: entered allmulticast mode [ 161.354797][ T7362] loop4: detected capacity change from 0 to 256 [ 161.376520][ T7362] msdos: Bad value for 'gid' [ 161.381135][ T7362] msdos: Bad value for 'gid' [ 161.419310][ T7362] loop4: detected capacity change from 0 to 512 [ 161.705476][ T7381] lo speed is unknown, defaulting to 1000 [ 161.760105][ T7381] hsr0 speed is unknown, defaulting to 1000 [ 161.768016][ T7381] lo speed is unknown, defaulting to 1000 [ 162.140711][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1129'. [ 162.152682][ T7400] IPv6: sit1: Disabled Multicast RS [ 162.159020][ T7400] sit1: entered allmulticast mode [ 162.682988][ T7407] xt_hashlimit: size too large, truncated to 1048576 [ 162.910817][ T7435] loop6: detected capacity change from 0 to 136 [ 162.929231][ T7435] Attempt to read inode for relocated directory [ 162.943662][ T28] audit: type=1400 audit(1772728583.900:1552): avc: denied { mount } for pid=7434 comm="syz.6.1143" name="/" dev="loop6" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 163.013618][ T28] audit: type=1400 audit(1772728583.900:1553): avc: denied { unmount } for pid=6379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 163.139356][ T28] audit: type=1400 audit(1772728584.100:1554): avc: denied { setopt } for pid=7446 comm="syz.6.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.143206][ T7445] loop4: detected capacity change from 0 to 1764 [ 163.189671][ T7447] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1147'. [ 163.218858][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.225998][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.319140][ T7460] loop4: detected capacity change from 0 to 1024 [ 163.336240][ T7460] EXT4-fs: Ignoring removed orlov option [ 163.423872][ T7460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.448762][ T28] audit: type=1400 audit(1772728584.400:1555): avc: denied { setattr } for pid=7458 comm="syz.4.1151" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.492829][ T28] audit: type=1400 audit(1772728584.400:1556): avc: denied { rename } for pid=7458 comm="syz.4.1151" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.515426][ T28] audit: type=1400 audit(1772728584.400:1557): avc: denied { unlink } for pid=7458 comm="syz.4.1151" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.557986][ T28] audit: type=1400 audit(1772728584.509:1558): avc: denied { write } for pid=7457 comm="syz.6.1154" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 163.678907][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.283868][ T7481] xt_hashlimit: size too large, truncated to 1048576 [ 165.173010][ T28] audit: type=1400 audit(1772728586.117:1559): avc: denied { lock } for pid=7499 comm="syz.6.1166" path="socket:[18825]" dev="sockfs" ino=18825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 165.395990][ T7505] lo speed is unknown, defaulting to 1000 [ 165.474840][ T7505] hsr0 speed is unknown, defaulting to 1000 [ 165.491607][ T7505] lo speed is unknown, defaulting to 1000 [ 165.844554][ T7517] loop6: detected capacity change from 0 to 256 [ 165.868994][ T7517] msdos: Bad value for 'gid' [ 165.879272][ T7517] msdos: Bad value for 'gid' [ 166.674795][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1173'. [ 167.117681][ T7536] IPv6: sit1: Disabled Multicast RS [ 167.123839][ T7536] sit1: entered allmulticast mode [ 167.183839][ T28] audit: type=1326 audit(1772728588.133:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 167.296726][ T28] audit: type=1326 audit(1772728588.163:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 167.322804][ T28] audit: type=1326 audit(1772728588.163:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 167.348952][ T28] audit: type=1326 audit(1772728588.163:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 167.373668][ T28] audit: type=1326 audit(1772728588.163:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 167.401747][ T7544] loop4: detected capacity change from 0 to 1024 [ 167.425971][ T7544] EXT4-fs: Ignoring removed bh option [ 167.446712][ T28] audit: type=1326 audit(1772728588.163:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 167.493601][ T7544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.493731][ T28] audit: type=1326 audit(1772728588.163:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e31fcc799 code=0x7ffc0000 [ 167.529213][ T28] audit: type=1326 audit(1772728588.163:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e31fcc502 code=0x7ffc0000 [ 167.554119][ T28] audit: type=1326 audit(1772728588.173:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e31f8cfce code=0x7ffc0000 [ 167.615639][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.681530][ T7552] loop6: detected capacity change from 0 to 1024 [ 167.691171][ T7552] EXT4-fs: inline encryption not supported [ 167.719895][ T7552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.877944][ T7563] loop4: detected capacity change from 0 to 1024 [ 167.998214][ T7563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.132971][ T7563] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 168.145482][ T7563] File: /207/file1/file1 PID: 7563 Comm: syz.4.1185 [ 168.196146][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.461493][ T7583] loop4: detected capacity change from 0 to 512 [ 168.535609][ T7583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.581851][ T7583] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.900356][ T7588] syz.3.1190 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 168.916922][ T7588] IPv6: sit2: Disabled Multicast RS [ 168.923071][ T7588] sit2: entered