last executing test programs: 12.392277229s ago: executing program 1 (id=555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000400)='./file1\x00', 0x2008800, &(0x7f0000000280), 0x3, 0x651, &(0x7f00000014c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10632, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x25]}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000000)=0xfffffffd, 0x4) creat(&(0x7f0000000080)='./file1\x00', 0xa0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x5, 0x81, {{0x46, 0x4, 0x2, 0x7, 0x118, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2e}, {[@cipso={0x86, 0x29, 0x3, [{0x5, 0xa, "0b87a7fc1bebdd03"}, {0x2, 0x2}, {0x5, 0x7, "f80afa139d"}, {0x0, 0x10, "5501ae63a7f50e276cc69dfa245a"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x79, 0xffffffffffffffff, [{0x0, 0x9, "04a97d2b29825d"}, {0x7, 0xd, "9b685c0cd157b6792b87df"}, {0x6, 0xd, "7d13d141c0c398604074f0"}, {0x2, 0xf, "d225d31e144bb28307776b1374"}, {0x5, 0x12, "ceae19e142eacf12669104d510a93be4"}, {0x5, 0x6, "c39fd8d1"}, {0x7, 0xa, "d362b983e084d195"}, {0x7, 0xf, "7c18fa1cb67e5b8db477602eea"}, {0x2, 0x10, "83193ad7ff55650deb3b6d84f1e0"}]}, @lsrr={0x83, 0xf, 0xc0, [@rand_addr=0x64010101, @multicast2, @multicast1]}, @generic={0x0, 0xf, "9ade15bc9126ba70d484f453a9"}, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0x7, [{@private=0xa010100, 0x2}, {@local, 0xaf9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}, @generic={0x89, 0x10, "33add708afcb548a3fb0ef104c26"}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x2, [0x4, 0x2000, 0x40, 0xfffffeb8]}]}}}}}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0xc4040, 0xbac6788ba625d305, 0x4}, 0x18) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000001a40)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0xf, @mcast1, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x6}, &(0x7f00000000c0)=0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r11, 0x74688, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x200088c2) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001d0004002cbd7000fcdbdf2507000000", @ANYRES32=r7, @ANYBLOB="0000050914000100fe8000000000a4f4f9908ea4c53c9d3e067d0000000000000000004208000a00070000000a000200aaaaaaaaaabb000008000a008001000005000c000900000008000f000100000008000f000000000008000d0003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 11.434665074s ago: executing program 1 (id=561): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={&(0x7f0000000300)="c8cfe98b7b36f96581651c93ab261296083acf50d33f21e7005b02d805c227c0d61a6e7031e77b56ac4be3afe47b5f1309dcb527df1c7c74c2cfb2b8dd665c48356c81d3bc706bc875d3c9135c80f6053f54b37ca3e09692ff7ea21d4f9c703c6b5e90ac0f5abfafba51097eea2edf6a4c3f1b1e13998437a24c0a0dce108819f47ed1e12662f5973423d2c182b84f5b481d7e8f40fe5095abea0a7d77779d2015f8ba7891a5bcfa641b54e08ce5d466614bac719b29d0753246c79cb083dc964de060490f1ad1c5", &(0x7f0000000400)="384c75450a8527e276bce8ed095832c94e128f0199741d7ade006b08abe6b45937eb4a8100438d9c"}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0xd9e4, 0x3ff, 0x3, 0x2, 0x3}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 11.401216835s ago: executing program 1 (id=563): perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x800, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040810) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3eaa}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x30018}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x87}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000100)={{r8}, 0x7, 0x10, 0x7ff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES8=r7, @ANYRES32=r5], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x4000) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0xfffffffffffffffd, 0xfffffffffffffffe, 0x7}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.008351146s ago: executing program 1 (id=564): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'security.', '!-\x00'}, 0x0, 0x0, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) socket$kcm(0x11, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x320, 0xfffffffffffffffd}, 0x50c, 0x0, 0xe723, 0x7, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xdfffffffffffffbf, 0xffffffffffffffff, 0xb) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10482, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) fgetxattr(r5, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', 0x0, 0xdeff) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, 0x0, 0x0) shutdown(r2, 0x2) 10.677945044s ago: executing program 0 (id=567): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_codel={{}, {0x0, 0x2, [@TCA_CODEL_ECN, @TCA_CODEL_LIMIT={0x0, 0x2, 0xa}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0xfffffffc}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0x16d}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0x3}, @TCA_CODEL_INTERVAL={0x0, 0x3, 0xe}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x240008e4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226f"]) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) 7.819074701s ago: executing program 3 (id=577): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x2, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$FITHAW(r2, 0xc0045878) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7ff}, @TCA_CT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) lsm_get_self_attr(0x67, &(0x7f0000000080)={0x0, 0x0, 0xdc, 0xbc, ""/188}, 0x0, 0x1) unlink(&(0x7f0000000100)='./file0\x00') read$msr(r4, 0x0, 0x0) 7.47369602s ago: executing program 1 (id=580): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 7.450267391s ago: executing program 0 (id=581): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x8c3ff}]}}) (fail_nth: 2) 7.354813293s ago: executing program 0 (id=582): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe00fd05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x68}}, 0x4050) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 6.826956058s ago: executing program 2 (id=585): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={&(0x7f0000000300)="c8cfe98b7b36f96581651c93ab261296083acf50d33f21e7005b02d805c227c0d61a6e7031e77b56ac4be3afe47b5f1309dcb527df1c7c74c2cfb2b8dd665c48356c81d3bc706bc875d3c9135c80f6053f54b37ca3e09692ff7ea21d4f9c703c6b5e90ac0f5abfafba51097eea2edf6a4c3f1b1e13998437a24c0a0dce108819f47ed1e12662f5973423d2c182b84f5b481d7e8f40fe5095abea0a7d77779d2015f8ba7891a5bcfa641b54e08ce5d466614bac719b29d0753246c79cb083dc964de060490f1ad1c5", &(0x7f0000000400)="384c75450a8527e276bce8ed095832c94e128f0199741d7ade006b08abe6b45937eb4a8100438d9c"}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0xd9e4, 0x3ff, 0x3, 0x2, 0x3}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 6.761721479s ago: executing program 3 (id=586): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_pgetevents(0x0, 0x800, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001740)=""/4098, 0x1002}], 0x1) syz_emit_ethernet(0xec7, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xeb9, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xea5, 0x0, @opaque="c36188db1b21bc2399f98fd1cd989dfe01d7c3d227f404606b4c0592153f0f80fec6842533dba5beffd4d44f8a00d33ec86feb6fe8cca450d31cd8c1745d419c207ef81b6728feba48c1fa7fa537d8fb647d47e6ebdaa143eb866356e0ff922826aa225e5340c0f97510244713ba9400073c39f330c81fa96c48deb4f30d7406fd96c1272003a31f184ca6e6bd9856e8db9c0243fc5b81bdd97ed886f408a02eec1a17a5dd8cae119e1d76a9c0ea5baf2422f11334d516a9b24f4f867d058dbec1bb9e79d0192cab3a15f58dc06f047ee3f46a16c3da51b886c2d7224a053ed216e2910176a7f8732ebeef55a0c4e7c10aaead641c7aca6d383669a682e39859e0688b21592cdcfbce7de55d056edc4f50f609f2ae068497836808674ef7cb510aa1d9f74e718e004b04f9005918128b2b127cf89cdd56805d6b57d77c09208e344d2229ef59ec750d4fefca61f16005dbcf229d736c9a4f58aba66c15b603ea8140a0f53aa757e62ec84f7dcf6639a14264213d6b7bca298ea620f6071142bb19e30941489b44cc37593fc805abcfb76a8a59644f54bff1cf632b56625211cfc265a57795d10dca69236c200425b54150996460c30d92b59726097256d130c565160aad5a1bbba56a7a8429e2d8a05395b3374b37aac913af186e3e984147845a9ba90e6843d3f3022b5e04ba458fa54e7b6fe39cfdf73711b7deab0de9a7ab2f7b84ed53ca2536ad0550cff43563a0d387fd16e63974dcf91d113806ac8b693734fb5a439b361544443249650f723408a27b291756052dddbeb2ec97840db4b22f885f12580dc83963dc8eae77994753b496b583b015711dcb0540774884236664ab3dbf308f3449e87c7304b3b404c24413c7ea3f07c232345a64bcdee63867c78a54191139c9fe63f5aaf7da500b2b0553f20eecec18e90f1bb3254648ef3663a6c18d4d0f07b3cae2d18d3a4e764c0a4c90523615f950cd7a4c20974ddceb72f7b8a1830607c5bc6d1c2dead238029f093b7579c428ed492f783657df9eea57da574edbcae25f55ff2cd6ef2923215ddfa569e900ac72dbb1530d5a737cc065204d6f4b0e965488619f966899cccd218eb9c26974d885fd8ccdd482f4245c7201cd2f13e5aef1efaad1a70a2a6e5da24bbf349453bcd71b677d4fa4e2881699a4f1d010c934eccd1453b07e4617636094a5d9dcc645fea2095e7147d07aafdfd5f0e260abe3ef02280bae5398d51a70565a4443c7139c514fcb6bd004bfa69b3c6239783f53c72c34b37dcf6a124ae4bf26326f929635553b72b3176985584d2e424bfa62f967d9da7ca4864c24bf58011a2d279d67b25a36f8889125cfb6ecff8737a91c44c29f4a49b259388f400db063336bad95ade5b2742e6fa6ec1c0be051d6b946fc812d113423060e492944bb29ab0dcc9a468bac617ee8beec89c6d4747777b46ad0defbb679c39bc31524c6e35a0100a5bc5dfbb771c62dffe3d8cee8d47d0fde520a266fa675d58ad893bd3878f92694c75f2d4313ef8f850906b1b303078856e8362022c2df4a3003857c41efc848dbebcb78213c582a7693e74de76fff13734b4f71fe93d5e8a402adf6bc29563ca500013a2fb739bcd00916ca99f57a590b58cf9ab5dadd040d6222c553b83fa61d127918cb388a831c41d243d27f4037cbf911e3e9e94d5ebc39ef02b1f2606c7fc46c1952c529aab3886b96c04abd5be74f2fce3bab3d96e714c9b4eac73f6c4f781c0407289992a057cb62c9746c35abf8a390aa4f7e7ad1f16ffdee3ec2d1300c9ce0377b6bf645adcf064977ba158064285c399ccc5e0af6d55726ab8c7105374a2b1b4dc69f87360ddd67676108c5622a7a29a243ff2f9eec13446299a5fc2882825dc68514c0e1b3ea0c1342dc85e9c78b03323d12b0e3e8ac1b9d03b4fa31998a2e7c355b0a9623d3eb8cfd5e9c634d6a0e89d525f89722a00f51e4d79870d71d468087fa4416037a26cf0f052d94abd2e239e2a71a7354d5ff2e49373127bf4ce959bd661aa607149564817393ea26cdc94a7ea2e67cd6781daf4586366d036f5531bac80e9c0fdfe4129e445c82ed77c8a55effc523dec5da0412d1f8389ffa390bb0fc3c83502bed630693337cacd081d692abdc8416f1943907036a01331544c1b804d31e1fb148e9a1bc3909e71985bec78fb69eaee933701522c8da9b20e5cbc19c14f7f65d8fd0c8d133a58194dd758556e094e77010d315f6b6ab149fa898482f1b3b7e3eeafea99527293ab6a563d5cf3d049ddd9619e0dd221195280aecf0299b77b85d2393516d84d92d4f03f118f9712f5c072eed8ca31bfa5f05dcd5b7d408d1650b758d60c32aa39646c3bc5611d2d7d43cf31ff6a3cc8dc2efe6d2c968b1202408d807b6a01f6848e10ec8a3ee69a02348035dac5c5f5e6247092275f435cecabde71cc2b8d186df01032a195ecbbb92cc093b4e44445dbd1c2f01622e08dbee78bb545d1e29c7d354d51610bd5f5f48a4e42c0924a5ad9577080c5aafedafc7e971d571d2fc7ce41dff9120753dc221d1a4a9552180a52339dfaf697b1721346f34f1ccfc72f7a9d6cb2261a8b1deabe124cf3c18494fa988bd770726adabf7b0e57d09c0ef5a3bbeee271319218a386d7dadd0daa2c40a7131115a1a7c0c0ae654512f61414b6dcfc5d74afb2071cfdf09b00457a5cf04489dc990a0307e0cc46f90f65205457588a71fd4e772f5e5aa6d0e335debac25f40d48d016f285c2e04f36fc7b8d9419c62123e47a4b9acd40a6dcbbb0d1b8f2765e4424ad848d740fd401bc49c0acc971d1de476e8c586fda0eccf35b29a9a326818b245d75ce36b89b18407bd8f0309f5612a97ca15db0eda6048b8f46e914bdad927c2b636673de0966a09c0ecb7a5fc287af412cc427e598b65ba74000eb394eb95a2f114da106e343edb1a46d1debdf3dae2f9ef6e60f7346c2c53411f2e2e27b1f9e2c020a99442a626f94f5202a5f5023e4aac49d8ceaec8074c223707f80a72be638413c80561e6909e489dd9030f8a110b82bf63e576a73f73cdc6b539b86745ff217ce5eafd18137fc2664e2be2320713417ef1c988486acfe1ae51d21ef4ff022f134d0a817a45b862562cb58e2170d1b906358fa30131e8d23bd24b2124c80f204f8f0d3f74a408aff08f567773e95dce095a2fd61a4d7441fb1a54689b34f3ff163e4686f8f1dfec0f066e2d79cf7354a0a2ad791bc0d089adf16711f7a5a9dc66689f55ca4aaf78eca23865180e6cc87ae773bb6c3fffb71138381377ce40ff7810f015b6f2d2d1f01ef64681825eba419ab413287320f61894ded416bb70a8d6fa164d065ec8d0866c7f9f2387efd74a6eec64e4e081d2a6d2937ba00119472ad0e615bbf7df0a6406f11a01d69a95a13e12aac40eaaf07c3bc3f9a73b931ed9a2a302366e5eee5b23775fc2f253d9ef8f22debeaca87a5af2259c649ce1c2cc8d599a245760739d9d4453409707a5a5fb17e79f2461f919793ddb2fd941a2576b7a929915469faf382fbfc0d6df2c1e301a1d74eef0f8e48a5bff8176f14e9a50432f3b3aa1db9a759c51b712645259cd1f29ccc7bca24b4fdaeb2ee8f7df72b5a60d40d49a1216001395699c6f56a060c65b00d7663e9052968aaff057440978378f8ff83acc4e2e462c9a5083c7ed190dcf5b698d6d045827a88c68ef4215cb5c381ad5f233f01df5f96be0d14bb7b15a5ef60abd5a1c5145a761e9ce47152b05466eb5dd397892fb0e6fb2dd5bc5746c5bc02ff7ddce08f296ccf2fb64b60f724185ee458ccf3a2faedc912af18fc0d71f2e99bf7e1c795b3949a5b2848383d1d905b7ec0a7d00f727caaf392bab8b2c21a16079977b9597c701b42b2b7dbb6d0e882d6d0fc21c88c7ec2b6bf1164cd221c20cd31d54e8e09705b0084c12092d3220e4b16747106c9e0694c8704053e89b99fb1c403d7c848140b941879f544e896f753a12cf00ce0c6c0091fe050258b73f39a6c5e45131386d78ccaed5bd904aff197756cdf6da0a640dce609e394e41dd044a35d6a286e1619e5faa06239006c13b559c737285a1680fbd9ff4b3447808fb6fa025572ffd9f15bd37b4470724a9a573aa0c44b65db5dea2493e88e661765e6cee71b0b662dcb0a2456cb59a134e9301f7ecb44f84291bad3d0f6a229ab4a6d45e119e0e465a4d3a01eb960ded6df76a35da9c188ec1398d0ce36fe8b6c9878a92dd007c9738e3f6640c9190e819707aedae6cbfa99dac49cc598066211d231de93b960620037f4a35a3c94f188020fb2e40cc38b3896999f7cb34d7ebded96f0c696cacc12ae867850d99fe0cf2fa6eb9dd71cfd518586ee772b73bedbdc16e438bfcdbedd5bda2f9698f94e1cc85d9560e0410f21f3ca4dadeefcb1539f0126bd119e65b81654c58b0e168797c7edfd4bb72f44df3d5e0a967155d5cce7ddd90dc4e5db48a6fdf3045aab0855c930d85b038fc999a0e6c5da88aa2180c0fe413fc92cf665e0d12bbc166186669b11abb1cc7ed40c360889f5e7a74e58cdc001650145cdbed086dc2f85ba24d70b6dac47c17876a273b98f1b345f503e82b51768720337a689f70a237f8b6476c96c10335d81edc4a063fbbd878ed5108115e38e690f37cac99110fdbcbc1ec0f52afed136b44d2b12e70ca067ad87da23f9f07a79c0582694bee1d7b9d1ded93cae3dc1d509477706414130039bb9f6d6c91ea5f7538d1993373dca2dfb5c40b1ad1305004c4c81931bec9363ba166feafa32e3eee9b26b22778b6d40c11ec09eb57597c4da7ecf049d58cac998cf27498bf0d414ff444f7355d7ffdb5aebcd1f8809ca1aa5ac9b52c6dd4329e51ffbf0368f1d6e1615a1256ad321b38c591218366a20ac6ad33641c6db0e51fa7e57aa3f6f16da3a94edf130a8eb2fe714620d2687388d5c5c4dbaaa852864cd3ab38d067002b9c15268fd4635d38ba6a9eb96bc55dcb4d8df9590ae8bf2b2e5a3ca5d98532b3ec4aeb9cfc4bac61728c3bf41a094afd26151c9859c6106a0e668682e3b0c18b21a1af2ffb206c60146846650c7579a3b01ac6bbe658d17d5453d7652e5dc0dc89f7cd5b76c810a4a111d51fe85a30470f1ed67dd30fdd6d0900c2e729040cd65634c8376377528275542187f9dde3fa779224804c1f43fbbbe7f0c568f7b0b6291ed2d567ded326aaa67ffce3529c8f11251c9d562cd02739935c8e303c1c997d8820876815c763d7802e85885966f5f7e38086b7218c11d65e0f9133ef47cbe1222ea"}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c975b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 6.639527403s ago: executing program 2 (id=587): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\a'], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000000c0)=ANY=[], 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file1\x00', 0x808, &(0x7f0000000800)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_none}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) 6.402781879s ago: executing program 1 (id=588): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_io_uring_setup(0x3cc7, &(0x7f0000000040)={0x0, 0xd935, 0x40, 0x0, 0xbd}, &(0x7f00000000c0), &(0x7f0000000100), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xc688, 0x3, 0x3, 0x8316, 0xf4, "04ffff0500000000000000100000003222dd76", 0x8, 0x6df}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 6.402460529s ago: executing program 32 (id=588): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_io_uring_setup(0x3cc7, &(0x7f0000000040)={0x0, 0xd935, 0x40, 0x0, 0xbd}, &(0x7f00000000c0), &(0x7f0000000100), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xc688, 0x3, 0x3, 0x8316, 0xf4, "04ffff0500000000000000100000003222dd76", 0x8, 0x6df}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 5.97615745s ago: executing program 0 (id=591): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'security.', '!