last executing test programs: 6m37.121149001s ago: executing program 4 (id=212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000580)='./file1\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000004c0)=""/124, &(0x7f00000000c0)=0x7c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x414000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000f, 0x20010, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000f40)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="020500030c0000002cbd7040fcdbdf2502000900080000001c00000000000000030006006c00000002004e22ac1414bb000000000000000002000100000000000000090c00000080030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'batadv0\x00', 0x400}) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3c, 0x1, 0x0, 0xd, 0x0, 0x0, 0x581c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x888, 0x3, 0xffef, 0x4, 0x5, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x810) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) 6m36.753056381s ago: executing program 4 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x4c}, 0x1, 0xffff0000, 0x0, 0x10000042}, 0x90) 6m36.752669871s ago: executing program 4 (id=220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") listen(0xffffffffffffffff, 0x4) epoll_create1(0x80000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x6, 0xa20e, 0x0, 0x0, 0x5989, 0x2}) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 6m36.714569904s ago: executing program 4 (id=221): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000200), 0x0}, 0x20) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0xfffffffd) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x43}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = fsmount(r1, 0x0, 0x86) fchdir(r3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800) ioctl$LOOP_CONFIGURE(r0, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x100, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) r4 = socket(0x28, 0x801, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x80359, 0x0, r4}, &(0x7f0000000640), &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x194, &(0x7f0000000600)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) 6m36.643147731s ago: executing program 4 (id=222): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26}, 0x28) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x80d8, 0x0, 0x0, 0x0, 0x101}) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 6m36.033072426s ago: executing program 4 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000340)='[', 0x1}, {&(0x7f0000000440)="75bf632e1b1eb5838367bb80bb07f38a22adccb21ab5496aafbeee6bd5120219d67ace46021abf0b809efc9207d2ba936d1d1339dfe77f936372ae9347998df9cebcfdf25c5f0ae7fd72e64419164c6709c0b529640e4988aeb5805a6a2f15c89344a7e64b3ec2df8b9bbcd11a45666e942f17123b7a10d3680aa90bff1c5a7ea3489b000b0bb0a0931c770f685f2476d7b02766a711d2fe980003a033075ab0df89026b006337c23a06f73c20e06d03a9bacec82a226e7164cf6d909ced4221f2b19526cda9a3e66c50d0a90154ad2ed72a85352a1da8361b63a5b467d5639a9c4c939cfc3dc5a2113b8ba0", 0xec}, {&(0x7f0000000040)="412e9b63079039cfc7c9ce8b99be8bd22294b1a5fe1a1579e9e887", 0x1b}], 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000cdab020004000000000000880f000000657000006600000002400000", @ANYRES32=r3], 0x30, 0x2400e044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000018000000000000000000000000a44000000120a09000000000000000000020000000900020073797a320000000008000440000000000900010073797a300000000008000340000000010800084000000001140000001100010000000000000000000b00000a"], 0x6c}}, 0x0) 6m36.032797726s ago: executing program 32 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000340)='[', 0x1}, {&(0x7f0000000440)="75bf632e1b1eb5838367bb80bb07f38a22adccb21ab5496aafbeee6bd5120219d67ace46021abf0b809efc9207d2ba936d1d1339dfe77f936372ae9347998df9cebcfdf25c5f0ae7fd72e64419164c6709c0b529640e4988aeb5805a6a2f15c89344a7e64b3ec2df8b9bbcd11a45666e942f17123b7a10d3680aa90bff1c5a7ea3489b000b0bb0a0931c770f685f2476d7b02766a711d2fe980003a033075ab0df89026b006337c23a06f73c20e06d03a9bacec82a226e7164cf6d909ced4221f2b19526cda9a3e66c50d0a90154ad2ed72a85352a1da8361b63a5b467d5639a9c4c939cfc3dc5a2113b8ba0", 0xec}, {&(0x7f0000000040)="412e9b63079039cfc7c9ce8b99be8bd22294b1a5fe1a1579e9e887", 0x1b}], 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000cdab020004000000000000880f000000657000006600000002400000", @ANYRES32=r3], 0x30, 0x2400e044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000018000000000000000000000000a44000000120a09000000000000000000020000000900020073797a320000000008000440000000000900010073797a300000000008000340000000010800084000000001140000001100010000000000000000000b00000a"], 0x6c}}, 0x0) 4m58.920949909s ago: executing program 3 (id=1117): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x786}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x83}, 0xc824) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff7525206cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651dde583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467c8a7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080000000000000000000000000400000000000000000000000000000000000000100000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x7a}, 0x8) 4m57.883305394s ago: executing program 3 (id=1123): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199", 0x62}], 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0xf}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f0000000580), &(0x7f0000000800)=r3}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="f0"], 0x7) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x8c661, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x5, 0x6, 0x0, 0x0, 0x106, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 4m57.557396113s ago: executing program 3 (id=1125): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) 4m57.409113575s ago: executing program 3 (id=1126): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_usbip_server_init(0x4) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(r1, 0x1, &(0x7f0000000300)={0x0, 0x4, 0xbca, 0x8000000000000000, r3}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000f80)=""/29) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}}, 0x841) 4m56.706438513s ago: executing program 3 (id=1127): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r1, 0xffffffffffffffff, 0x5a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000002cc0)=""/4085, 0x4d, 0xff5, 0x9}, 0x6b) 4m56.47809322s ago: executing program 3 (id=1128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x4}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m56.464460418s ago: executing program 33 (id=1128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x4}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m43.892508546s ago: executing program 0 (id=1248): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x7f, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 4m43.769279462s ago: executing program 0 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306050000e0ffff00000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) 4m43.684923926s ago: executing program 0 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1c, 0x74, 0x43, 0x2, 0x20c10, 0xffffffffffffffff, 0x40000000}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0xf, 0xc5, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x31}, 0x60, 0x10, 0x2, 0x20000}}) sendto$packet(r2, &(0x7f0000000040)="fb59ee5c20efb8ec20619aa0d66e4f500287481b8a621b6f9d37942cd62a18f28c0b24db4aecd3a2d66cbca310c759e3f6c148824a374490af5e61a2c281c9bf1c04ce96c7f64909", 0x48, 0x4040010, &(0x7f0000000240)={0x11, 0x8, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000001c0)=0x83a, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 4m42.673100126s ago: executing program 0 (id=1262): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_usbip_server_init(0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) 4m40.873426868s ago: executing program 0 (id=1279): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000001114010326bd7000fbdbdf2508003e0004080000080001000000000008004f0001000000080003000000000008004f0004000000080003000200000008"], 0x60}, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) 4m40.091691611s ago: executing program 0 (id=1288): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000680)="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", 0x1ab}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e1", 0x2c}, {&(0x7f00000001c0)="985e44efeabe001cabcf", 0xa}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x160}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e8", 0x6d}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m39.941837113s ago: executing program 34 (id=1288): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000680)="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", 0x1ab}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e1", 0x2c}, {&(0x7f00000001c0)="985e44efeabe001cabcf", 0xa}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x160}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e8", 0x6d}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m0.419375774s ago: executing program 7 (id=2237): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x4004095) r2 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9e, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) (async) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(r1, 0x0, &(0x7f0000000200)) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="a8d032b0582f4bb4d9b4cbddfb6dec5776b656e41566ea", @ANYRES16=r2, @ANYRESHEX, @ANYRES8=r3, @ANYRES64, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x1, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001808000000e8eb000000100000005f8400000000000000"], 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r6, 0x38, 0xfffffffffffffffe}, 0x10) r7 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) fdatasync(r8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12}, 0x0, 0x0, r3, 0x0) (async) ftruncate(r8, 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r9 = openat(r7, &(0x7f0000000040)='./file1\x00', 0x0, 0x59) pwrite64(r9, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x149842, 0xa) (async) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0xffffffffffffff9e, &(0x7f0000000ac0)={0x0}}, 0x40000c0) 3m0.142804712s ago: executing program 7 (id=2239): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 2m59.08311273s ago: executing program 7 (id=2250): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x40, 0x0, &(0x7f0000000240)={0x1, 0x17, 0x0, 0xe}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200005, 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x7, 0xc6, &(0x7f0000000100)=""/198, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x9, 0x0, 0xfffffffffffffd53}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x40000000}]}}, 0x0, 0x26}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x69e8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x220080, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000300)={0x0, 'ip6gretap0\x00', 0x1}, 0x18) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000080)={0x7}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0) ioctl$VT_RELDISP(r6, 0x5605) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="8d127aa1d1c885a53d723712bdbaf59f77716a620a92fc6af42aea684fc1b04206710d7591cae5e6e5e6aa6a8047b986e34072c01890254bd0f0d27d9bd161bc457efccb6da522cf3c2210dacbcad1c8523ebde1f4", @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2d0, &(0x7f0000000dc0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)='./file0/file0\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="595889bccd3bcf00000020000000080000009c648cdc7f0dbc9e0180060001000200"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x120, 0x178, 0xc, 0x120, 0x178, 0x218, 0x258, 0x258, 0x218, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0x0, 0x0, 0xff000000], [0xffffffff, 0xff], 'pim6reg0\x00', 'ip6gretap0\x00', {}, {}, 0x2e, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x80, 0x0, 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x200, 0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xeb3d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 2m58.911684907s ago: executing program 7 (id=2251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000600030000001801000020756c2500010000002020207b1af8ff0000bfa1000000000000070100"/74], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="c8bb4e7dbee18bf660ce80ab88a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0xc0000, 0xdd, 0x479c28ea, 0x1, 0x2, 0xb}) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000180)=ANY=[], 0x1, 0x5b7, &(0x7f0000000780)="$eJzs3MFv29YZAPDHxK4NBwsGFGvSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggRLlybJTpWkTpcDvB8TvUfzI9z2C4QcRIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJks9FoRqGT9Xb34qdLNou8e7y0EKbXj/f3nxPNCYsTf0MUQlT9C8vL4fLoo8uv/z/2R9Wfa+HSaOlSWK6a5fD4whs//OD1hXPVhotRdCqLl+3ho8e//uTgYP9332Cbo6Ojz6rZvMC0XprttJeVedZtb6dxVubxxvp64/2drTLeyjppeaccpN04KdL2IC/i68ntEMLGWpyu3sl3e9ub7U4aX09+HDc3Nm7daDUa6/GHq/20XZR57/0PV8tkJ+t0st72MKZafaP1drhVnYgfZYN4kLa7cXzvwcH+2qwkq6DmswS1ZgW1Gq1Ws9lqNddvbty81Wgs12fr8QcLjSlhepOF+Z+0vHSv1SfKcGF8jXvtO7uIw3M6Sv427xQAAACAFywa3mOPhvflLw97W1knbZyIOYrmlh4AAADwHRh+tb9U3wAI4XKITn//BwAAAL7f/jnunPmMXYiiUPaXovGjKv2996LDdtVrH54ffXR+eo+DrSvRxXonw2Z9oV5K0qvRm6OgN8fRX9XNvac/6/fvUOURFcVi9OTbJRD+Eq6MYq7cHbV3x2tGs13ZyjrpapJ3PmiGdvviuUG6N/jDpw/+GEJRHJ3/ote9GIV7Dw72V3/5m4O7VS6jpxmfHNa/kDj1Q4mTuSyFiVx+f/zcYz3j2yeP/OLwRkw16y963ZXRuI3J+Z8bbX7uG8z/8/DWKOatlVG7cnL+y9WYzdUzZj+ZRbO/995SPdgzznwqi6ujmKvXhyfWu9frNYsTWbRmZdEaHosno+P/XMfiOIt3T2QxeSzWZmWx9i2zAJiXe9NV6FT9P1V3n+Mq9zXVvRqlKuEzq/uvZo7yeXhnFPPOlYW6Ip0PYeqK3ph1RW9MXtG/prqFcHYW/wrX/vH3EHbDtXHw02psNe5fT1TV6PDLaoMvT4/7p1FT/vf+zoWqs3T42/DGw0ePbzw4/OT+/v39T1uttfXGTxqNm62wOJxG3ag9AJwhLb6KVgZ/jooi6/+iubHRbA920rjIk4/iItvcTuOsN0iLZKfd207jfpEP8iTvVJ2Ps820jMvdfj+vKklexP28zPaGb36J61e/lGm33RtkSdnvpO0yjZO8N2gng3gzK5O4v/vzTlbupEW8lRdx2U+TbCtL2oMs78Vlvlsk6Wocl2k6EZhtpkefhZBV3V7cL7Juu7gTf5x3drtpvJlW1bI/yKNQ7XA8VtbbyovucLer8z7YAPCKeBjqN9gdv8ru4c/Gqx6dWnVmJyzPiJnzFAGAKdNVemneCQEAAAAAAAAAAAAAAKdMPq730/qVPs/22N8r27l94axVb88/sclOCGHhFUhD5xk7y69GGov1f9vn3U8UQpgd/IMqZp5XJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42/8CAAD//+AlkH0=") unshare(0x400) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e", 0x241}], 0x1}}], 0x1, 0x4000001) r3 = dup(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendto$inet6(r2, 0x0, 0x0, 0x48c00, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000040)}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)=@orangefs_parent={0x28, 0x2, {{"42e4bc38fa96c39e61bab70f949f6a02", 0x9}, {"46c45cbe2231ff1b73d7d6f1edfb2a58", 0x8427}}}, &(0x7f0000000240), 0x600) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, 0x140c, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40855) 2m57.461148421s ago: executing program 7 (id=2266): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@max_batch_time}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0xad55}}]}, 0x1, 0x483, &(0x7f0000001040)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x2800004, &(0x7f0000000080)=ANY=[], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) open(&(0x7f0000000000)='./file0\x00', 0x16cd42, 0x8) 2m56.712395478s ago: executing program 7 (id=2275): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES8=0x0, @ANYBLOB="61c718ec33e113999e7917302f20a4e189d477ce858015d13847dae56d8796ae62fe1fd1ab3381b8f85de014ceafa12e03d5f6e23ded284fc402972aa7b65893772084aa98cb51fbb0053c9675995ebc5089ac64d2f5a6ea3bfc7dfde85261f6a38d142700ae662cde92a1230dd3fa723298bd274b5e7570463c4e9b4d36e43e6d236ca9b991f1abaf32919f4f3ddf4b21612be48f375c907fd29e6c49c5fc03a68c025119a14b", @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 2m56.680563933s ago: executing program 35 (id=2275): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES8=0x0, @ANYBLOB="61c718ec33e113999e7917302f20a4e189d477ce858015d13847dae56d8796ae62fe1fd1ab3381b8f85de014ceafa12e03d5f6e23ded284fc402972aa7b65893772084aa98cb51fbb0053c9675995ebc5089ac64d2f5a6ea3bfc7dfde85261f6a38d142700ae662cde92a1230dd3fa723298bd274b5e7570463c4e9b4d36e43e6d236ca9b991f1abaf32919f4f3ddf4b21612be48f375c907fd29e6c49c5fc03a68c025119a14b", @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 1m34.207624678s ago: executing program 6 (id=2732): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r0, 0xd3ee, 0x3, &(0x7f0000000100)=""/106, &(0x7f0000000080)=0x6a) unshare(0x400) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, 0x1405, 0x4, 0x70bd28, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x208c822, 0x0) 1m34.173106252s ago: executing program 6 (id=2734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b3be80ae00000000000000000010000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0xfffffffffffffece, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000200), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 1m31.270298149s ago: executing program 6 (id=2743): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 1m29.634109887s ago: executing program 6 (id=2750): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000003040)={@broadcast, @remote, @local}, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002f80), &(0x7f0000003000)=0x68) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r6, r6, 