allmulticast mode [ 168.930262][ T7588] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 169.104232][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1191'. [ 169.350486][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.418660][ T7600] IPv6: sit1: Disabled Multicast RS [ 169.424842][ T7600] sit1: entered allmulticast mode [ 169.572400][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.020073][ T7610] FAULT_INJECTION: forcing a failure. [ 170.020073][ T7610] name failslab, interval 1, probability 0, space 0, times 0 [ 170.048884][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: syz.6.1197 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.048915][ T7610] Tainted: [W]=WARN [ 170.048922][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.048933][ T7610] Call Trace: [ 170.048939][ T7610] [ 170.048947][ T7610] __dump_stack+0x1d/0x30 [ 170.049016][ T7610] dump_stack_lvl+0x95/0xd0 [ 170.049035][ T7610] dump_stack+0x15/0x1b [ 170.049052][ T7610] should_fail_ex+0x263/0x280 [ 170.049072][ T7610] should_failslab+0x8c/0xb0 [ 170.049090][ T7610] kmem_cache_alloc_noprof+0x66/0x400 [ 170.049109][ T7610] ? do_getname+0x2e/0x1c0 [ 170.049126][ T7610] ? mutex_lock+0x57/0x90 [ 170.049173][ T7610] do_getname+0x2e/0x1c0 [ 170.049194][ T7610] __se_sys_mknodat+0x24/0xf0 [ 170.049228][ T7610] __x64_sys_mknodat+0x55/0x70 [ 170.049273][ T7610] x64_sys_call+0x312/0x3020 [ 170.049295][ T7610] do_syscall_64+0x12c/0x370 [ 170.049315][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.049336][ T7610] RIP: 0033:0x7fae6a97c799 [ 170.049402][ T7610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.049417][ T7610] RSP: 002b:00007fae693cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 170.049434][ T7610] RAX: ffffffffffffffda RBX: 00007fae6abf5fa0 RCX: 00007fae6a97c799 [ 170.049446][ T7610] RDX: 31621907fa89d7aa RSI: 0000000000000000 RDI: ffffffffffffffff [ 170.049485][ T7610] RBP: 00007fae693cf090 R08: 0000000000000000 R09: 0000000000000000 [ 170.049547][ T7610] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 170.049561][ T7610] R13: 00007fae6abf6038 R14: 00007fae6abf5fa0 R15: 00007ffc512eb8a8 [ 170.049580][ T7610] [ 170.461896][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1199'. [ 170.548286][ T7623] lo speed is unknown, defaulting to 1000 [ 170.709656][ T7631] loop4: detected capacity change from 0 to 136 [ 170.785137][ T7623] hsr0 speed is unknown, defaulting to 1000 [ 170.793909][ T7631] Attempt to read inode for relocated directory [ 170.794132][ T7623] lo speed is unknown, defaulting to 1000 [ 171.328747][ T7638] loop6: detected capacity change from 0 to 136 [ 171.491222][ T7638] Attempt to read inode for relocated directory [ 171.565847][ T7636] syz.6.1204 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 171.608090][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.6.1204 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.608142][ T7636] Tainted: [W]=WARN [ 171.608149][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.608162][ T7636] Call Trace: [ 171.608169][ T7636] [ 171.608177][ T7636] __dump_stack+0x1d/0x30 [ 171.608204][ T7636] dump_stack_lvl+0x95/0xd0 [ 171.608269][ T7636] dump_stack+0x15/0x1b [ 171.608289][ T7636] dump_header+0x80/0x240 [ 171.608308][ T7636] oom_kill_process+0x295/0x350 [ 171.608327][ T7636] out_of_memory+0x97d/0xb80 [ 171.608365][ T7636] try_charge_memcg+0x62e/0xa10 [ 171.608401][ T7636] obj_cgroup_charge_pages+0x23/0xc0 [ 171.608481][ T7636] __memcg_kmem_charge_page+0x9e/0x170 [ 171.608505][ T7636] __alloc_frozen_pages_noprof+0x18a/0x360 [ 171.608543][ T7636] alloc_pages_mpol+0xb3/0x260 [ 171.608565][ T7636] alloc_pages_noprof+0x8f/0x130 [ 171.608588][ T7636] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 171.608658][ T7636] __kvmalloc_node_noprof+0x3d4/0x650 [ 171.608680][ T7636] ? futex_hash_allocate+0x190/0x9d0 [ 171.608729][ T7636] ? futex_hash_allocate+0x190/0x9d0 [ 171.608757][ T7636] futex_hash_allocate+0x190/0x9d0 [ 171.608829][ T7636] ? cap_task_prctl+0x13f/0x6e0 [ 171.608848][ T7636] futex_hash_prctl+0xd8/0xf0 [ 171.608876][ T7636] __se_sys_prctl+0xa3d/0x13f0 [ 171.608902][ T7636] __x64_sys_prctl+0x67/0x80 [ 171.608924][ T7636] x64_sys_call+0x2533/0x3020 [ 171.608947][ T7636] do_syscall_64+0x12c/0x370 [ 171.609014][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.609051][ T7636] RIP: 0033:0x7fae6a97c799 [ 171.609065][ T7636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.609079][ T7636] RSP: 002b:00007fae693ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 171.609097][ T7636] RAX: ffffffffffffffda RBX: 00007fae6abf6090 RCX: 00007fae6a97c799 [ 171.609112][ T7636] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 171.609129][ T7636] RBP: 00007fae6aa12bd9 R08: 0000000000000000 R09: 0000000000000000 [ 171.609214][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.609226][ T7636] R13: 00007fae6abf6128 R14: 00007fae6abf6090 R15: 00007ffc512eb8a8 [ 171.609324][ T7636] [ 171.610435][ T7636] memory: usage 307200kB, limit 307200kB, failcnt 105 [ 171.845490][ T7636] memory+swap: usage 198764kB, limit 9007199254740988kB, failcnt 0 [ 171.853509][ T7636] kmem: usage 132480kB, limit 9007199254740988kB, failcnt 0 [ 171.860789][ T7636] Memory cgroup stats for /syz6: [ 171.861384][ T7636] cache 16977920 [ 171.869987][ T7636] rss 212992 [ 171.882632][ T7636] shmem 16973824 [ 171.886218][ T7636] mapped_file 4104192 [ 171.890278][ T7636] dirty 0 [ 171.911074][ T7636] writeback 0 [ 171.914423][ T7636] workingset_refault_anon 18 [ 171.919212][ T7636] workingset_refault_file 0 [ 171.924033][ T7636] swap 50569216 [ 171.927541][ T7636] swapcached 