-\x00'}, 0x0, 0x0, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) socket$kcm(0x11, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x320, 0xfffffffffffffffd}, 0x50c, 0x0, 0xe723, 0x7, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xdfffffffffffffbf, 0xffffffffffffffff, 0xb) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10482, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) fgetxattr(r5, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', 0x0, 0xdeff) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, 0x0, 0x0) shutdown(r2, 0x2) 5.096642504s ago: executing program 2 (id=593): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x0, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x5, &(0x7f0000000100)}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ptrace(0x10, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) 4.585322747s ago: executing program 3 (id=594): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0xfef3, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x8000ffff, 0x10000}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001e80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpid}, {@grpquota}, {@noauto_da_alloc}, {@minixdf}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x102a6c}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x13, 0x0, &(0x7f0000000040)="0f0070e1a6cf41217e0115000000ab3a91167f", 0x0, 0x10a00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14fd956c8a0801010030005200000200000a"], 0x14}, 0x1, 0x0, 0x0, 0x8850}, 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) 3.978930803s ago: executing program 2 (id=596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.819142128s ago: executing program 0 (id=597): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x2, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$FITHAW(r2, 0xc0045878) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7ff}, @TCA_CT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) lsm_get_self_attr(0x67, &(0x7f0000000080)={0x0, 0x0, 0xdc, 0xbc, ""/188}, 0x0, 0x1) unlink(&(0x7f0000000100)='./file0\x00') read$msr(r4, 0x0, 0x0) 3.791596279s ago: executing program 3 (id=598): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={&(0x7f0000000300)="c8cfe98b7b36f96581651c93ab261296083acf50d33f21e7005b02d805c227c0d61a6e7031e77b56ac4be3afe47b5f1309dcb527df1c7c74c2cfb2b8dd665c48356c81d3bc706bc875d3c9135c80f6053f54b37ca3e09692ff7ea21d4f9c703c6b5e90ac0f5abfafba51097eea2edf6a4c3f1b1e13998437a24c0a0dce108819f47ed1e12662f5973423d2c182b84f5b481d7e8f40fe5095abea0a7d77779d2015f8ba7891a5bcfa641b54e08ce5d466614bac719b29d0753246c79cb083dc964de060490f1ad1c5", &(0x7f0000000400)="384c75450a8527e276bce8ed095832c94e128f0199741d7ade006b08abe6b45937eb4a8100438d9c"}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0xd9e4, 0x3ff, 0x3, 0x2, 0x3}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 3.75950025s ago: executing program 3 (id=599): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_io_uring_setup(0x3cc7, &(0x7f0000000040)={0x0, 0xd935, 0x40, 0x0, 0xbd}, &(0x7f00000000c0), &(0x7f0000000100), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xc688, 0x3, 0x3, 0x8316, 0xf4, "04ffff0500000000000000100000003222dd76", 0x8, 0x6df}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) 3.074623248s ago: executing program 2 (id=600): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe00fd05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x68}}, 0x4050) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2.721902687s ago: executing program 4 (id=601): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000380)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) rt_sigqueueinfo(r0, 0x13, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000001c0)=0x28) sync() sync() r5 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r5, &(0x7f0000000180), 0x0, 0x0, 0x8800) socket$kcm(0x29, 0x2, 0x0) 1.610832177s ago: executing program 0 (id=602): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe00fd05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x68}}, 0x4050) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.581064878s ago: executing program 33 (id=602): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe00fd05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x68}}, 0x4050) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.575441978s ago: executing program 2 (id=604): socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000080)="4c126bd68794c03f834a44010077422c5de4e0480493027840cf4ed6d577a40ff076d178134798ec5a6e4ace2d2300c6a7552032bc377def946525065bfa1f86b900e1501ff7a3f748b7bd6b4e114fc2c23184da578eaf9f8c9ccc", 0x5b, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000280)=""/90, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_pgetevents(0x0, 0x800, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001740)=""/4098, 0x1002}], 0x1) syz_emit_ethernet(0xfc0, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xf9e, 0x0, @opaque="c36188db1b21bc2399f98fd1cd989dfe01d7c3d227f404606b4c0592153f0f80fec6842533dba5beffd4d44f8a00d33ec86feb6fe8cca450d31cd8c1745d419c207ef81b6728feba48c1fa7fa537d8fb647d47e6ebdaa143eb866356e0ff922826aa225e5340c0f97510244713ba9400073c39f330c81fa96c48deb4f30d7406fd96c1272003a31f184ca6e6bd9856e8db9c0243fc5b81bdd97ed886f408a02eec1a17a5dd8cae119e1d76a9c0ea5baf2422f11334d516a9b24f4f867d058dbec1bb9e79d0192cab3a15f58dc06f047ee3f46a16c3da51b886c2d7224a053ed216e2910176a7f8732ebeef55a0c4e7c10aaead641c7aca6d383669a682e39859e0688b21592cdcfbce7de55d056edc4f50f609f2ae068497836808674ef7cb510aa1d9f74e718e004b04f9005918128b2b127cf89cdd56805d6b57d77c09208e344d2229ef59ec750d4fefca61f16005dbcf229d736c9a4f58aba66c15b603ea8140a0f53aa757e62ec84f7dcf6639a14264213d6b7bca298ea620f6071142bb19e30941489b44cc37593fc805abcfb76a8a59644f54bff1cf632b56625211cfc265a57795d10dca69236c200425b54150996460c30d92b59726097256d130c565160aad5a1bbba56a7a8429e2d8a05395b3374b37aac913af186e3e984147845a9ba90e6843d3f3022b5e04ba458fa54e7b6fe39cfdf73711b7deab0de9a7ab2f7b84ed53ca2536ad0550cff43563a0d387fd16e63974dcf91d113806ac8b693734fb5a439b361544443249650f723408a27b291756052dddbeb2ec97840db4b22f885f12580dc83963dc8eae77994753b496b583b015711dcb0540774884236664ab3dbf308f3449e87c7304b3b404c24413c7ea3f07c232345a64bcdee63867c78a54191139c9fe63f5aaf7da500b2b0553f20eecec18e90f1bb3254648ef3663a6c18d4d0f07b3cae2d18d3a4e764c0a4c90523615f950cd7a4c20974ddceb72f7b8a1830607c5bc6d1c2dead238029f093b7579c428ed492f783657df9eea57da574edbcae25f55ff2cd6ef2923215ddfa569e900ac72dbb1530d5a737cc065204d6f4b0e965488619f966899cccd218eb9c26974d885fd8ccdd482f4245c7201cd2f13e5aef1efaad1a70a2a6e5da24bbf349453bcd71b677d4fa4e2881699a4f1d010c934eccd1453b07e4617636094a5d9dcc645fea2095e7147d07aafdfd5f0e260abe3ef02280bae5398d51a70565a4443c7139c514fcb6bd004bfa69b3c6239783f53c72c34b37dcf6a124ae4bf26326f929635553b72b3176985584d2e424bfa62f967d9da7ca4864c24bf58011a2d279d67b25a36f8889125cfb6ecff8737a91c44c29f4a49b259388f400db063336bad95ade5b2742e6fa6ec1c0be051d6b946fc812d113423060e492944bb29ab0dcc9a468bac617ee8beec89c6d4747777b46ad0defbb679c39bc31524c6e35a0100a5bc5dfbb771c62dffe3d8cee8d47d0fde520a266fa675d58ad893bd3878f92694c75f2d4313ef8f850906b1b303078856e8362022c2df4a3003857c41efc848dbebcb78213c582a7693e74de76fff13734b4f71fe93d5e8a402adf6bc29563ca500013a2fb739bcd00916ca99f57a590b58cf9ab5dadd040d6222c553b83fa61d127918cb388a831c41d243d27f4037cbf911e3e9e94d5ebc39ef02b1f2606c7fc46c1952c529aab3886b96c04abd5be74f2fce3bab3d96e714c9b4eac73f6c4f781c0407289992a057cb62c9746c35abf8a390aa4f7e7ad1f16ffdee3ec2d1300c9ce0377b6bf645adcf064977ba158064285c399ccc5e0af6d55726ab8c7105374a2b1b4dc69f87360ddd67676108c5622a7a29a243ff2f9eec13446299a5fc2882825dc68514c0e1b3ea0c1342dc85e9c78b03323d12b0e3e8ac1b9d03b4fa31998a2e7c355b0a9623d3eb8cfd5e9c634d6a0e89d525f89722a00f51e4d79870d71d468087fa4416037a26cf0f052d94abd2e239e2a71a7354d5ff2e49373127bf4ce959bd661aa607149564817393ea26cdc94a7ea2e67cd6781daf4586366d036f5531bac80e9c0fdfe4129e445c82ed77c8a55effc523dec5da0412d1f8389ffa390bb0fc3c83502bed630693337cacd081d692abdc8416f1943907036a01331544c1b804d31e1fb148e9a1bc3909e71985bec78fb69eaee933701522c8da9b20e5cbc19c14f7f65d8fd0c8d133a58194dd758556e094e77010d315f6b6ab149fa898482f1b3b7e3eeafea99527293ab6a563d5cf3d049ddd9619e0dd221195280aecf0299b77b85d2393516d84d92d4f03f118f9712f5c072eed8ca31bfa5f05dcd5b7d408d1650b758d60c32aa39646c3bc5611d2d7d43cf31ff6a3cc8dc2efe6d2c968b1202408d807b6a01f6848e10ec8a3ee69a02348035dac5c5f5e6247092275f435cecabde71cc2b8d186df01032a195ecbbb92cc093b4e44445dbd1c2f01622e08dbee78bb545d1e29c7d354d51610bd5f5f48a4e42c0924a5ad9577080c5aafedafc7e971d571d2fc7ce41dff9120753dc221d1a4a9552180a52339dfaf697b1721346f34f1ccfc72f7a9d6cb2261a8b1deabe124cf3c18494fa988bd770726adabf7b0e57d09c0ef5a3bbeee271319218a386d7dadd0daa2c40a7131115a1a7c0c0ae654512f61414b6dcfc5d74afb2071cfdf09b00457a5cf04489dc990a0307e0cc46f90f65205457588a71fd4e772f5e5aa6d0e335debac25f40d48d016f285c2e04f36fc7b8d9419c62123e47a4b9acd40a6dcbbb0d1b8f2765e4424ad848d740fd401bc49c0acc971d1de476e8c586fda0eccf35b29a9a326818b245d75ce36b89b18407bd8f0309f5612a97ca15db0eda6048b8f46e914bdad927c2b636673de0966a09c0ecb7a5fc287af412cc427e598b65ba74000eb394eb95a2f114da106e343edb1a46d1debdf3dae2f9ef6e60f7346c2c53411f2e2e27b1f9e2c020a99442a626f94f5202a5f5023e4aac49d8ceaec8074c223707f80a72be638413c80561e6909e489dd9030f8a110b82bf63e576a73f73cdc6b539b86745ff217ce5eafd18137fc2664e2be2320713417ef1c988486acfe1ae51d21ef4ff022f134d0a817a45b862562cb58e2170d1b906358fa30131e8d23bd24b2124c80f204f8f0d3f74a408aff08f567773e95dce095a2fd61a4d7441fb1a54689b34f3ff163e4686f8f1dfec0f066e2d79cf7354a0a2ad791bc0d089adf16711f7a5a9dc66689f55ca4aaf78eca23865180e6cc87ae773bb6c3fffb71138381377ce40ff7810f015b6f2d2d1f01ef64681825eba419ab413287320f61894ded416bb70a8d6fa164d065ec8d0866c7f9f2387efd74a6eec64e4e081d2a6d2937ba00119472ad0e615bbf7df0a6406f11a01d69a95a13e12aac40eaaf07c3bc3f9a73b931ed9a2a302366e5eee5b23775fc2f253d9ef8f22debeaca87a5af2259c649ce1c2cc8d599a245760739d9d4453409707a5a5fb17e79f2461f919793ddb2fd941a2576b7a929915469faf382fbfc0d6df2c1e301a1d74eef0f8e48a5bff8176f14e9a50432f3b3aa1db9a759c51b712645259cd1f29ccc7bca24b4fdaeb2ee8f7df72b5a60d40d49a1216001395699c6f56a060c65b00d7663e9052968aaff057440978378f8ff83acc4e2e462c9a5083c7ed190dcf5b698d6d045827a88c68ef4215cb5c381ad5f233f01df5f96be0d14bb7b15a5ef60abd5a1c5145a761e9ce47152b05466eb5dd397892fb0e6fb2dd5bc5746c5bc02ff7ddce08f296ccf2fb64b60f724185ee458ccf3a2faedc912af18fc0d71f2e99bf7e1c795b3949a5b2848383d1d905b7ec0a7d00f727caaf392bab8b2c21a16079977b9597c701b42b2b7dbb6d0e882d6d0fc21c88c7ec2b6bf1164cd221c20cd31d54e8e09705b0084c12092d3220e4b16747106c9e0694c8704053e89b99fb1c403d7c848140b941879f544e896f753a12cf00ce0c6c0091fe050258b73f39a6c5e45131386d78ccaed5bd904aff197756cdf6da0a640dce609e394e41dd044a35d6a286e1619e5faa06239006c13b559c737285a1680fbd9ff4b3447808fb6fa025572ffd9f15bd37b4470724a9a573aa0c44b65db5dea2493e88e661765e6cee71b0b662dcb0a2456cb59a134e9301f7ecb44f84291bad3d0f6a229ab4a6d45e119e0e465a4d3a01eb960ded6df76a35da9c188ec1398d0ce36fe8b6c9878a92dd007c9738e3f6640c9190e819707aedae6cbfa99dac49cc598066211d231de93b960620037f4a35a3c94f188020fb2e40cc38b3896999f7cb34d7ebded96f0c696cacc12ae867850d99fe0cf2fa6eb9dd71cfd518586ee772b73bedbdc16e438bfcdbedd5bda2f9698f94e1cc85d9560e0410f21f3ca4dadeefcb1539f0126bd119e65b81654c58b0e168797c7edfd4bb72f44df3d5e0a967155d5cce7ddd90dc4e5db48a6fdf3045aab0855c930d85b038fc999a0e6c5da88aa2180c0fe413fc92cf665e0d12bbc166186669b11abb1cc7ed40c360889f5e7a74e58cdc001650145cdbed086dc2f85ba24d70b6dac47c17876a273b98f1b345f503e82b51768720337a689f70a237f8b6476c96c10335d81edc4a063fbbd878ed5108115e38e690f37cac99110fdbcbc1ec0f52afed136b44d2b12e70ca067ad87da23f9f07a79c0582694bee1d7b9d1ded93cae3dc1d509477706414130039bb9f6d6c91ea5f7538d1993373dca2dfb5c40b1ad1305004c4c81931bec9363ba166feafa32e3eee9b26b22778b6d40c11ec09eb57597c4da7ecf049d58cac998cf27498bf0d414ff444f7355d7ffdb5aebcd1f8809ca1aa5ac9b52c6dd4329e51ffbf0368f1d6e1615a1256ad321b38c591218366a20ac6ad33641c6db0e51fa7e57aa3f6f16da3a94edf130a8eb2fe714620d2687388d5c5c4dbaaa852864cd3ab38d067002b9c15268fd4635d38ba6a9eb96bc55dcb4d8df9590ae8bf2b2e5a3ca5d98532b3ec4aeb9cfc4bac61728c3bf41a094afd26151c9859c6106a0e668682e3b0c18b21a1af2ffb206c60146846650c7579a3b01ac6bbe658d17d5453d7652e5dc0dc89f7cd5b76c810a4a111d51fe85a30470f1ed67dd30fdd6d0900c2e729040cd65634c8376377528275542187f9dde3fa779224804c1f43fbbbe7f0c568f7b0b6291ed2d567ded326aaa67ffce3529c8f11251c9d562cd02739935c8e303c1c997d8820876815c763d7802e85885966f5f7e38086b7218c11d65e0f9133ef47cbe1222ea8b0652e924d8924544a88a26461e1ad24bfbc7194005b4fb3fe7344c1e68a5034aaeaedfd46c2204e465617391835af34ec320bd7dad276ae9d7fb1f09aa3dc066bb6aa153394b3edb09491fa913d0e4c158baa16e66809180420596f59f20224f61cce7c1c4bd73d6da82ce9129bc8dab8ece3a255185061b6830c99d73a73563c8880ca33abc07e36219398fb6641c39b22a099920219e66e1130d14a8bbb6f9ee2eba93ee50025970627781b38e5f6b82d7ddd5ae2f6612701758ffff9fb706e599ae109998bbba94505115aa09f36e97adf0ce23a03ec8ecda201b7e2be501122dfafecfdae775f609c215e35a16236214c03053e8ece2"}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c975b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.573738218s ago: executing program 3 (id=605): socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000080)="4c126bd68794c03f834a44010077422c5de4e0480493027840cf4ed6d577a40ff076d178134798ec5a6e4ace2d2300c6a7552032bc377def946525065bfa1f86b900e1501ff7a3f748b7bd6b4e114fc2c23184da578eaf9f8c9ccc", 0x5b, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000280)=""/90, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_pgetevents(0x0, 0x800, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001740)=""/4098, 0x1002}], 0x1) syz_emit_ethernet(0xfc0, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xf9e, 0x0, @opaque="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"}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c975b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.573160268s ago: executing program 4 (id=606): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x0, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x5, &(0x7f0000000100)}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ptrace(0x10, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) 661.984492ms ago: executing program 4 (id=607): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @loopback, 0xa}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 592.699524ms ago: executing program 4 (id=608): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)={0x1}) 510.939906ms ago: executing program 4 (id=609): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)={0x1}) (fail_nth: 1) 0s ago: executing program 4 (id=610): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) membarrier(0x10, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001080)="0a8f09b8c92901ae4fc86c8e9e3cda9a48e5f2750abb91961531f0f30070f4c28982b54f5799e7cdb422382c13a4c98d9011b461d1229321dbd05edcaefd10ff106f58402e8c8b711f7c8eabde0047f0df6d3af3cf39336fb71736c07b20192045bc609d332f2bd65f185a2064c053e36475668341c8f8ef96a89149859a2709e5554c13d71dee94d6ae729a3bfd843f2cc8576017c263666f138871a157cc15405fcb8779c28bdd139851930fbc27c0b76c0160cbffdb3ca22e6cc46cc0d78773a21ff0a335334bbea16399", 0xcc}], 0x1, 0x0, 0x0, 0x7400}, 0x24040891) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r0, 0x0, 0x8142, &(0x7f00000003c0)={@_ha_fsid={[0xfffffffa, 0x10000]}, {0x1, 0x6, 0x5, 0x9}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x2}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000080)=0x1, 0x4) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$join(0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc08, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xd04, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x101, 0x0, 0x0, 0x0, 0x2287ff58}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) pipe(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x4a8e) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000040)={0x3}) kernel console output (not intermixed with test programs): ead(block 66) failed [ 111.715193][ T4791] FAT-fs (loop1): Directory bread(block 67) failed [ 111.722104][ T4791] FAT-fs (loop1): Directory bread(block 68) failed [ 111.728783][ T4791] FAT-fs (loop1): Directory bread(block 69) failed [ 111.735812][ T4791] FAT-fs (loop1): Directory bread(block 70) failed [ 111.742632][ T4791] FAT-fs (loop1): Directory bread(block 71) failed [ 111.749422][ T4791] FAT-fs (loop1): Directory bread(block 72) failed [ 111.756004][ T4791] FAT-fs (loop1): Directory bread(block 73) failed [ 111.780848][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.790140][ T4791] netlink: 2 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.799349][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.808524][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.817563][ T4791] netlink: 2 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.826679][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.835906][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.844952][ T4791] netlink: 2 bytes leftover after parsing attributes in process `syz.1.343'. [ 111.854126][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 112.073202][ T4798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4798 comm=syz.3.345 [ 112.231109][ T4800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4800 comm=syz.3.345 [ 112.432847][ T4798] loop3: detected capacity change from 0 to 764 [ 113.083109][ T4661] syz.4.305 (4661) used greatest stack depth: 7520 bytes left [ 113.586871][ T4806] loop0: detected capacity change from 0 to 512 [ 113.671552][ T4813] loop3: detected capacity change from 0 to 512 [ 113.682219][ T28] kauditd_printk_skb: 252 callbacks suppressed [ 113.682277][ T28] audit: type=1326 audit(1777377688.564:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 113.823821][ T4813] 9p: Bad value for 'rfdno' [ 114.028505][ T28] audit: type=1326 audit(1777377688.604:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 114.185099][ T28] audit: type=1326 audit(1777377688.604:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 114.223189][ T28] audit: type=1326 audit(1777377688.604:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 114.264188][ T28] audit: type=1326 audit(1777377688.604:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 114.307641][ T28] audit: type=1326 audit(1777377688.654:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 114.406569][ T28] audit: type=1326 audit(1777377688.654:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a42c8cb42 code=0x7ffc0000 [ 114.431115][ T28] audit: type=1326 audit(1777377688.654:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8a42c8cbd7 code=0x7ffc0000 [ 114.464531][ T28] audit: type=1326 audit(1777377688.654:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8a42c49ad1 code=0x7ffc0000 [ 114.489559][ T28] audit: type=1326 audit(1777377688.654:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8a42c8dbc9 code=0x7ffc0000 [ 114.605798][ T4829] loop4: detected capacity change from 0 to 512 [ 114.678319][ T4830] loop5: detected capacity change from 0 to 8 [ 115.195571][ T4839] loop3: detected capacity change from 0 to 512 [ 115.266002][ T4839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.380405][ T4843] loop1: detected capacity change from 0 to 256 [ 115.393286][ T4839] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.407792][ T4843] msdos: Unknown parameter '°¾0x000000000000ee00' [ 115.542264][ T4854] Cannot find add_set index 0 as target [ 115.641308][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 115.677406][ T4855] __nla_validate_parse: 22 callbacks suppressed [ 115.677473][ T4855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.361'. [ 115.709815][ T4843] syzkaller0: entered promiscuous mode [ 115.726050][ T4843] syzkaller0: entered allmulticast mode [ 115.864939][ T4857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4857 comm=syz.4.361 [ 115.924300][ T4857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4857 comm=syz.4.361 [ 116.227121][ T4870] loop1: detected capacity change from 0 to 512 [ 116.525293][ T4857] loop4: detected capacity change from 0 to 764 [ 116.918858][ T4887] loop5: detected capacity change from 0 to 8 [ 117.345111][ T4904] loop1: detected capacity change from 0 to 512 [ 117.886718][ T4907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 117.913476][ T4907] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.976764][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 118.130992][ T4912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.376'. [ 119.106233][ T4922] Cannot find add_set index 0 as target [ 119.177297][ T28] kauditd_printk_skb: 229 callbacks suppressed [ 119.177311][ T28] audit: type=1326 audit(1777377694.034:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.216086][ T4926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4926 comm=syz.4.376 [ 119.265380][ T4926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4926 comm=syz.4.376 [ 119.306151][ T4885] set_capacity_and_notify: 1 callbacks suppressed [ 119.306233][ T4885] loop3: detected capacity change from 0 to 2048 [ 119.323689][ T28] audit: type=1326 audit(1777377694.034:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.387267][ T28] audit: type=1326 audit(1777377694.034:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.423105][ T28] audit: type=1326 audit(1777377694.034:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.456055][ T4924] loop4: detected capacity change from 0 to 764 [ 119.463897][ T28] audit: type=1326 audit(1777377694.034:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.503514][ T28] audit: type=1326 audit(1777377694.034:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.537668][ T28] audit: type=1326 audit(1777377694.034:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.566401][ T28] audit: type=1326 audit(1777377694.034:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.590442][ T28] audit: type=1326 audit(1777377694.034:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.614018][ T28] audit: type=1326 audit(1777377694.034:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 119.620167][ T4934] FAULT_INJECTION: forcing a failure. [ 119.620167][ T4934] name failslab, interval 1, probability 0, space 0, times 0 [ 119.650290][ T4934] CPU: 0 UID: 0 PID: 4934 Comm: syz.2.380 Not tainted syzkaller #0 PREEMPT(full) [ 119.650335][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.650351][ T4934] Call Trace: [ 119.650359][ T4934] [ 119.650367][ T4934] __dump_stack+0x1d/0x30 [ 119.650419][ T4934] dump_stack_lvl+0x95/0xd0 [ 119.650517][ T4934] dump_stack+0x15/0x1b [ 119.650543][ T4934] should_fail_ex+0x263/0x280 [ 119.650652][ T4934] ? rtnl_newlink+0x5c/0x1400 [ 119.650687][ T4934] should_failslab+0x8c/0xb0 [ 119.650766][ T4934] __kmalloc_cache_noprof+0x5f/0x400 [ 119.650808][ T4934] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.650840][ T4934] rtnl_newlink+0x5c/0x1400 [ 119.650920][ T4934] ? xas_load+0x413/0x430 [ 119.650938][ T4934] ? __rcu_read_unlock+0x4e/0x70 [ 119.650958][ T4934] ? avc_has_perm_noaudit+0xab/0x130 [ 119.651067][ T4934] ? cred_has_capability+0x224/0x2a0 [ 119.651102][ T4934] ? selinux_capable+0x31/0x40 [ 119.651142][ T4934] ? security_capable+0x7b/0x90 [ 119.651175][ T4934] ? ns_capable+0x7c/0xb0 [ 119.651229][ T4934] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.651264][ T4934] rtnetlink_rcv_msg+0x64b/0x720 [ 119.651298][ T4934] ? avc_has_perm_noaudit+0xab/0x130 [ 119.651337][ T4934] netlink_rcv_skb+0x123/0x220 [ 119.651410][ T4934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.651447][ T4934] rtnetlink_rcv+0x1c/0x30 [ 119.651494][ T4934] netlink_unicast+0x5a8/0x680 [ 119.651526][ T4934] netlink_sendmsg+0x5c8/0x6f0 [ 119.651564][ T4934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.651632][ T4934] ____sys_sendmsg+0x563/0x5b0 [ 119.651722][ T4934] ___sys_sendmsg+0x195/0x1e0 [ 119.651829][ T4934] ? path_openat+0x1b01/0x2050 [ 119.651878][ T4934] __sys_sendmmsg+0x185/0x320 [ 119.651922][ T4934] __x64_sys_sendmmsg+0x57/0x70 [ 119.651973][ T4934] x64_sys_call+0x27aa/0x3020 [ 119.652003][ T4934] do_syscall_64+0x12c/0x3b0 [ 119.652034][ T4934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.652064][ T4934] RIP: 0033:0x7faa597ecdd9 [ 119.652096][ T4934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.652116][ T4934] RSP: 002b:00007faa5823f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.652142][ T4934] RAX: ffffffffffffffda RBX: 00007faa59a65fa0 RCX: 00007faa597ecdd9 [ 119.652160][ T4934] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000c [ 119.652180][ T4934] RBP: 00007faa5823f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.652220][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.652236][ T4934] R13: 00007faa59a66038 R14: 00007faa59a65fa0 R15: 00007fff2a6e2138 [ 119.652262][ T4934] [ 119.669990][ T4885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.707092][ T4937] loop5: detected capacity change from 0 to 8 [ 119.863874][ T4885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.027495][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 120.141540][ T4952] loop3: detected capacity change from 0 to 512 [ 120.170673][ T4952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 120.213182][ T4952] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.249413][ T4962] loop0: detected capacity change from 0 to 512 [ 120.304732][ T4965] loop4: detected capacity change from 0 to 256 [ 120.335054][ T4965] msdos: Unknown parameter '°¾0x000000000000ee00' [ 120.362761][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 120.413870][ T4965] syzkaller0: entered promiscuous mode [ 120.429848][ T4968] mmap: syz.3.390 (4968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.439987][ T4965] syzkaller0: entered allmulticast mode [ 120.472876][ T4968] FAULT_INJECTION: forcing a failure. [ 120.472876][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 120.498257][ T4971] netlink: 108 bytes leftover after parsing attributes in process `syz.1.391'. [ 120.503939][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.3.390 Not tainted syzkaller #0 PREEMPT(full) [ 120.504054][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.504097][ T4968] Call Trace: [ 120.504120][ T4968] [ 120.504142][ T4968] __dump_stack+0x1d/0x30 [ 120.504222][ T4968] dump_stack_lvl+0x95/0xd0 [ 120.504298][ T4968] dump_stack+0x15/0x1b [ 120.504363][ T4968] should_fail_ex+0x263/0x280 [ 120.504462][ T4968] should_failslab+0x8c/0xb0 [ 120.504569][ T4968] kmem_cache_alloc_noprof+0x66/0x3f0 [ 120.504668][ T4968] ? vm_area_alloc+0x2c/0xb0 [ 120.504773][ T4968] ? hugetlbfs_file_mmap_prepare+0x2cc/0x2e0 [ 120.504881][ T4968] vm_area_alloc+0x2c/0xb0 [ 120.504987][ T4968] mmap_region+0x1172/0x20d0 [ 120.505088][ T4968] ? record_print_text+0x240/0x2a0 [ 120.505220][ T4968] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 120.505254][ T4968] do_mmap+0x9b2/0xbd0 [ 120.505276][ T4968] __se_sys_remap_file_pages+0x54d/0x5e0 [ 120.505379][ T4968] ? mutex_lock+0x57/0x90 [ 120.505497][ T4968] ? mutex_unlock+0x4e/0x90 [ 120.505594][ T4968] ? fput+0x8f/0xc0 [ 120.505663][ T4968] __x64_sys_remap_file_pages+0x67/0x80 [ 120.505747][ T4968] x64_sys_call+0x2e53/0x3020 [ 120.505825][ T4968] do_syscall_64+0x12c/0x3b0 [ 120.505901][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.505975][ T4968] RIP: 0033:0x7f2eb375cdd9 [ 120.506029][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.506083][ T4968] RSP: 002b:00007f2eb21b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 120.506154][ T4968] RAX: ffffffffffffffda RBX: 00007f2eb39d5fa0 RCX: 00007f2eb375cdd9 [ 120.506201][ T4968] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 120.506244][ T4968] RBP: 00007f2eb21b7090 R08: 0000000000000020 R09: 0000000000000000 [ 120.506288][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.506323][ T4968] R13: 00007f2eb39d6038 R14: 00007f2eb39d5fa0 R15: 00007ffd9f6cfc18 [ 120.506394][ T4968] [ 120.730591][ T4973] loop5: detected capacity change from 0 to 8 [ 120.779075][ T4975] loop2: detected capacity change from 0 to 512 [ 120.833961][ T4975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.945441][ T4981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 121.103492][ T4990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4990 comm=syz.1.394 [ 121.176567][ T4994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=4994 comm=syz.1.394 [ 121.342810][ T4998] loop3: detected capacity change from 0 to 1024 [ 121.358393][ T4998] EXT4-fs: Ignoring removed bh option [ 121.395338][ T4998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.544034][ T5003] loop0: detected capacity change from 0 to 512 [ 121.600090][ T5003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.617332][ T5003] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.708061][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.762680][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.794129][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.078807][ T5013] Cannot find add_set index 0 as target [ 122.107041][ T5012] 9p: Bad value for 'rfdno' [ 123.059885][ T5016] EXT4-fs: Ignoring removed bh option [ 123.125049][ T5016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.253141][ T5016] FAULT_INJECTION: forcing a failure. [ 123.253141][ T5016] name failslab, interval 1, probability 0, space 0, times 0 [ 123.286139][ T5016] CPU: 0 UID: 0 PID: 5016 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT(full) [ 123.286202][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.286235][ T5016] Call Trace: [ 123.286243][ T5016] [ 123.286260][ T5016] __dump_stack+0x1d/0x30 [ 123.286302][ T5016] dump_stack_lvl+0x95/0xd0 [ 123.286326][ T5016] dump_stack+0x15/0x1b [ 123.286344][ T5016] should_fail_ex+0x263/0x280 [ 123.286396][ T5016] ? alloc_pipe_info+0xad/0x340 [ 123.286472][ T5016] should_failslab+0x8c/0xb0 [ 123.286518][ T5016] __kmalloc_cache_noprof+0x5f/0x400 [ 123.286565][ T5016] alloc_pipe_info+0xad/0x340 [ 123.286633][ T5016] splice_direct_to_actor+0x591/0x670 [ 123.286706][ T5016] ? kstrtouint_from_user+0xa8/0xf0 [ 123.286738][ T5016] ? __pfx_direct_splice_actor+0x10/0x10 [ 123.286788][ T5016] ? __rcu_read_unlock+0x4e/0x70 [ 123.286890][ T5016] ? get_pid_task+0x96/0xd0 [ 123.286928][ T5016] ? avc_policy_seqno+0x15/0x30 [ 123.287018][ T5016] ? selinux_file_permission+0x1e1/0x320 [ 123.287047][ T5016] do_splice_direct+0x119/0x1a0 [ 123.287155][ T5016] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 123.287190][ T5016] do_sendfile+0x382/0x650 [ 123.287219][ T5016] __x64_sys_sendfile64+0x105/0x150 [ 123.287261][ T5016] x64_sys_call+0x2dc4/0x3020 [ 123.287328][ T5016] do_syscall_64+0x12c/0x3b0 [ 123.287360][ T5016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.287383][ T5016] RIP: 0033:0x7f2eb375cdd9 [ 123.287416][ T5016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.287439][ T5016] RSP: 002b:00007f2eb21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 123.287515][ T5016] RAX: ffffffffffffffda RBX: 00007f2eb39d5fa0 RCX: 00007f2eb375cdd9 [ 123.287534][ T5016] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 123.287548][ T5016] RBP: 00007f2eb21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.287564][ T5016] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000001 [ 123.287581][ T5016] R13: 00007f2eb39d6038 R14: 00007f2eb39d5fa0 R15: 00007ffd9f6cfc18 [ 123.287651][ T5016] [ 123.572626][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.579892][ T4989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.618295][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.697256][ T5031] EXT4-fs: Ignoring removed bh option [ 123.774715][ T5031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.137813][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.221360][ T5042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 124.234105][ T5042] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.331870][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 124.379006][ T5044] set_capacity_and_notify: 7 callbacks suppressed [ 124.379056][ T5044] loop1: detected capacity change from 0 to 512 [ 124.486090][ T5055] loop0: detected capacity change from 0 to 512 [ 124.564349][ T5055] 9p: Bad value for 'rfdno' [ 124.606092][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.416'. [ 124.663045][ T5044] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 124.734347][ T5044] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 124.804820][ T5044] System zones: 0-1, 15-15, 18-18, 34-34 [ 124.857660][ T5044] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.910996][ T5044] __quota_error: 260 callbacks suppressed [ 124.911546][ T5044] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 125.078674][ T5058] loop3: detected capacity change from 0 to 764 [ 125.093478][ T5044] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.139954][ T5058] rock: directory entry would overflow storage [ 125.187329][ T5058] rock: sig=0x4654, size=5, remaining=4 [ 125.206491][ T28] audit: type=1400 audit(1777377700.084:2354): avc: denied { create } for pid=5057 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.228051][ T5044] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 125.242747][ T28] audit: type=1400 audit(1777377700.104:2355): avc: denied { read } for pid=5057 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.269844][ T5044] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.411: bad orphan inode 16 [ 125.312685][ T5044] loop1: lost filesystem error report for type 5 error -117 [ 125.313396][ T5044] ext4_test_bit(bit=15, block=18) = 1 [ 125.316659][ T5064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 125.320978][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.321015][ C1] EXT4-fs (loop1): initial error at time 1777377700: ext4_orphan_get:1423 [ 125.321078][ C1] EXT4-fs (loop1): last error at time 1777377700: ext4_orphan_get:1423 [ 125.327282][ T28] audit: type=1400 audit(1777377700.114:2356): avc: denied { bind } for pid=5047 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.337411][ T5044] is_bad_inode(inode)=0 [ 125.337482][ T5044] NEXT_ORPHAN(inode)=0 [ 125.381618][ T5060] loop2: detected capacity change from 0 to 8192 [ 125.405996][ T28] audit: type=1400 audit(1777377700.114:2357): avc: denied { setopt } for pid=5047 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.442645][ T5060] forcing mempool usage for bio_alloc_bioset+0x39f/0x640 [ 125.461275][ T28] audit: type=1400 audit(1777377700.164:2358): avc: denied { write } for pid=5057 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.522765][ T28] audit: type=1400 audit(1777377700.324:2359): avc: denied { mounton } for pid=5059 comm="syz.2.418" path="/89/bus/bus" dev="loop2" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 125.561680][ T5065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5065 comm=syz.0.419 [ 125.590844][ T28] audit: type=1326 audit(1777377700.324:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45fa6cdd9 code=0x7ffc0000 [ 125.634882][ T28] audit: type=1326 audit(1777377700.344:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45fa6cdd9 code=0x7ffc0000 [ 125.658561][ T5070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5070 comm=syz.0.419 [ 125.671427][ T5044] max_ino=32 [ 125.682144][ T3304] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 125.701070][ T5044] i_nlink=2 [ 125.704437][ T3304] FAT-fs (loop2): Filesystem has been set read-only [ 125.716012][ T5044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.732128][ T28] audit: type=1326 audit(1777377700.344:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45fa6cdd9 code=0x7ffc0000 [ 125.779414][ T5065] loop0: detected capacity change from 0 to 764 [ 126.612771][ T5080] Cannot find add_set index 0 as target [ 126.920842][ T5080] loop4: detected capacity change from 0 to 256 [ 126.942779][ T5044] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.411'. [ 126.952308][ T5044] netlink: zone id is out of range [ 126.958574][ T5044] netlink: zone id is out of range [ 126.964178][ T5044] netlink: zone id is out of range [ 126.969901][ T5044] netlink: zone id is out of range [ 126.976532][ T5044] netlink: zone id is out of range [ 127.076875][ T5080] FAT-fs (loop4): Directory bread(block 64) failed [ 127.083508][ T5080] FAT-fs (loop4): Directory bread(block 65) failed [ 127.090117][ T5080] FAT-fs (loop4): Directory bread(block 66) failed [ 127.096684][ T5080] FAT-fs (loop4): Directory bread(block 67) failed [ 127.103338][ T5080] FAT-fs (loop4): Directory bread(block 68) failed [ 127.109910][ T5080] FAT-fs (loop4): Directory bread(block 69) failed [ 127.116564][ T5080] FAT-fs (loop4): Directory bread(block 70) failed [ 127.123204][ T5080] FAT-fs (loop4): Directory bread(block 71) failed [ 127.129852][ T5080] FAT-fs (loop4): Directory bread(block 72) failed [ 127.136516][ T5080] FAT-fs (loop4): Directory bread(block 73) failed [ 127.316059][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.325141][ T5078] netlink: 2 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.334745][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.343832][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.352783][ T5078] netlink: 2 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.362030][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.371169][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.380216][ T5078] netlink: 2 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.389526][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.430983][ T5044] netlink: zone id is out of range [ 127.534874][ T5044] netlink: zone id is out of range [ 127.800795][ T5044] netlink: zone id is out of range [ 127.825233][ T5044] netlink: zone id is out of range [ 127.987784][ T5044] netlink: zone id is out of range [ 128.004191][ T5088] loop0: detected capacity change from 0 to 512 [ 128.471349][ T5088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.609903][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.647979][ T5088] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.797466][ T5097] loop2: detected capacity change from 0 to 512 [ 128.816834][ T5088] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 128.847330][ T5099] tipc: Enabling of bearer rejected, failed to enable media [ 128.942200][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.043875][ T5107] loop1: detected capacity change from 0 to 512 [ 129.619759][ T5115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5115 comm=syz.0.430 [ 129.702315][ T5115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5115 comm=syz.0.430 [ 129.875900][ T5118] loop4: detected capacity change from 0 to 1024 [ 129.931884][ T28] kauditd_printk_skb: 155 callbacks suppressed [ 129.931898][ T28] audit: type=1326 