0x0, 0x548) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_sctp(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1m27.155362605s ago: executing program 6 (id=2758): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1m23.325335866s ago: executing program 6 (id=2774): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2291, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x176}, 0x0, &(0x7f0000000200)) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r6 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000006c0)='./file2\x00', 0x10000, &(0x7f00000001c0)={[], [{@measure}, {@dont_hash}, {@permit_directio}]}, 0x1, 0x55a, &(0x7f0000000700)="$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") 1m23.301942921s ago: executing program 36 (id=2774): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2291, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x176}, 0x0, &(0x7f0000000200)) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r6 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000006c0)='./file2\x00', 0x10000, &(0x7f00000001c0)={[], [{@measure}, {@dont_hash}, {@permit_directio}]}, 0x1, 0x55a, &(0x7f0000000700)="$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") 6.521165202s ago: executing program 2 (id=3255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.670214019s ago: executing program 2 (id=3264): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 4.581478122s ago: executing program 2 (id=3269): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000180)={[{@nombcache}, {@errors_remount}, {@inlinecrypt}, {@norecovery}, {@nodioread_nolock}, {@debug}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shmdt(0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88\a'}, @typed={0x8, 0x16, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x2, 0x88) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pread64(r6, &(0x7f0000002500)=""/233, 0xe9, 0x7ffffffeffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) unshare(0x22020400) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000140)=""/169) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r8}}, 0x18) 4.57197713s ago: executing program 9 (id=3270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.931154678s ago: executing program 8 (id=3274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.31145346s ago: executing program 9 (id=3277): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x700) 2.988416209s ago: executing program 8 (id=3279): bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) listen(0xffffffffffffffff, 0x0) listen(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4) 2.870279256s ago: executing program 8 (id=3280): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 2.614668617s ago: executing program 5 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.127874565s ago: executing program 9 (id=3283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 2.099573689s ago: executing program 2 (id=3285): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000009a03000038000000016eee9e5a0d56b4840020"], 0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.965122684s ago: executing program 9 (id=3286): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$eJzs3c9vI1cdAPDvOHHiZNMmLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SBxczXiS9WbtTbRJ7Cj+fKTRvDfP6+97m5331t8k8wIYWTcjYj8iJiLiw4iYza8n+RHvdY70dY8OHqwcHjxYSaLd/uBfSdaeXouuP5O6kb9nKSJ+9L2InyZPx23u7m0s12rV7bw+36pvzTd39+6s15fXqmvVzUplaXFp4Z27b1cubKyv1Sfy0lcf/nH/Wz9PuzWTX+kex0XqDL14HCc1HhE/uIxgQzCWj2di2B3huRQi4uWIeD27/2djLPtqAgDXWbs9G+3Z7joAcN0VshxYUijnuYCZKBTK5U4O75WYLtQazdbt+42dzdVOrmwuioX767XqQp4rnItiktYXs/LjeuVE/W5EvBQRv5ycyurllUZtdZj/8QGAEXbjxPr/38nO+g8AXHOlyFd/AGBklIbdAQBg4Kz/ADB6rP8AMHo66//UsLsBAAyQz/8AMHqs/wAwUn74/vvp0T7Mn3+9+tHuzkbjozur1eZGub6zUl5pbG+V1xqNteyZPfXT3q/WaGwtvhU7H899e6vZmm/u7t2rN3Y2W/ey53rfqxazV+0PYGQAQD8vvfbZX5J0RX53Kjuiay+H4lB7Blw2T/2A0TU27A4AQ2O3Lxhd5/iMLz0A10SPLXqfUOr1C0Ltdrt9eV0CLtmtL8n/w6jqyv/7KWAYMfL/MLrk/2F0tdvJWff8j7O+EAC42uT4gT7f/385P/8u/+bAT1ZPvuLTy+wVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG1H+/+W873AZ6JQKJcjXoiIuSgm99dr1YWIeDEi/jxZnEzri0PuMwBwXoW/J/n+X7dm35x5ounVG8fFiYj42a8/+NXHy63W9p8iJpJ/Tx5db32aX68MvvcAwOmO1uns3PVB/tHBg5WjY5D9+cd3I6LUiX94MBGHx/HHYzw7l6IYEdP/SfJ6R9KVuziP/U8i4ou9xp/ETJYD6ex8ejJ+GvuFgcYvPBG/kLV1zunfxRcuoC8waj5L55/3et1/hbiZnXvf/6Vshjq/fP5L32rlMJsDH8c/mv/G+sx/N88a460/fL9Tmnq67ZOIL49HHMU+7Jp/juInfeK/ecb4f/3Kq6/3a2v/JuJW9I7fHWu+Vd+ab+7u3VmvL69V16qblcrS4tLCO3ffrsxnOer5/qvBP9+9/WK/tnT8033il04Z/9fPOP7f/v/DH3/tGfG/+Uav+IV45Rnx0zXxG2eMvzz9+1K/tjT+ap/xn/b1v33G+A//tvfUtuEAwPA0d/c2lmu16vZVKiRXoxsKV66Q/pO9At3oWfjOoGJNRO+mX7zRuadPNLXbzxWr34xxEVk34Co4vukj4n/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pr6PAAA//+cEM66") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x700) 1.936991858s ago: executing program 8 (id=3287): r0 = getpgrp(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000200)='net/stat\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x7ffd, 0x4) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r2, 0x0) fallocate(r2, 0x0, 0x9e1f, 0x575) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x4, 0x3c, 0x67, 0x0, 0x3, 0x6, 0x0, @loopback, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0xfff9, 0x0, 0x2, 0x9, 0x5, 0x2, 0xd04, 0x6, 0x3, 0x4e22, 0x4e24}, 0x4, 0x1}, 0x3, 0x1}}}}}}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x25a, &(0x7f0000000240)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000004c0)) 1.871478546s ago: executing program 1 (id=3288): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x8000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1441, 0x0) pwritev2(r3, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) 1.724321468s ago: executing program 5 (id=3289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.535912672s ago: executing program 5 (id=3290): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x1f, &(0x7f00000004c0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "bf", "9806e3", 0x88ca, "20c79fda2894344202"}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000001000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.520230759s ago: executing program 2 (id=3291): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$eJzs3c9vI1cdAPDvOHHiZNMmLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SBxczXiS9WbtTbRJ7Cj+fKTRvDfP6+97m5331t8k8wIYWTcjYj8iJiLiw4iYza8n+RHvdY70dY8OHqwcHjxYSaLd/uBfSdaeXouuP5O6kb9nKSJ+9L2InyZPx23u7m0s12rV7bw+36pvzTd39+6s15fXqmvVzUplaXFp4Z27b1cubKyv1Sfy0lcf/nH/Wz9PuzWTX+kex0XqDL14HCc1HhE/uIxgQzCWj2di2B3huRQi4uWIeD27/2djLPtqAgDXWbs9G+3Z7joAcN0VshxYUijnuYCZKBTK5U4O75WYLtQazdbt+42dzdVOrmwuioX767XqQp4rnItiktYXs/LjeuVE/W5EvBQRv5ycyurllUZtdZj/8QGAEXbjxPr/38nO+g8AXHOlyFd/AGBklIbdAQBg4Kz/ADB6rP8AMHo66//UsLsBAAyQz/8AMHqs/wAwUn74/vvp0T7Mn3+9+tHuzkbjozur1eZGub6zUl5pbG+V1xqNteyZPfXT3q/WaGwtvhU7H899e6vZmm/u7t2rN3Y2W/ey53rfqxazV+0PYGQAQD8vvfbZX5J0RX53Kjuiay+H4lB7Blw2T/2A0TU27A4AQ2O3Lxhd5/iMLz0A10SPLXqfUOr1C0Ltdrt9eV0CLtmtL8n/w6jqyv/7KWAYMfL/MLrk/2F0tdvJWff8j7O+EAC42uT4gT7f/385P/8u/+bAT1ZPvuLTy+wVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG1H+/+W873AZ6JQKJcjXoiIuSgm99dr1YWIeDEi/jxZnEzri0PuMwBwXoW/J/n+X7dm35x5ounVG8fFiYj42a8/+NXHy63W9p8iJpJ/Tx5db32aX68MvvcAwOmO1uns3PVB/tHBg5WjY5D9+cd3I6LUiX94MBGHx/HHYzw7l6IYEdP/SfJ6R9KVuziP/U8i4ou9xp/ETJYD6ex8ejJ+GvuFgcYvPBG/kLV1zunfxRcuoC8waj5L55/3et1/hbiZnXvf/6Vshjq/fP5L32rlMJsDH8c/mv/G+sx/N88a460/fL9Tmnq67ZOIL49HHMU+7Jp/juInfeK/ecb4f/3Kq6/3a2v/JuJW9I7fHWu+Vd+ab+7u3VmvL69V16qblcrS4tLCO3ffrsxnOer5/qvBP9+9/WK/tnT8033il04Z/9fPOP7f/v/DH3/tGfG/+Uav+IV45Rnx0zXxG2eMvzz9+1K/tjT+ap/xn/b1v33G+A//tvfUtuEAwPA0d/c2lmu16vZVKiRXoxsKV66Q/pO9At3oWfjOoGJNRO+mX7zRuadPNLXbzxWr34xxEVk34Co4vukj4n/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pr6PAAA//+cEM66") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.439481784s ago: executing program 1 (id=3292): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x4004042) 1.347500756s ago: executing program 1 (id=3293): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa0304907801000000"], 0x0) 1.325651132s ago: executing program 1 (id=3294): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 1.203396409s ago: executing program 5 (id=3295): sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a"], 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 1.069916283s ago: executing program 8 (id=3296): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) 1.059043711s ago: executing program 5 (id=3297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4c1723ff22329273708b7da72ec25bc38c7fae83abdb2fa7832f5016d3c4f6bd19f26ff39b2190e030a7942159c36c71abb06ee5c948b2464440c6e6392de0ca756c32b48347f3b77484e58155fbe0b0a677ecb96853d48c2f99d5b3", 0x76}], 0x2) 860.919614ms ago: executing program 5 (id=3298): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 860.020523ms ago: executing program 9 (id=3299): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519fd6e5e701"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r5, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7e9}, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 458.237977ms ago: executing program 9 (id=3300): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) 155.700679ms ago: executing program 1 (id=3301): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 95.098617ms ago: executing program 8 (id=3302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4) 29.044045ms ago: executing program 1 (id=3303): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519fd6e5e701"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r7, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7e9}, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 0s ago: executing program 2 (id=3304): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): 0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.2.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 383.430631][T13374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.489865][ T28] audit: type=1326 audit(2000000061.510:11935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.2.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 383.555083][ T28] audit: type=1326 audit(2000000061.510:11936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.2.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8ab45cfce code=0x7ffc0000 [ 383.595797][ T28] audit: type=1326 audit(2000000061.510:11937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.2.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 383.759934][ T28] audit: type=1326 audit(2000000061.510:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.2.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 383.786239][ T28] audit: type=1326 audit(2000000061.520:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.2.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 383.860091][ T28] audit: type=1326 audit(2000000061.520:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.2.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 384.169568][T13382] syz.1.2834 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 384.247458][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.1.2834 Tainted: G W syzkaller #0 PREEMPT(full) [ 384.247491][T13382] Tainted: [W]=WARN [ 384.247499][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.247512][T13382] Call Trace: [ 384.247528][T13382] [ 384.247536][T13382] __dump_stack+0x1d/0x30 [ 384.247563][T13382] dump_stack_lvl+0x95/0xd0 [ 384.247586][T13382] dump_stack+0x15/0x1b [ 384.247608][T13382] dump_header+0x80/0x240 [ 384.247627][T13382] oom_kill_process+0x295/0x350 [ 384.247701][T13382] out_of_memory+0x97d/0xb80 [ 384.247720][T13382] try_charge_memcg+0x62e/0xa10 [ 384.247776][T13382] obj_cgroup_charge_pages+0x23/0xc0 [ 384.247804][T13382] __memcg_kmem_charge_page+0x9e/0x170 [ 384.247881][T13382] __alloc_frozen_pages_noprof+0x18a/0x360 [ 384.247912][T13382] alloc_pages_mpol+0xb3/0x260 [ 384.247983][T13382] alloc_pages_noprof+0x8f/0x130 [ 384.248006][T13382] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 384.248086][T13382] __kvmalloc_node_noprof+0x3d4/0x650 [ 384.248106][T13382] ? futex_hash_allocate+0x190/0x9d0 [ 384.248133][T13382] ? futex_hash_allocate+0x190/0x9d0 [ 384.248162][T13382] futex_hash_allocate+0x190/0x9d0 [ 384.248217][T13382] ? static_key_count+0xd/0x40 [ 384.248310][T13382] ? __sanitizer_cov_trace_pc+0x36/0x70 [ 384.248378][T13382] futex_hash_prctl+0xd8/0xf0 [ 384.248406][T13382] __se_sys_prctl+0xa3d/0x13f0 [ 384.248433][T13382] __x64_sys_prctl+0x67/0x80 [ 384.248475][T13382] x64_sys_call+0x2533/0x3020 [ 384.248499][T13382] do_syscall_64+0x12c/0x370 [ 384.248522][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.248611][T13382] RIP: 0033:0x7fa5ededc799 [ 384.248625][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.248646][T13382] RSP: 002b:00007fa5ec92f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 384.248667][T13382] RAX: ffffffffffffffda RBX: 00007fa5ee155fa0 RCX: 00007fa5ededc799 [ 384.248683][T13382] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 384.248698][T13382] RBP: 00007fa5edf72bd9 R08: 0000000000000000 R09: 0000000000000000 [ 384.248713][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.248727][T13382] R13: 00007fa5ee156038 R14: 00007fa5ee155fa0 R15: 00007ffcda981f48 [ 384.248809][T13382] [ 384.545205][T13382] memory: usage 120808kB, limit 307200kB, failcnt 2921 [ 384.587830][T13382] memory+swap: usage 126004kB, limit 9007199254740988kB, failcnt 0 [ 384.607906][T13382] kmem: usage 120388kB, limit 9007199254740988kB, failcnt 0 [ 384.633955][T13382] Memory cgroup stats for /syz1: [ 384.634185][T13382] cache 524288 [ 384.657766][T13382] rss 32768 [ 384.669714][T13382] shmem 0 [ 384.676005][T13382] mapped_file 65536 [ 384.689245][T13382] dirty 0 [ 384.697677][T13382] writeback 0 [ 384.710693][T13382] workingset_refault_anon 335 [ 384.742828][T13382] workingset_refault_file 7768 [ 384.779963][T13382] swap 5062656 [ 384.783409][T13382] swapcached 5500928 [ 384.787534][T13382] pgpgin 375782 [ 384.791476][T13382] pgpgout 375641 [ 384.795041][T13382] pgfault 356075 [ 384.798627][T13382] pgmajfault 326 [ 384.815599][T13417] loop8: detected capacity change from 0 to 136 [ 384.819854][T13382] inactive_anon 0 [ 384.835681][T13382] active_anon 40960 [ 384.846349][T13382] inactive_file 0 [ 384.855918][T13382] active_file 536576 [ 384.866058][T13382] unevictable 0 [ 384.869639][T13382] hierarchical_memory_limit 314572800 [ 384.883990][T13382] hierarchical_memsw_limit 9223372036854771712 [ 384.899958][T13382] total_cache 524288 [ 384.904041][T13382] total_rss 32768 [ 384.907667][T13382] total_shmem 0 [ 384.920225][T13417] Attempt to read inode for relocated directory [ 384.922909][T13382] total_mapped_file 65536 [ 384.941622][T13382] total_dirty 0 [ 384.945103][T13382] total_writeback 0 [ 384.948898][T13382] total_workingset_refault_anon 335 [ 384.974564][T13382] total_workingset_refault_file 7768 [ 384.984674][T13382] total_swap 5062656 [ 384.988578][T13382] total_swapcached 5500928 [ 385.001980][T13382] total_pgpgin 375782 [ 385.010245][T13382] total_pgpgout 375641 [ 385.014359][T13382] total_pgfault 356075 [ 385.028733][T13382] total_pgmajfault 326 [ 385.038639][T13382] total_inactive_anon 0 [ 385.048768][T13382] total_active_anon 40960 [ 385.059031][T13382] total_inactive_file 0 [ 385.079089][T13382] total_active_file 536576 [ 385.083777][T13382] total_unevictable 0 [ 385.087795][T13382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2834,pid=13381,uid=0 [ 385.129911][T13382] Memory cgroup out of memory: Killed process 13382 (syz.1.2834) total-vm:96340kB, anon-rss:1252kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 386.277238][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.353846][T13416] syz.8.2843 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 386.368292][T13416] CPU: 1 UID: 0 PID: 13416 Comm: syz.8.2843 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.368360][T13416] Tainted: [W]=WARN [ 386.368368][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.368381][T13416] Call Trace: [ 386.368451][T13416] [ 386.368461][T13416] __dump_stack+0x1d/0x30 [ 386.368488][T13416] dump_stack_lvl+0x95/0xd0 [ 386.368511][T13416] dump_stack+0x15/0x1b [ 386.368532][T13416] dump_header+0x80/0x240 [ 386.368632][T13416] oom_kill_process+0x295/0x350 [ 386.368654][T13416] out_of_memory+0x97d/0xb80 [ 386.368677][T13416] try_charge_memcg+0x62e/0xa10 [ 386.368715][T13416] obj_cgroup_charge_pages+0x23/0xc0 [ 386.368874][T13416] __memcg_kmem_charge_page+0x9e/0x170 [ 386.368902][T13416] __alloc_frozen_pages_noprof+0x18a/0x360 [ 386.368987][T13416] alloc_pages_mpol+0xb3/0x260 [ 386.369015][T13416] alloc_pages_noprof+0x8f/0x130 [ 386.369041][T13416] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 386.369149][T13416] __kvmalloc_node_noprof+0x3d4/0x650 [ 386.369174][T13416] ? futex_hash_allocate+0x190/0x9d0 [ 386.369238][T13416] ? futex_hash_allocate+0x190/0x9d0 [ 386.369282][T13416] futex_hash_allocate+0x190/0x9d0 [ 386.369357][T13416] ? cap_task_prctl+0x13f/0x6e0 [ 386.369380][T13416] futex_hash_prctl+0xd8/0xf0 [ 386.369464][T13416] __se_sys_prctl+0xa3d/0x13f0 [ 386.369492][T13416] __x64_sys_prctl+0x67/0x80 [ 386.369617][T13416] x64_sys_call+0x2533/0x3020 [ 386.369644][T13416] do_syscall_64+0x12c/0x370 [ 386.369665][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.369686][T13416] RIP: 0033:0x7f8b4b58c799 [ 386.369710][T13416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.369734][T13416] RSP: 002b:00007f8b49fc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 386.369756][T13416] RAX: ffffffffffffffda RBX: 00007f8b4b806090 RCX: 00007f8b4b58c799 [ 386.369770][T13416] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 386.369839][T13416] RBP: 00007f8b4b622bd9 R08: 0000000000000000 R09: 0000000000000000 [ 386.369854][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.369867][T13416] R13: 00007f8b4b806128 R14: 00007f8b4b806090 R15: 00007ffebdfab298 [ 386.369888][T13416] [ 386.594776][T13416] memory: usage 307200kB, limit 307200kB, failcnt 499 [ 386.602978][T13447] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 386.608169][T13416] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 386.619353][T13416] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 386.626826][T13416] Memory cgroup stats for /syz8: [ 386.627080][T13416] cache 0 [ 386.635222][T13416] rss 0 [ 386.637980][T13416] shmem 0 [ 386.641223][T13416] mapped_file 0 [ 386.644746][T13416] dirty 0 [ 386.647722][T13416] writeback 0 [ 386.669124][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.676424][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.750618][T13416] workingset_refault_anon 23 [ 386.755331][T13416] workingset_refault_file 0 [ 386.760855][T13416] swap 266240 [ 386.764706][T13416] swapcached 274432 [ 386.768537][T13416] pgpgin 92170 [ 386.772142][T13416] pgpgout 92168 [ 386.779907][T13416] pgfault 90019 [ 386.783430][T13416] pgmajfault 14 [ 386.792567][T13416] inactive_anon 0 [ 386.799646][T13416] active_anon 8192 [ 386.814405][T13416] inactive_file 0 [ 386.838856][T13440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.839799][T13416] active_file 0 [ 386.849760][T13416] unevictable 0 [ 386.853424][T13416] hierarchical_memory_limit 314572800 [ 386.858789][T13416] hierarchical_memsw_limit 9223372036854771712 [ 386.865077][T13416] total_cache 0 [ 386.868525][T13416] total_rss 0 [ 386.871903][T13416] total_shmem 0 [ 386.875415][T13416] total_mapped_file 0 [ 386.879400][T13416] total_dirty 0 [ 386.882956][T13416] total_writeback 0 [ 386.886768][T13416] total_workingset_refault_anon 23 [ 386.891925][T13416] total_workingset_refault_file 0 [ 386.895817][T13440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.896976][T13416] total_swap 266240 [ 386.896985][T13416] total_swapcached 274432 [ 386.897002][T13416] total_pgpgin 92170 [ 386.960355][ T5610] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.982837][ T5610] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.005182][T13416] total_pgpgout 92168 [ 387.014684][T13416] total_pgfault 90019 [ 387.016710][ T5610] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.023733][T13416] total_pgmajfault 14 [ 387.039836][T13416] total_inactive_anon 0 [ 387.048423][T13416] total_active_anon 8192 [ 387.052159][ T5610] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.058064][T13416] total_inactive_file 0 [ 387.084075][T13416] total_active_file 0 [ 387.088434][T13474] FAULT_INJECTION: forcing a failure. [ 387.088434][T13474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.103694][T13416] total_unevictable 0 [ 387.107678][T13416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2843,pid=13414,uid=0 [ 387.125652][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.9.2854 Tainted: G W syzkaller #0 PREEMPT(full) [ 387.125709][T13474] Tainted: [W]=WARN [ 387.125716][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.125729][T13474] Call Trace: [ 387.125736][T13474] [ 387.125744][T13474] __dump_stack+0x1d/0x30 [ 387.125780][T13474] dump_stack_lvl+0x95/0xd0 [ 387.125808][T13474] dump_stack+0x15/0x1b [ 387.125829][T13474] should_fail_ex+0x263/0x280 [ 387.125852][T13474] should_fail+0xb/0x20 [ 387.125879][T13474] should_fail_usercopy+0x1a/0x20 [ 387.126026][T13474] strncpy_from_user+0x27/0x250 [ 387.126049][T13474] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 387.126072][T13474] do_getname+0x59/0x1c0 [ 387.126241][T13474] getname_uflags+0x23/0x30 [ 387.126262][T13474] do_faccessat+0x38b/0x880 [ 387.126289][T13474] ? ksys_write+0x194/0x1a0 [ 387.126312][T13474] __x64_sys_faccessat+0x41/0x50 [ 387.126334][T13474] x64_sys_call+0x28a7/0x3020 [ 387.126430][T13474] do_syscall_64+0x12c/0x370 [ 387.126452][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.126472][T13474] RIP: 0033:0x7f1307ddc799 [ 387.126488][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.126567][T13474] RSP: 002b:00007f1306837028 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 387.126585][T13474] RAX: ffffffffffffffda RBX: 00007f1308055fa0 RCX: 00007f1307ddc799 [ 387.126651][T13474] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 387.126665][T13474] RBP: 00007f1306837090 R08: 0000000000000000 R09: 0000000000000000 [ 387.126683][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.126696][T13474] R13: 00007f1308056038 R14: 00007f1308055fa0 R15: 00007ffc429a9758 [ 387.126822][T13474] [ 387.326150][T13416] Memory cgroup out of memory: Killed process 13414 (syz.8.2843) total-vm:96340kB, anon-rss:1220kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 388.764548][T13526] loop8: detected capacity change from 0 to 512 [ 388.811609][T13526] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.864237][T13526] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.962021][T13538] loop9: detected capacity change from 0 to 512 [ 388.972742][T13538] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 388.983186][T13538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 388.991469][T13538] EXT4-fs (loop9): orphan cleanup on readonly fs [ 388.998140][T13538] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.2863: iget: bad i_size value: 12154761577498 [ 389.011358][T13538] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 389.011556][T13538] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2863: couldn't read orphan inode 13 (err -117) [ 389.020686][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 389.020708][ C0] EXT4-fs (loop9): initial error at time 2000000068: ext4_orphan_get:1391: inode 13 [ 389.020734][ C0] EXT4-fs (loop9): last error at time 2000000068: ext4_orphan_get:1391: inode 13 [ 389.100247][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.270069][T13538] loop9: lost filesystem error report for type 5 error -117 [ 389.270618][T13538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 389.406395][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.451055][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 389.451082][ T28] audit: type=1326 audit(2000000068.770:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.510148][T13548] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 389.542414][ T28] audit: type=1326 audit(2000000068.780:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.649832][ T28] audit: type=1326 audit(2000000068.780:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.738347][ T28] audit: type=1326 audit(2000000068.780:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.785092][ T28] audit: type=1326 audit(2000000068.790:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.808773][ T28] audit: type=1326 audit(2000000068.800:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61a1e6cfce code=0x7ffc0000 [ 389.836606][ T28] audit: type=1326 audit(2000000068.850:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.853576][T13556] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2864'. [ 389.860513][ T28] audit: type=1326 audit(2000000068.860:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.879392][T13556] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2864'. [ 389.919617][ T28] audit: type=1326 audit(2000000068.890:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.943375][ T28] audit: type=1326 audit(2000000068.890:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61a1eac799 code=0x7ffc0000 [ 389.970569][T13560] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 390.142893][T13565] loop5: detected capacity change from 0 to 512 [ 390.217577][T13565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.265092][T13565] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.348788][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2868'. [ 390.362201][T13570] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 390.374740][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.478080][T13575] syzkaller0: entered promiscuous mode [ 390.483788][T13575] syzkaller0: entered allmulticast mode [ 391.417510][T13580] loop2: detected capacity change from 0 to 512 [ 391.477404][T13580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.496047][T13580] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.458973][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.698052][T13593] tipc: Can't bind to reserved service type 2 [ 392.710938][T13587] loop2: detected capacity change from 0 to 512 [ 392.812923][T13597] netlink: 'syz.5.2878': attribute type 1 has an invalid length. [ 392.863440][T13587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.911222][T13587] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.269650][T13603] tipc: Failed to remove unknown binding: 66,0,0/0:1792048007/1792048008 [ 393.294457][T13603] tipc: Failed to remove unknown binding: 66,0,0/0:1792048007/1792048008 [ 393.323098][T13605] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 393.540709][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.712252][T13615] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 393.723322][T13611] loop9: detected capacity change from 0 to 512 [ 393.787511][T13611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.812151][T13611] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.664216][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.707859][T13629] netlink: 'syz.8.2886': attribute type 1 has an invalid length. [ 395.728453][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 395.728467][ T28] audit: type=1400 audit(2000000075.080:12039): avc: denied { mount } for pid=13628 comm="syz.5.2887" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 395.760356][ T28] audit: type=1400 audit(2000000075.080:12040): avc: denied { search } for pid=13628 comm="syz.5.2887" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 395.782430][ T28] audit: type=1400 audit(2000000075.090:12041): avc: denied { search } for pid=13628 comm="syz.5.2887" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 395.804698][ T28] audit: type=1400 audit(2000000075.090:12042): avc: denied { read open } for pid=13628 comm="syz.5.2887" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 395.816348][T13629] bond2: (slave veth3): Enslaving as an active interface with a down link [ 395.852089][T13633] bond0: (slave dummy0): Releasing backup interface [ 395.960419][T13633] bond2: (slave dummy0): making interface the new active one [ 395.979164][T13633] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 395.983062][T13629] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2886'. [ 396.079625][T13629] bond2: (slave dummy0): Releasing active interface [ 396.118884][T13648] loop5: detected capacity change from 0 to 136 [ 396.189926][T13648] Attempt to read inode for relocated directory [ 396.219153][T13643] loop2: detected capacity change from 0 to 512 [ 396.455416][T13643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.482440][T13643] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.512324][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.613611][T13645] syz.5.2890 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 396.629892][T13645] CPU: 0 UID: 0 PID: 13645 Comm: syz.5.2890 Tainted: G W syzkaller #0 PREEMPT(full) [ 396.629930][T13645] Tainted: [W]=WARN [ 396.629938][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.629951][T13645] Call Trace: [ 396.629958][T13645] [ 396.629967][T13645] __dump_stack+0x1d/0x30 [ 396.630052][T13645] dump_stack_lvl+0x95/0xd0 [ 396.630076][T13645] dump_stack+0x15/0x1b [ 396.630096][T13645] dump_header+0x80/0x240 [ 396.630212][T13645] oom_kill_process+0x295/0x350 [ 396.630231][T13645] out_of_memory+0x97d/0xb80 [ 396.630250][T13645] try_charge_memcg+0x62e/0xa10 [ 396.630286][T13645] obj_cgroup_charge_pages+0x23/0xc0 [ 396.630382][T13645] __memcg_kmem_charge_page+0x9e/0x170 [ 396.630460][T13645] __alloc_frozen_pages_noprof+0x18a/0x360 [ 396.630596][T13645] alloc_pages_bulk_noprof+0x4aa/0x530 [ 396.630619][T13645] ? policy_nodemask+0x417/0x5e0 [ 396.630645][T13645] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 396.630776][T13645] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 396.630876][T13645] ? alloc_pages_mpol+0x217/0x260 [ 396.630903][T13645] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 396.630933][T13645] __kvmalloc_node_noprof+0x3d4/0x650 [ 396.631058][T13645] ? futex_hash_allocate+0x190/0x9d0 [ 396.631085][T13645] ? futex_hash_allocate+0x190/0x9d0 [ 396.631114][T13645] futex_hash_allocate+0x190/0x9d0 [ 396.631247][T13645] ? cap_task_prctl+0x13f/0x6e0 [ 396.631279][T13645] futex_hash_prctl+0xd8/0xf0 [ 396.631304][T13645] __se_sys_prctl+0xa3d/0x13f0 [ 396.631331][T13645] __x64_sys_prctl+0x67/0x80 [ 396.631409][T13645] x64_sys_call+0x2533/0x3020 [ 396.631429][T13645] do_syscall_64+0x12c/0x370 [ 396.631447][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.631535][T13645] RIP: 0033:0x7f61a1eac799 [ 396.631548][T13645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.631631][T13645] RSP: 002b:00007f61a08de028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 396.631699][T13645] RAX: ffffffffffffffda RBX: 00007f61a2126090 RCX: 00007f61a1eac799 [ 396.631712][T13645] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 396.631723][T13645] RBP: 00007f61a1f42bd9 R08: 0000000000000000 R09: 0000000000000000 [ 396.631734][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.631806][T13645] R13: 00007f61a2126128 R14: 00007f61a2126090 R15: 00007fffc7801468 [ 396.631823][T13645] [ 396.631872][T13645] memory: usage 307200kB, limit 307200kB, failcnt 2353 [ 396.923533][T13661] FAULT_INJECTION: forcing a failure. [ 396.923533][T13661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.941654][T13645] memory+swap: usage 296748kB, limit 9007199254740988kB, failcnt 0 [ 396.960038][T13661] CPU: 0 UID: 0 PID: 13661 Comm: syz.1.2894 Tainted: G W syzkaller #0 PREEMPT(full) [ 396.960209][T13661] Tainted: [W]=WARN [ 396.960215][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.960226][T13661] Call Trace: [ 396.960233][T13661] [ 396.960239][T13661] __dump_stack+0x1d/0x30 [ 396.960313][T13661] dump_stack_lvl+0x95/0xd0 [ 396.960397][T13661] dump_stack+0x15/0x1b [ 396.960418][T13661] should_fail_ex+0x263/0x280 [ 396.960451][T13661] should_fail+0xb/0x20 [ 396.960467][T13661] should_fail_usercopy+0x1a/0x20 [ 396.960535][T13661] _copy_to_user+0x20/0xa0 [ 396.960557][T13661] simple_read_from_buffer+0xb5/0x130 [ 396.960575][T13661] proc_fail_nth_read+0x10e/0x150 [ 396.960602][T13661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.960669][T13661] vfs_read+0x1ab/0x7f0 [ 396.960721][T13661] ? __rcu_read_unlock+0x4e/0x70 [ 396.960782][T13661] ? __fget_files+0x184/0x1c0 [ 396.960804][T13661] ? mutex_lock+0x57/0x90 [ 396.960880][T13661] ksys_read+0xdc/0x1a0 [ 396.960905][T13661] __x64_sys_read+0x40/0x50 [ 396.960932][T13661] x64_sys_call+0x2886/0x3020 [ 396.961035][T13661] do_syscall_64+0x12c/0x370 [ 396.961057][T13661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.961075][T13661] RIP: 0033:0x7fa5ede9cfce [ 396.961089][T13661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.961136][T13661] RSP: 002b:00007fa5ec92efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.961239][T13661] RAX: ffffffffffffffda RBX: 00007fa5ec92f6c0 RCX: 00007fa5ede9cfce [ 396.961297][T13661] RDX: 000000000000000f RSI: 00007fa5ec92f0a0 RDI: 0000000000000003 [ 396.961310][T13661] RBP: 00007fa5ec92f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.961321][T13661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.961332][T13661] R13: 00007fa5ee156038 R14: 00007fa5ee155fa0 R15: 00007ffcda981f48 [ 396.961349][T13661] [ 397.199917][T13645] kmem: usage 223196kB, limit 9007199254740988kB, failcnt 0 [ 397.207271][T13645] Memory cgroup stats for /syz5: [ 397.207477][T13645] cache 0 [ 397.220197][T13645] rss 102400 [ 397.223465][T13645] shmem 0 [ 397.226444][T13645] mapped_file 0 [ 397.241845][T13645] dirty 0 [ 397.244987][T13645] writeback 0 [ 397.248287][T13645] workingset_refault_anon 324 [ 397.253347][T13645] workingset_refault_file 0 [ 397.257883][T13645] swap 69967872 [ 397.261855][T13645] swapcached 94031872 [ 397.266052][T13645] pgpgin 363191 [ 397.269574][T13645] pgpgout 363140 [ 397.276008][T13645] pgfault 380331 [ 397.279580][T13645] pgmajfault 177 [ 397.283647][T13645] inactive_anon 200704 [ 397.287851][T13645] active_anon 8192 [ 397.292444][T13645] inactive_file 0 [ 397.296143][T13645] active_file 0 [ 397.299664][T13645] unevictable 0 [ 397.306211][T13645] hierarchical_memory_limit 314572800 [ 397.316875][T13645] hierarchical_memsw_limit 9223372036854771712 [ 397.346243][T13645] total_cache 0 [ 397.359215][T13645] total_rss 102400 [ 397.363360][T13645] total_shmem 0 [ 397.367074][T13645] total_mapped_file 0 [ 397.371442][T13645] total_dirty 0 [ 397.374919][T13645] total_writeback 0 [ 397.378819][T13645] total_workingset_refault_anon 324 [ 397.382640][ T28] audit: type=1400 audit(2000000076.690:12043): avc: denied { create } for pid=13674 comm="syz.1.