50614272 [ 171.931766][ T7636] pgpgin 53021 [ 171.935181][ T7636] pgpgout 48813 [ 171.938694][ T7636] pgfault 43847 [ 171.942484][ T7636] pgmajfault 9 [ 171.945934][ T7636] inactive_anon 319488 [ 171.950162][ T7636] active_anon 16912384 [ 171.954826][ T7636] inactive_file 4096 [ 171.958765][ T7636] active_file 0 [ 172.043644][ T7636] unevictable 0 [ 172.047131][ T7636] hierarchical_memory_limit 314572800 [ 172.074900][ T7636] hierarchical_memsw_limit 9223372036854771712 [ 172.108838][ T7636] total_cache 16977920 [ 172.113586][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1210'. [ 172.121229][ T7636] total_rss 212992 [ 172.141252][ T7636] total_shmem 16973824 [ 172.145622][ T7636] total_mapped_file 4104192 [ 172.170920][ T7636] total_dirty 0 [ 172.181673][ T7636] total_writeback 0 [ 172.185793][ T7636] total_workingset_refault_anon 18 [ 172.191051][ T7636] total_workingset_refault_file 0 [ 172.211303][ T7636] total_swap 50569216 [ 172.215320][ T7636] total_swapcached 50614272 [ 172.222909][ T7636] total_pgpgin 53021 [ 172.241463][ T7636] total_pgpgout 48813 [ 172.245489][ T7636] total_pgfault 43847 [ 172.249491][ T7636] total_pgmajfault 9 [ 172.254930][ T7663] loop4: detected capacity change from 0 to 1024 [ 172.272048][ T7663] EXT4-fs: Ignoring removed bh option [ 172.277497][ T7636] total_inactive_anon 319488 [ 172.291527][ T7636] total_active_anon 16912384 [ 172.296166][ T7636] total_inactive_file 4096 [ 172.300609][ T7636] total_active_file 0 [ 172.304717][ T7636] total_unevictable 0 [ 172.311455][ T7636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1204,pid=7634,uid=0 [ 172.340488][ T7663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.341515][ T7636] Memory cgroup out of memory: Killed process 7636 (syz.6.1204) total-vm:100576kB, anon-rss:1428kB, file-rss:26600kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 172.424984][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.507504][ T7686] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1222'. [ 172.535580][ T7689] netlink: 'syz.6.1223': attribute type 3 has an invalid length. [ 172.596213][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1224'. [ 172.646109][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 172.646126][ T28] audit: type=1400 audit(1772728593.587:1632): avc: denied { read write } for pid=7692 comm="syz.4.1225" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.734002][ T28] audit: type=1400 audit(1772728593.587:1633): avc: denied { open } for pid=7692 comm="syz.4.1225" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.994389][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 173.059118][ T7675] syz.0.1218 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 173.073624][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.0.1218 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.073655][ T7675] Tainted: [W]=WARN [ 173.073728][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.073741][ T7675] Call Trace: [ 173.073748][ T7675] [ 173.073756][ T7675] __dump_stack+0x1d/0x30 [ 173.073784][ T7675] dump_stack_lvl+0x95/0xd0 [ 173.073808][ T7675] dump_stack+0x15/0x1b [ 173.073858][ T7675] dump_header+0x80/0x240 [ 173.073908][ T7675] oom_kill_process+0x295/0x350 [ 173.074006][ T7675] out_of_memory+0x97d/0xb80 [ 173.074025][ T7675] try_charge_memcg+0x62e/0xa10 [ 173.074068][ T7675] obj_cgroup_charge_pages+0x23/0xc0 [ 173.074092][ T7675] __memcg_kmem_charge_page+0x9e/0x170 [ 173.074163][ T7675] __alloc_frozen_pages_noprof+0x18a/0x360 [ 173.074196][ T7675] alloc_pages_mpol+0xb3/0x260 [ 173.074288][ T7675] alloc_pages_noprof+0x8f/0x130 [ 173.074317][ T7675] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 173.074374][ T7675] __kvmalloc_node_noprof+0x3d4/0x650 [ 173.074401][ T7675] ? futex_hash_allocate+0x190/0x9d0 [ 173.074490][ T7675] ? futex_hash_allocate+0x190/0x9d0 [ 173.074514][ T7675] futex_hash_allocate+0x190/0x9d0 [ 173.074617][ T7675] ? cap_task_prctl+0x13f/0x6e0 [ 173.074642][ T7675] futex_hash_prctl+0xd8/0xf0 [ 173.074682][ T7675] __se_sys_prctl+0xa3d/0x13f0 [ 173.074712][ T7675] __x64_sys_prctl+0x67/0x80 [ 173.074736][ T7675] x64_sys_call+0x2533/0x3020 [ 173.074820][ T7675] do_syscall_64+0x12c/0x370 [ 173.074839][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.074859][ T7675] RIP: 0033:0x7f2e31fcc799 [ 173.074901][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.074918][ T7675] RSP: 002b:00007f2e30a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 173.074938][ T7675] RAX: ffffffffffffffda RBX: 00007f2e32245fa0 RCX: 00007f2e31fcc799 [ 173.074951][ T7675] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 173.074963][ T7675] RBP: 00007f2e32062bd9 R08: 0000000000000000 R09: 0000000000000000 [ 173.074975][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.075073][ T7675] R13: 00007f2e32246038 R14: 00007f2e32245fa0 R15: 00007ffd796e8598 [ 173.075095][ T7675] [ 173.075159][ T7675] memory: usage 307200kB, limit 307200kB, failcnt 4551 [ 173.308320][ T7675] memory+swap: usage 313328kB, limit 9007199254740988kB, failcnt 0 [ 173.316354][ T7675] kmem: usage 244644kB, limit 9007199254740988kB, failcnt 0 [ 173.323669][ T7675] Memory cgroup stats for /syz0: [ 173.323918][ T7675] cache 63447040 [ 173.332994][ T7675] rss 552960 [ 173.336201][ T7675] shmem 63447040 [ 173.339742][ T7675] mapped_file 0 [ 173.343360][ T7675] dirty 0 [ 173.346291][ T7675] writeback 0 [ 173.349570][ T7675] workingset_refault_anon 122 [ 173.354272][ T7675] workingset_refault_file 4267 [ 173.359124][ T7675] swap 6275072 [ 173.378586][ T7675] swapcached 57610240 [ 173.382698][ T7675] pgpgin 419563 [ 173.386428][ T7675] pgpgout 403924 [ 173.390080][ T7675] pgfault 179064 [ 173.393863][ T7675] pgmajfault 79 [ 173.409451][ T7675] inactive_anon 892928 [ 173.413744][ T7675] active_anon 63160320 [ 173.418133][ T7675] inactive_file 0 [ 173.421916][ T7675] active_file 4096 [ 173.466238][ T7721] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1236'. [ 173.506900][ T7719] lo speed is unknown, defaulting to 1000 [ 173.545279][ T7675] unevictable 0 [ 173.548786][ T7675] hierarchical_memory_limit 314572800 [ 173.566248][ T7726] loop4: detected capacity change from 0 to 1024 [ 173.719586][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 173.948094][ T7726] EXT4-fs: Ignoring removed orlov option [ 173.956210][ T7675] hierarchical_memsw_limit 9223372036854771712 [ 173.962400][ T7675] total_cache 63447040 [ 173.976966][ T7719] hsr0 speed is unknown, defaulting to 1000 [ 173.985962][ T7726] EXT4-fs: inline encryption not supported [ 174.001931][ T7675] total_rss 552960 [ 174.008164][ T7719] lo speed is unknown, defaulting to 1000 [ 174.014568][ T7675] total_shmem 63447040 [ 174.023220][ T7675] total_mapped_file 0 [ 174.047286][ T7726] EXT4-fs (loop4): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 174.047753][ T7675] total_dirty 0 [ 174.113389][ T7675] total_writeback 0 [ 174.117350][ T7675] total_workingset_refault_anon 122 [ 174.122611][ T7675] total_workingset_refault_file 4267 [ 174.128051][ T7675] total_swap 6275072 [ 174.132002][ T7675] total_swapcached 57610240 [ 174.139649][ T7675] total_pgpgin 419563 [ 174.150133][ T7675] total_pgpgout 403924 [ 174.210152][ T7675] total_pgfault 179064 [ 174.228700][ T7675] total_pgmajfault 79 [ 174.232769][ T7675] total_inactive_anon 892928 [ 174.240484][ T7675] total_active_anon 63160320 [ 174.245218][ T7675] total_inactive_file 0 [ 174.526907][ T7675] total_active_file 4096 [ 174.542359][ T7675] total_unevictable 0 [ 174.576365][ T7675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.38,pid=3623,uid=0 [ 174.703115][ T7675] Memory cgroup out of memory: Killed process 3623 (syz.0.38) total-vm:79692kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 174.830602][ T7674] syz.0.1218 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 174.860518][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.0.1218 Tainted: G W syzkaller #0 PREEMPT(full) [ 174.860554][ T7674] Tainted: [W]=WARN [ 174.860562][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.860575][ T7674] Call Trace: [ 174.860613][ T7674] [ 174.860621][ T7674] __dump_stack+0x1d/0x30 [ 174.860652][ T7674] dump_stack_lvl+0x95/0xd0 [ 174.860676][ T7674] dump_stack+0x15/0x1b [ 174.860773][ T7674] dump_header+0x80/0x240 [ 174.860796][ T7674] oom_kill_process+0x295/0x350 [ 174.860843][ T7674] out_of_memory+0x97d/0xb80 [ 174.860867][ T7674] try_charge_memcg+0x62e/0xa10 [ 174.860949][ T7674] __mem_cgroup_charge+0x65/0x150 [ 174.860978][ T7674] filemap_add_folio+0x110/0x350 [ 174.861000][ T7674] __filemap_get_folio_mpol+0x326/0x680 [ 174.861027][ T7674] filemap_fault+0x486/0xb90 [ 174.861088][ T7674] ? probe_sched_wakeup+0x84/0xa0 [ 174.861114][ T7674] ? __rcu_read_lock+0x36/0x50 [ 174.861132][ T7674] __do_fault+0xbc/0x200 [ 174.861151][ T7674] handle_mm_fault+0xfa1/0x3020 [ 174.861186][ T7674] ? vma_start_read+0x1c7/0x2c0 [ 174.861224][ T7674] do_user_addr_fault+0x62f/0x1050 [ 174.861267][ T7674] ? irqentry_exit+0x3c/0x520 [ 174.861301][ T7674] ? trace_page_fault_user+0x1f/0xe0 [ 174.861327][ T7674] exc_page_fault+0x62/0xa0 [ 174.861363][ T7674] asm_exc_page_fault+0x26/0x30 [ 174.861380][ T7674] RIP: 0033:0x7f2e31ea0f20 [ 174.861397][ T7674] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 81 93 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 174.861416][ T7674] RSP: 002b:00007ffd796e8630 EFLAGS: 00010202 [ 174.861499][ T7674] RAX: 0000001b3392085c RBX: ffffffffffffc85c RCX: ffffffff819206ed [ 174.861511][ T7674] RDX: 0000001b33920858 RSI: 0000000000000004 RDI: 00007f2e32d75720 [ 174.861523][ T7674] RBP: 0000000000000000 R08: 00007f2e32230000 R09: 00007f2e32232000 [ 174.861537][ T7674] R10: 00000000819206f1 R11: 000000000000000e R12: 0000000000000000 [ 174.861550][ T7674] R13: 000000000007ffff R14: ffffffff81920aff R15: 00007f2e32d75720 [ 174.861563][ T7674] ? policy_nodemask+0x1f/0x5e0 [ 174.861612][ T7674] ? weighted_interleave_nodes+0x1bd/0x2f0 [ 174.861641][ T7674] [ 174.863559][ T7674] memory: usage 307200kB, limit 307200kB, failcnt 4666 [ 175.130674][ T7674] memory+swap: usage 313160kB, limit 9007199254740988kB, failcnt 0 [ 175.138740][ T7674] kmem: usage 244544kB, limit 9007199254740988kB, failcnt 0 [ 175.147985][ T7674] Memory cgroup stats for /syz0: [ 175.148581][ T7674] cache 63447040 [ 175.157218][ T7674] rss 552960 [ 175.160629][ T7674] shmem 63447040 [ 175.164494][ T7674] mapped_file 0 [ 175.168509][ T7674] dirty 0 [ 175.171516][ T7674] writeback 0 [ 175.174948][ T7674] workingset_refault_anon 122 [ 175.179720][ T7674] workingset_refault_file 4267 [ 175.184574][ T7674] swap 6103040 [ 175.188022][ T7674] swapcached 57610240 [ 175.192045][ T7674] pgpgin 419563 [ 175.195601][ T7674] pgpgout 403924 [ 175.199179][ T7674] pgfault 179064 [ 175.202763][ T7674] pgmajfault 79 [ 175.220242][ T7674] inactive_anon 63201280 [ 175.224857][ T7674] active_anon 851968 [ 175.229016][ T7674] inactive_file 0 [ 175.233091][ T7674] active_file 4096 [ 175.237522][ T7674] unevictable 0 [ 175.241078][ T7674] hierarchical_memory_limit 314572800 [ 175.251631][ T7674] hierarchical_memsw_limit 9223372036854771712 [ 175.262547][ T7674] total_cache 63447040 [ 175.282848][ T28] audit: type=1400 audit(1772728596.224:1634): avc: denied { ioctl } for pid=7743 comm="syz.6.1244" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 175.308576][ T7674] total_rss 552960 [ 175.312396][ T7674] total_shmem 63447040 [ 175.318914][ T7674] total_mapped_file 0 [ 175.322921][ T7674] total_dirty 0 [ 175.344469][ T7674] total_writeback 0 [ 175.348334][ T7674] total_workingset_refault_anon 122 [ 175.363252][ T7674] total_workingset_refault_file 4267 [ 175.374296][ T7674] total_swap 6103040 [ 175.378218][ T7674] total_swapcached 57610240 [ 175.414803][ T7674] total_pgpgin 419563 [ 175.418819][ T7674] total_pgpgout 403924 [ 175.422962][ T7674] total_pgfault 179064 [ 175.427449][ T7674] total_pgmajfault 79 [ 175.431539][ T7674] total_inactive_anon 63201280 [ 175.436679][ T7674] total_active_anon 851968 [ 175.441169][ T7674] total_inactive_file 0 [ 175.445935][ T7674] total_active_file 4096 [ 175.450216][ T7674] total_unevictable 0 [ 175.454209][ T7674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1218,pid=7674,uid=0 [ 175.472645][ T7754] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1247'. [ 175.483817][ T7753] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1244'. [ 175.519546][ T7674] Memory cgroup out of memory: Killed process 7674 (syz.0.1218) total-vm:94292kB, anon-rss:1412kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 176.078332][ T7764] IPv6: sit1: Disabled Multicast RS [ 176.084531][ T7764] sit1: entered allmulticast mode [ 178.265705][ T7796] loop4: detected capacity change from 0 to 1024 [ 178.348744][ T7796] EXT4-fs: Ignoring removed orlov option [ 178.432369][ T7796] EXT4-fs: inline encryption not supported [ 178.442737][ T7796] EXT4-fs (loop4): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 178.676756][ T28] audit: type=1400 audit(1772728599.482:1635): avc: denied { read write } for pid=7803 comm="syz.6.1262" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 178.712452][ T28] audit: type=1400 audit(1772728599.482:1636): avc: denied { open } for pid=7803 comm="syz.6.1262" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.231219][ T28] audit: type=1400 audit(1772728599.612:1637): avc: denied { ioctl } for pid=7803 comm="syz.6.1262" path="socket:[20760]" dev="sockfs" ino=20760 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.993929][ T7833] xt_hashlimit: size too large, truncated to 1048576 [ 180.182061][ T7841] loop6: detected capacity change from 0 to 1024 [ 180.249222][ T7841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.354575][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.407839][ T7847] loop6: detected capacity change from 0 to 256 [ 180.430889][ T7849] xt_SECMARK: invalid mode: 2 [ 180.437356][ T28] audit: type=1326 audit(1772728601.361:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31574cc799 code=0x7ffc0000 [ 180.465202][ T7847] FAT-fs (loop6): bogus number of FAT sectors [ 180.471592][ T7847] FAT-fs (loop6): Can't find a valid FAT filesystem [ 180.478684][ T28] audit: type=1326 audit(1772728601.361:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31574cc799 code=0x7ffc0000 [ 180.535081][ T28] audit: type=1326 audit(1772728601.361:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31574cc799 code=0x7ffc0000 [ 180.585995][ T7857] loop6: detected capacity change from 0 to 256 [ 180.586480][ T7830] syz.4.1271 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 180.603339][ T7857] msdos: Bad value for 'gid' [ 180.606720][ T28] audit: type=1326 audit(1772728601.361:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f31574cc799 code=0x7ffc0000 [ 180.623678][ T7857] msdos: Bad value for 'gid' [ 180.638540][ T7830] CPU: 0 UID: 0 PID: 7830 Comm: syz.4.1271 Tainted: G W syzkaller #0 PREEMPT(full) [ 180.638607][ T7830] Tainted: [W]=WARN [ 180.638614][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.638637][ T7830] Call Trace: [ 180.638651][ T7830] [ 180.638660][ T7830] __dump_stack+0x1d/0x30 [ 180.638734][ T7830] dump_stack_lvl+0x95/0xd0 [ 180.638757][ T7830] dump_stack+0x15/0x1b [ 180.638778][ T7830] dump_header+0x80/0x240 [ 180.638846][ T7830] oom_kill_process+0x295/0x350 [ 180.638869][ T7830] out_of_memory+0x97d/0xb80 [ 180.638891][ T7830] try_charge_memcg+0x62e/0xa10 [ 180.638956][ T7830] obj_cgroup_charge_pages+0x23/0xc0 [ 180.638983][ T7830] __memcg_kmem_charge_page+0x9e/0x170 [ 180.639010][ T7830] __alloc_frozen_pages_noprof+0x18a/0x360 [ 180.639050][ T7830] alloc_pages_mpol+0xb3/0x260 [ 180.639078][ T7830] alloc_pages_noprof+0x8f/0x130 [ 180.639104][ T7830] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 180.639146][ T7830] __kvmalloc_node_noprof+0x3d4/0x650 [ 180.639170][ T7830] ? futex_hash_allocate+0x190/0x9d0 [ 180.639194][ T7830] ? futex_hash_allocate+0x190/0x9d0 [ 180.639294][ T7830] futex_hash_allocate+0x190/0x9d0 [ 180.639322][ T7830] ? cap_task_prctl+0x13f/0x6e0 [ 180.639345][ T7830] futex_hash_prctl+0xd8/0xf0 [ 180.639370][ T7830] __se_sys_prctl+0xa3d/0x13f0 [ 180.639419][ T7830] __x64_sys_prctl+0x67/0x80 [ 180.639477][ T7830] x64_sys_call+0x2533/0x3020 [ 180.639502][ T7830] do_syscall_64+0x12c/0x370 [ 180.639573][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.639599][ T7830] RIP: 0033:0x7f21bde1c799 [ 180.639617][ T7830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.639634][ T7830] RSP: 002b:00007f21bc86f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 180.639662][ T7830] RAX: ffffffffffffffda RBX: 00007f21be095fa0 RCX: 00007f21bde1c799 [ 180.639677][ T7830] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 180.639736][ T7830] RBP: 00007f21bdeb2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 180.639748][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.639790][ T7830] R13: 00007f21be096038 R14: 00007f21be095fa0 R15: 00007ffc5172b318 [ 180.639908][ T7830] [ 180.639958][ T7830] memory: usage 307200kB, limit 307200kB, failcnt 707 [ 180.778072][ T28] audit: type=1326 audit(1772728601.361:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31574cc799 code=0x7ffc0000 [ 180.781302][ T7830] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 180.785096][ T28] audit: type=1326 audit(1772728601.361:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f31574cc799 code=0x7ffc0000 [ 180.790444][ T7830] kmem: usage 241120kB, limit 9007199254740988kB, failcnt 0 [ 180.795139][ T28] audit: type=1326 audit(1772728601.361:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31574cc799 code=0x7ffc0000 [ 180.814664][ T7830] Memory cgroup stats for [ 180.839264][ T7860] loop6: detected capacity change from 0 to 512 [ 180.864891][ T7830] /syz4 [ 180.972494][ T7860] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 180.984816][ T7860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 181.020406][ T7860] EXT4-fs (loop6): orphan cleanup on readonly fs [ 181.026814][ T7860] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.1279: iget: bad i_size value: 12154761577498 [ 181.039848][ T7860] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.040068][ T7860] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1279: couldn't read orphan inode 13 (err -117) [ 181.042815][ T7830] : [ 181.049275][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 181.049293][ C1] EXT4-fs (loop6): initial error at time 1772728601: ext4_orphan_get:1391: inode 13 [ 181.079340][ C1] EXT4-fs (loop6): last error at time 1772728601: ext4_orphan_get:1391: inode 13 [ 181.089179][ T7860] loop6: lost filesystem error report for type 5 error -117 [ 181.089639][ T7860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.113919][ T7830] cache 67354624 [ 181.117483][ T7830] rss 303104 [ 181.120997][ T7830] shmem 67354624 [ 181.124529][ T7830] mapped_file 0 [ 181.127976][ T7830] dirty 0 [ 181.131287][ T7830] writeback 0 [ 181.134649][ T7830] workingset_refault_anon 200 [ 181.139564][ T7830] workingset_refault_file 3287 [ 181.144354][ T7830] swap 0 [ 181.147266][ T7830] swapcached 24203264 [ 181.151443][ T7830] pgpgin 220049 [ 181.154985][ T7830] pgpgout 203529 [ 181.158689][ T7830] pgfault 182980 [ 181.162241][ T7830] pgmajfault 187 [ 181.166205][ T7830] inactive_anon 172032 [ 181.170548][ T7830] active_anon 67485696 [ 181.174635][ T7830] inactive_file 0 [ 181.178648][ T7830] active_file 8192 [ 181.182396][ T7830] unevictable 0 [ 181.185908][ T7830] hierarchical_memory_limit 314572800 [ 181.192844][ T7830] hierarchical_memsw_limit 9223372036854771712 [ 181.199377][ T7830] total_cache 67354624 [ 181.203579][ T7830] total_rss 303104 [ 181.207338][ T7830] total_shmem 67354624 [ 181.211667][ T7830] total_mapped_file 0 [ 181.215705][ T7830] total_dirty 0 [ 181.219373][ T7830] total_writeback 0 [ 181.223306][ T7860] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 181.223501][ T7830] total_workingset_refault_anon 200 [ 181.231537][ T7860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 181.242638][ T7830] total_workingset_refault_file 3287 [ 181.258571][ T7830] total_swap 0 [ 181.264420][ T7830] total_swapcached 24203264 [ 181.274200][ T7830] total_pgpgin 220049 [ 181.278523][ T7830] total_pgpgout 203529 [ 181.283326][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.283379][ T7830] total_pgfault 182980 [ 181.297126][ T7830] total_pgmajfault 187 [ 181.307136][ T7830] total_inactive_anon 172032 [ 181.312004][ T7830] total_active_anon 67485696 [ 181.319166][ T7830] total_inactive_file 0 [ 181.325731][ T7830] total_active_file 8192 [ 181.368201][ T7830] total_unevictable 0 [ 181.372350][ T7830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1271,pid=7829,uid=0 [ 181.389106][ T7830] Memory cgroup out of memory: Killed process 7829 (syz.4.1271) total-vm:96340kB, anon-rss:1416kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 181.580267][ T7889] loop6: detected capacity change from 0 to 136 [ 181.591604][ T7890] xt_hashlimit: size too large, truncated to 1048576 [ 181.664422][ T7889] Attempt to read inode for relocated directory [ 181.788278][ T7896] loop4: detected capacity change from 0 to 136 [ 181.849175][ T7896] Attempt to read inode for relocated directory [ 182.208483][ T7908] netlink: 'syz.0.1296': attribute type 12 has an invalid length. [ 182.272552][ T7888] syz.2.1289 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 182.318590][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.2.1289 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.318647][ T7888] Tainted: [W]=WARN [ 182.318655][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.318667][ T7888] Call Trace: [ 182.318674][ T7888] [ 182.318682][ T7888] __dump_stack+0x1d/0x30 [ 182.318710][ T7888] dump_stack_lvl+0x95/0xd0 [ 182.318761][ T7888] dump_stack+0x15/0x1b [ 182.318781][ T7888] dump_header+0x80/0x240 [ 182.318803][ T7888] oom_kill_process+0x295/0x350 [ 182.318861][ T7888] out_of_memory+0x97d/0xb80 [ 182.318932][ T7888] try_charge_memcg+0x62e/0xa10 [ 182.318967][ T7888] obj_cgroup_charge_pages+0x23/0xc0 [ 182.319057][ T7888] __memcg_kmem_charge_page+0x9e/0x170 [ 182.319083][ T7888] __alloc_frozen_pages_noprof+0x18a/0x360 [ 182.319111][ T7888] alloc_pages_mpol+0xb3/0x260 [ 182.319139][ T7888] alloc_pages_noprof+0x8f/0x130 [ 182.319176][ T7888] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 182.319206][ T7888] __kvmalloc_node_noprof+0x3d4/0x650 [ 182.319228][ T7888] ? futex_hash_allocate+0x190/0x9d0 [ 