audit(1777377704.814:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd45fa6cb42 code=0x7ffc0000 [ 129.999025][ T5118] EXT4-fs: Mount option(s) incompatible with ext3 [ 130.012502][ T28] audit: type=1326 audit(1777377704.894:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.093195][ T28] audit: type=1326 audit(1777377704.894:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.171042][ T28] audit: type=1326 audit(1777377704.894:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.205285][ T5118] loop4: detected capacity change from 0 to 512 [ 130.212399][ T28] audit: type=1326 audit(1777377704.894:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.245143][ T5118] EXT4-fs: test_dummy_encryption option not supported [ 130.281769][ T28] audit: type=1326 audit(1777377704.944:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.314563][ T28] audit: type=1326 audit(1777377704.944:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.361574][ T28] audit: type=1326 audit(1777377704.944:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.385265][ T28] audit: type=1326 audit(1777377704.954:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 130.409032][ T28] audit: type=1326 audit(1777377705.004:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 130.449816][ T5114] loop0: detected capacity change from 0 to 764 [ 130.608426][ T5148] FAULT_INJECTION: forcing a failure. [ 130.608426][ T5148] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.622099][ T5148] CPU: 0 UID: 0 PID: 5148 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT(full) [ 130.622131][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.622145][ T5148] Call Trace: [ 130.622152][ T5148] [ 130.622161][ T5148] __dump_stack+0x1d/0x30 [ 130.622240][ T5148] dump_stack_lvl+0x95/0xd0 [ 130.622260][ T5148] dump_stack+0x15/0x1b [ 130.622278][ T5148] should_fail_ex+0x263/0x280 [ 130.622356][ T5148] should_fail+0xb/0x20 [ 130.622385][ T5148] should_fail_usercopy+0x1a/0x20 [ 130.622471][ T5148] _copy_from_user+0x1c/0xb0 [ 130.622511][ T5148] do_replace+0x8a/0x360 [ 130.622544][ T5148] do_ebt_set_ctl+0x12e/0xcd0 [ 130.622576][ T5148] ? _parse_integer_limit+0x170/0x190 [ 130.622683][ T5148] ? __rcu_read_unlock+0x4e/0x70 [ 130.622713][ T5148] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 130.622735][ T5148] ? ip4_datagram_release_cb+0x3ee/0x420 [ 130.622761][ T5148] ? _parse_integer+0x27/0x40 [ 130.622800][ T5148] ? _raw_spin_unlock_bh+0x18/0x20 [ 130.622873][ T5148] ? release_sock+0x10c/0x180 [ 130.622911][ T5148] ? sockopt_release_sock+0x41/0x50 [ 130.622973][ T5148] ? do_ip_setsockopt+0x1af1/0x2290 [ 130.623012][ T5148] nf_setsockopt+0x199/0x1b0 [ 130.623088][ T5148] ip_setsockopt+0x102/0x110 [ 130.623163][ T5148] udp_setsockopt+0x89/0xa0 [ 130.623205][ T5148] sock_common_setsockopt+0x69/0x80 [ 130.623257][ T5148] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.623295][ T5148] __sys_setsockopt+0x184/0x200 [ 130.623318][ T5148] __x64_sys_setsockopt+0x64/0x80 [ 130.623338][ T5148] x64_sys_call+0x2327/0x3020 [ 130.623361][ T5148] do_syscall_64+0x12c/0x3b0 [ 130.623419][ T5148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.623441][ T5148] RIP: 0033:0x7efc1436cdd9 [ 130.623456][ T5148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.623561][ T5148] RSP: 002b:00007efc12dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.623609][ T5148] RAX: ffffffffffffffda RBX: 00007efc145e5fa0 RCX: 00007efc1436cdd9 [ 130.623626][ T5148] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 130.623641][ T5148] RBP: 00007efc12dbf090 R08: 0000000000000108 R09: 0000000000000000 [ 130.623655][ T5148] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 130.623667][ T5148] R13: 00007efc145e6038 R14: 00007efc145e5fa0 R15: 00007ffd0eb99998 [ 130.623685][ T5148] [ 130.926259][ T5152] Cannot find add_set index 0 as target [ 130.943598][ T5152] loop2: detected capacity change from 0 to 256 [ 131.137579][ T5152] FAT-fs (loop2): Directory bread(block 64) failed [ 131.144207][ T5152] FAT-fs (loop2): Directory bread(block 65) failed [ 131.150810][ T5152] FAT-fs (loop2): Directory bread(block 66) failed [ 131.157438][ T5152] FAT-fs (loop2): Directory bread(block 67) failed [ 131.164050][ T5152] FAT-fs (loop2): Directory bread(block 68) failed [ 131.170713][ T5152] FAT-fs (loop2): Directory bread(block 69) failed [ 131.177436][ T5152] FAT-fs (loop2): Directory bread(block 70) failed [ 131.184058][ T5152] FAT-fs (loop2): Directory bread(block 71) failed [ 131.190764][ T5152] FAT-fs (loop2): Directory bread(block 72) failed [ 131.197415][ T5152] FAT-fs (loop2): Directory bread(block 73) failed [ 131.215185][ T5162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5162 comm=syz.3.453 [ 131.393963][ T5166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5166 comm=syz.3.453 [ 131.492148][ T5158] loop3: detected capacity change from 0 to 764 [ 131.906239][ T5172] loop4: detected capacity change from 0 to 512 [ 132.845819][ T5184] loop0: detected capacity change from 0 to 128 [ 132.909264][ T5187] FAULT_INJECTION: forcing a failure. [ 132.909264][ T5187] name failslab, interval 1, probability 0, space 0, times 0 [ 132.929946][ T5184] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 132.967617][ T5187] CPU: 0 UID: 0 PID: 5187 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) [ 132.967649][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.967665][ T5187] Call Trace: [ 132.967673][ T5187] [ 132.967682][ T5187] __dump_stack+0x1d/0x30 [ 132.967711][ T5187] dump_stack_lvl+0x95/0xd0 [ 132.967789][ T5187] dump_stack+0x15/0x1b [ 132.967814][ T5187] should_fail_ex+0x263/0x280 [ 132.967848][ T5187] ? rtnl_newlink+0x5c/0x1400 [ 132.967965][ T5187] should_failslab+0x8c/0xb0 [ 132.968086][ T5187] __kmalloc_cache_noprof+0x5f/0x400 [ 132.968166][ T5187] ? __pfx_rtnl_newlink+0x10/0x10 [ 132.968200][ T5187] rtnl_newlink+0x5c/0x1400 [ 132.968228][ T5187] ? lapic_next_event+0x11/0x20 [ 132.968254][ T5187] ? clockevents_program_event+0x2fd/0x340 [ 132.968330][ T5187] ? tick_program_event+0x79/0xc0 [ 132.968366][ T5187] ? _raw_spin_unlock+0x9/0x30 [ 132.968398][ T5187] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 132.968433][ T5187] ? irqentry_exit+0x527/0x5b0 [ 132.968478][ T5187] ? __siphash_unaligned+0x197/0x2e0 [ 132.968503][ T5187] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 132.968544][ T5187] ? __rcu_read_unlock+0x4e/0x70 [ 132.968570][ T5187] ? avc_has_perm_noaudit+0xab/0x130 [ 132.968615][ T5187] ? cred_has_capability+0x224/0x2a0 [ 132.968649][ T5187] ? selinux_capable+0x31/0x40 [ 132.968688][ T5187] ? security_capable+0x7b/0x90 [ 132.968802][ T5187] ? ns_capable+0x7c/0xb0 [ 132.968843][ T5187] ? __pfx_rtnl_newlink+0x10/0x10 [ 132.968877][ T5187] rtnetlink_rcv_msg+0x64b/0x720 [ 132.968916][ T5187] netlink_rcv_skb+0x123/0x220 [ 132.969026][ T5187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.969066][ T5187] rtnetlink_rcv+0x1c/0x30 [ 132.969097][ T5187] netlink_unicast+0x5a8/0x680 [ 132.969163][ T5187] netlink_sendmsg+0x5c8/0x6f0 [ 132.969200][ T5187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.969236][ T5187] ____sys_sendmsg+0x563/0x5b0 [ 132.969294][ T5187] ___sys_sendmsg+0x195/0x1e0 [ 132.969394][ T5187] __x64_sys_sendmsg+0xd4/0x160 [ 132.969426][ T5187] x64_sys_call+0x194c/0x3020 [ 132.969511][ T5187] do_syscall_64+0x12c/0x3b0 [ 132.969541][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.969568][ T5187] RIP: 0033:0x7f2eb375cdd9 [ 132.969587][ T5187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.969645][ T5187] RSP: 002b:00007f2eb21b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.969718][ T5187] RAX: ffffffffffffffda RBX: 00007f2eb39d5fa0 RCX: 00007f2eb375cdd9 [ 132.969783][ T5187] RDX: 00000000000488c0 RSI: 0000200000000040 RDI: 0000000000000005 [ 132.969799][ T5187] RBP: 00007f2eb21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.969815][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.969829][ T5187] R13: 00007f2eb39d6038 R14: 00007f2eb39d5fa0 R15: 00007ffd9f6cfc18 [ 132.969931][ T5187] [ 133.303667][ T5190] loop2: detected capacity change from 0 to 512 [ 133.352156][ T5192] loop3: detected capacity change from 0 to 512 [ 133.412405][ T5196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.484553][ T5201] loop0: detected capacity change from 0 to 512 [ 133.504234][ T5196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.558801][ T5201] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 133.665877][ T5204] 9p: Bad value for 'rfdno' [ 133.751247][ T5201] EXT4-fs (loop0): 1 truncate cleaned up [ 133.793894][ T5201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.195991][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.541823][ T5223] UHID_CREATE from different security context by process 301 (syz.1.461), this is not allowed. [ 135.058563][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 135.058646][ T28] audit: type=1400 audit(1777377709.944:2879): avc: denied { setattr } for pid=5239 comm="syz.1.466" name="SMC" dev="sockfs" ino=11431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.110738][ T5238] set_capacity_and_notify: 1 callbacks suppressed [ 135.110754][ T5238] loop3: detected capacity change from 0 to 512 [ 135.126590][ T5240] capability: warning: `syz.1.466' uses 32-bit capabilities (legacy support in use) [ 135.232986][ T28] audit: type=1400 audit(1777377709.984:2880): avc: denied { connect } for pid=5239 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.305769][ T28] audit: type=1400 audit(1777377710.064:2881): avc: denied { create } for pid=5239 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 135.387836][ T5258] loop4: detected capacity change from 0 to 512 [ 135.425557][ T5260] loop1: detected capacity change from 0 to 512 [ 135.435437][ T5258] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 135.488984][ T5258] EXT4-fs (loop4): 1 truncate cleaned up [ 135.499120][ T5258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.638729][ T5262] loop0: detected capacity change from 0 to 1024 [ 135.704652][ T5262] EXT4-fs: Mount option(s) incompatible with ext3 [ 135.776707][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.009835][ T5273] loop4: detected capacity change from 0 to 512 [ 136.516575][ T5238] syz.3.464 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 136.536761][ T28] audit: type=1400 audit(1777377711.414:2882): avc: denied { mount } for pid=5275 comm="syz.2.475" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 136.561490][ T5238] CPU: 1 UID: 0 PID: 5238 Comm: syz.3.464 Not tainted syzkaller #0 PREEMPT(full) [ 136.561517][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.561529][ T5238] Call Trace: [ 136.561536][ T5238] [ 136.561544][ T5238] __dump_stack+0x1d/0x30 [ 136.561654][ T5238] dump_stack_lvl+0x95/0xd0 [ 136.561677][ T5238] dump_stack+0x15/0x1b [ 136.561695][ T5238] dump_header+0x80/0x240 [ 136.561731][ T5238] oom_kill_process+0x295/0x350 [ 136.561825][ T5238] out_of_memory+0x97d/0xb80 [ 136.561938][ T5238] try_charge_memcg+0x62f/0xa10 [ 136.561978][ T5238] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 136.562002][ T5238] __alloc_frozen_pages_noprof+0x18a/0x350 [ 136.562033][ T5238] alloc_pages_mpol+0xb3/0x260 [ 136.562100][ T5238] ? mod_lruvec_state+0xe0/0xf0 [ 136.562135][ T5238] alloc_pages_noprof+0x8f/0x140 [ 136.562186][ T5238] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 136.562227][ T5238] __kvmalloc_node_noprof+0x3d4/0x640 [ 136.562256][ T5238] ? futex_hash_allocate+0x190/0x9a0 [ 136.562291][ T5238] ? futex_hash_allocate+0x190/0x9a0 [ 136.562324][ T5238] futex_hash_allocate+0x190/0x9a0 [ 136.562389][ T5238] ? cap_task_prctl+0x13f/0x6b0 [ 136.562419][ T5238] futex_hash_prctl+0xd8/0xf0 [ 136.562545][ T5238] __se_sys_prctl+0x4f4/0x1400 [ 136.562581][ T5238] __x64_sys_prctl+0x67/0x80 [ 136.562615][ T5238] x64_sys_call+0x2533/0x3020 [ 136.562716][ T5238] do_syscall_64+0x12c/0x3b0 [ 136.562749][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.562831][ T5238] RIP: 0033:0x7f2eb375cdd9 [ 136.562859][ T5238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.562883][ T5238] RSP: 002b:00007f2eb21b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 136.562948][ T5238] RAX: ffffffffffffffda RBX: 00007f2eb39d5fa0 RCX: 00007f2eb375cdd9 [ 136.562966][ T5238] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 136.562983][ T5238] RBP: 00007f2eb37f2d69 R08: 0000000000000000 R09: 0000000000000000 [ 136.563000][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.563016][ T5238] R13: 00007f2eb39d6038 R14: 00007f2eb39d5fa0 R15: 00007ffd9f6cfc18 [ 136.563042][ T5238] [ 136.607531][ T5238] memory: usage 284908kB, limit 307200kB, failcnt 1929 [ 136.632852][ T5262] loop0: detected capacity change from 0 to 512 [ 136.836147][ T5238] memory+swap: usage 251036kB, limit 9007199254740988kB, failcnt 0 [ 136.863119][ T5238] kmem: usage 236620kB, limit 9007199254740988kB, failcnt 0 [ 136.908851][ T5262] EXT4-fs: test_dummy_encryption option not supported [ 136.911195][ T5281] loop2: detected capacity change from 0 to 512 [ 136.938496][ T5238] Memory cgroup stats for /syz3: [ 136.938951][ T5238] cache 524288 [ 136.968697][ T5238] rss 12288 [ 136.985206][ T5281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.476: bg 0: block 393: padding at end of block bitmap is not set [ 137.011162][ T5238] shmem 0 [ 137.018758][ T5281] loop2: lost filesystem error report for type 5 error -117 [ 137.023306][ T5238] mapped_file 65536 [ 137.023393][ T5238] dirty 0 [ 137.023403][ T5238] writeback 0 [ 137.023412][ T5238] workingset_refault_anon 298 [ 137.023422][ T5238] workingset_refault_file 1570 [ 137.023433][ T5238] swap 466944 [ 137.023442][ T5238] swapcached 6934528 [ 137.023451][ T5238] pgpgin 50215 [ 137.023460][ T5238] pgpgout 50084 [ 137.023468][ T5238] pgfault 67471 [ 137.023481][ T5238] pgmajfault 7234 [ 137.023490][ T5238] inactive_anon 0 [ 137.023499][ T5238] active_anon 12288 [ 137.023508][ T5238] inactive_file 0 [ 137.023517][ T5238] active_file 524288 [ 137.023527][ T5238] unevictable 0 [ 137.023536][ T5238] hierarchical_memory_limit 314572800 [ 137.023547][ T5238] hierarchical_memsw_limit 9223372036854771712 [ 137.023558][ T5238] total_cache 524288 [ 137.023570][ T5238] total_rss 12288 [ 137.023579][ T5238] total_shmem 0 [ 137.023588][ T5238] total_mapped_file 65536 [ 137.023597][ T5238] total_dirty 0 [ 137.023606][ T5238] total_writeback 0 [ 137.023627][ T5238] total_workingset_refault_anon 298 [ 137.023639][ T5238] total_workingset_refault_file 1570 [ 137.023650][ T5238] total_swap 466944 [ 137.023676][ T5238] total_swapcached 6934528 [ 137.023686][ T5238] total_pgpgin 50215 [ 137.023696][ T5238] total_pgpgout 50084 [ 137.023705][ T5238] total_pgfault 67471 [ 137.023715][ T5238] total_pgmajfault 7234 [ 137.023725][ T5238] total_inactive_anon 0 [ 137.023735][ T5238] total_active_anon 12288 [ 137.023792][ T5238] total_inactive_file 0 [ 137.023802][ T5238] total_active_file 524288 [ 137.023812][ T5238] total_unevictable 0 [ 137.023822][ T5238] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.464,pid=5237,uid=0 [ 137.023977][ T5238] Memory cgroup out of memory: Killed process 5238 (syz.3.464) total-vm:96216kB, anon-rss:1260kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 137.033328][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 137.033352][ C1] EXT4-fs (loop2): initial error at time 1777377711: ext4_validate_block_bitmap:441 [ 137.033396][ C1] EXT4-fs (loop2): last error at time 1777377711: ext4_validate_block_bitmap:441 [ 137.033606][ T5281] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 137.033634][ T5281] loop2: lost filesystem error report for type 5 error -117 [ 137.035208][ T5281] EXT4-fs (loop2): 2 truncates cleaned up [ 137.035754][ T5281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.053039][ T28] audit: type=1400 audit(1777377711.934:2883): avc: denied { write open } for pid=5280 comm="syz.2.476" path=2F3130322F66696C65302F233138202864656C6574656429 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.122385][ T5286] loop4: detected capacity change from 0 to 512 [ 137.185385][ T5286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 137.185461][ T5286] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.208541][ T28] audit: type=1400 audit(1777377712.094:2884): avc: denied { add_name } for pid=5285 comm="syz.4.477" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.253872][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.491413][ T28] audit: type=1400 audit(1777377712.374:2885): avc: denied { write } for pid=5303 comm="syz.0.483" path="socket:[11152]" dev="sockfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.491658][ T28] audit: type=1400 audit(1777377712.374:2886): avc: denied { read } for pid=5303 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.514454][ T5304] loop0: detected capacity change from 0 to 512 [ 137.516405][ T5304] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 137.516451][ T5304] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.520751][ T5304] EXT4-fs (loop0): 1 truncate cleaned up [ 137.536295][ T5304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.538081][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 137.540451][ T5307] __nla_validate_parse: 54 callbacks suppressed [ 137.540478][ T5307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'. [ 137.540506][ T28] audit: type=1400 audit(1777377712.424:2887): avc: denied { nlmsg_read } for pid=5300 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.647691][ T5310] loop2: detected capacity change from 0 to 1764 [ 137.724503][ T5312] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.737439][ T28] audit: type=1400 audit(1777377712.624:2888): avc: denied { read } for pid=5308 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.768644][ T5301] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 137.768724][ T5301] netlink: 256 bytes leftover after parsing attributes in process `syz.3.481'. [ 137.768848][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.768993][ T5304] netlink: 'syz.0.483': attribute type 3 has an invalid length. [ 137.769045][ T5304] netlink: 'syz.0.483': attribute type 3 has an invalid length. [ 137.817049][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.132705][ T5319] 9p: Bad value for 'rfdno' [ 