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 397.384684][T13645] total_workingset_refault_file 0 [ 397.436407][T13645] total_swap 69967872 [ 397.444923][ T28] audit: type=1400 audit(2000000076.710:12044): avc: denied { setopt } for pid=13674 comm="syz.1.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 397.459938][T13645] total_swapcached 94031872 [ 397.503630][T13645] total_pgpgin 363191 [ 397.507634][T13645] total_pgpgout 363140 [ 397.519552][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2902'. [ 397.522206][T13645] total_pgfault 380331 [ 397.555405][T13645] total_pgmajfault 177 [ 397.559727][T13645] total_inactive_anon 200704 [ 397.595265][T13645] total_active_anon 8192 [ 397.599530][T13645] total_inactive_file 0 [ 397.608124][T13645] total_active_file 0 [ 397.612929][T13645] total_unevictable 0 [ 397.617071][T13645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2890,pid=13638,uid=0 [ 397.633791][T13645] Memory cgroup out of memory: Killed process 13645 (syz.5.2890) total-vm:100576kB, anon-rss:1336kB, file-rss:26660kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 398.547323][T13708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2907'. [ 398.556402][T13708] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 398.564863][T13705] loop8: detected capacity change from 0 to 2048 [ 398.610822][T13705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.629479][T13713] loop5: detected capacity change from 0 to 1024 [ 398.650319][T13705] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 398.768752][T13713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.890456][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.905765][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.118572][T13722] loop8: detected capacity change from 0 to 2048 [ 399.140929][ T28] audit: type=1400 audit(2000000078.500:12045): avc: denied { read } for pid=13724 comm="syz.5.2914" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 399.190193][T13722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.219383][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.270254][T13729] loop2: detected capacity change from 0 to 128 [ 399.285013][ T28] audit: type=1400 audit(2000000078.640:12046): avc: denied { bind } for pid=13732 comm="syz.9.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 399.377929][ T28] audit: type=1400 audit(2000000078.730:12047): avc: denied { create } for pid=13736 comm="syz.9.2920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 399.444978][T13743] tipc: Enabling of bearer rejected, failed to enable media [ 399.536284][T13767] tmpfs: Unsupported parameter 'huge' [ 399.636246][T13785] loop9: detected capacity change from 0 to 128 [ 399.707438][T13798] loop2: detected capacity change from 0 to 1024 [ 399.726940][T13798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.746127][T13798] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2945: missing EA_INODE flag [ 399.758146][T13798] EXT4-fs (loop2): Remounting filesystem read-only [ 399.774195][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.921842][T13810] netlink: 'syz.2.2949': attribute type 1 has an invalid length. [ 399.944074][T13810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.982233][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2949'. [ 399.991567][T13810] bond4: entered allmulticast mode [ 400.008568][T13810] bond4: (slave dummy0): making interface the new active one [ 400.016246][T13810] dummy0: entered allmulticast mode [ 400.034506][T13810] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 400.150549][T13817] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.162426][T13817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.169679][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 400.176912][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 400.568165][T13825] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2954'. [ 400.606243][T13825] bond3: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 400.636771][T13825] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2954'. [ 400.649831][T13825] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 400.719234][T13833] syzkaller0: entered promiscuous mode [ 400.767723][T13833] syzkaller0: entered allmulticast mode [ 400.787221][ T28] audit: type=1400 audit(2000000080.140:12048): avc: denied { relabelfrom } for pid=13832 comm="syz.9.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 400.849883][ T28] audit: type=1400 audit(2000000080.140:12049): avc: denied { relabelto } for pid=13832 comm="syz.9.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 402.364644][T13869] loop9: detected capacity change from 0 to 512 [ 402.474486][T13869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.515938][T13869] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.644519][ T28] audit: type=1400 audit(2000000082.000:12050): avc: denied { map } for pid=13878 comm="syz.2.2973" path="socket:[40307]" dev="sockfs" ino=40307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 402.805039][T13884] loop2: detected capacity change from 0 to 512 [ 402.828050][T13886] syzkaller0: entered promiscuous mode [ 402.853816][T13884] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 402.882464][T13886] syzkaller0: entered allmulticast mode [ 402.890694][T13884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 402.922043][T13884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 402.959007][T13884] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.2975: iget: bad i_size value: 12154761577498 [ 403.010956][T13884] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 403.011194][T13884] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2975: couldn't read orphan inode 13 (err -117) [ 403.020369][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 403.020406][ C0] EXT4-fs (loop2): initial error at time 2000000082: ext4_orphan_get:1391: inode 13 [ 403.020437][ C0] EXT4-fs (loop2): last error at time 2000000082: ext4_orphan_get:1391: inode 13 [ 403.148987][T13884] loop2: lost filesystem error report for type 5 error -117 [ 403.149498][T13884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 403.196080][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.196502][T13894] ªªªªªª: renamed from vlan0 [ 403.212151][T13892] loop8: detected capacity change from 0 to 512 [ 403.231845][T13892] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 403.247195][T13892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 403.258621][T13892] EXT4-fs (loop8): orphan cleanup on readonly fs [ 403.258926][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.274234][T13892] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.2977: iget: bad i_size value: 12154761577498 [ 403.291815][T13892] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 403.292034][T13892] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2977: couldn't read orphan inode 13 (err -117) [ 403.301204][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 403.301224][ C1] EXT4-fs (loop8): initial error at time 2000000082: ext4_orphan_get:1391: inode 13 [ 403.301254][ C1] EXT4-fs (loop8): last error at time 2000000082: ext4_orphan_get:1391: inode 13 [ 403.323289][T13896] loop5: detected capacity change from 0 to 512 [ 403.386842][T13904] loop2: detected capacity change from 0 to 512 [ 403.393879][ T28] audit: type=1326 audit(2000000082.740:12051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13901 comm="syz.9.2983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x0 [ 403.398878][T13892] loop8: lost filesystem error report for type 5 error -117 [ 403.418733][T13892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 403.439777][T13910] loop9: detected capacity change from 0 to 128 [ 403.450159][T13904] EXT4-fs: Ignoring removed mblk_io_submit option [ 403.477977][T13892] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 403.487178][T13892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 403.505296][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.555184][T13904] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 403.567116][T13904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2982: bg 0: block 384: padding at end of block bitmap is not set [ 403.573115][T13896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.582108][T13904] loop2: lost filesystem error report for type 5 error -117 [ 403.595019][T13904] EXT4-fs (loop2): Remounting filesystem read-only [ 403.596361][T13896] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.602347][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 403.602374][ C1] EXT4-fs (loop2): initial error at time 2000000082: ext4_validate_block_bitmap:441 [ 403.602400][ C1] EXT4-fs (loop2): last error at time 2000000082: ext4_validate_block_bitmap:441 [ 403.603128][T13904] EXT4-fs (loop2): 1 truncate cleaned up [ 403.705794][T13917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2984'. [ 403.817853][T13904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.050964][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.213710][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.273874][ T28] audit: type=1400 audit(2000000083.630:12052): avc: denied { write } for pid=13927 comm="syz.9.2990" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.495893][ T28] audit: type=1400 audit(2000000083.630:12053): avc: denied { open } for pid=13927 comm="syz.9.2990" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.520477][ T28] audit: type=1400 audit(2000000083.690:12054): avc: denied { ioctl } for pid=13927 comm="syz.9.2990" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 405.884152][T13943] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2993'. [ 405.994111][ T28] audit: type=1326 audit(2000000085.350:12055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.029397][T13947] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 406.034941][ T28] audit: type=1326 audit(2000000085.350:12056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.061477][ T28] audit: type=1326 audit(2000000085.350:12057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.085212][ T28] audit: type=1326 audit(2000000085.380:12058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.108780][ T28] audit: type=1326 audit(2000000085.380:12059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.134535][ T28] audit: type=1326 audit(2000000085.380:12060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.219834][ T28] audit: type=1326 audit(2000000085.380:12061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8ab45cfce code=0x7ffc0000 [ 406.309590][ T28] audit: type=1326 audit(2000000085.380:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.333838][ T28] audit: type=1326 audit(2000000085.380:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.357882][ T28] audit: type=1326 audit(2000000085.420:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.2.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ab49c799 code=0x7ffc0000 [ 406.584106][T13956] loop2: detected capacity change from 0 to 512 [ 406.844714][T13919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.861474][T13956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.953461][T13956] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.122583][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.673807][T13972] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.709517][T13972] lo speed is unknown, defaulting to 1000 [ 407.730759][T13996] loop9: detected capacity change from 0 to 128 [ 407.770111][T13998] netlink: 'syz.5.3010': attribute type 1 has an invalid length. [ 407.825219][T13998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.833777][T13972] lo speed is unknown, defaulting to 1000 [ 407.845859][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3010'. [ 407.871180][T13998] bond4: entered allmulticast mode [ 407.970685][T13972] chnl_net:caif_netlink_parms(): no params data found [ 408.014472][T13972] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.021720][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.028941][T13972] bridge_slave_0: entered allmulticast mode [ 408.035572][T13972] bridge_slave_0: entered promiscuous mode [ 408.042791][T13972] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.049946][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.057130][T13972] bridge_slave_1: entered allmulticast mode [ 408.063898][T13972] bridge_slave_1: entered promiscuous mode [ 408.081979][T13972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.092771][T13972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.113216][T13972] team0: Port device team_slave_0 added [ 408.120194][T13972] team0: Port device team_slave_1 added [ 408.135590][T13972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.142561][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.168536][T13972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.179768][T13972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.186817][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.212917][T13972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.240517][T13972] hsr_slave_0: entered promiscuous mode [ 408.246635][T13972] hsr_slave_1: entered promiscuous mode [ 408.252615][T13972] debugfs: 'hsr0' already exists in 'hsr' [ 408.258336][T13972] Cannot create hsr debugfs directory [ 408.285318][T14018] loop2: detected capacity change from 0 to 136 [ 408.317599][T14018] Attempt to read inode for relocated directory [ 408.340975][T13972] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.402432][T13972] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.461117][T13972] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.527963][T13972] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.656328][T13972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.765113][T13972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.788895][T14015] syz.2.3014 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 408.805536][T13972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.819901][T14015] CPU: 1 UID: 0 PID: 14015 Comm: syz.2.3014 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.819978][T14015] Tainted: [W]=WARN [ 408.819985][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.819996][T14015] Call Trace: [ 408.820002][T14015] [ 408.820009][T14015] __dump_stack+0x1d/0x30 [ 408.820100][T14015] dump_stack_lvl+0x95/0xd0 [ 408.820123][T14015] dump_stack+0x15/0x1b [ 408.820277][T14015] dump_header+0x80/0x240 [ 408.820350][T14015] oom_kill_process+0x295/0x350 [ 408.820378][T14015] out_of_memory+0x97d/0xb80 [ 408.820431][T14015] try_charge_memcg+0x62e/0xa10 [ 408.820467][T14015] obj_cgroup_charge_pages+0x23/0xc0 [ 408.820497][T14015] __memcg_kmem_charge_page+0x9e/0x170 [ 408.820562][T14015] __alloc_frozen_pages_noprof+0x18a/0x360 [ 408.820653][T14015] alloc_pages_mpol+0xb3/0x260 [ 408.820782][T14015] alloc_pages_noprof+0x8f/0x130 [ 408.820876][T14015] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 408.820916][T14015] __kvmalloc_node_noprof+0x3d4/0x650 [ 408.820983][T14015] ? futex_hash_allocate+0x190/0x9d0 [ 408.821012][T14015] ? futex_hash_allocate+0x190/0x9d0 [ 408.821072][T14015] futex_hash_allocate+0x190/0x9d0 [ 408.821099][T14015] ? cap_task_prctl+0x13f/0x6e0 [ 408.821120][T14015] futex_hash_prctl+0xd8/0xf0 [ 408.821141][T14015] __se_sys_prctl+0xa3d/0x13f0 [ 408.821236][T14015] __x64_sys_prctl+0x67/0x80 [ 408.821258][T14015] x64_sys_call+0x2533/0x3020 [ 408.821284][T14015] do_syscall_64+0x12c/0x370 [ 408.821305][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.821402][T14015] RIP: 0033:0x7ff8ab49c799 [ 408.821423][T14015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.821439][T14015] RSP: 002b:00007ff8a9ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 408.821456][T14015] RAX: ffffffffffffffda RBX: 00007ff8ab716090 RCX: 00007ff8ab49c799 [ 408.821531][T14015] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 408.821543][T14015] RBP: 00007ff8ab532bd9 R08: 0000000000000000 R09: 0000000000000000 [ 408.821556][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.821569][T14015] R13: 00007ff8ab716128 R14: 00007ff8ab716090 R15: 00007ffd6da1c778 [ 408.821590][T14015] [ 408.822333][T14015] memory: usage 307200kB, limit 307200kB, failcnt 3187 [ 408.942874][T13972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.008952][T14015] memory+swap: usage 311944kB, limit 9007199254740988kB, failcnt 0 [ 409.093277][T14015] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 409.101674][T14015] Memory cgroup stats for /syz2: [ 409.101951][T14015] cache 0 [ 409.110647][T14015] rss 0 [ 409.113591][T14015] shmem 0 [ 409.116589][T14015] mapped_file 0 [ 409.120407][T14015] dirty 0 [ 409.123480][T14015] writeback 28672 [ 409.127265][T14015] workingset_refault_anon 2688 [ 409.210117][T14015] workingset_refault_file 5633 [ 409.214893][T14015] swap 4857856 [ 409.218310][T14015] swapcached 28725248 [ 409.232884][T13972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.244304][T14015] pgpgin 408810 [ 409.247779][T14015] pgpgout 