182.319282][ T7888] ? futex_hash_allocate+0x190/0x9d0 [ 182.319309][ T7888] futex_hash_allocate+0x190/0x9d0 [ 182.319332][ T7888] ? cap_task_prctl+0x13f/0x6e0 [ 182.319408][ T7888] futex_hash_prctl+0xd8/0xf0 [ 182.319429][ T7888] __se_sys_prctl+0xa3d/0x13f0 [ 182.319453][ T7888] __x64_sys_prctl+0x67/0x80 [ 182.319496][ T7888] x64_sys_call+0x2533/0x3020 [ 182.319523][ T7888] do_syscall_64+0x12c/0x370 [ 182.319541][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.319561][ T7888] RIP: 0033:0x7f31574cc799 [ 182.319576][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.319591][ T7888] RSP: 002b:00007f3155f27028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 182.319646][ T7888] RAX: ffffffffffffffda RBX: 00007f3157745fa0 RCX: 00007f31574cc799 [ 182.319661][ T7888] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 182.319674][ T7888] RBP: 00007f3157562bd9 R08: 0000000000000000 R09: 0000000000000000 [ 182.319688][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.319718][ T7888] R13: 00007f3157746038 R14: 00007f3157745fa0 R15: 00007ffe6bd7b1d8 [ 182.319747][ T7888] [ 182.558830][ T7917] xt_hashlimit: size too large, truncated to 1048576 [ 182.683924][ T7888] memory: usage 270280kB, limit 307200kB, failcnt 629 [ 182.700552][ T7888] memory+swap: usage 252832kB, limit 9007199254740988kB, failcnt 0 [ 182.717294][ T7888] kmem: usage 234300kB, limit 9007199254740988kB, failcnt 0 [ 182.729843][ T7888] Memory cgroup stats for /syz2: [ 182.730187][ T7888] cache 65536 [ 182.739569][ T7888] rss 204800 [ 182.742811][ T7888] shmem 65536 [ 182.746127][ T7888] mapped_file 0 [ 182.750189][ T7888] dirty 0 [ 182.753268][ T7888] writeback 0 [ 182.756650][ T7888] workingset_refault_anon 340 [ 182.777666][ T7888] workingset_refault_file 2986 [ 182.783561][ T7888] swap 503808 [ 182.791230][ T7888] swapcached 962560 [ 182.798334][ T7888] pgpgin 260993 [ 182.804639][ T7888] pgpgout 260927 [ 182.811710][ T7888] pgfault 156107 [ 182.816173][ T7888] pgmajfault 200 [ 182.820038][ T7888] inactive_anon 0 [ 182.823941][ T7888] active_anon 270336 [ 182.827923][ T7888] inactive_file 0 [ 182.832299][ T7888] active_file 0 [ 182.835933][ T7888] unevictable 0 [ 182.839855][ T7888] hierarchical_memory_limit 314572800 [ 182.845442][ T7888] hierarchical_memsw_limit 9223372036854771712 [ 182.866228][ T7888] total_cache 65536 [ 182.870261][ T7888] total_rss 204800 [ 182.874182][ T7888] total_shmem 65536 [ 182.878387][ T7888] total_mapped_file 0 [ 182.882922][ T7888] total_dirty 0 [ 182.886503][ T7888] total_writeback 0 [ 182.890975][ T7888] total_workingset_refault_anon 340 [ 182.896387][ T7888] total_workingset_refault_file 2986 [ 182.902153][ T7888] total_swap 503808 [ 182.906023][ T7888] total_swapcached 962560 [ 182.920185][ T7927] xt_hashlimit: size too large, truncated to 1048576 [ 182.931374][ T7888] total_pgpgin 260993 [ 182.938659][ T7888] total_pgpgout 260927 [ 182.946103][ T7888] total_pgfault 156107 [ 182.954702][ T7888] total_pgmajfault 200 [ 182.963250][ T7888] total_inactive_anon 0 [ 182.969422][ T7888] total_active_anon 270336 [ 182.978275][ T7888] total_inactive_file 0 [ 182.986056][ T7888] total_active_file 0 [ 182.992288][ T7888] total_unevictable 0 [ 183.002914][ T7888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1289,pid=7886,uid=0 [ 183.032106][ T7888] Memory cgroup out of memory: Killed process 7886 (syz.2.1289) total-vm:96340kB, anon-rss:1412kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 183.081281][ T7922] loop6: detected capacity change from 0 to 1024 [ 183.088795][ T7922] EXT4-fs: Ignoring removed bh option [ 183.111895][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1306'. [ 183.125798][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1306'. [ 183.138521][ T7922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.155890][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1306'. [ 183.234780][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.301235][ T7944] lo speed is unknown, defaulting to 1000 [ 183.491290][ T7957] loop6: detected capacity change from 0 to 512 [ 183.507000][ T7944] hsr0 speed is unknown, defaulting to 1000 [ 183.592609][ T7944] lo speed is unknown, defaulting to 1000 [ 183.911492][ T7957] EXT4-fs (loop6): failed to initialize system zone (-117) [ 183.918905][ T7957] EXT4-fs (loop6): mount failed [ 184.505541][ T7973] futex_wake_op: syz.0.1319 tries to shift op by 32; fix this program [ 186.035763][ T23] lo speed is unknown, defaulting to 1000 [ 186.284055][ T8012] loop6: detected capacity change from 0 to 1024 [ 186.317934][ T7991] syz.3.1326 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 186.332259][ T3295] ================================================================== [ 186.340358][ T3295] BUG: KCSAN: data-race in set_nlink / set_nlink [ 186.346697][ T3295] [ 186.349014][ T3295] read to 0xffff888107ce2780 of 4 bytes by task 2998 on cpu 1: [ 186.356552][ T3295] set_nlink+0x29/0xb0 [ 186.360631][ T3295] kernfs_iop_permission+0x1e2/0x220 [ 186.361606][ T7991] CPU: 1 UID: 0 PID: 7991 Comm: syz.3.1326 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.361716][ T7991] Tainted: [W]=WARN [ 186.361723][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.361736][ T7991] Call Trace: [ 186.361743][ T7991] [ 186.361751][ T7991] __dump_stack+0x1d/0x30 [ 186.361776][ T7991] dump_stack_lvl+0x95/0xd0 [ 186.361799][ T7991] dump_stack+0x15/0x1b [ 186.361839][ T7991] dump_header+0x80/0x240 [ 186.361862][ T7991] oom_kill_process+0x295/0x350 [ 186.361942][ T7991] out_of_memory+0x97d/0xb80 [ 186.362012][ T7991] try_charge_memcg+0x62e/0xa10 [ 186.362049][ T7991] obj_cgroup_charge_pages+0x23/0xc0 [ 186.362075][ T7991] __memcg_kmem_charge_page+0x9e/0x170 [ 186.362155][ T7991] __alloc_frozen_pages_noprof+0x18a/0x360 [ 186.362198][ T7991] alloc_pages_mpol+0xb3/0x260 [ 186.362225][ T7991] alloc_pages_noprof+0x8f/0x130 [ 186.362311][ T7991] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 186.362374][ T7991] __kvmalloc_node_noprof+0x3d4/0x650 [ 186.362398][ T7991] ? futex_hash_allocate+0x190/0x9d0 [ 186.362516][ T7991] ? futex_hash_allocate+0x190/0x9d0 [ 186.362544][ T7991] futex_hash_allocate+0x190/0x9d0 [ 186.362570][ T7991] ? cap_task_prctl+0x13f/0x6e0 [ 186.362619][ T7991] futex_hash_prctl+0xd8/0xf0 [ 186.362647][ T7991] __se_sys_prctl+0xa3d/0x13f0 [ 186.362753][ T7991] __x64_sys_prctl+0x67/0x80 [ 186.362798][ T7991] x64_sys_call+0x2533/0x3020 [ 186.362823][ T7991] do_syscall_64+0x12c/0x370 [ 186.362903][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.362924][ T7991] RIP: 0033:0x7f3cc5a3c799 [ 186.362957][ T7991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.363029][ T7991] RSP: 002b:00007f3cc448f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 186.363049][ T7991] RAX: ffffffffffffffda RBX: 00007f3cc5cb5fa0 RCX: 00007f3cc5a3c799 [ 186.363125][ T7991] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 186.363138][ T7991] RBP: 00007f3cc5ad2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 186.363151][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.363163][ T7991] R13: 00007f3cc5cb6038 R14: 00007f3cc5cb5fa0 R15: 00007ffe54b3b698 [ 186.363183][ T7991] [ 186.371075][ T7991] memory: usage 266640kB, limit 307200kB, failcnt 352 [ 186.376736][ T3295] inode_permission+0x31f/0x3b0 [ 186.381311][ T7991] memory+swap: usage 334492kB, limit 9007199254740988kB, failcnt 0 [ 186.390706][ T3295] link_path_walk+0x779/0xe30 [ 186.422028][ T7991] kmem: usage 198592kB, limit 9007199254740988kB, failcnt 0 [ 186.423551][ T3295] path_lookupat+0x8c/0x500 [ 186.430590][ T7991] Memory cgroup stats for [ 186.433664][ T3295] filename_lookup+0x190/0x390 [ 186.433691][ T3295] vfs_statx+0x96/0x170 [ 186.433711][ T3295] vfs_fstatat+0x118/0x170 [ 186.433730][ T3295] __se_sys_newfstatat+0x55/0x3e0 [ 186.433751][ T3295] __x64_sys_newfstatat+0x55/0x70 [ 186.444440][ T7991] /syz3 [ 186.444987][ T3295] x64_sys_call+0x2c64/0x3020 [ 186.463913][ T7991] : [ 186.465976][ T3295] do_syscall_64+0x12c/0x370 [ 186.488094][ T7991] cache 32825344 [ 186.491114][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.491138][ T3295] [ 186.491144][ T3295] write to 0xffff888107ce2780 of 4 bytes by task 3295 on cpu 0: [ 186.506907][ T7991] rss 385024 [ 186.509687][ T3295] set_nlink+0x99/0xb0 [ 186.533089][ T7991] shmem 32821248 [ 186.539564][ T3295] kernfs_iop_permission+0x1e2/0x220 [ 186.539595][ T3295] inode_permission+0x31f/0x3b0 [ 186.539614][ T3295] link_path_walk+0x779/0xe30 [ 186.539635][ T3295] path_openat+0x1c6/0x2050 [ 186.717917][ T3295] do_file_open+0x16c/0x290 [ 186.722421][ T3295] do_sys_openat2+0x94/0x130 [ 186.727000][ T3295] __x64_sys_openat+0xf2/0x120 [ 186.731764][ T3295] x64_sys_call+0x1e39/0x3020 [ 186.736436][ T3295] do_syscall_64+0x12c/0x370 [ 186.741014][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.746894][ T3295] [ 186.749201][ T3295] value changed: 0x00000008 -> 0x00000009 [ 186.754899][ T3295] [ 186.757211][ T3295] Reported by Kernel Concurrency Sanitizer on: [ 186.763353][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 186.773764][ T3295] Tainted: [W]=WARN [ 186.777562][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.787620][ T3295] ================================================================== [ 186.839101][ T7991] mapped_file 4096 [ 186.865485][ T7991] dirty 0 [ 186.881467][ T7991] writeback 0 [ 186.890840][ T7991] workingset_refault_anon 0 [ 186.896078][ T8012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.912481][ T7991] workingset_refault_file 489 [ 186.940051][ T7991] swap 70545408 [ 186.954137][ T7991] swapcached 70545408 [ 186.970359][ T7991] pgpgin 278566 [ 186.974080][ T7991] pgpgout 270458 [ 186.977633][ T7991] pgfault 168678 [ 186.990772][ T7991] pgmajfault 34 [ 186.996479][ T6379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.005716][ T7991] inactive_anon 434176 [ 187.009792][ T7991] active_anon 32772096 [ 187.014750][ T7991] inactive_file 0 [ 187.018426][ T7991] active_file 4096 [ 187.031276][ T7991] unevictable 0 [ 187.034835][ T7991] hierarchical_memory_limit 314572800 [ 187.040270][ T7991] hierarchical_memsw_limit 9223372036854771712 [ 187.049954][ T7991] total_cache 32825344 [ 187.057086][ T7991] total_rss 385024 [ 187.066391][ T7991] total_shmem 32821248 [ 187.074318][ T7991] total_mapped_file 4096 [ 187.078602][ T7991] total_dirty 0 [ 187.082461][ T7991] total_writeback 0 [ 187.086354][ T7991] total_workingset_refault_anon 0 [ 187.091840][ T7991] total_workingset_refault_file 489 [ 187.097085][ T7991] total_swap 70545408 [ 187.101225][ T7991] total_swapcached 70545408 [ 187.106079][ T7991] total_pgpgin 278566 [ 187.110077][ T7991] total_pgpgout 270458 [ 187.114384][ T7991] total_pgfault 168678 [ 187.118437][ T7991] total_pgmajfault 34 [ 187.122520][ T7991] total_inactive_anon 434176 [ 187.127108][ T7991] total_active_anon 32772096 [ 187.131777][ T7991] total_inactive_file 0 [ 187.135931][ T7991] total_active_file 4096 [ 187.140171][ T7991] total_unevictable 0 [ 187.144254][ T7991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.463,pid=4978,uid=0 [ 187.159007][ T7991] Memory cgroup out of memory: Killed process 4978 (syz.3.463) total-vm:98528kB, anon-rss:1224kB, file-rss:24576kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:0