140.201268][ T5335] set_capacity_and_notify: 3 callbacks suppressed [ 140.201304][ T5335] loop4: detected capacity change from 0 to 1024 [ 140.277330][ T5352] Cannot find add_set index 0 as target [ 140.329807][ T5351] loop0: detected capacity change from 0 to 512 [ 140.923524][ T5358] loop1: detected capacity change from 0 to 512 [ 140.937977][ T5335] EXT4-fs: Mount option(s) incompatible with ext3 [ 140.951887][ T5358] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.904400][ T5367] loop0: detected capacity change from 0 to 512 [ 142.544577][ T5335] loop4: detected capacity change from 0 to 512 [ 142.596816][ T5335] EXT4-fs: test_dummy_encryption option not supported [ 142.643309][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 142.643326][ T28] audit: type=1400 audit(1777377717.524:2914): avc: denied { append } for pid=5387 comm="syz.2.504" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 142.729344][ T5386] loop3: detected capacity change from 0 to 2048 [ 143.052446][ T5395] Cannot find add_set index 0 as target [ 143.190485][ T5391] loop0: detected capacity change from 0 to 8192 [ 143.407509][ T5401] loop3: detected capacity change from 0 to 512 [ 143.895626][ T28] audit: type=1400 audit(1777377718.774:2915): avc: denied { read } for pid=5389 comm="syz.0.505" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.179674][ T28] audit: type=1400 audit(1777377718.854:2916): avc: denied { bind } for pid=5389 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.232189][ T5408] loop4: detected capacity change from 0 to 512 [ 144.287968][ T3296] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 144.295970][ T3296] FAT-fs (loop0): Filesystem has been set read-only [ 144.349316][ T5408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.425199][ T5417] loop3: detected capacity change from 0 to 512 [ 144.439584][ T5408] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.481683][ T5415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.496244][ T5417] EXT4-fs: Ignoring removed oldalloc option [ 144.516145][ T5417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.530009][ T5415] EXT4-fs (loop2): shut down requested (1) [ 144.545309][ T28] audit: type=1326 audit(1777377719.424:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42c8cdd9 code=0x7ffc0000 [ 144.568961][ T28] audit: type=1400 audit(1777377719.434:2918): avc: denied { read } for pid=2965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 144.591163][ T28] audit: type=1400 audit(1777377719.434:2919): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.622780][ T28] audit: type=1400 audit(1777377719.434:2920): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.648979][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.659805][ T5417] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.513: invalid indirect mapped block 83886080 (level 1) [ 144.679325][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 144.691681][ T28] audit: type=1400 audit(1777377719.434:2921): avc: denied { add_name } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.726603][ T5417] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.727031][ T28] audit: type=1400 audit(1777377719.434:2922): avc: denied { create } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.730026][ T5417] EXT4-fs (loop3): Remounting filesystem read-only [ 144.736242][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 144.736260][ C1] EXT4-fs (loop3): initial error at time 1777377719: ext4_free_branches:1023: inode 16 [ 144.736288][ C1] EXT4-fs (loop3): last error at time 1777377719: ext4_free_branches:1023: inode 16 [ 144.738590][ T28] audit: type=1400 audit(1777377719.434:2923): avc: denied { append open } for pid=2965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.812723][ T5417] EXT4-fs (loop3): 1 orphan inode deleted [ 144.818699][ T5417] EXT4-fs (loop3): 1 truncate cleaned up [ 144.826961][ T5417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.117220][ T5440] Cannot find add_set index 0 as target [ 145.628443][ T5445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.637708][ T5445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.695087][ T5443] FAULT_INJECTION: forcing a failure. [ 145.695087][ T5443] name failslab, interval 1, probability 0, space 0, times 0 [ 145.743392][ T5443] CPU: 0 UID: 0 PID: 5443 Comm: syz.3.513 Not tainted syzkaller #0 PREEMPT(full) [ 145.743422][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.743463][ T5443] Call Trace: [ 145.743469][ T5443] [ 145.743476][ T5443] __dump_stack+0x1d/0x30 [ 145.743501][ T5443] dump_stack_lvl+0x95/0xd0 [ 145.743577][ T5443] dump_stack+0x15/0x1b [ 145.743636][ T5443] should_fail_ex+0x263/0x280 [ 145.743662][ T5443] ? alloc_pipe_info+0xad/0x340 [ 145.743698][ T5443] should_failslab+0x8c/0xb0 [ 145.743729][ T5443] __kmalloc_cache_noprof+0x5f/0x400 [ 145.743780][ T5443] alloc_pipe_info+0xad/0x340 [ 145.743814][ T5443] splice_direct_to_actor+0x591/0x670 [ 145.743933][ T5443] ? kstrtouint_from_user+0xa8/0xf0 [ 145.743968][ T5443] ? __pfx_direct_splice_actor+0x10/0x10 [ 145.743999][ T5443] ? __rcu_read_unlock+0x4e/0x70 [ 145.744018][ T5443] ? get_pid_task+0x96/0xd0 [ 145.744099][ T5443] ? avc_policy_seqno+0x15/0x30 [ 145.744129][ T5443] ? selinux_file_permission+0x1e1/0x320 [ 145.744158][ T5443] do_splice_direct+0x119/0x1a0 [ 145.744216][ T5443] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 145.744244][ T5443] do_sendfile+0x382/0x650 [ 145.744270][ T5443] __x64_sys_sendfile64+0x105/0x150 [ 145.744309][ T5443] x64_sys_call+0x2dc4/0x3020 [ 145.744379][ T5443] do_syscall_64+0x12c/0x3b0 [ 145.744403][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.744546][ T5443] RIP: 0033:0x7f2eb375cdd9 [ 145.744566][ T5443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.744586][ T5443] RSP: 002b:00007f2eb2175028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 145.744610][ T5443] RAX: ffffffffffffffda RBX: 00007f2eb39d6180 RCX: 00007f2eb375cdd9 [ 145.744626][ T5443] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 145.744639][ T5443] RBP: 00007f2eb2175090 R08: 0000000000000000 R09: 0000000000000000 [ 145.744651][ T5443] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.744742][ T5443] R13: 00007f2eb39d6218 R14: 00007f2eb39d6180 R15: 00007ffd9f6cfc18 [ 145.744768][ T5443] [ 146.272166][ T5454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 146.351747][ T5455] Cannot find add_set index 0 as target [ 146.700961][ T5457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5457 comm=syz.2.520 [ 146.841726][ T5457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=303 sclass=netlink_route_socket pid=5457 comm=syz.2.520 [ 147.273361][ T5457] set_capacity_and_notify: 2 callbacks suppressed [ 147.273377][ T5457] loop2: detected capacity change from 0 to 764 [ 147.605080][ T5466] loop0: detected capacity change from 0 to 4096 [ 147.607620][ T5466] ext4: Bad value for 'commit' [ 147.715398][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 147.715413][ T28] audit: type=1400 audit(1777377722.594:3040): avc: denied { create } for pid=5463 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.723327][ T28] audit: type=1400 audit(1777377722.604:3041): avc: denied { setopt } for pid=5463 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.810032][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.089840][ T28] audit: type=1326 audit(1777377722.964:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa597ecdd9 code=0x7ffc0000 [ 148.158807][ T5473] loop4: detected capacity change from 0 to 512 [ 148.185440][ T28] audit: type=1400 audit(1777377723.064:3043): avc: denied { write } for pid=5474 comm="syz.2.526" name="file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.318752][ T5477] loop1: detected capacity change from 0 to 512 [ 148.334544][ T5478] netlink: 56 bytes leftover after parsing attributes in process `syz.2.526'. [ 148.363920][ T28] audit: type=1400 audit(1777377723.064:3044): avc: denied { open } for pid=5474 comm="syz.2.526" path="/114/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.556971][ T5473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 148.680664][ T5470] loop3: detected capacity change from 0 to 1024 [ 148.705910][ T5473] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.732073][ T28] audit: type=1400 audit(1777377723.194:3045): avc: denied { bind } for pid=5474 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.846429][ T5470] EXT4-fs: Mount option(s) incompatible with ext3 [ 148.884615][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 148.901593][ T5485] loop2: detected capacity change from 0 to 512 [ 148.991586][ T28] audit: type=1326 audit(1777377723.874:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 149.091918][ T28] audit: type=1326 audit(1777377723.894:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 149.130706][ T28] audit: type=1326 audit(1777377723.914:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 149.133827][ T5470] loop3: detected capacity change from 0 to 512 [ 149.163996][ T28] audit: type=1326 audit(1777377723.914:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1436cdd9 code=0x7ffc0000 [ 149.189069][ T5494] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 149.198669][ T5494] netlink: 256 bytes leftover after parsing attributes in process `syz.1.531'. [ 149.212986][ T5470] EXT4-fs: test_dummy_encryption option not supported [ 149.226749][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.253976][ T5494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 149.305732][ T5497] tipc: Started in network mode [ 149.311087][ T5497] tipc: Node identity e2ecc3d73ed5, cluster identity 4711 [ 149.318899][ T5497] tipc: Enabled bearer , priority 0 [ 149.330276][ T5496] tipc: Disabling bearer [ 149.601540][ T5505] loop1: detected capacity change from 0 to 512 [ 149.713473][ T5505] 9p: Bad value for 'rfdno' [ 150.290400][ T5511] loop3: detected capacity change from 0 to 512 [ 150.423843][ T5511] 9p: Bad value for 'rfdno' [ 150.521651][ T5484] syz.2.528 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 150.687250][ T5484] CPU: 1 UID: 0 PID: 5484 Comm: syz.2.528 Not tainted syzkaller #0 PREEMPT(full) [ 150.687284][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.687320][ T5484] Call Trace: [ 150.687326][ T5484] [ 150.687333][ T5484] __dump_stack+0x1d/0x30 [ 150.687361][ T5484] dump_stack_lvl+0x95/0xd0 [ 150.687385][ T5484] dump_stack+0x15/0x1b [ 150.687471][ T5484] dump_header+0x80/0x240 [ 150.687533][ T5484] oom_kill_process+0x295/0x350 [ 150.687580][ T5484] out_of_memory+0x97d/0xb80 [ 150.687620][ T5484] try_charge_memcg+0x62f/0xa10 [ 150.687661][ T5484] charge_memcg+0x6d/0x120 [ 150.687747][ T5484] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 150.687784][ T5484] __swap_cache_prepare_and_add+0x69/0x4a0 [ 150.687814][ T5484] ? alloc_pages_mpol+0x217/0x260 [ 150.687867][ T5484] swap_cache_alloc_folio+0xa2/0x120 [ 150.687913][ T5484] swap_cluster_readahead+0x35c/0x3c0 [ 150.687990][ T5484] swapin_readahead+0xde/0x840 [ 150.688018][ T5484] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 150.688050][ T5484] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 150.688235][ T5484] ? __rcu_read_unlock+0x4e/0x70 [ 150.688259][ T5484] ? swap_cache_get_folio+0x1e0/0x1f0 [ 150.688354][ T5484] do_swap_page+0x31e/0x2180 [ 150.688385][ T5484] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 150.688416][ T5484] ? __rcu_read_lock+0x36/0x50 [ 150.688441][ T5484] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 150.688535][ T5484] handle_mm_fault+0xb2e/0x2e70 [ 150.688569][ T5484] ? vma_start_read+0x1c7/0x2c0 [ 150.688704][ T5484] do_user_addr_fault+0x62f/0x1050 [ 150.688735][ T5484] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 150.688761][ T5484] ? trace_page_fault_user+0x1f/0xa0 [ 150.688797][ T5484] exc_page_fault+0x62/0xa0 [ 150.688881][ T5484] asm_exc_page_fault+0x26/0x30 [ 150.688904][ T5484] RIP: 0033:0x7faa596b551e [ 150.688920][ T5484] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d db ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 150.688939][ T5484] RSP: 002b:00007fff2a6e2230 EFLAGS: 00010206 [ 150.688958][ T5484] RAX: 00007faa59a65fa0 RBX: 00007faa59a65fa0 RCX: 0000000000000026 [ 150.688978][ T5484] RDX: 0000000000000001 RSI: 00007faa59a66038 RDI: 0000000000000012 [ 150.688994][ T5484] RBP: 00007faa59a67da0 R08: 0000000000000001 R09: 0000000000000001 [ 150.689010][ T5484] R10: 0000000000000026 R11: 0000000000000246 R12: 00000000000248af [ 150.689026][ T5484] R13: 00007faa59a6609c R14: 0000000000024610 R15: 00007fff2a6e23a0 [ 150.689056][ T5484] [ 150.689075][ T5484] memory: usage 294924kB, limit 307200kB, failcnt 983 [ 150.942925][ T5484] memory+swap: usage 276732kB, limit 9007199254740988kB, failcnt 0 [ 150.950933][ T5484] kmem: usage 275528kB, limit 9007199254740988kB, failcnt 0 [ 150.958410][ T5484] Memory cgroup stats for /syz2: [ 150.958741][ T5484] cache 4096 [ 150.966906][ T5484] rss 4096 [ 150.969990][ T5484] shmem 0 [ 150.973027][ T5484] mapped_file 4096 [ 150.976766][ T5484] dirty 0 [ 150.979801][ T5484] writeback 0 [ 150.983169][ T5484] workingset_refault_anon 134 [ 150.987993][ T5484] workingset_refault_file 2477 [ 150.992836][ T5484] swap 466944 [ 150.996211][ T5484] swapcached 3821568 [ 151.000528][ T5484] pgpgin 76704 [ 151.003923][ T5484] pgpgout 76702 [ 151.007470][ T5484] pgfault 102986 [ 151.011046][ T5484] pgmajfault 4598 [ 151.014719][ T5484] inactive_anon 0 [ 151.018385][ T5484] active_anon 4096 [ 151.022114][ T5484] inactive_file 0 [ 151.025759][ T5484] active_file 4096 [ 151.029519][ T5484] unevictable 0 [ 151.032994][ T5484] hierarchical_memory_limit 314572800 [ 151.038707][ T5484] hierarchical_memsw_limit 9223372036854771712 [ 151.044919][ T5484] total_cache 4096 [ 151.048831][ T5484] total_rss 4096 [ 151.052423][ T5484] total_shmem 0 [ 151.055908][ T5484] total_mapped_file 4096 [ 151.079616][ T5516] loop4: detected capacity change from 0 to 2048 [ 151.090474][ T5484] total_dirty 0 [ 151.130888][ T5484] total_writeback 0 [ 151.149282][ T5484] total_workingset_refault_anon 134 [ 151.179892][ T5484] total_workingset_refault_file 2477 [ 151.219197][ T5484] total_swap 466944 [ 151.240519][ T5484] total_swapcached 3821568 [ 151.270050][ T5484] total_pgpgin 76704 [ 151.299738][ T5484] total_pgpgout 76702 [ 151.326032][ T5484] total_pgfault 102986 [ 151.346309][ T5484] total_pgmajfault 4598 [ 151.371133][ T5484] total_inactive_anon 0 [ 151.407292][ T5484] total_active_anon 4096 [ 151.427300][ T5484] total_inactive_file 0 [ 151.435988][ T5527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 151.460771][ T5484] total_active_file 4096 [ 151.477143][ T5484] total_unevictable 0 [ 151.482437][ T5527] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.506174][ T5484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.528,pid=5484,uid=0 [ 151.592857][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 151.607528][ T5484] Memory cgroup out of memory: Killed process 5484 (syz.2.528) total-vm:94168kB, anon-rss:1236kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 151.930551][ T5540] Cannot find add_set index 0 as target [ 152.350621][ T5543] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 152.411309][ T5543] netlink: 256 bytes leftover after parsing attributes in process `syz.0.544'. [ 152.427315][ T5543] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.435391][ T5546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.544'. [ 152.717272][ T28] kauditd_printk_skb: 341 callbacks suppressed [ 152.717290][ T28] audit: type=1326 audit(1777377727.574:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 152.755636][ T5541] syz.2.543 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 152.841520][ T28] audit: type=1326 audit(1777377727.574:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 152.918952][ T5541] CPU: 0 UID: 0 PID: 5541 Comm: syz.2.543 Not tainted syzkaller #0 PREEMPT(full) [ 152.919008][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.919024][ T5541] Call Trace: [ 152.919033][ T5541] [ 152.919044][ T5541] __dump_stack+0x1d/0x30 [ 152.919119][ T5541] dump_stack_lvl+0x95/0xd0 [ 152.919146][ T5541] dump_stack+0x15/0x1b [ 152.919172][ T5541] dump_header+0x80/0x240 [ 152.919200][ T5541] oom_kill_process+0x295/0x350 [ 152.919287][ T5541] out_of_memory+0x97d/0xb80 [ 152.919318][ T5541] try_charge_memcg+0x62f/0xa10 [ 152.919429][ T5541] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 152.919458][ T5541] __alloc_frozen_pages_noprof+0x18a/0x350 [ 152.919484][ T5541] alloc_pages_mpol+0xb3/0x260 [ 152.919518][ T5541] ? mod_lruvec_state+0xe0/0xf0 [ 152.919555][ T5541] alloc_pages_noprof+0x8f/0x140 [ 152.919603][ T5541] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 152.919639][ T5541] __kvmalloc_node_noprof+0x3d4/0x640 [ 152.919666][ T5541] ? futex_hash_allocate+0x190/0x9a0 [ 152.919704][ T5541] ? futex_hash_allocate+0x190/0x9a0 [ 152.919745][ T5541] futex_hash_allocate+0x190/0x9a0 [ 152.919792][ T5541] ? __se_sys_prctl+0x8e/0x1400 [ 152.919825][ T5541] futex_hash_prctl+0xd8/0xf0 [ 152.919923][ T5541] __se_sys_prctl+0x4f4/0x1400 [ 152.919959][ T5541] __x64_sys_prctl+0x67/0x80 [ 152.920071][ T5541] x64_sys_call+0x2533/0x3020 [ 152.920097][ T5541] do_syscall_64+0x12c/0x3b0 [ 152.920175][ T5541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.920201][ T5541] RIP: 0033:0x7faa597ecdd9 [ 152.920219][ T5541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.920258][ T5541] RSP: 002b:00007faa5821e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 152.920280][ T5541] RAX: ffffffffffffffda RBX: 00007faa59a66090 RCX: 00007faa597ecdd9 [ 152.920298][ T5541] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 152.920315][ T5541] RBP: 00007faa59882d69 R08: 0000000000000000 R09: 0000000000000000 [ 152.920331][ T5541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.920343][ T5541] R13: 00007faa59a66128 R14: 00007faa59a66090 R15: 00007fff2a6e2138 [ 152.920393][ T5541] [ 153.159321][ T5558] Cannot find add_set index 0 as target [ 153.221066][ T28] audit: type=1326 audit(1777377727.574:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 153.289381][ T5561] set_capacity_and_notify: 3 callbacks suppressed [ 153.289503][ T5561] loop0: detected