408797 [ 409.276105][T13972] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.283733][T14015] pgfault 432972 [ 409.287273][T14015] pgmajfault 678 [ 409.295404][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.302460][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.310644][T14015] inactive_anon 28672 [ 409.314657][T14015] active_anon 0 [ 409.318125][T14015] inactive_file 8192 [ 409.327317][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.334381][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.372052][T14040] netlink: 'syz.5.3021': attribute type 1 has an invalid length. [ 409.383898][T14015] active_file 4096 [ 409.387692][T14015] unevictable 0 [ 409.412540][T14015] hierarchical_memory_limit 314572800 [ 409.429164][T14015] hierarchical_memsw_limit 9223372036854771712 [ 409.445742][T14040] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.464849][T14015] total_cache 0 [ 409.479548][T14015] total_rss 0 [ 409.480822][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3021'. [ 409.482940][T14015] total_shmem 0 [ 409.495317][T14015] total_mapped_file 0 [ 409.499290][T14015] total_dirty 0 [ 409.508047][T14040] bond5: entered allmulticast mode [ 409.519917][T14015] total_writeback 28672 [ 409.524398][T14015] total_workingset_refault_anon 2688 [ 409.548492][T14015] total_workingset_refault_file 5633 [ 409.581850][T14015] total_swap 4857856 [ 409.588758][T14015] total_swapcached 28725248 [ 409.602578][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.610551][T14015] total_pgpgin 408810 [ 409.614573][T14015] total_pgpgout 408797 [ 409.620221][T14015] total_pgfault 432972 [ 409.624285][T14015] total_pgmajfault 678 [ 409.628334][T14015] total_inactive_anon 28672 [ 409.643394][T14015] total_active_anon 0 [ 409.647407][T14015] total_inactive_file 8192 [ 409.655426][T14015] total_active_file 4096 [ 409.659679][T14015] total_unevictable 0 [ 409.663777][T14015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3014,pid=14013,uid=0 [ 409.683492][T14015] Memory cgroup out of memory: Killed process 14013 (syz.2.3014) total-vm:100576kB, anon-rss:1228kB, file-rss:26624kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 410.058094][T13972] veth0_vlan: entered promiscuous mode [ 410.073312][T13972] veth1_vlan: entered promiscuous mode [ 410.100455][T14069] loop5: detected capacity change from 0 to 136 [ 410.135233][T13972] veth0_macvtap: entered promiscuous mode [ 410.161658][T13972] veth1_macvtap: entered promiscuous mode [ 410.193226][T14069] Attempt to read inode for relocated directory [ 410.226688][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.264342][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.310970][ T5610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.363938][ T5610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.417982][ T5610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.647656][ T5610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.843826][T14079] loop1: detected capacity change from 0 to 136 [ 410.877017][ T4264] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 411.000738][ T4264] CPU: 1 UID: 0 PID: 4264 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 411.000771][ T4264] Tainted: [W]=WARN [ 411.000778][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.000788][ T4264] Call Trace: [ 411.000794][ T4264] [ 411.000803][ T4264] __dump_stack+0x1d/0x30 [ 411.000961][ T4264] dump_stack_lvl+0x95/0xd0 [ 411.000984][ T4264] dump_stack+0x15/0x1b [ 411.001003][ T4264] dump_header+0x80/0x240 [ 411.001021][ T4264] oom_kill_process+0x295/0x350 [ 411.001114][ T4264] out_of_memory+0x97d/0xb80 [ 411.001136][ T4264] try_charge_memcg+0x62e/0xa10 [ 411.001244][ T4264] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 411.001274][ T4264] __swap_cache_prepare_and_add+0x386/0x530 [ 411.001341][ T4264] swap_cache_alloc_folio+0xa2/0x120 [ 411.001363][ T4264] swap_cluster_readahead+0x26e/0x3d0 [ 411.001438][ T4264] swapin_readahead+0xde/0x840 [ 411.001463][ T4264] ? __rcu_read_unlock+0x4e/0x70 [ 411.001551][ T4264] ? __perf_event_task_sched_in+0xa65/0xad0 [ 411.001572][ T4264] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 411.001608][ T4264] ? xfd_validate_state+0x45/0xf0 [ 411.001650][ T4264] ? __rcu_read_unlock+0x4e/0x70 [ 411.001677][ T4264] ? swap_cache_get_folio+0x26f/0x280 [ 411.001777][ T4264] do_swap_page+0x309/0x2210 [ 411.001800][ T4264] ? __schedule+0x93c/0xd40 [ 411.001818][ T4264] ? __rcu_read_lock+0x36/0x50 [ 411.001839][ T4264] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 411.001867][ T4264] handle_mm_fault+0xb40/0x3020 [ 411.001951][ T4264] ? vma_start_read+0x1c7/0x2c0 [ 411.001980][ T4264] do_user_addr_fault+0x62f/0x1050 [ 411.002039][ T4264] ? trace_page_fault_user+0x1f/0xe0 [ 411.002062][ T4264] exc_page_fault+0x62/0xa0 [ 411.002085][ T4264] asm_exc_page_fault+0x26/0x30 [ 411.002109][ T4264] RIP: 0033:0x7f61a1e67917 [ 411.002124][ T4264] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 411.002144][ T4264] RSP: 002b:00007fffc7801760 EFLAGS: 00010202 [ 411.002159][ T4264] RAX: 0000000000000000 RBX: 00005555873c9500 RCX: 00007f61a1e67917 [ 411.002173][ T4264] RDX: 00007fffc78017a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.002187][ T4264] RBP: 00007fffc780180c R08: 0000000000000000 R09: 0000000000000000 [ 411.002273][ T4264] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 411.002285][ T4264] R13: 00000000000927c0 R14: 000000000006444e R15: 00007fffc7801860 [ 411.002302][ T4264] [ 411.002308][ T4264] memory: usage 307200kB, limit 307200kB, failcnt 2521 [ 411.272001][T14079] Attempt to read inode for relocated directory [ 411.474728][ T4264] memory+swap: usage 375660kB, limit 9007199254740988kB, failcnt 0 [ 411.482945][T14083] loop8: detected capacity change from 0 to 256 [ 411.492554][T14083] msdos: Bad value for 'gid' [ 411.497174][T14083] msdos: Bad value for 'gid' [ 411.505829][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3030'. [ 411.525025][ T4264] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 411.532578][ T4264] Memory cgroup stats for /syz5: [ 411.532866][ T4264] cache 0 [ 411.540978][ T4264] rss 0 [ 411.541437][T14085] netlink: 'syz.9.3031': attribute type 1 has an invalid length. [ 411.543818][ T4264] shmem 0 [ 411.573015][ T4264] mapped_file 0 [ 411.576492][ T4264] dirty 0 [ 411.579480][ T4264] writeback 0 [ 411.607236][ T4264] workingset_refault_anon 363 [ 411.618748][T14085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.643043][ T4264] workingset_refault_file 0 [ 411.651494][T14089] bond1: (slave dummy0): making interface the new active one [ 411.663942][ T4264] swap 70103040 [ 411.680764][T14089] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 411.691677][ T4264] swapcached 94232576 [ 411.704007][ T4264] pgpgin 374273 [ 411.718411][ T4264] pgpgout 374255 [ 411.747142][ T4264] pgfault 398251 [ 411.764909][ T4264] pgmajfault 192 [ 411.782745][ T4264] inactive_anon 73728 [ 411.796908][ T4264] active_anon 0 [ 411.810095][ T4264] inactive_file 0 [ 411.821858][ T4264] active_file 0 [ 411.833552][ T4264] unevictable 0 [ 411.879919][ T4264] hierarchical_memory_limit 314572800 [ 411.885306][ T4264] hierarchical_memsw_limit 9223372036854771712 [ 411.897694][ T4264] total_cache 0 [ 411.901290][ T4264] total_rss 0 [ 411.905747][ T4264] total_shmem 0 [ 411.923244][ T4264] total_mapped_file 0 [ 411.937673][ T4264] total_dirty 0 [ 411.949986][ T4264] total_writeback 0 [ 411.957178][ T4264] total_workingset_refault_anon 363 [ 411.968026][ T4264] total_workingset_refault_file 0 [ 411.978561][ T4264] total_swap 70103040 [ 411.986922][ T4264] total_swapcached 94232576 [ 411.995770][ T4264] total_pgpgin 374273 [ 412.007077][ T4264] total_pgpgout 374255 [ 412.015587][ T4264] total_pgfault 398251 [ 412.024095][ T4264] total_pgmajfault 192 [ 412.032583][ T4264] total_inactive_anon 73728 [ 412.043345][ T4264] total_active_anon 0 [ 412.052137][ T4264] total_inactive_file 0 [ 412.062866][ T4264] total_active_file 0 [ 412.071135][ T4264] total_unevictable 0 [ 412.079384][ T4264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3025,pid=14053,uid=0 [ 412.109780][ T4264] Memory cgroup out of memory: Killed process 14053 (syz.5.3025) total-vm:100576kB, anon-rss:1220kB, file-rss:26652kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 412.910856][T14102] ip6_vti0 speed is unknown, defaulting to 1000 [ 412.998774][T14102] lo speed is unknown, defaulting to 1000 [ 413.068181][T14102] lo speed is unknown, defaulting to 1000 [ 413.282156][T14102] chnl_net:caif_netlink_parms(): no params data found [ 413.322678][T14102] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.332513][T14102] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.339639][T14102] bridge_slave_0: entered allmulticast mode [ 413.346571][T14102] bridge_slave_0: entered promiscuous mode [ 413.353506][T14102] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.360943][T14102] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.395449][T14102] bridge_slave_1: entered allmulticast mode [ 413.410496][T14102] bridge_slave_1: entered promiscuous mode [ 413.465800][T14102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.487591][T14102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.667122][T14102] team0: Port device team_slave_0 added [ 414.040561][T14102] team0: Port device team_slave_1 added [ 414.065353][T14102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.072448][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.108802][T14102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.126094][T14102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.140644][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.175251][T14102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.236618][T14102] hsr_slave_0: entered promiscuous mode [ 414.257642][T14102] hsr_slave_1: entered promiscuous mode [ 414.322500][T14102] debugfs: 'hsr0' already exists in 'hsr' [ 414.328241][T14102] Cannot create hsr debugfs directory [ 414.454226][T14102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.477906][T14152] loop8: detected capacity change from 0 to 512 [ 414.581571][T14154] loop9: detected capacity change from 0 to 512 [ 414.603386][T14152] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 414.611785][T14152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 414.620390][T14152] EXT4-fs (loop8): orphan cleanup on readonly fs [ 414.671738][T14152] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.3050: iget: bad i_size value: 12154761577498 [ 414.708197][T14154] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.734199][T14152] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 414.734660][T14152] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3050: couldn't read orphan inode 13 (err -117) [ 414.743909][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 414.743924][ C0] EXT4-fs (loop8): initial error at time 2000000094: ext4_orphan_get:1391: inode 13 [ 414.743957][ C0] EXT4-fs (loop8): last error at time 2000000094: ext4_orphan_get:1391: inode 13 [ 414.808564][T14154] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.865213][T14152] loop8: lost filesystem error report for type 5 error -117 [ 414.866767][T14152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 415.446956][T14102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.457389][T14152] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 415.465979][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.475534][T14152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 416.558739][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.591023][T14102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.671073][T14102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.760383][T14102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.769469][T14102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.781579][T14102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.799003][T14102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.854393][T14102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.869125][T14102] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.880446][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.887525][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.915065][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.922188][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.945752][T14102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.009216][T14102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.081883][T14102] veth0_vlan: entered promiscuous mode [ 417.089728][T14102] veth1_vlan: entered promiscuous mode [ 417.107886][T14102] veth0_macvtap: entered promiscuous mode [ 417.118972][T14102] veth1_macvtap: entered promiscuous mode [ 417.131043][T14102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.143301][T14102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.154353][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.180682][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.196022][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.210773][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.518413][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3061'. [ 417.535056][T14213] loop8: detected capacity change from 0 to 256 [ 417.545027][T14202] loop9: detected capacity change from 0 to 512 [ 417.553249][T14213] msdos: Bad value for 'gid' [ 417.557839][T14213] msdos: Bad value for 'gid' [ 419.595996][T14202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.626701][T14202] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.852810][T14236] tipc: Started in network mode [ 420.859003][T14235] xt_hashlimit: size too large, truncated to 1048576 [ 420.883436][T14236] tipc: Node identity 7603e715a1e5, cluster identity 4711 [ 420.921461][T14236] tipc: Enabled bearer , priority 0 [ 421.138592][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.150353][T14234] tipc: Disabling bearer [ 421.386165][T14257] loop8: detected capacity change from 0 to 512 [ 421.454518][T14257] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.472553][T14257] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.564815][T14261] loop2: detected capacity change from 0 to 512 [ 421.647425][T14261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.661630][T14261] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.369382][T14273] syzkaller0: entered promiscuous mode [ 422.375470][T14273] syzkaller0: entered allmulticast mode [ 422.396986][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.446297][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.488952][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 422.488965][ T28] audit: type=1326 audit(2000000101.840:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.546748][T14280] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 422.577558][ T28] audit: type=1326 audit(2000000101.880:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.623168][T14288] loop5: detected capacity change from 0 to 136 [ 422.660153][ T28] audit: type=1326 audit(2000000101.880:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.689746][T14290] loop8: detected capacity change from 0 to 512 [ 422.706120][T14288] Attempt to read inode for relocated directory [ 422.723429][T14290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.740079][T14290] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.750640][ T28] audit: type=1326 audit(2000000101.890:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.774962][ T28] audit: type=1326 audit(2000000101.890:12078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.798753][ T28] audit: type=1326 audit(2000000101.900:12079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5d55fcfce code=0x7ffc0000 [ 422.822721][ T28] audit: type=1326 audit(2000000101.900:12080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.848949][T14276] syz.5.3081 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 422.856715][ T28] audit: type=1326 audit(2000000101.900:12081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.955444][T14276] CPU: 1 UID: 0 PID: 14276 Comm: syz.5.3081 Tainted: G W syzkaller #0 PREEMPT(full) [ 422.955472][T14276] Tainted: [W]=WARN [ 422.955484][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.955540][T14276] Call Trace: [ 422.955547][T14276] [ 422.955555][T14276] __dump_stack+0x1d/0x30 [ 422.955577][T14276] dump_stack_lvl+0x95/0xd0 [ 422.955595][T14276] dump_stack+0x15/0x1b [ 422.955611][T14276] dump_header+0x80/0x240 [ 422.955660][T14276] oom_kill_process+0x295/0x350 [ 422.955683][T14276] out_of_memory+0x97d/0xb80 [ 422.955706][T14276] try_charge_memcg+0x62e/0xa10 [ 422.955780][T14276] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 422.955811][T14276] __swap_cache_prepare_and_add+0x386/0x530 [ 422.955862][T14276] swap_cache_alloc_folio+0xa2/0x120 [ 422.955885][T14276] swap_cluster_readahead+0x26e/0x3d0 [ 422.955917][T14276] swapin_readahead+0xde/0x840 [ 422.955964][T14276] ? __rcu_read_unlock+0x4e/0x70 [ 422.955986][T14276] ? __perf_event_task_sched_in+0xa65/0xad0 [ 422.956009][T14276] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 422.956054][T14276] ? __rcu_read_unlock+0x4e/0x70 [ 422.956075][T14276] ? swap_cache_get_folio+0x26f/0x280 [ 422.956097][T14276] do_swap_page+0x309/0x2210 [ 422.956200][T14276] ? __schedule+0x93c/0xd40 [ 422.956219][T14276] ? __rcu_read_lock+0x36/0x50 [ 422.956236][T14276] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 422.956304][T14276] handle_mm_fault+0xb40/0x3020 [ 422.956342][T14276] ? vma_start_read+0x1c7/0x2c0 [ 422.956364][T14276] do_user_addr_fault+0x62f/0x1050 [ 422.956395][T14276] ? trace_page_fault_user+0x1f/0xe0 [ 422.956423][T14276] exc_page_fault+0x62/0xa0 [ 422.956509][T14276] asm_exc_page_fault+0x26/0x30 [ 422.956586][T14276] RIP: 0033:0x7f61a1e678c3 [ 422.956604][T14276] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 4d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 422.956691][T14276] RSP: 002b:00007fffc7801560 EFLAGS: 00010246 [ 422.956706][T14276] RAX: 0000000000000000 RBX: 00005555873c9500 RCX: 0000000000000000 [ 422.956717][T14276] RDX: 00007fffc78015a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.956730][T14276] RBP: 00007f61a2127da0 R08: 0000000000000000 R09: 0000000000000000 [ 422.956744][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000067507 [ 422.956757][T14276] R13: 00007f61a212627c R14: 00000000000673b3 R15: 00007f61a2126270 [ 422.956844][T14276] [ 422.963704][ T28] audit: type=1326 audit(2000000101.910:12082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 422.984267][T14276] memory: usage 221176kB, limit 307200kB, failcnt 2606 [ 423.035678][ T28] audit: type=1326 audit(2000000101.910:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb5d563c799 code=0x7ffc0000 [ 423.308733][T14276] memory+swap: usage 131544kB, limit 9007199254740988kB, failcnt 0 [ 423.317669][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.336990][T14276] kmem: usage 67028kB, limit 9007199254740988kB, failcnt 0 [ 423.353462][T14276] Memory cgroup stats for /syz5: [ 423.353664][T14276] cache 0 [ 423.362051][T14276] rss 24576 [ 423.365194][T14276] shmem 0 [ 423.369648][T14276] mapped_file 0 [ 423.373326][T14276] dirty 0 [ 423.376287][T14276] writeback 4096 [ 423.379930][T14276] workingset_refault_anon 394 [ 423.384675][T14276] workingset_refault_file 0 [ 423.389209][T14276] swap 70070272 [ 423.392710][T14276] swapcached 94416896 [ 423.396856][T14276] pgpgin 377502 [ 423.400715][T14276] pgpgout 377492 [ 423.404466][T14276] pgfault 406076 [ 423.408422][T14276] pgmajfault 211 [ 423.412015][T14276] inactive_anon 4096 [ 423.416336][T14276] active_anon 36864 [ 423.455886][T14276] inactive_file 0 [ 423.459535][T14276] active_file 0 [ 423.463155][T14276] unevictable 0 [ 423.466740][T14276] hierarchical_memory_limit 314572800 [ 423.472532][T14276] hierarchical_memsw_limit 9223372036854771712 [ 423.478799][T14276] total_cache 0 [ 423.482551][T14276] total_rss 24576 [ 423.486165][T14276] total_shmem 0 [ 423.489726][T14276] total_mapped_file 0 [ 423.498777][T14276] total_dirty 0 [ 423.502679][T14276] total_writeback 4096 [ 423.507993][T14311] loop9: detected capacity change from 0 to 128 [ 423.515029][T14276] total_workingset_refault_anon 394 [ 423.522227][T14276] total_workingset_refault_file 0 [ 423.527472][T14276] total_swap 70070272 [ 423.533205][T14276] total_swapcached 94416896 [ 423.537833][T14276] total_pgpgin 377502 [ 423.542001][T14276] total_pgpgout 377492 [ 423.546095][T14276] total_pgfault 406076 [ 423.553646][T14276] total_pgmajfault 211 [ 423.557744][T14276] total_inactive_anon 4096 [ 423.563410][T14276] total_active_anon 36864 [ 423.567842][T14276] total_inactive_file 0 [ 423.572228][T14276] total_active_file 0 [ 423.576295][T14276] total_unevictable 0 [ 423.580649][T14276] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3081,pid=14276,uid=0 [ 423.595509][T14276] Memory cgroup out of memory: Killed process 14276 (syz.5.3081) total-vm:100576kB, anon-rss:1240kB, file-rss:26556kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 423.729176][T14313] xt_hashlimit: size too large, truncated to 1048576 [ 424.263549][T14320] loop2: detected capacity change from 0 to 512 [ 424.309368][T14320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.334319][T14320] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.839049][T14339] loop8: detected capacity change from 0 to 512 [ 424.886869][T14339] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.909665][T14339] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.066322][T14349] loop5: detected capacity change from 0 to 136 [ 425.095755][T14349] Attempt to read inode for relocated directory [ 425.175702][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.212311][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.290939][T14357] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 425.300805][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3105'. [ 425.519593][T14364] loop9: detected capacity change from 0 to 512 [ 425.544349][T14364] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 425.559982][T14366] netlink: 'syz.2.3110': attribute type 1 has an invalid length. [ 425.567771][T14364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 425.587146][T14364] EXT4-fs (loop9): orphan cleanup on readonly fs [ 425.627195][T14364] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.3109: iget: bad i_size value: 12154761577498 [ 425.668122][T14364] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.669815][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 425.685386][ C1] EXT4-fs (loop9): initial error at time 2000000105: ext4_orphan_get:1391: inode 13 [ 425.686593][ T4264] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 425.694811][ C1] EXT4-fs (loop9): last error at time 2000000105: ext4_orphan_get:1391: inode 13 [ 425.715099][T14369] loop2: detected capacity change from 0 to 1024 [ 425.732020][T14364] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3109: couldn't read orphan inode 13 (err -117) [ 425.751923][T14369] EXT4-fs: inline encryption not supported [ 425.769951][ T4264] CPU: 1 UID: 0 PID: 4264 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 425.769979][ T4264] Tainted: [W]=WARN [ 425.769986][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.769996][ T4264] Call Trace: [ 425.770009][ T4264] [ 425.770048][ T4264] __dump_stack+0x1d/0x30 [ 425.770134][ T4264] dump_stack_lvl+0x95/0xd0 [ 425.770187][ T4264] dump_stack+0x15/0x1b [ 425.770245][ T4264] dump_header+0x80/0x240 [ 425.770264][ T4264] oom_kill_process+0x295/0x350 [ 425.770283][ T4264] out_of_memory+0x97d/0xb80 [ 425.770303][ T4264] try_charge_memcg+0x62e/0xa10 [ 425.770464][ T4264] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 425.770548][ T4264] __swap_cache_prepare_and_add+0x386/0x530 [ 425.770577][ T4264] swap_cache_alloc_folio+0xa2/0x120 [ 425.770649][ T4264] swap_cluster_readahead+0x26e/0x3d0 [ 425.770675][ T4264] swapin_readahead+0xde/0x840 [ 425.770702][ T4264] ? __rcu_read_unlock+0x4e/0x70 [ 425.770779][ T4264] ? __perf_event_task_sched_in+0xa65/0xad0 [ 425.770799][ T4264] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 425.770824][ T4264] ? xfd_validate_state+0x45/0xf0 [ 425.770936][ T4264] ? __rcu_read_unlock+0x4e/0x70 [ 425.770953][ T4264] ? swap_cache_get_folio+0x26f/0x280 [ 425.771021][ T4264] do_swap_page+0x309/0x2210 [ 425.771044][ T4264] ? __schedule+0x93c/0xd40 [ 425.771066][ T4264] ? __rcu_read_lock+0x36/0x50 [ 425.771083][ T4264] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 425.771182][ T4264] handle_mm_fault+0xb40/0x3020 [ 425.771208][ T4264] ? vma_start_read+0x1c7/0x2c0 [ 425.771233][ T4264] do_user_addr_fault+0x62f/0x1050 [ 425.771259][ T4264] ? trace_page_fault_user+0x1f/0xe0 [ 425.771384][ T4264] exc_page_fault+0x62/0xa0 [ 425.771484][ T4264] asm_exc_page_fault+0x26/0x30 [ 425.771501][ T4264] RIP: 0033:0x7f61a1e67917 [ 425.771588][ T4264] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 425.771603][ T4264] RSP: 002b:00007fffc7801760 EFLAGS: 00010202 [ 425.771619][ T4264] RAX: 0000000000000000 RBX: 00005555873c9500 RCX: 00007f61a1e67917 [ 425.771632][ T4264] RDX: 00007fffc78017a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.771720][ T4264] RBP: 00007fffc780180c R08: 0000000000000000 R09: 0000000000000000 [ 425.771732][ T4264] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 425.771744][ T4264] R13: 00000000000927c0 R14: 0000000000067cad R15: 00007fffc7801860 [ 425.771762][ T4264] [ 425.774246][ T4264] memory: usage 307200kB, limit 307200kB, failcnt 2837 [ 425.789551][T14364] loop9: lost filesystem error report for type 5 error -117 [ 425.806525][ T4264] memory+swap: usage 375644kB, limit 9007199254740988kB, failcnt 0 [ 425.819133][T14369] EXT4-fs: Ignoring removed nobh option [ 425.823504][ T4264] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 425.850511][T14364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 425.858295][ T4264] Memory cgroup stats for [ 425.900829][T14369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 425.908333][ T4264] /syz5 [ 425.910825][T14369] System zones: [ 425.916364][ T4264] : [ 425.921464][T14369] 0-1 [ 425.926524][ T4264] cache 0 [ 425.931781][T14364] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 425.936610][ T4264] rss 24576 [ 425.949863][T14364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 425.970031][T14369] , 3-12 [ 425.990474][ T4264] shmem 0 [ 426.033331][T14369] [ 426.046204][T14369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.047150][ T4264] mapped_file 0 [ 426.142084][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.148335][ T4264] dirty 0 [ 426.154016][ T4264] writeback 24576 [ 426.157637][ T4264] workingset_refault_anon 444 [ 426.162394][ T4264] workingset_refault_file 0 [ 426.167444][ T4264] swap 70086656 [ 426.180535][T14377] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 426.183445][ T4264] swapcached 94617600 [ 426.188776][T14377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 426.204160][T14377] EXT4-fs (loop8): orphan cleanup on readonly fs [ 426.210838][T14377] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.3113: iget: bad i_size value: 12154761577498 [ 426.224370][T14377] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 426.225198][T14377] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3113: couldn't read orphan inode 13 (err -117) [ 426.229825][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 426.252548][ C1] EXT4-fs (loop8): initial error at time 2000000105: ext4_orphan_get:1391: inode 13 [ 426.261959][ C1] EXT4-fs (loop8): last error at time 2000000105: ext4_orphan_get:1391: inode 13 [ 426.269957][T14377] loop8: lost filesystem error report for type 5 error -117 [ 426.271531][ T4264] pgpgin 377751 [ 426.284137][T14377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 426.329311][ T4264] pgpgout 377745 [ 426.333111][ T4264] pgfault 406672 [ 426.336735][ T4264] pgmajfault 247 [ 426.351510][ T4264] inactive_anon 24576 [ 426.355501][ T4264] active_anon 0 [ 426.358948][ T4264] inactive_file 0 [ 426.372854][ T4264] active_file 0 [ 426.422649][ T4264] unevictable 0 [ 426.426250][ T4264] hierarchical_memory_limit 314572800 [ 426.431871][ T4264] hierarchical_memsw_limit 9223372036854771712 [ 426.438164][ T4264] total_cache 0 [ 426.442048][ T4264] total_rss 24576 [ 427.357101][ T4264] total_shmem 0 [ 427.360750][T14377] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 427.368706][ T4264] total_mapped_file 0 [ 427.372740][ T4264] total_dirty 0 [ 427.376230][ T4264] total_writeback 24576 [ 427.382927][T14377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 428.352479][ T4264] total_workingset_refault_anon 444 [ 428.357700][ T4264] total_workingset_refault_file 0 [ 428.385073][ T4264] total_swap 70086656 [ 428.389073][ T4264] total_swapcached 94617600 [ 429.245606][ T4264] total_pgpgin 377751 [ 429.256237][ T4264] total_pgpgout 377745 [ 429.267959][ T4264] total_pgfault 406672 [ 429.279922][ T4264] total_pgmajfault 247 [ 429.288556][ T4264] total_inactive_anon 24576 [ 429.297407][ T4264] total_active_anon 0 [ 429.306136][ T4264] total_inactive_file 0 [ 429.314854][ T4264] total_active_file 0 [ 429.323349][ T4264] total_unevictable 0 [ 429.331842][ T4264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3102,pid=14341,uid=0 [ 429.358721][ T4264] Memory cgroup out of memory: Killed process 14341 (syz.5.3102) total-vm:100576kB, anon-rss:1244kB, file-rss:26508kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 429.421176][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.510645][T11244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.582741][T14407] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3123'. [ 429.608891][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 429.608905][ T28] audit: type=1326 audit(2000000108.960:12112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14409 comm="syz.8.3124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b4b58c799 code=0x0 [ 429.660907][T14412] set_capacity_and_notify: 1 callbacks suppressed [ 429.660923][T14412] loop8: detected capacity change from 0 to 128 [ 429.669351][ T28] audit: type=1326 audit(2000000109.000:12113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.2.3118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d563c799 code=0x0 [ 429.709681][T14413] loop1: detected capacity change from 0 to 136 [ 429.744383][T14413] Attempt to read inode for relocated directory [ 430.741117][T14421] loop1: detected capacity change from 0 to 512 [ 430.843416][T14421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.889713][T14421] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.506896][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3135'. [ 432.032553][T13972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.546518][T14455] loop5: detected capacity change from 0 to 136 [ 432.669936][T14455] Attempt to read inode for relocated directory [ 433.001260][T14473] loop8: detected capacity change from 0 to 136 [ 433.054169][T14473] Attempt to read inode for relocated directory [ 433.168682][T14467] syz.8.3141 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 433.192948][T14467] CPU: 0 UID: 0 PID: 14467 Comm: syz.8.3141 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.193009][T14467] Tainted: [W]=WARN [ 433.193015][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.193029][T14467] Call Trace: [ 433.193037][T14467] [ 433.193046][T14467] __dump_stack+0x1d/0x30 [ 433.193125][T14467] dump_stack_lvl+0x95/0xd0 [ 433.193157][T14467] dump_stack+0x15/0x1b [ 433.193217][T14467] dump_header+0x80/0x240 [ 433.193238][T14467] oom_kill_process+0x295/0x350 [ 433.193295][T14467] out_of_memory+0x97d/0xb80 [ 433.193319][T14467] try_charge_memcg+0x62e/0xa10 [ 433.193360][T14467] obj_cgroup_charge_pages+0x23/0xc0 [ 433.193386][T14467] __memcg_kmem_charge_page+0x9e/0x170 [ 433.193410][T14467] __alloc_frozen_pages_noprof+0x18a/0x360 [ 433.193519][T14467] alloc_pages_mpol+0xb3/0x260 [ 433.193548][T14467] alloc_pages_noprof+0x8f/0x130 [ 433.193575][T14467] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 433.193636][T14467] __kvmalloc_node_noprof+0x3d4/0x650 [ 433.193660][T14467] ? futex_hash_allocate+0x190/0x9d0 [ 433.193688][T14467] ? futex_hash_allocate+0x190/0x9d0 [ 433.193722][T14467] futex_hash_allocate+0x190/0x9d0 [ 433.193834][T14467] ? cap_task_prctl+0x13f/0x6e0 [ 433.193853][T14467] futex_hash_prctl+0xd8/0xf0 [ 433.193946][T14467] __se_sys_prctl+0xa3d/0x13f0 [ 433.193970][T14467] __x64_sys_prctl+0x67/0x80 [ 433.194052][T14467] x64_sys_call+0x2533/0x3020 [ 433.194075][T14467] do_syscall_64+0x12c/0x370 [ 433.194098][T14467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.194118][T14467] RIP: 0033:0x7f8b4b58c799 [ 433.194184][T14467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.194199][T14467] RSP: 002b:00007f8b49fc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 433.194267][T14467] RAX: ffffffffffffffda RBX: 00007f8b4b806090 RCX: 00007f8b4b58c799 [ 433.194283][T14467] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 433.194298][T14467] RBP: 00007f8b4b622bd9 R08: 0000000000000000 R09: 0000000000000000 [ 433.194313][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.194484][T14467] R13: 00007f8b4b806128 R14: 00007f8b4b806090 R15: 00007ffebdfab298 [ 433.194505][T14467] [ 433.199694][T14467] memory: usage 307200kB, limit 307200kB, failcnt 632 [ 433.575808][T14467] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 433.594161][T14467] kmem: usage 307088kB, limit 9007199254740988kB, failcnt 0 [ 433.619935][T14467] Memory cgroup stats for /syz8: [ 433.620158][T14467] cache 4096 [ 433.649886][T14467] rss 32768 [ 433.659993][T14467] shmem 0 [ 433.662970][T14467] mapped_file 0 [ 433.748133][T14467] dirty 0 [ 433.765726][T14467] writeback 0 [ 433.771115][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3146'. [ 433.773419][T14467] workingset_refault_anon 39 [ 433.788664][T14467] workingset_refault_file 0 [ 433.797691][T14467] swap 237568 [ 433.801357][T14467] swapcached 462848 [ 433.917478][T14467] pgpgin 112945 [ 433.954436][T14467] pgpgout 112917 [ 434.036551][T14467] pgfault 137964 [ 434.049896][ T28] audit: type=1326 audit(2000000113.380:12114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.5.3149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61a1eac799 code=0x0 [ 434.093425][T14467] pgmajfault 29 [ 434.105929][T14467] inactive_anon 94208 [ 434.129189][T14467] active_anon 16384 [ 434.153621][T14467] inactive_file 4096 [ 434.205169][T14467] active_file 0 [ 434.208645][T14467] unevictable 0 [ 