capacity change from 0 to 512 [ 153.406338][ T5541] memory: usage 307200kB, limit 307200kB, failcnt 1097 [ 153.406721][ T5541] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 153.408613][ T5541] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 153.409977][ T5541] Memory cgroup stats for /syz2: [ 153.426978][ T5541] cache 0 [ 153.426990][ T5541] rss 4096 [ 153.427000][ T5541] shmem 0 [ 153.427025][ T5541] mapped_file 0 [ 153.427032][ T5541] dirty 0 [ 153.427038][ T5541] writeback 0 [ 153.427045][ T5541] workingset_refault_anon 157 [ 153.427054][ T5541] workingset_refault_file 2977 [ 153.431977][ T5541] swap 466944 [ 153.431987][ T5541] swapcached 4313088 [ 153.433544][ T5541] pgpgin 77373 [ 153.438771][ T5541] pgpgout 77372 [ 153.439546][ T5541] pgfault 103271 [ 153.439555][ T5541] pgmajfault 4617 [ 153.439562][ T5541] inactive_anon 0 [ 153.439569][ T5541] active_anon 4096 [ 153.439575][ T5541] inactive_file 0 [ 153.439584][ T5541] active_file 0 [ 153.440777][ T5541] unevictable 0 [ 153.440786][ T5541] hierarchical_memory_limit 314572800 [ 153.440796][ T5541] hierarchical_memsw_limit 9223372036854771712 [ 153.442857][ T5541] total_cache 0 [ 153.442899][ T5541] total_rss 4096 [ 153.443634][ T5541] total_shmem 0 [ 153.444206][ T5541] total_mapped_file 0 [ 153.445408][ T5541] total_dirty 0 [ 153.445966][ T5541] total_writeback 0 [ 153.445975][ T5541] total_workingset_refault_anon 157 [ 153.445983][ T5541] total_workingset_refault_file 2977 [ 153.445991][ T5541] total_swap 466944 [ 153.445998][ T5541] total_swapcached 4313088 [ 153.446006][ T5541] total_pgpgin 77373 [ 153.446641][ T5541] total_pgpgout 77372 [ 153.446933][ T5541] total_pgfault 103271 [ 153.447969][ T5541] total_pgmajfault 4617 [ 153.448309][ T5541] total_inactive_anon 0 [ 153.448934][ T5541] total_active_anon 4096 [ 153.449048][ T5541] total_inactive_file 0 [ 153.449057][ T5541] total_active_file 0 [ 153.449064][ T5541] total_unevictable 0 [ 153.449072][ T5541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.543,pid=5537,uid=0 [ 153.451215][ T5541] Memory cgroup out of memory: Killed process 5537 (syz.2.543) total-vm:96216kB, anon-rss:1240kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 153.619949][ T5561] 9p: Bad value for 'rfdno' [ 153.832702][ T28] audit: type=1326 audit(1777377727.574:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 153.832798][ T28] audit: type=1326 audit(1777377727.574:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 153.832857][ T28] audit: type=1326 audit(1777377727.574:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 153.832968][ T28] audit: type=1326 audit(1777377727.574:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 153.833010][ T28] audit: type=1326 audit(1777377727.574:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 153.833036][ T28] audit: type=1326 audit(1777377727.584:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 153.833166][ T28] audit: type=1326 audit(1777377727.584:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8a42c4d60e code=0x7ffc0000 [ 154.147499][ T5446] syz.0.518 (5446) used greatest stack depth: 7280 bytes left [ 154.607778][ T5575] Cannot find add_set index 0 as target [ 154.618701][ T5575] loop0: detected capacity change from 0 to 256 [ 154.631519][ T5565] loop1: detected capacity change from 0 to 2048 [ 154.652942][ T5573] loop2: detected capacity change from 0 to 8192 [ 154.797086][ T5575] FAT-fs (loop0): Directory bread(block 64) failed [ 154.797111][ T5575] FAT-fs (loop0): Directory bread(block 65) failed [ 154.797327][ T5575] FAT-fs (loop0): Directory bread(block 66) failed [ 154.797421][ T5575] FAT-fs (loop0): Directory bread(block 67) failed [ 154.797473][ T5575] FAT-fs (loop0): Directory bread(block 68) failed [ 154.797558][ T5575] FAT-fs (loop0): Directory bread(block 69) failed [ 154.797682][ T5575] FAT-fs (loop0): Directory bread(block 70) failed [ 154.797698][ T5575] FAT-fs (loop0): Directory bread(block 71) failed [ 154.797894][ T5575] FAT-fs (loop0): Directory bread(block 72) failed [ 154.797912][ T5575] FAT-fs (loop0): Directory bread(block 73) failed [ 154.832132][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.832226][ T5575] netlink: 2 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.832417][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.832568][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.832584][ T5575] netlink: 2 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.832940][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.833000][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 154.833016][ T5575] netlink: 2 bytes leftover after parsing attributes in process `syz.0.562'. [ 155.352207][ T5582] loop1: detected capacity change from 0 to 512 [ 155.474947][ T3304] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 155.474970][ T3304] FAT-fs (loop2): Filesystem has been set read-only [ 155.947860][ T5581] syz.1.553 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 155.947969][ T5581] CPU: 1 UID: 0 PID: 5581 Comm: syz.1.553 Not tainted syzkaller #0 PREEMPT(full) [ 155.947998][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.948012][ T5581] Call Trace: [ 155.948020][ T5581] [ 155.948028][ T5581] __dump_stack+0x1d/0x30 [ 155.948104][ T5581] dump_stack_lvl+0x95/0xd0 [ 155.948209][ T5581] dump_stack+0x15/0x1b [ 155.948234][ T5581] dump_header+0x80/0x240 [ 155.948361][ T5581] oom_kill_process+0x295/0x350 [ 155.948397][ T5581] out_of_memory+0x97d/0xb80 [ 155.948427][ T5581] try_charge_memcg+0x62f/0xa10 [ 155.948501][ T5581] ? radix_tree_lookup+0xfa/0x140 [ 155.948543][ T5581] charge_memcg+0x6d/0x120 [ 155.948644][ T5581] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 155.948682][ T5581] __swap_cache_prepare_and_add+0x69/0x4a0 [ 155.948715][ T5581] ? alloc_pages_mpol+0x217/0x260 [ 155.948745][ T5581] swap_cache_alloc_folio+0xa2/0x120 [ 155.948809][ T5581] swap_cluster_readahead+0x25f/0x3c0 [ 155.948896][ T5581] swapin_readahead+0xde/0x840 [ 155.948988][ T5581] ? _raw_spin_unlock+0x9/0x30 [ 155.949019][ T5581] ? swap_put_entries_cluster+0x46c/0x490 [ 155.949050][ T5581] ? __rcu_read_unlock+0x4e/0x70 [ 155.949154][ T5581] ? swap_cache_get_folio+0x1e0/0x1f0 [ 155.949184][ T5581] do_swap_page+0x31e/0x2180 [ 155.949216][ T5581] ? css_rstat_updated+0xbb/0x280 [ 155.949303][ T5581] ? __rcu_read_lock+0x36/0x50 [ 155.949327][ T5581] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 155.949355][ T5581] handle_mm_fault+0xb2e/0x2e70 [ 155.949412][ T5581] ? vma_start_read+0x1c7/0x2c0 [ 155.949458][ T5581] do_user_addr_fault+0x62f/0x1050 [ 155.949551][ T5581] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 155.949581][ T5581] ? trace_page_fault_user+0x1f/0xa0 [ 155.949632][ T5581] exc_page_fault+0x62/0xa0 [ 155.949669][ T5581] asm_exc_page_fault+0x26/0x30 [ 155.949695][ T5581] RIP: 0033:0x7f8a42b5a78c [ 155.949711][ T5581] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 155.949735][ T5581] RSP: 002b:00007ffe9f851c20 EFLAGS: 00010206 [ 155.949755][ T5581] RAX: 0000000000000000 RBX: 00007f8a42f05fa0 RCX: 000055557b4db808 [ 155.949770][ T5581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.949849][ T5581] RBP: 00007f8a42f07da0 R08: 0000000000000000 R09: 0000000000000000 [ 155.949863][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000261f1 [ 155.949876][ T5581] R13: 00007f8a42f05fac R14: 0000000000025f6b R15: 00007ffe9f851d20 [ 155.949895][ T5581] [ 155.953513][ T5581] memory: usage 307200kB, limit 307200kB, failcnt 3518 [ 155.953532][ T5581] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 155.953549][ T5581] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0 [ 155.953564][ T5581] Memory cgroup stats for /syz1: [ 155.953886][ T5581] cache 0 [ 155.953922][ T5581] rss 4096 [ 155.953931][ T5581] shmem 0 [ 155.953939][ T5581] mapped_file 0 [ 155.953948][ T5581] dirty 0 [ 155.953957][ T5581] writeback 4096 [ 155.953966][ T5581] workingset_refault_anon 629 [ 155.953975][ T5581] workingset_refault_file 4221 [ 155.953983][ T5581] swap 462848 [ 155.954061][ T5581] swapcached 13778944 [ 155.954071][ T5581] pgpgin 62980 [ 155.954079][ T5581] pgpgout 62977 [ 155.954088][ T5581] pgfault 60873 [ 155.954095][ T5581] pgmajfault 258 [ 155.954102][ T5581] inactive_anon 12288 [ 155.954108][ T5581] active_anon 0 [ 155.967216][ T5581] inactive_file 0 [ 155.967240][ T5581] active_file 0 [ 155.967249][ T5581] unevictable 0 [ 155.967259][ T5581] hierarchical_memory_limit 314572800 [ 155.967269][ T5581] hierarchical_memsw_limit 9223372036854771712 [ 155.967281][ T5581] total_cache 0 [ 155.967289][ T5581] total_rss 4096 [ 155.967298][ T5581] total_shmem 0 [ 155.967349][ T5581] total_mapped_file 0 [ 155.967357][ T5581] total_dirty 0 [ 155.967363][ T5581] total_writeback 4096 [ 155.967371][ T5581] total_workingset_refault_anon 629 [ 155.967463][ T5581] total_workingset_refault_file 4221 [ 155.967482][ T5581] total_swap 462848 [ 155.967491][ T5581] total_swapcached 13778944 [ 155.967567][ T5581] total_pgpgin 62980 [ 155.967576][ T5581] total_pgpgout 62977 [ 155.967585][ T5581] total_pgfault 60873 [ 155.967595][ T5581] total_pgmajfault 258 [ 155.967612][ T5581] total_inactive_anon 12288 [ 155.967622][ T5581] total_active_anon 0 [ 155.967632][ T5581] total_inactive_file 0 [ 155.967641][ T5581] total_active_file 0 [ 155.967651][ T5581] total_unevictable 0 [ 155.967662][ T5581] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.553,pid=5581,uid=0 [ 155.967817][ T5581] Memory cgroup out of memory: Killed process 5581 (syz.1.553) total-vm:94168kB, anon-rss:1236kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 156.886919][ T5589] loop1: detected capacity change from 0 to 1024 [ 156.911157][ T5589] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 156.911157][ T5589] [ 156.936703][ T5589] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 156.964059][ T5592] loop2: detected capacity change from 0 to 512 [ 157.019906][ T5589] sch_fq: defrate 2 ignored. [ 157.082531][ T3289] udevd[3289]: symlink '../../loop3' '/dev/disk/by-diskseq/518.tmp-b7:3' failed: Read-only file system [ 157.094708][ T3765] udevd[3765]: symlink '../../loop1' '/dev/disk/by-diskseq/532.tmp-b7:1' failed: Read-only file system [ 157.121161][ T3289] udevd[3289]: symlink '../../loop3' '/dev/disk/by-diskseq/518.tmp-b7:3' failed: Read-only file system [ 157.137550][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.178851][ T5598] loop0: detected capacity change from 0 to 512 [ 157.216577][ T3765] udevd[3765]: symlink '../../loop0' '/dev/disk/by-diskseq/533.tmp-b7:0' failed: Read-only file system [ 157.251438][ T3289] udevd[3289]: symlink '../../loop1' '/dev/disk/by-diskseq/532.tmp-b7:1' failed: Read-only file system [ 157.263470][ T3765] udevd[3765]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 157.289027][ T3765] udevd[3765]: symlink '../../loop0' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:0' failed: Read-only file system [ 157.299966][ T5595] loop4: detected capacity change from 0 to 512 [ 157.322081][ T3289] udevd[3289]: symlink '../../loop1' '/dev/disk/by-diskseq/532.tmp-b7:1' failed: Read-only file system [ 157.345572][ T3287] udevd[3287]: symlink '../../loop4' '/dev/disk/by-diskseq/534.tmp-b7:4' failed: Read-only file system [ 157.369199][ T3765] udevd[3765]: symlink '../../loop0' '/dev/disk/by-diskseq/533.tmp-b7:0' failed: Read-only file system [ 157.721684][ T5614] loop1: detected capacity change from 0 to 512 [ 157.728034][ T28] kauditd_printk_skb: 329 callbacks suppressed [ 157.728047][ T28] audit: type=1326 audit(1777377732.604:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 157.770708][ T5614] EXT4-fs: Ignoring removed oldalloc option [ 157.806481][ T28] audit: type=1326 audit(1777377732.604:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 157.830360][ T5614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.869238][ T5614] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.564: invalid indirect mapped block 83886080 (level 1) [ 157.887261][ T5614] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 157.887598][ T5614] EXT4-fs (loop1): Remounting filesystem read-only [ 157.903409][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 157.903431][ C1] EXT4-fs (loop1): initial error at time 1777377732: ext4_free_branches:1023: inode 16 [ 157.903463][ C1] EXT4-fs (loop1): last error at time 1777377732: ext4_free_branches:1023: inode 16 [ 157.933270][ T28] audit: type=1326 audit(1777377732.604:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.037537][ T5614] EXT4-fs (loop1): 1 orphan inode deleted [ 158.047793][ T28] audit: type=1326 audit(1777377732.614:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.066092][ T5614] EXT4-fs (loop1): 1 truncate cleaned up [ 158.085111][ T5622] __nla_validate_parse: 22 callbacks suppressed [ 158.085153][ T5622] netlink: 36 bytes leftover after parsing attributes in process `syz.0.567'. [ 158.101200][ T28] audit: type=1326 audit(1777377732.614:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.126443][ T28] audit: type=1326 audit(1777377732.614:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.140471][ T5614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.151870][ T28] audit: type=1326 audit(1777377732.614:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.212368][ T5621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.225093][ T5621] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.244120][ T28] audit: type=1326 audit(1777377732.614:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.267864][ T28] audit: type=1326 audit(1777377732.614:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.291489][ T28] audit: type=1326 audit(1777377732.624:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eb371d60e code=0x7ffc0000 [ 158.362014][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.369294][ T5622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.418324][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 158.520288][ T5622] bridge1: left allmulticast mode [ 158.595455][ T5639] FAULT_INJECTION: forcing a failure. [ 158.595455][ T5639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.634657][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.3.572 Not tainted syzkaller #0 PREEMPT(full) [ 158.634692][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.634708][ T5639] Call Trace: [ 158.634716][ T5639] [ 158.634726][ T5639] __dump_stack+0x1d/0x30 [ 158.634828][ T5639] dump_stack_lvl+0x95/0xd0 [ 158.634856][ T5639] dump_stack+0x15/0x1b [ 158.634933][ T5639] should_fail_ex+0x263/0x280 [ 158.634969][ T5639] should_fail+0xb/0x20 [ 158.635001][ T5639] should_fail_usercopy+0x1a/0x20 [ 158.635037][ T5639] _copy_from_user+0x1c/0xb0 [ 158.635119][ T5639] dev_ethtool+0x52/0x16a0 [ 158.635156][ T5639] ? full_name_hash+0x92/0xe0 [ 158.635182][ T5639] ? strcmp+0x22/0x50 [ 158.635208][ T5639] dev_ioctl+0x2e0/0x960 [ 158.635313][ T5639] sock_do_ioctl+0x1aa/0x230 [ 158.635349][ T5639] sock_ioctl+0x41b/0x610 [ 158.635389][ T5639] ? mutex_lock+0x57/0x90 [ 158.635474][ T5639] ? __pfx_sock_ioctl+0x10/0x10 [ 158.635506][ T5639] __se_sys_ioctl+0xce/0x140 [ 158.635542][ T5639] __x64_sys_ioctl+0x43/0x50 [ 158.635593][ T5639] x64_sys_call+0x1563/0x3020 [ 158.635624][ T5639] do_syscall_64+0x12c/0x3b0 [ 158.635654][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.635681][ T5639] RIP: 0033:0x7f2eb375cdd9 [ 158.635726][ T5639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.635748][ T5639] RSP: 002b:00007f2eb21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.635775][ T5639] RAX: ffffffffffffffda RBX: 00007f2eb39d5fa0 RCX: 00007f2eb375cdd9 [ 158.635820][ T5639] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000003 [ 158.635836][ T5639] RBP: 00007f2eb21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.635888][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.635904][ T5639] R13: 00007f2eb39d6038 R14: 00007f2eb39d5fa0 R15: 00007ffd9f6cfc18 [ 158.635932][ T5639] [ 159.069917][ T5648] Cannot find add_set index 0 as target [ 159.084399][ T5648] set_capacity_and_notify: 2 callbacks suppressed [ 159.084499][ T5648] loop2: detected capacity change from 0 to 256 [ 159.824127][ T5647] loop3: detected capacity change from 0 to 512 [ 159.900410][ T5648] FAT-fs (loop2): Directory bread(block 64) failed [ 159.907047][ T5648] FAT-fs (loop2): Directory bread(block 65) failed [ 159.913745][ T5648] FAT-fs (loop2): Directory bread(block 66) failed [ 159.920333][ T5648] FAT-fs (loop2): Directory bread(block 67) failed [ 159.927090][ T5648] FAT-fs (loop2): Directory bread(block 68) failed [ 159.933699][ T5648] FAT-fs (loop2): Directory bread(block 69) failed [ 159.940548][ T5648] FAT-fs (loop2): Directory bread(block 70) failed [ 159.947269][ T5648] FAT-fs (loop2): Directory bread(block 71) failed [ 159.954077][ T5648] FAT-fs (loop2): Directory bread(block 72) failed [ 159.960863][ T5648] FAT-fs (loop2): Directory bread(block 73) failed [ 159.976205][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 159.985191][ T5648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.573'. [ 159.994137][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 160.003063][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 160.011981][ T5648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.573'. [ 160.021437][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 160.030464][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 160.039402][ T5648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.573'. [ 160.048621][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 161.124120][ T5656] team0 (unregistering): Port device team_slave_0 removed [ 161.150377][ T5656] team0 (unregistering): Port device team_slave_1 removed [ 161.263756][ T5667] FAULT_INJECTION: forcing a failure. [ 161.263756][ T5667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.276836][ T5667] CPU: 1 UID: 0 PID: 5667 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT(full) [ 161.276865][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.276881][ T5667] Call Trace: [ 161.276889][ T5667] [ 161.276899][ T5667] __dump_stack+0x1d/0x30 [ 161.276929][ T5667] dump_stack_lvl+0x95/0xd0 [ 161.276949][ T5667] dump_stack+0x15/0x1b [ 161.276967][ T5667] should_fail_ex+0x263/0x280 [ 161.276999][ T5667] should_fail+0xb/0x20 [ 161.277080][ T5667] should_fail_usercopy+0x1a/0x20 [ 161.277113][ T5667] _copy_from_user+0x1c/0xb0 [ 161.277183][ T5667] dev_ethtool+0x52/0x16a0 [ 161.277291][ T5667] ? full_name_hash+0x92/0xe0 [ 161.277317][ T5667] ? strcmp+0x22/0x50 [ 161.277346][ T5667] dev_ioctl+0x2e0/0x960 [ 161.277406][ T5667] sock_do_ioctl+0x1aa/0x230 [ 161.277435][ T5667] sock_ioctl+0x41b/0x610 [ 161.277461][ T5667] ? mutex_lock+0x57/0x90 [ 161.277498][ T5667] ? __pfx_sock_ioctl+0x10/0x10 [ 161.277534][ T5667] __se_sys_ioctl+0xce/0x140 [ 161.277592][ T5667] __x64_sys_ioctl+0x43/0x50 [ 161.277622][ T5667] x64_sys_call+0x1563/0x3020 [ 161.277649][ T5667] do_syscall_64+0x12c/0x3b0 [ 161.277766][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.277789][ T5667] RIP: 0033:0x7fd45fa6cdd9 [ 161.277810][ T5667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.277831][ T5667] RSP: 002b:00007fd45e4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.277857][ T5667] RAX: ffffffffffffffda RBX: 00007fd45fce5fa0 RCX: 00007fd45fa6cdd9 [ 161.277904][ T5667] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000003 [ 161.277920][ T5667] RBP: 00007fd45e4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 161.277937][ T5667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.277952][ T5667] R13: 00007fd45fce6038 R14: 00007fd45fce5fa0 R15: 00007ffc03f51208 [ 161.277975][ T5667] [ 161.659396][ T5674] loop4: detected capacity change from 0 to 512 [ 161.742871][ T5678] Cannot find add_set index 0 as target [ 161.936596][ T5660] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.009027][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.065108][ T5684] loop3: detected capacity change from 0 to 512 [ 162.108667][ T3765] udevd[3765]: symlink '../../loop2' '/dev/disk/by-diskseq/546.tmp-b7:2' failed: Read-only file system [ 162.177626][ T3289] udevd[3289]: symlink '../../loop3' '/dev/disk/by-diskseq/548.tmp-b7:3' failed: Read-only file system [ 162.200180][ T3289] udevd[3289]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 162.228424][ T3289] udevd[3289]: symlink '../../loop3' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:3' failed: Read-only file system [ 162.381917][ T5691] loop2: detected capacity change from 0 to 512 [ 162.441489][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.492508][ T3765] udevd[3765]: symlink '../../loop3' '/dev/disk/by-diskseq/548.tmp-b7:3' failed: Read-only file system [ 162.540339][ T3765] udevd[3765]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 162.588145][ T3765] udevd[3765]: symlink '../../loop3' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:3' failed: Read-only file system [ 162.715749][ T3765] udevd[3765]: symlink '../../loop0' '/dev/disk/by-diskseq/537.tmp-b7:0' failed: Read-only file system [ 162.720885][ T3289] udevd[3289]: symlink '../../loop2' '/dev/disk/by-diskseq/549.tmp-b7:2' failed: Read-only file system [ 162.744710][ T3289] udevd[3289]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 162.764039][ T5699] loop0: detected capacity change from 0 to 512 [ 162.781146][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.787966][ T5699] EXT4-fs: Ignoring removed oldalloc option [ 162.823210][ T5701] FAULT_INJECTION: forcing a failure. [ 162.823210][ T5701] name failslab, interval 1, probability 0, space 0, times 0 [ 162.842974][ T5699] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.866500][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(full) [ 162.866534][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.866564][ T5701] Call Trace: [ 162.866573][ T5701] [ 162.866580][ T5701] __dump_stack+0x1d/0x30 [ 162.866606][ T5701] dump_stack_lvl+0x95/0xd0 [ 162.866630][ T5701] dump_stack+0x15/0x1b [ 162.866653][ T5701] should_fail_ex+0x263/0x280 [ 162.866716][ T5701] should_failslab+0x8c/0xb0 [ 162.866749][ T5701] kmem_cache_alloc_noprof+0x66/0x3f0 [ 162.866856][ T5701] ? radix_tree_node_alloc+0x8a/0x1f0 [ 162.866900][ T5701] radix_tree_node_alloc+0x8a/0x1f0 [ 162.866934][ T5701] ? qdisc_alloc+0x384/0x410 [ 162.866983][ T5701] ? qdisc_create_dflt+0x7f/0x2b0 [ 162.867089][ T5701] idr_get_free+0x1fa/0x550 [ 162.867143][ T5701] idr_alloc_u32+0xf2/0x1a0 [ 162.867175][ T5701] basic_change+0x273/0x7f0 [ 162.867211][ T5701] tc_new_tfilter+0xfc0/0x1200 [ 162.867309][ T5701] ? __pfx_tc_new_tfilter+0x10/0x10 [ 162.867388][ T5701] rtnetlink_rcv_msg+0x64b/0x720 [ 162.867421][ T5701] netlink_rcv_skb+0x123/0x220 [ 162.867448][ T5701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.867487][ T5701] rtnetlink_rcv+0x1c/0x30 [ 162.867594][ T5701] netlink_unicast+0x5a8/0x680 [ 162.867624][ T5701] netlink_sendmsg+0x5c8/0x6f0 [ 162.867713][ T5701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.867741][ T5701] ____sys_sendmsg+0x563/0x5b0 [ 162.867803][ T5701] ___sys_sendmsg+0x195/0x1e0 [ 162.867860][ T5701] __x64_sys_sendmsg+0xd4/0x160 [ 162.867941][ T5701] x64_sys_call+0x194c/0x3020 [ 162.868028][ T5701] do_syscall_64+0x12c/0x3b0 [ 162.868056][ T5701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.868083][ T5701] RIP: 0033:0x7efc1436cdd9 [ 162.868110][ T5701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.868134][ T5701] RSP: 002b:00007efc12dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.868205][ T5701] RAX: ffffffffffffffda RBX: 00007efc145e5fa0 RCX: 00007efc1436cdd9 [ 162.868224][ T5701] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 162.868240][ T5701] RBP: 00007efc12dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 162.868256][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.868271][ T5701] R13: 00007efc145e6038 R14: 00007efc145e5fa0 R15: 00007ffd0eb99998 [ 162.868295][ T5701] [ 162.899475][ T5699] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.591: invalid indirect mapped block 83886080 (level 1) [ 163.024402][ T5683] syz.3.586 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 163.087347][ T5699] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.097818][ T5683] CPU: 1 UID: 0 PID: 5683 Comm: syz.3.586 Not tainted syzkaller #0 PREEMPT(full) [ 163.097934][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.097988][ T5683] Call Trace: [ 163.098052][ T5683] [ 163.098083][ T5683] __dump_stack+0x1d/0x30 [ 163.098170][ T5683] dump_stack_lvl+0x95/0xd0 [ 163.098279][ T5683] dump_stack+0x15/0x1b [ 163.098348][ T5683] dump_header+0x80/0x240 [ 163.098429][ T5683] oom_kill_process+0x295/0x350 [ 163.098536][ T5683] out_of_memory+0x97d/0xb80 [ 163.098680][ T5683] try_charge_memcg+0x62f/0xa10 [ 163.098769][ T5683] ? radix_tree_lookup+0xfa/0x140 [ 163.098932][ T5683] charge_memcg+0x6d/0x120 [ 163.099052][ T5683] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 163.099291][ T5683] __swap_cache_prepare_and_add+0x69/0x4a0 [ 163.099378][ T5683] ? alloc_pages_mpol+0x217/0x260 [ 163.099465][ T5683] swap_cache_alloc_folio+0xa2/0x120 [ 163.099542][ T5683] swap_cluster_readahead+0x25f/0x3c0 [ 163.099704][ T5683] swapin_readahead+0xde/0x840 [ 163.099780][ T5683] ? _raw_spin_unlock+0x9/0x30 [ 163.099858][ T5683] ? swap_put_entries_cluster+0x46c/0x490 [ 163.100004][ T5683] ? __rcu_read_unlock+0x4e/0x70 [ 163.100073][ T5683] ? swap_cache_get_folio+0x1e0/0x1f0 [ 163.100160][ T5683] do_swap_page+0x31e/0x2180 [ 163.100247][ T5683] ? css_rstat_updated+0xbb/0x280 [ 163.100324][ T5683] ? __rcu_read_lock+0x36/0x50 [ 163.100381][ T5683] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 163.100455][ T5683] handle_mm_fault+0xb2e/0x2e70 [ 163.100584][ T5683] ? vma_start_read+0x1c7/0x2c0 [ 163.100715][ T5683] do_user_addr_fault+0x62f/0x1050 [ 163.100769][ T5683] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 163.100850][ T5683] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 163.100996][ T5683] ? trace_page_fault_user+0x1f/0xa0 [ 163.101140][ T5683] exc_page_fault+0x62/0xa0 [ 163.101229][ T5683] asm_exc_page_fault+0x26/0x30 [ 163.101294][ T5683] RIP: 0033:0x7f2eb36107bf [ 163.101357][ T5683] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 163.101442][ T5683] RSP: 002b:00007ffd9f6cfca8 EFLAGS: 00010202 [ 163.101500][ T5683] RAX: 00000000817c18c1 RBX: ffffffff817c18c1 RCX: 0000000000000000 [ 163.101597][ T5683] RDX: 00000000000018c1 RSI: ffffffff817c18c1 RDI: 0000000000000016 [ 163.101647][ T5683] RBP: 0000000000000000 R08: 00007f2eb39c0000 R09: 00007f2eb39c2000 [ 163.101690][ T5683] R10: 00000000817c18c5 R11: 0000000000000016 R12: 00007f2eb39d6038 [ 163.101733][ T5683] R13: 0000000000000007 R14: ffffffff817c117d R15: 00007f2eb4505720 [ 163.101777][ T5683] ? static_key_count+0xd/0x40 [ 163.101906][ T5683] ? static_key_enable_cpuslocked+0x71/0x100 [ 163.102041][ T5683] ? static_key_enable_cpuslocked+0x71/0x100 [ 163.102155][ T5683] [ 163.102209][ T5683] memory: usage 307200kB, limit 307200kB, failcnt 3927 [ 163.142039][ T5699] EXT4-fs (loop0): Remounting filesystem read-only [ 163.149040][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 163.149061][ C0] EXT4-fs (loop0): initial error at time 1777377738: ext4_free_branches:1023: inode 16 [ 163.149109][ C0] EXT4-fs (loop0): last error at time 1777377738: ext4_free_branches:1023: inode 16 [ 163.155648][ T5683] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 163.191600][ T5699] EXT4-fs (loop0): 1 orphan inode deleted [ 163.193253][ T5683] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 163.210357][ T5699] EXT4-fs (loop0): 1 truncate cleaned up [ 163.213599][ T5683] Memory cgroup stats for [ 163.245511][ T5699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.251833][ T5683] /syz3: [ 163.504937][ T5683] cache 0 [ 163.513576][ T5683] rss 0 [ 163.516563][ T5683] shmem 0 [ 163.522664][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.527429][ T5683] mapped_file 0 [ 163.557250][ T5683] dirty 0 [ 163.560303][ T5683] writeback 45056 [ 163.566477][ T5683] workingset_refault_anon 381 [ 163.582775][ T5683] workingset_refault_file 2519 [ 163.614767][ T5683] swap 430080 [ 163.629312][ T5683] swapcached 7667712 [ 163.654113][ T5683] pgpgin 67118 [ 163.663557][ T5683] pgpgout 67104 [ 163.683816][ T5683] pgfault 88725 [ 163.691831][ T5683] pgmajfault 7287 [ 163.695585][ T5683] inactive_anon 53248 [ 163.699602][ T5683] active_anon 4096 [ 163.703353][ T5683] inactive_file 0 [ 163.707035][ T5683] active_file 0 [ 163.710526][ T5683] unevictable 0 [ 163.714011][ T5683] hierarchical_memory_limit 314572800 [ 163.719483][ T5683] hierarchical_memsw_limit 9223372036854771712 [ 163.725659][ T5683] total_cache 0 [ 163.729217][ T5683] total_rss 0 [ 163.732540][ T5683] total_shmem 0 [ 163.736197][ T5683] total_mapped_file 0 [ 163.740219][ T5683] total_dirty 0 [ 163.743717][ T5683] total_writeback 45056 [ 163.747898][ T5683] total_workingset_refault_anon 381 [ 163.753119][ T5683] total_workingset_refault_file 2519 [ 163.808781][ T5683] total_swap 430080 [ 163.812646][ T5683] total_swapcached 7667712 [ 163.817090][ T5683] total_pgpgin 67118 [ 163.881610][ T5683] total_pgpgout 67104 [ 163.898839][ T5683] total_pgfault 88725 [ 163.904778][ T5683] total_pgmajfault 7287 [ 163.908966][ T5683] total_inactive_anon 53248 [ 163.913529][ T5683] total_active_anon 4096 [ 163.961331][ T5683] total_inactive_file 0 [ 163.965592][ T5683] total_active_file 0 [ 163.969662][ T5683] total_unevictable 0 [ 163.973701][ T5683] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.586,pid=5683,uid=0 [ 163.988451][ T5683] Memory cgroup out of memory: Killed process 5683 (syz.3.586) total-vm:94168kB, anon-rss:1228kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 164.048557][ T12] bridge_slave_1: left promiscuous mode [ 164.054274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.077919][ T12] bridge_slave_0: left allmulticast mode [ 164.089095][ T12] bridge_slave_0: left promiscuous mode [ 164.094800][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.139754][ T5786] loop3: detected capacity change from 0 to 1024 [ 164.177858][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 164.177921][ T28] audit: type=1400 audit(1777377739.064:3813): avc: denied { mounton } for pid=5785 comm="syz.3.594" path="/syzcgroup/unified/syz3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 164.207857][ T5786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.335023][ T28] audit: type=1400 audit(1777377739.214:3814): avc: denied { cpu } for pid=5785 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 164.611038][ T12] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 164.621961][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.631894][ T12] bond0 (unregistering): Released all slaves [ 164.660808][ T28] audit: type=1400 audit(1777377739.544:3815): avc: denied { read } for pid=3022 comm="dhcpcd" name="n25" dev="tmpfs" ino=7092 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.716851][ T28] audit: type=1400 audit(1777377739.574:3816): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=7092 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.749231][ T28] audit: type=1400 audit(1777377739.574:3817): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=7092 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.772929][ T28] audit: type=1400 audit(1777377739.594:3818): avc: denied { name_bind } for pid=5796 comm="syz.2.596" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 164.800405][ T12] hsr_slave_0: left promiscuous mode [ 164.808203][ T12] hsr_slave_1: left promiscuous mode [ 164.816935][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.824507][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.835645][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.843091][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.857390][ T12] veth1_macvtap: left promiscuous mode [ 164.868996][ T12] veth0_macvtap: left promiscuous mode [ 164.880877][ T12] veth1_vlan: left promiscuous mode [ 164.889172][ T12] veth0_vlan: left promiscuous mode [ 164.940521][ T28] audit: type=1400 audit(1777377739.824:3819): avc: denied { allowed } for pid=5813 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.032669][ T5800] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.065196][ T28] audit: type=1400 audit(1777377739.944:3820): avc: denied { create } for pid=5802 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.093043][ T28] audit: type=1400 audit(1777377739.944:3821): avc: denied { write } for pid=5802 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=7125 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.119435][ T28] audit: type=1400 audit(1777377739.944:3822): avc: denied { append } for pid=5802 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=7125 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.184694][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.202377][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.209713][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.217430][ T5692] bridge_slave_0: entered allmulticast mode [ 165.224715][ T5692] bridge_slave_0: entered promiscuous mode [ 165.232421][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.239637][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.246982][ T5692] bridge_slave_1: entered allmulticast mode [ 165.254316][ T5692] bridge_slave_1: entered promiscuous mode [ 165.271362][ T5826] Cannot find add_set index 0 as target [ 165.303131][ T5826] __nla_validate_parse: 21 callbacks suppressed [ 165.303167][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.318556][ T5826] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.328109][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.337289][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.346230][ T5826] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.355437][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.364548][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.373471][ T5826] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.382730][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.395994][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 165.454185][ T5692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.468165][ T5692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.514087][ T5692] team0: Port device team_slave_0 added [ 165.526910][ T5692] team0: Port device team_slave_1 added [ 165.677079][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.713850][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.000698][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.020463][ T5692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.185728][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.258527][ T5830] Cannot find add_set index 0 as target [ 166.270617][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.344319][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.351389][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.380071][ T5692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.393661][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.423337][ T5692] hsr_slave_0: entered promiscuous mode [ 166.429768][ T5692] hsr_slave_1: entered promiscuous mode [ 166.435822][ T5692] debugfs: 'hsr0' already exists in 'hsr' [ 166.441859][ T5692] Cannot create hsr debugfs directory [ 166.451467][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.513383][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 166.581938][ T12] bridge_slave_1: left allmulticast mode [ 166.587804][ T12] bridge_slave_1: left promiscuous mode [ 166.593514][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.601698][ T12] bridge_slave_0: left allmulticast mode [ 166.608722][ T12] bridge_slave_0: left promiscuous mode [ 166.614463][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.749302][ T12] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 166.759067][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.768990][ T12] bond0 (unregistering): Released all slaves [ 166.777588][ T5692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.788154][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.809535][ T12] tipc: Left network mode [ 166.815642][ T5692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.835069][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.849288][ T5692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.864346][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.881292][ T12] hsr_slave_0: left promiscuous mode [ 166.890068][ T12] hsr_slave_1: left promiscuous mode [ 166.900070][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.915785][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.930974][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.943610][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.961173][ T12] veth1_vlan: left promiscuous mode [ 166.972736][ T12] veth0_vlan: left promiscuous mode [ 167.126823][ T3765] udevd[3765]: symlink '../../loop4' '/dev/disk/by-diskseq/550.tmp-b7:4' failed: Read-only file system [ 167.206724][ T5692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.215197][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.223308][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.276371][ T5692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.312317][ T5692] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.336713][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.343970][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.391797][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.398987][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.444571][ T5692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.479010][ T5692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.638161][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 167.746092][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.753541][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.761043][ T5872] bridge_slave_0: entered allmulticast mode [ 167.773600][ T5872] bridge_slave_0: entered promiscuous mode [ 167.805596][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.829297][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.852911][ T5872] bridge_slave_1: entered allmulticast mode [ 167.871950][ T5872] bridge_slave_1: entered promiscuous mode [ 167.943879][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.981828][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.006539][ T5692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.052545][ T3765] udevd[3765]: symlink '../../loop4' '/dev/disk/by-diskseq/550.tmp-b7:4' failed: Read-only file system [ 168.074643][ T5868] syz.2.604 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 168.133324][ T5868] CPU: 0 UID: 0 PID: 5868 Comm: syz.2.604 Not tainted syzkaller #0 PREEMPT(full) [ 168.133364][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.133448][ T5868] Call Trace: [ 168.133456][ T5868] [ 168.133503][ T5868] __dump_stack+0x1d/0x30 [ 168.133533][ T5868] dump_stack_lvl+0x95/0xd0 [ 168.133604][ T5868] dump_stack+0x15/0x1b [ 168.133627][ T5868] dump_header+0x80/0x240 [ 168.133653][ T5868] oom_kill_process+0x295/0x350 [ 168.133705][ T5868] out_of_memory+0x97d/0xb80 [ 168.133814][ T5868] try_charge_memcg+0x62f/0xa10 [ 168.133927][ T5868] charge_memcg+0x6d/0x120 [ 168.133956][ T5868] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 168.133990][ T5868] __swap_cache_prepare_and_add+0x69/0x4a0 [ 168.134102][ T5868] ? alloc_pages_mpol+0x217/0x260 [ 168.134169][ T5868] swap_cache_alloc_folio+0xa2/0x120 [ 168.134198][ T5868] swap_cluster_readahead+0x25f/0x3c0 [ 168.134268][ T5868] swapin_readahead+0xde/0x840 [ 168.134295][ T5868] ? _raw_spin_unlock+0x9/0x30 [ 168.134326][ T5868] ? swap_put_entries_cluster+0x46c/0x490 [ 168.134366][ T5868] ? __rcu_read_unlock+0x4e/0x70 [ 168.134395][ T5868] ? swap_cache_get_folio+0x1e0/0x1f0 [ 168.134456][ T5868] do_swap_page+0x31e/0x2180 [ 168.134487][ T5868] ? css_rstat_updated+0xbb/0x280 [ 168.134515][ T5868] ? __rcu_read_lock+0x36/0x50 [ 168.134539][ T5868] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 168.134646][ T5868] handle_mm_fault+0xb2e/0x2e70 [ 168.134679][ T5868] ? vma_start_read+0x1c7/0x2c0 [ 168.134789][ T5868] do_user_addr_fault+0x62f/0x1050 [ 168.134818][ T5868] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 168.134908][ T5868] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 168.134931][ T5868] ? trace_page_fault_user+0x1f/0xa0 [ 168.134962][ T5868] exc_page_fault+0x62/0xa0 [ 168.135000][ T5868] asm_exc_page_fault+0x26/0x30 [ 168.135079][ T5868] RIP: 0033:0x7faa596ba78c [ 168.135168][ T5868] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 168.135191][ T5868] RSP: 002b:00007fff2a6e22a0 EFLAGS: 00010202 [ 168.135212][ T5868] RAX: 0000000000000000 RBX: 00007faa59a66090 RCX: 0000555557e48808 [ 168.135314][ T5868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.135329][ T5868] RBP: 00007faa59a67da0 R08: 0000000000000000 R09: 0000000000000000 [ 168.135345][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000028ff7 [ 168.135425][ T5868] R13: 00007faa59a6609c R14: 0000000000028d8d R15: 00007fff2a6e23a0 [ 168.135445][ T5868] [ 168.174599][ T3765] udevd[3765]: symlink '../../loop4' '/dev/disk/by-diskseq/550.tmp-b7:4' failed: Read-only file system [ 168.198990][ T5868] memory: usage 307200kB, limit 307200kB, failcnt 1554 [ 168.306891][ T5935] FAULT_INJECTION: forcing a failure. [ 168.306891][ T5935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.328302][ T5872] team0: Port device team_slave_0 added [ 168.424835][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.4.609 Not tainted syzkaller #0 PREEMPT(full) [ 168.424915][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.424932][ T5935] Call Trace: [ 168.424940][ T5935] [ 168.424951][ T5935] __dump_stack+0x1d/0x30 [ 168.424978][ T5935] dump_stack_lvl+0x95/0xd0 [ 168.425001][ T5935] dump_stack+0x15/0x1b [ 168.425050][ T5935] should_fail_ex+0x263/0x280 [ 168.425087][ T5935] should_fail+0xb/0x20 [ 168.425118][ T5935] should_fail_usercopy+0x1a/0x20 [ 168.425155][ T5935] _copy_from_user+0x1c/0xb0 [ 168.425238][ T5935] sock_ioctl_inout+0x53/0x140 [ 168.425270][ T5935] ipmr_sk_ioctl+0x9d/0xd0 [ 168.425296][ T5935] sk_ioctl+0x1a5/0x3c0 [ 168.425341][ T5935] inet_ioctl+0x32b/0x3a0 [ 168.425379][ T5935] sock_do_ioctl+0x73/0x230 [ 168.425451][ T5935] sock_ioctl+0x41b/0x610 [ 168.425480][ T5935] ? mutex_lock+0x57/0x90 [ 168.425573][ T5935] ? __pfx_sock_ioctl+0x10/0x10 [ 168.425650][ T5935] __se_sys_ioctl+0xce/0x140 [ 168.425689][ T5935] __x64_sys_ioctl+0x43/0x50 [ 168.425786][ T5935] x64_sys_call+0x1563/0x3020 [ 168.425812][ T5935] do_syscall_64+0x12c/0x3b0 [ 168.425919][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.425943][ T5935] RIP: 0033:0x7efc1436cdd9 [ 168.425964][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.425983][ T5935] RSP: 002b:00007efc12dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.426002][ T5935] RAX: ffffffffffffffda RBX: 00007efc145e5fa0 RCX: 00007efc1436cdd9 [ 168.426016][ T5935] RDX: 0000200000000000 RSI: 00000000000089e0 RDI: 0000000000000003 [ 168.426058][ T5935] RBP: 00007efc12dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 168.426075][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.426090][ T5935] R13: 00007efc145e6038 R14: 00007efc145e5fa0 R15: 00007ffd0eb99998 [ 168.426116][ T5935] [ 168.434751][ T5920] ================================================================== [ 168.448053][ T3765] udevd[3765]: symlink '../../loop4' '/dev/disk/by-diskseq/550.tmp-b7:4' failed: Read-only file system [ 168.454160][ T5920] BUG: KCSAN: data-race in copy_mm / percpu_counter_destroy_many [ 168.454200][ T5920] [ 168.454207][ T5920] write to 0xffff888105225cd8 of 8 bytes by task 3303 on cpu 1: [ 168.454224][ T5920] percpu_counter_destroy_many+0xc7/0x2b0 [ 168.454253][ T5920] __mmdrop+0x25d/0x3f0 [ 168.454270][ T5920] finish_task_switch+0x225/0x320 [ 168.454294][ T5920] __schedule+0x936/0xd20 [ 168.454329][ T5920] schedule+0x5e/0xd0 [ 168.589325][ T5868] memory+swap: usage 256444kB, limit 9007199254740988kB, failcnt 0 [ 168.592788][ T5920] do_nanosleep+0x95/0x330 [ 168.617325][ T5868] kmem: usage 244664kB, limit 9007199254740988kB, failcnt 0 [ 168.624733][ T5920] hrtimer_nanosleep+0xf4/0x290 [ 168.637527][ T5868] Memory cgroup stats for [ 168.646864][ T5920] common_nsleep+0x62/0x80 [ 168.721196][ T5920] __se_sys_clock_nanosleep+0x223/0x260 [ 168.726771][ T5920] __x64_sys_clock_nanosleep+0x55/0x70 [ 168.732259][ T5920] x64_sys_call+0x146e/0x3020 [ 168.736977][ T5920] do_syscall_64+0x12c/0x3b0 [ 168.741593][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.747518][ T5920] [ 168.749860][ T5920] read to 0xffff8881052257c0 of 1664 bytes by task 5920 on cpu 0: [ 168.757768][ T5920] copy_mm+0xe1/0x370 [ 168.761771][ T5920] copy_process+0x1084/0x23a0 [ 168.766465][ T5920] kernel_clone+0x1a5/0x5e0 [ 168.770983][ T5920] __x64_sys_clone+0x143/0x180 [ 168.775767][ T5920] x64_sys_call+0x1222/0x3020 [ 168.780471][ T5920] do_syscall_64+0x12c/0x3b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 168.785089][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.791087][ T5920] [ 168.793426][ T5920] Reported by Kernel Concurrency Sanitizer on: [ 168.799673][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 168.809406][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.819481][ T5920] ================================================================== [ 168.829920][ T5872] team0: Port device team_slave_1 added [ 168.846805][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.853819][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.880541][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.891968][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.898967][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.925768][ T5868] /syz2: [ 168.925979][ T5868] cache 0 [ 168.934941][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.948442][ T5868] rss 4096 [ 168.955773][ T5868] shmem 0 [ 168.963619][ T5868] mapped_file 0 [ 168.967741][ T5868] dirty 0 [ 168.972303][ T5868] writeback 4096 [ 168.975919][ T5868] workingset_refault_anon 243 [ 168.980830][ T5868] workingset_refault_file 4078 [ 168.985771][ T5868] swap 208896 [ 168.989119][ T5868] swapcached 5103616 [ 168.993085][ T5868] pgpgin 90719 [ 168.996474][ T5868] pgpgout 90717 [ 169.007207][ T5868] pgfault 117571 [ 169.012257][ T5868] pgmajfault 4669 [ 169.019203][ T5868] inactive_anon 8192 [ 169.023183][ T5868] active_anon 0 [ 169.026719][ T5868] inactive_file 0 [ 169.030474][ T5868] active_file 0 [ 169.033952][ T5868] unevictable 0 [ 169.038891][ T5868] hierarchical_memory_limit 314572800 [ 169.049305][ T5868] hierarchical_memsw_limit 9223372036854771712 [ 169.066619][ T5868] total_cache 0 [ 169.075546][ T5868] total_rss 4096 [ 169.079782][ T5937] loop4: detected capacity change from 0 to 128 [ 169.091983][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.106248][ T3765] udevd[3765]: symlink '../../loop4' '/dev/disk/by-diskseq/555.tmp-b7:4' failed: Read-only file system [ 169.128717][ T5868] total_shmem 0 [ 169.160989][ T5868] total_mapped_file 0 [ 169.180544][ T3765] udevd[3765]: symlink '../../loop4' '/dev/disk/by-diskseq/555.tmp-b7:4' failed: Read-only file system [ 169.187399][ T5868] total_dirty 0 [ 169.196575][ T5868] total_writeback 4096 [ 169.202150][ T5868] total_workingset_refault_anon 243 [ 169.208717][ T5868] total_workingset_refault_file 4078 [ 169.215524][ T5868] total_swap 208896 [ 169.246783][ T5868] total_swapcached 5103616 [ 169.257609][ T5868] total_pgpgin 90719 [ 169.262149][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 169.269012][ T5868] total_pgpgout 90717 [ 169.273501][ T5868] total_pgfault 117571 [ 169.293278][ T5868] total_pgmajfault 4669 [ 169.303158][ T5868] total_inactive_anon 8192 [ 169.317416][ T5868] total_active_anon 0 [ 169.321451][ T5868] total_inactive_file 0 [ 169.325704][ T5868] total_active_file 0 [ 169.345905][ T5868] total_unevictable 0 [ 169.358623][ T5868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.604,pid=5868,uid=0 [ 169.399297][ T5868] Memory cgroup out of memory: Killed process 5868 (syz.2.604) total-vm:94168kB, anon-rss:1244kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 169.431248][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.520873][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.602399][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 169.627314][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.710158][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.785112][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 169.798478][ T12] bridge_slave_1: left allmulticast mode [ 169.804237][ T12] bridge_slave_1: left promiscuous mode [ 169.810030][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.817834][ T12] bridge_slave_0: left allmulticast mode [ 169.823546][ T12] bridge_slave_0: left promiscuous mode [ 169.829462][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.949474][ T12] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 169.959004][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.968604][ T12] bond0 (unregistering): Released all slaves [ 170.041422][ T12] hsr_slave_0: left promiscuous mode [ 170.047478][ T12] hsr_slave_1: left promiscuous mode [ 170.053206][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.067223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.075128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.083707][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.094706][ T12] veth1_macvtap: left promiscuous mode [ 170.101087][ T12] veth0_macvtap: left promiscuous mode [ 170.106812][ T12] veth1_vlan: left promiscuous mode [ 170.112394][ T12] veth0_vlan: left promiscuous mode [ 170.204818][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 170.312307][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 170.419837][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 170.533070][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 170.638333][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 170.969000][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.010191][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.090052][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.101850][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 171.120480][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.228420][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 171.337996][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 171.418642][ T12] bridge_slave_1: left allmulticast mode [ 171.424377][ T12] bridge_slave_1: left promiscuous mode [ 171.430252][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.438733][ T12] bridge_slave_0: left allmulticast mode [ 171.444545][ T12] bridge_slave_0: left promiscuous mode [ 171.450681][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.460124][ T12] bridge_slave_1: left allmulticast mode [ 171.465829][ T12] bridge_slave_1: left promiscuous mode [ 171.471713][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.479682][ T12] bridge_slave_0: left allmulticast mode [ 171.485386][ T12] bridge_slave_0: left promiscuous mode [ 171.491165][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.500380][ T12] bridge_slave_1: left allmulticast mode [ 171.506076][ T12] bridge_slave_1: left promiscuous mode [ 171.512193][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.520135][ T12] bridge_slave_0: left allmulticast mode [ 171.525835][ T12] bridge_slave_0: left promiscuous mode [ 171.531815][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.540459][ T12] bridge_slave_1: left allmulticast mode [ 171.546229][ T12] bridge_slave_1: left promiscuous mode [ 171.552015][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.559867][ T12] bridge_slave_0: left allmulticast mode [ 171.565521][ T12] bridge_slave_0: left promiscuous mode [ 171.571375][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.689615][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.700046][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.709669][ T12] bond0 (unregistering): Released all slaves [ 171.819472][ T12] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 171.828859][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.838422][ T12] bond0 (unregistering): Released all slaves [ 171.880810][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.890172][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.899319][ T12] bond0 (unregistering): Released all slaves [ 171.959874][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.969500][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.979007][ T12] bond0 (unregistering): Released all slaves [ 171.986927][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 172.025795][ T12] hsr_slave_0: left promiscuous mode [ 172.031689][ T12] hsr_slave_1: left promiscuous mode [ 172.037422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.044778][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.053993][ T12] hsr_slave_0: left promiscuous mode [ 172.059941][ T12] hsr_slave_1: left promiscuous mode [ 172.065602][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.073086][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.080788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.088263][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.097818][ T12] hsr_slave_0: left promiscuous mode [ 172.103409][ T12] hsr_slave_1: left promiscuous mode [ 172.109130][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.116586][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.124189][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.131667][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.143098][ T12] veth1_macvtap: left promiscuous mode [ 172.148631][ T12] veth0_macvtap: left promiscuous mode [ 172.154184][ T12] veth1_vlan: left promiscuous mode [ 172.159523][ T12] veth0_vlan: left promiscuous mode [ 172.238323][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.248671][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.393070][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.402997][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.531398][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 172.647054][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 172.776991][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 172.886673][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 172.994823][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 173.101799][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 173.208232][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 173.315629][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24