434.212513][T14467] hierarchical_memory_limit 314572800 [ 434.218055][T14467] hierarchical_memsw_limit 9223372036854771712 [ 434.224793][T14467] total_cache 4096 [ 434.228608][T14467] total_rss 32768 [ 434.243360][T14467] total_shmem 0 [ 434.246995][T14467] total_mapped_file 0 [ 434.251243][T14467] total_dirty 0 [ 434.254815][T14467] total_writeback 0 [ 434.266065][T14467] total_workingset_refault_anon 39 [ 434.340545][T14467] total_workingset_refault_file 0 [ 434.345620][T14467] total_swap 237568 [ 434.349436][T14467] total_swapcached 462848 [ 434.388507][T14467] total_pgpgin 112945 [ 434.559505][T14467] total_pgpgout 112917 [ 434.615756][T14467] total_pgfault 137964 [ 434.644560][T14467] total_pgmajfault 29 [ 434.671814][T14467] total_inactive_anon 94208 [ 434.699724][T14467] total_active_anon 16384 [ 434.729992][T14467] total_inactive_file 4096 [ 434.757711][T14467] total_active_file 0 [ 434.784337][T14467] total_unevictable 0 [ 434.812111][T14467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3141,pid=14463,uid=0 [ 434.958339][T14504] netlink: 'syz.1.3154': attribute type 1 has an invalid length. [ 434.967772][T14467] Memory cgroup out of memory: Killed process 14464 (syz.8.3141) total-vm:100576kB, anon-rss:1340kB, file-rss:26600kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 435.073495][T14505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'. [ 435.142224][T14504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.195265][T14507] bond1: (slave dummy0): making interface the new active one [ 435.324677][T14507] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 435.458700][T14511] xt_hashlimit: size too large, truncated to 1048576 [ 435.606322][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3159'. [ 435.816081][T14522] syzkaller0: entered promiscuous mode [ 435.825708][T14522] syzkaller0: entered allmulticast mode [ 436.023073][ T28] audit: type=1326 audit(2000000115.380:12115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.065307][T14537] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 436.081726][ T28] audit: type=1326 audit(2000000115.410:12116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.138707][ T28] audit: type=1326 audit(2000000115.410:12117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.180766][ T28] audit: type=1326 audit(2000000115.410:12118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.221838][ T28] audit: type=1326 audit(2000000115.410:12119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.261015][ T28] audit: type=1326 audit(2000000115.410:12120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.286986][ T28] audit: type=1326 audit(2000000115.410:12121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1307d9cfce code=0x7ffc0000 [ 436.317516][ T28] audit: type=1326 audit(2000000115.410:12122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.341268][ T28] audit: type=1326 audit(2000000115.420:12123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.364883][ T28] audit: type=1326 audit(2000000115.430:12124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.9.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 436.521996][T14556] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3174'. [ 437.260462][T14570] loop5: detected capacity change from 0 to 512 [ 437.317120][T14576] loop9: detected capacity change from 0 to 512 [ 437.416207][T14570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.441571][T14570] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.523298][T14576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.596211][T14576] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.664711][T14585] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 437.749756][T14589] loop1: detected capacity change from 0 to 512 [ 437.838688][T14589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.871884][T14589] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.118763][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.134565][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.191306][T14603] xt_hashlimit: size too large, truncated to 1048576 [ 438.247480][T14608] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3193'. [ 438.317102][T14612] loop9: detected capacity change from 0 to 256 [ 438.336948][T14612] msdos: Bad value for 'gid' [ 438.362828][T14612] msdos: Bad value for 'gid' [ 438.498356][T14619] loop9: detected capacity change from 0 to 136 [ 438.506081][T14619] Attempt to read inode for relocated directory [ 438.800327][T13972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.934904][T14626] loop8: detected capacity change from 0 to 136 [ 438.974538][T14626] Attempt to read inode for relocated directory [ 438.991512][T14629] tipc: Started in network mode [ 438.996450][T14629] tipc: Node identity 2ecf7f2816eb, cluster identity 4711 [ 439.018962][T14629] tipc: Enabled bearer , priority 0 [ 439.056617][T14628] tipc: Disabling bearer [ 439.134358][T14633] tipc: Enabling of bearer rejected, failed to enable media [ 439.215469][T14641] loop5: detected capacity change from 0 to 1024 [ 439.251253][T14643] loop1: detected capacity change from 0 to 256 [ 439.263888][T14641] EXT4-fs: inline encryption not supported [ 439.269738][T14641] EXT4-fs: Ignoring removed nobh option [ 439.282867][T14643] msdos: Bad value for 'gid' [ 439.304515][T14643] msdos: Bad value for 'gid' [ 439.328723][T14622] syz.8.3200 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 439.365043][T14641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 439.387156][T14622] CPU: 0 UID: 0 PID: 14622 Comm: syz.8.3200 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.387192][T14622] Tainted: [W]=WARN [ 439.387200][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.387212][T14622] Call Trace: [ 439.387218][T14622] [ 439.387226][T14622] __dump_stack+0x1d/0x30 [ 439.387282][T14622] dump_stack_lvl+0x95/0xd0 [ 439.387301][T14622] dump_stack+0x15/0x1b [ 439.387398][T14622] dump_header+0x80/0x240 [ 439.387419][T14622] oom_kill_process+0x295/0x350 [ 439.387442][T14622] out_of_memory+0x97d/0xb80 [ 439.387465][T14622] try_charge_memcg+0x62e/0xa10 [ 439.387533][T14622] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 439.387563][T14622] __swap_cache_prepare_and_add+0x386/0x530 [ 439.387610][T14622] swap_cache_alloc_folio+0xa2/0x120 [ 439.387696][T14622] swap_cluster_readahead+0x26e/0x3d0 [ 439.387737][T14622] swapin_readahead+0xde/0x840 [ 439.387759][T14622] ? __rcu_read_unlock+0x4e/0x70 [ 439.387781][T14622] ? __perf_event_task_sched_in+0xa65/0xad0 [ 439.387824][T14622] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 439.387888][T14622] ? __rcu_read_unlock+0x4e/0x70 [ 439.387906][T14622] ? swap_cache_get_folio+0x26f/0x280 [ 439.387930][T14622] do_swap_page+0x309/0x2210 [ 439.387957][T14622] ? __schedule+0x93c/0xd40 [ 439.387981][T14622] ? __rcu_read_lock+0x36/0x50 [ 439.388001][T14622] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 439.388061][T14622] handle_mm_fault+0xb40/0x3020 [ 439.388088][T14622] ? vma_start_read+0x1c7/0x2c0 [ 439.388192][T14622] do_user_addr_fault+0x62f/0x1050 [ 439.388300][T14622] ? trace_page_fault_user+0x1f/0xe0 [ 439.388329][T14622] exc_page_fault+0x62/0xa0 [ 439.388360][T14622] asm_exc_page_fault+0x26/0x30 [ 439.388377][T14622] RIP: 0033:0x7f8b4b54cfce [ 439.388394][T14622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 439.388484][T14622] RSP: 002b:00007ffebdfab378 EFLAGS: 00010246 [ 439.388498][T14622] RAX: 0000000000000000 RBX: 000055557ab2e500 RCX: 00007f8b4b54cfce [ 439.388511][T14622] RDX: 00007ffebdfab3d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.388523][T14622] RBP: 00007f8b4b807da0 R08: 0000000000000000 R09: 0000000000000000 [ 439.388534][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006b550 [ 439.388545][T14622] R13: 00007f8b4b80618c R14: 000000000006b2fd R15: 00007ffebdfab500 [ 439.388603][T14622] [ 439.499895][T14641] System zones: [ 439.507485][T14622] memory: usage 187468kB, limit 307200kB, failcnt 731 [ 439.510841][T14641] 0-1 [ 439.517229][T14622] memory+swap: usage 187724kB, limit 9007199254740988kB, failcnt 0 [ 439.531105][T14641] , 3-12 [ 439.547937][T14622] kmem: usage 184684kB, limit 9007199254740988kB, failcnt 0 [ 439.559872][T14641] [ 439.605787][T14622] Memory cgroup stats for [ 439.650477][T14641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.652454][T14622] /syz8: [ 439.678474][T14622] cache 0 [ 439.690160][T14622] rss 4096 [ 439.693477][T14622] shmem 0 [ 439.696547][T14622] mapped_file 0 [ 439.700457][T14622] dirty 0 [ 439.703442][T14622] writeback 0 [ 439.706850][T14622] workingset_refault_anon 90 [ 439.711839][T14622] workingset_refault_file 0 [ 439.716348][T14622] swap 262144 [ 439.719619][T14622] swapcached 561152 [ 439.724039][T14622] pgpgin 113349 [ 439.727487][T14622] pgpgout 113330 [ 439.732531][T14622] pgfault 138916 [ 439.736173][T14622] pgmajfault 48 [ 439.739624][T14622] inactive_anon 65536 [ 439.743775][T14622] active_anon 12288 [ 439.747621][T14622] inactive_file 0 [ 439.751519][T14622] active_file 0 [ 439.754973][T14622] unevictable 0 [ 439.758679][T14622] hierarchical_memory_limit 314572800 [ 439.764427][T14622] hierarchical_memsw_limit 9223372036854771712 [ 439.770899][T14622] total_cache 0 [ 439.774354][T14622] total_rss 4096 [ 439.777887][T14622] total_shmem 0 [ 439.781587][T14622] total_mapped_file 0 [ 439.785560][T14622] total_dirty 0 [ 439.789008][T14622] total_writeback 0 [ 439.793230][T14622] total_workingset_refault_anon 90 [ 439.798332][T14622] total_workingset_refault_file 0 [ 439.805182][T14622] total_swap 262144 [ 439.809433][T14622] total_swapcached 561152 [ 439.817968][T14622] total_pgpgin 113349 [ 439.826861][T14622] total_pgpgout 113330 [ 439.837328][T14622] total_pgfault 138916 [ 439.847691][T14622] total_pgmajfault 48 [ 439.856267][T14622] total_inactive_anon 65536 [ 439.860942][T14622] total_active_anon 12288 [ 439.865300][T14622] total_inactive_file 0 [ 439.869509][T14622] total_active_file 0 [ 439.873820][T14622] total_unevictable 0 [ 439.877801][T14622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3200,pid=14622,uid=0 [ 439.893029][T14622] Memory cgroup out of memory: Killed process 14622 (syz.8.3200) total-vm:96340kB, anon-rss:1220kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 440.059965][T13070] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 440.077585][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 440.077696][T13070] Tainted: [W]=WARN [ 440.077704][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.077717][T13070] Call Trace: [ 440.077724][T13070] [ 440.077733][T13070] __dump_stack+0x1d/0x30 [ 440.077756][T13070] dump_stack_lvl+0x95/0xd0 [ 440.077852][T13070] dump_stack+0x15/0x1b [ 440.077925][T13070] dump_header+0x80/0x240 [ 440.078032][T13070] oom_kill_process+0x295/0x350 [ 440.078052][T13070] out_of_memory+0x97d/0xb80 [ 440.078077][T13070] try_charge_memcg+0x62e/0xa10 [ 440.078151][T13070] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 440.078180][T13070] __swap_cache_prepare_and_add+0x386/0x530 [ 440.078261][T13070] swap_cache_alloc_folio+0xa2/0x120 [ 440.078289][T13070] swap_cluster_readahead+0x36b/0x3d0 [ 440.078359][T13070] swapin_readahead+0xde/0x840 [ 440.078383][T13070] ? __rcu_read_unlock+0x4e/0x70 [ 440.078404][T13070] ? __perf_event_task_sched_in+0xa65/0xad0 [ 440.078428][T13070] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 440.078468][T13070] ? xfd_validate_state+0x45/0xf0 [ 440.078495][T13070] ? __rcu_read_unlock+0x4e/0x70 [ 440.078515][T13070] ? swap_cache_get_folio+0x26f/0x280 [ 440.078592][T13070] do_swap_page+0x309/0x2210 [ 440.078620][T13070] ? __schedule+0x93c/0xd40 [ 440.078640][T13070] ? __rcu_read_lock+0x36/0x50 [ 440.078729][T13070] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 440.078761][T13070] handle_mm_fault+0xb40/0x3020 [ 440.078791][T13070] ? vma_start_read+0x1c7/0x2c0 [ 440.078846][T13070] do_user_addr_fault+0x62f/0x1050 [ 440.078878][T13070] ? trace_page_fault_user+0x1f/0xe0 [ 440.078906][T13070] exc_page_fault+0x62/0xa0 [ 440.078981][T13070] asm_exc_page_fault+0x26/0x30 [ 440.078999][T13070] RIP: 0033:0x7f1307d97917 [ 440.079014][T13070] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 440.079055][T13070] RSP: 002b:00007ffc429a9a50 EFLAGS: 00010202 [ 440.079136][T13070] RAX: 0000000000000000 RBX: 0000555563285500 RCX: 00007f1307d97917 [ 440.079150][T13070] RDX: 00007ffc429a9a90 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.079164][T13070] RBP: 00007ffc429a9afc R08: 0000000000000000 R09: 0000000000000000 [ 440.079198][T13070] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 440.079208][T13070] R13: 00000000000927c0 R14: 000000000006b0e7 R15: 00007ffc429a9b50 [ 440.079225][T13070] [ 440.323330][T13070] memory: usage 307200kB, limit 307200kB, failcnt 220 [ 440.333810][T13070] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 440.341759][T13070] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 440.349036][T13070] Memory cgroup stats for /syz9: [ 440.349327][T13070] cache 0 [ 440.357359][T13070] rss 0 [ 440.360138][T13070] shmem 0 [ 440.363107][T13070] mapped_file 0 [ 440.366601][T13070] dirty 0 [ 440.369533][T13070] writeback 0 [ 440.372840][T13070] workingset_refault_anon 17 [ 440.377422][T13070] workingset_refault_file 0 [ 440.381999][T13070] swap 262144 [ 440.385273][T13070] swapcached 270336 [ 440.389068][T13070] pgpgin 53910 [ 440.392523][T13070] pgpgout 53892 [ 440.395965][T13070] pgfault 67273 [ 440.399410][T13070] pgmajfault 11 [ 440.409997][T13070] inactive_anon 73728 [ 440.414053][T13070] active_anon 0 [ 440.417497][T13070] inactive_file 0 [ 440.421171][T13070] active_file 0 [ 440.424615][T13070] unevictable 0 [ 440.428056][T13070] hierarchical_memory_limit 314572800 [ 440.433495][T13070] hierarchical_memsw_limit 9223372036854771712 [ 440.439927][T13070] total_cache 0 [ 440.443497][T13070] total_rss 0 [ 440.446816][T13070] total_shmem 0 [ 440.450315][T13070] total_mapped_file 0 [ 440.454285][T13070] total_dirty 0 [ 440.457735][T13070] total_writeback 0 [ 440.461589][T13070] total_workingset_refault_anon 17 [ 440.466703][T13070] total_workingset_refault_file 0 [ 440.472426][T13070] total_swap 262144 [ 440.476287][T13070] total_swapcached 270336 [ 440.480629][T13070] total_pgpgin 53910 [ 440.484551][T13070] total_pgpgout 53892 [ 440.488574][T13070] total_pgfault 67273 [ 440.492581][T13070] total_pgmajfault 11 [ 440.496628][T13070] total_inactive_anon 73728 [ 440.501185][T13070] total_active_anon 0 [ 440.505254][T13070] total_inactive_file 0 [ 440.509473][T13070] total_active_file 0 [ 440.513541][T13070] total_unevictable 0 [ 440.517507][T13070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3196,pid=14613,uid=0 [ 440.536024][T13070] Memory cgroup out of memory: Killed process 14613 (syz.9.3196) total-vm:96340kB, anon-rss:1228kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 440.681797][T14658] tipc: Started in network mode [ 440.709871][T14658] tipc: Node identity 4204088c2425, cluster identity 4711 [ 440.717183][T14658] tipc: Enabled bearer , priority 0 [ 440.791097][T14662] syzkaller0: entered promiscuous mode [ 440.855617][T14663] syzkaller0: entered promiscuous mode [ 440.863381][T13972] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 440.870936][T14663] syzkaller0: entered allmulticast mode [ 440.892077][T14657] tipc: Resetting bearer [ 440.918556][T14657] tipc: Disabling bearer [ 440.929941][T13972] CPU: 0 UID: 0 PID: 13972 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 440.929969][T13972] Tainted: [W]=WARN [ 440.929976][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.929986][T13972] Call Trace: [ 440.929992][T13972] [ 440.930039][T13972] __dump_stack+0x1d/0x30 [ 440.930063][T13972] dump_stack_lvl+0x95/0xd0 [ 440.930084][T13972] dump_stack+0x15/0x1b [ 440.930101][T13972] dump_header+0x80/0x240 [ 440.930120][T13972] oom_kill_process+0x295/0x350 [ 440.930146][T13972] out_of_memory+0x97d/0xb80 [ 440.930168][T13972] try_charge_memcg+0x62e/0xa10 [ 440.930203][T13972] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 440.930228][T13972] __swap_cache_prepare_and_add+0x386/0x530 [ 440.930273][T13972] swap_cache_alloc_folio+0xa2/0x120 [ 440.930404][T13972] swap_cluster_readahead+0x26e/0x3d0 [ 440.930430][T13972] swapin_readahead+0xde/0x840 [ 440.930452][T13972] ? __rcu_read_unlock+0x4e/0x70 [ 440.930498][T13972] ? __perf_event_task_sched_in+0xa65/0xad0 [ 440.930516][T13972] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 440.930547][T13972] ? __rcu_read_unlock+0x4e/0x70 [ 440.930564][T13972] ? swap_cache_get_folio+0x26f/0x280 [ 440.930658][T13972] do_swap_page+0x309/0x2210 [ 440.930684][T13972] ? __schedule+0x93c/0xd40 [ 440.930774][T13972] ? __rcu_read_lock+0x36/0x50 [ 440.930792][T13972] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 440.930818][T13972] handle_mm_fault+0xb40/0x3020 [ 440.930910][T13972] ? vma_start_read+0x1c7/0x2c0 [ 440.930936][T13972] do_user_addr_fault+0x62f/0x1050 [ 440.931030][T13972] ? trace_page_fault_user+0x1f/0xe0 [ 440.931056][T13972] exc_page_fault+0x62/0xa0 [ 440.931162][T13972] asm_exc_page_fault+0x26/0x30 [ 440.931254][T13972] RIP: 0033:0x7f312deb7917 [ 440.931269][T13972] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 440.931323][T13972] RSP: 002b:00007ffe239bcea0 EFLAGS: 00010202 [ 440.931395][T13972] RAX: 0000000000000000 RBX: 000055556c81b500 RCX: 00007f312deb7917 [ 440.931407][T13972] RDX: 00007ffe239bcee0 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.931418][T13972] RBP: 00007ffe239bcf4c R08: 0000000000000000 R09: 0000000000000000 [ 440.931429][T13972] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 440.931440][T13972] R13: 00000000000927c0 R14: 000000000006b96f R15: 00007ffe239bcfa0 [ 440.931457][T13972] [ 440.931943][T13972] memory: usage 307200kB, limit 307200kB, failcnt 3359 [ 440.959921][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.000018][T13972] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 441.230335][T13972] kmem: usage 277968kB, limit 9007199254740988kB, failcnt 0 [ 441.237671][T13972] Memory cgroup stats for /syz1: [ 441.237888][T13972] cache 0 [ 441.269808][T13972] rss 0 [ 441.272680][T13972] shmem 0 [ 441.275751][T13972] mapped_file 0 [ 441.279199][T13972] dirty 0 [ 441.300209][T13972] writeback 0 [ 441.303560][T13972] workingset_refault_anon 484 [ 441.308222][T13972] workingset_refault_file 8400 [ 441.317412][T14677] tipc: Enabling of bearer rejected, failed to enable media [ 441.330368][T14680] loop9: detected capacity change from 0 to 256 [ 441.336271][T13972] swap 204800 [ 441.341590][T13972] swapcached 5885952 [ 441.352072][T13972] pgpgin 436155 [ 441.361743][T13972] pgpgout 436152 [ 441.370236][T14680] msdos: Bad value for 'gid' [ 441.374834][T14680] msdos: Bad value for 'gid' [ 441.382597][T13972] pgfault 432166 [ 441.389316][T13972] pgmajfault 405 [ 441.397212][T13972] inactive_anon 0 [ 441.401196][T13972] active_anon 0 [ 441.404930][T13972] inactive_file 0 [ 441.408611][T13972] active_file 12288 [ 441.412926][T13972] unevictable 0 [ 441.416531][T13972] hierarchical_memory_limit 314572800 [ 441.481578][T13972] hierarchical_memsw_limit 9223372036854771712 [ 441.494612][T13972] total_cache 0 [ 441.498150][T13972] total_rss 0 [ 441.501792][T13972] total_shmem 0 [ 441.505305][T13972] total_mapped_file 0 [ 441.509365][T13972] total_dirty 0 [ 441.513248][T13972] total_writeback 0 [ 441.517107][T13972] total_workingset_refault_anon 484 [ 441.522551][T13972] total_workingset_refault_file 8400 [ 441.527902][T13972] total_swap 204800 [ 441.531963][T13972] total_swapcached 5885952 [ 441.536516][T13972] total_pgpgin 436155 [ 441.540750][T13972] total_pgpgout 436152 [ 441.544833][T13972] total_pgfault 432166 [ 441.549016][T13972] total_pgmajfault 405 [ 441.553350][T13972] total_inactive_anon 0 [ 441.557595][T13972] total_active_anon 0 [ 441.562962][T13972] total_inactive_file 0 [ 441.567218][T13972] total_active_file 12288 [ 441.571821][T13972] total_unevictable 0 [ 441.575845][T13972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3209,pid=14651,uid=0 [ 441.591095][T13972] Memory cgroup out of memory: Killed process 14651 (syz.1.3209) total-vm:98528kB, anon-rss:1232kB, file-rss:26376kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 441.635176][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 441.635192][ T28] audit: type=1326 audit(2000000120.990:12156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 441.686231][T14693] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 441.719834][ T28] audit: type=1326 audit(2000000121.000:12157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 441.770029][ T28] audit: type=1326 audit(2000000121.010:12158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 441.805499][ T28] audit: type=1326 audit(2000000121.010:12159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 441.850989][T14695] loop1: detected capacity change from 0 to 128 [ 441.858129][ T28] audit: type=1326 audit(2000000121.020:12160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 441.988796][ T28] audit: type=1326 audit(2000000121.030:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1307d9cfce code=0x7ffc0000 [ 442.017534][ T28] audit: type=1326 audit(2000000121.040:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 442.033065][T14703] tipc: Enabled bearer , priority 0 [ 442.064237][ T28] audit: type=1326 audit(2000000121.040:12163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 442.068319][T14703] syzkaller0: entered promiscuous mode [ 442.119207][ T28] audit: type=1326 audit(2000000121.060:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 442.171124][ T28] audit: type=1326 audit(2000000121.080:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.9.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1307ddc799 code=0x7ffc0000 [ 442.221766][T14706] syzkaller0: entered promiscuous mode [ 442.227247][T14706] syzkaller0: entered allmulticast mode [ 442.272771][T14702] tipc: Resetting bearer [ 442.295685][T14702] tipc: Disabling bearer [ 442.416100][T14714] tipc: Enabling of bearer rejected, failed to enable media [ 442.448165][T14719] tipc: Started in network mode [ 442.454177][T14719] tipc: Node identity 26a7e241aac, cluster identity 4711 [ 442.461719][T14719] tipc: Enabled bearer , priority 0 [ 442.581482][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3229'. [ 442.602837][T14723] syzkaller0: entered promiscuous mode [ 442.616478][T14719] tipc: Resetting bearer [ 442.624488][T14718] tipc: Resetting bearer [ 442.812197][T14718] tipc: Disabling bearer [ 443.313498][T14737] loop2: detected capacity change from 0 to 512 [ 443.404930][T14737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.457464][T14737] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.156013][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.206167][T14752] tipc: Started in network mode [ 444.213300][T14752] tipc: Node identity f6164377a6ca, cluster identity 4711 [ 444.225174][T14752] tipc: Enabled bearer , priority 0 [ 444.232266][T14752] syzkaller0: entered promiscuous mode [ 444.245011][T14751] tipc: Resetting bearer [ 444.259735][T14751] tipc: Disabling bearer [ 444.344753][T14758] tipc: Enabling of bearer rejected, failed to enable media [ 444.408029][T14764] loop1: detected capacity change from 0 to 256 [ 444.414909][T14764] msdos: Bad value for 'gid' [ 444.424295][T14764] msdos: Bad value for 'gid' [ 444.447248][T14754] syzkaller0: entered promiscuous mode [ 444.458545][T14754] syzkaller0: entered allmulticast mode [ 446.042345][T14785] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 446.349752][T14793] IPv6: sit1: Disabled Multicast RS [ 446.356048][T14793] sit1: entered allmulticast mode [ 446.783318][T14799] tipc: Enabled bearer , priority 0 [ 446.793459][T14799] syzkaller0: entered promiscuous mode [ 446.808554][T14798] tipc: Resetting bearer [ 446.827511][T14798] tipc: Disabling bearer [ 447.740301][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3263'. [ 447.858123][T14821] loop1: detected capacity change from 0 to 512 [ 447.939001][T14821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.977187][T14829] tipc: Enabled bearer , priority 0 [ 447.991561][T14829] tipc: Resetting bearer [ 447.997655][T14821] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.164606][T14825] tipc: Disabling bearer [ 448.218348][T14834] loop2: detected capacity change from 0 to 1024 [ 448.249031][T14834] EXT4-fs: inline encryption not supported [ 448.313711][T14834] EXT4-fs: Ignoring removed nobh option [ 448.341813][T14834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 448.362748][T14834] System zones: 0-1, 3-12 [ 448.381012][T14834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.676250][T14835] IPv6: sit1: Disabled Multicast RS [ 448.682227][T14835] sit1: entered allmulticast mode [ 448.729049][T14845] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3271'. [ 448.851336][T13972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.899868][T14855] syzkaller0: entered promiscuous mode [ 448.905357][T14855] syzkaller0: entered allmulticast mode [ 449.594380][T14867] loop9: detected capacity change from 0 to 512 [ 449.791459][T14867] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.810338][T14867] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.067220][T14879] netlink: 'syz.1.3281': attribute type 1 has an invalid length. [ 450.089166][T14879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.110566][T14879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3281'. [ 450.565217][T14879] bond1: (slave dummy0): Releasing active interface [ 450.584063][T14879] bond2: (slave dummy0): making interface the new active one [ 450.605938][T14879] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 450.645826][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.670873][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.680926][T14887] xt_hashlimit: size too large, truncated to 1048576 [ 450.847240][T14894] loop9: detected capacity change from 0 to 512 [ 450.867337][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 450.867430][ T28] audit: type=1326 audit(2000000130.220:12180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.8.3287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b4b58c799 code=0x0 [ 450.930518][T14894] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.061490][T14902] loop8: detected capacity change from 0 to 128 [ 451.090349][T14894] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.304548][T14910] xt_hashlimit: size too large, truncated to 1048576 [ 451.364673][T14909] loop2: detected capacity change from 0 to 512 [ 451.532547][T14909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.546033][T14909] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.600409][T14924] netlink: 'syz.5.3295': attribute type 1 has an invalid length. [ 451.633339][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3295'. [ 451.704113][T14926] loop1: detected capacity change from 0 to 136 [ 451.738245][T14930] tipc: Enabling of bearer rejected, failed to enable media [ 451.787465][T14926] Attempt to read inode for relocated directory [ 451.922359][T13070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.456360][T14944] loop5: detected capacity change from 0 to 136 [ 452.521219][T14944] Attempt to read inode for relocated directory [ 452.605952][T14947] loop9: detected capacity change from 0 to 136 [ 452.662837][T14947] Attempt to read inode for relocated directory [ 452.771656][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.799861][T14939] ================================================================== [ 452.807956][T14939] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 452.817769][T14939] [ 452.820088][T14939] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 452.828152][T14939] tick_do_update_jiffies64+0x113/0x1c0 [ 452.833706][T14939] tick_nohz_handler+0x8d/0x3d0 [ 452.838558][T14939] __hrtimer_run_queues+0x218/0x4f0 [ 452.843751][T14939] hrtimer_interrupt+0x269/0x810 [ 452.849149][T14939] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 452.855042][T14939] sysvec_apic_timer_interrupt+0x6f/0x80 [ 452.860680][T14939] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.866677][T14939] __sanitizer_cov_trace_pc+0x5c/0x70 [ 452.872060][T14939] next_uptodate_folio+0x179/0x8c0 [ 452.877171][T14939] filemap_map_pages+0xa35/0xf10 [ 452.882094][T14939] handle_mm_fault+0x1641/0x3020 [ 452.887036][T14939] __get_user_pages+0x1023/0x1ea0 [ 452.892072][T14939] __mm_populate+0x242/0x390 [ 452.896659][T14939] vm_mmap_pgoff+0x23b/0x2d0 [ 452.901237][T14939] ksys_mmap_pgoff+0xc1/0x310 [ 452.905903][T14939] x64_sys_call+0x14df/0x3020 [ 452.910569][T14939] do_syscall_64+0x12c/0x370 [ 452.915149][T14939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.921039][T14939] [ 452.923358][T14939] read to 0xffffffff86c09a00 of 8 bytes by task 14939 on cpu 0: [ 452.930980][T14939] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 452.937215][T14939] count_shadow_nodes+0x6a/0x230 [ 452.942143][T14939] do_shrink_slab+0x63/0x6a0 [ 452.946719][T14939] shrink_slab+0x538/0x880 [ 452.951120][T14939] shrink_node+0x6bc/0x2130 [ 452.955606][T14939] do_try_to_free_pages+0x408/0xc80 [ 452.960794][T14939] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 452.966685][T14939] try_charge_memcg+0x37e/0xa10 [ 452.971525][T14939] obj_cgroup_charge_pages+0x23/0xc0 [ 452.976797][T14939] __memcg_kmem_charge_page+0x9e/0x170 [ 452.982254][T14939] __alloc_frozen_pages_noprof+0x18a/0x360 [ 452.988063][T14939] alloc_pages_mpol+0xb3/0x260 [ 452.992828][T14939] alloc_pages_noprof+0x8f/0x130 [ 452.997756][T14939] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 453.003640][T14939] __kvmalloc_node_noprof+0x3d4/0x650 [ 453.009005][T14939] futex_hash_allocate+0x190/0x9d0 [ 453.014108][T14939] futex_hash_prctl+0xd8/0xf0 [ 453.018774][T14939] __se_sys_prctl+0xa3d/0x13f0 [ 453.023527][T14939] __x64_sys_prctl+0x67/0x80 [ 453.028104][T14939] x64_sys_call+0x2533/0x3020 [ 453.032770][T14939] do_syscall_64+0x12c/0x370 [ 453.037344][T14939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.043223][T14939] [ 453.045528][T14939] value changed: 0x0000000100003b83 -> 0x0000000100003b84 [ 453.052615][T14939] [ 453.054922][T14939] Reported by Kernel Concurrency Sanitizer on: [ 453.061059][T14939] CPU: 0 UID: 0 PID: 14939 Comm: syz.5.3298 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.071990][T14939] Tainted: [W]=WARN [ 453.075773][T14939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.085809][T14939] ================================================================== [ 453.204827][T13070] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 453.310848][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 453.310881][T13070] Tainted: [W]=WARN [ 453.310953][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.310965][T13070] Call Trace: [ 453.310972][T13070] [ 453.310980][T13070] __dump_stack+0x1d/0x30 [ 453.311005][T13070] dump_stack_lvl+0x95/0xd0 [ 453.311127][T13070] dump_stack+0x15/0x1b [ 453.311147][T13070] dump_header+0x80/0x240 [ 453.311169][T13070] oom_kill_process+0x295/0x350 [ 453.311191][T13070] out_of_memory+0x97d/0xb80 [ 453.311214][T13070] try_charge_memcg+0x62e/0xa10 [ 453.311276][T13070] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 453.311351][T13070] __swap_cache_prepare_and_add+0x386/0x530 [ 453.311384][T13070] swap_cache_alloc_folio+0xa2/0x120 [ 453.311417][T13070] swap_cluster_readahead+0x36b/0x3d0 [ 453.311449][T13070] swapin_readahead+0xde/0x840 [ 453.311510][T13070] ? __rcu_read_unlock+0x4e/0x70 [ 453.311531][T13070] ? __perf_event_task_sched_in+0xa65/0xad0 [ 453.311554][T13070] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 453.311694][T13070] ? __rcu_read_unlock+0x4e/0x70 [ 453.311742][T13070] ? swap_cache_get_folio+0x26f/0x280 [ 453.311768][T13070] do_swap_page+0x309/0x2210 [ 453.311795][T13070] ? __schedule+0x93c/0xd40 [ 453.311844][T13070] ? __rcu_read_lock+0x36/0x50 [ 453.311863][T13070] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 453.311897][T13070] handle_mm_fault+0xb40/0x3020 [ 453.311961][T13070] ? vma_start_read+0x1c7/0x2c0 [ 453.311989][T13070] do_user_addr_fault+0x62f/0x1050 [ 453.312020][T13070] ? trace_page_fault_user+0x1f/0xe0 [ 453.312174][T13070] exc_page_fault+0x62/0xa0 [ 453.312200][T13070] asm_exc_page_fault+0x26/0x30 [ 453.312220][T13070] RIP: 0033:0x7f1307d97917 [ 453.312237][T13070] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 453.312255][T13070] RSP: 002b:00007ffc429a9a50 EFLAGS: 00010202 [ 453.312411][T13070] RAX: 0000000000000000 RBX: 0000555563285500 RCX: 00007f1307d97917 [ 453.312425][T13070] RDX: 00007ffc429a9a90 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.312439][T13070] RBP: 00007ffc429a9afc R08: 0000000000000000 R09: 0000000000000000 [ 453.312453][T13070] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 453.312466][T13070] R13: 00000000000927c0 R14: 000000000006e872 R15: 00007ffc429a9b50 [ 453.312529][T13070] [ 453.312537][T13070] memory: usage 307200kB, limit 307200kB, failcnt 491 [ 453.590950][T13070] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 453.612602][T13070] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 453.631295][T13070] Memory cgroup stats for /syz9: [ 453.631560][T13070] cache 0 [ 453.645602][T13070] rss 0 [ 453.652594][T13070] shmem 0 [ 453.661763][T13070] mapped_file 0 [ 453.672558][T13070] dirty 0 [ 453.680686][T13070] writeback 0 [ 453.692319][T13070] workingset_refault_anon 86 [ 453.706342][T13070] workingset_refault_file 0 [ 453.719193][T13070] swap 278528 [ 453.731082][T13070] swapcached 495616 [ 453.743746][T13070] pgpgin 70667 [ 453.753432][T13070] pgpgout 70651 [ 453.764237][T13070] pgfault 86601 [ 453.775383][T13070] pgmajfault 43 [ 453.789406][T13070] inactive_anon 65536 [ 453.804903][T13070] active_anon 0 [ 453.819712][T13070] inactive_file 0 [ 453.833803][T13070] active_file 0 [ 453.848644][T13070] unevictable 0 [ 453.858727][T13070] hierarchical_memory_limit 314572800 [ 453.876604][T13070] hierarchical_memsw_limit 9223372036854771712 [ 453.896370][T13070] total_cache 0 [ 453.907341][T13070] total_rss 0 [ 453.917898][T13070] total_shmem 0 [ 453.927656][T13070] total_mapped_file 0 [ 453.939932][T13070] total_dirty 0 [ 453.947816][T13070] total_writeback 0 [ 453.956049][T13070] total_workingset_refault_anon 86 [ 453.966234][T13070] total_workingset_refault_file 0 [ 453.977259][T13070] total_swap 278528 [ 454.038900][T13070] total_swapcached 495616 [ 454.047843][T13070] total_pgpgin 70667 [ 454.051978][T13070] total_pgpgout 70651 [ 454.055979][T13070] total_pgfault 86601 [ 454.060521][T13070] total_pgmajfault 43 [ 454.064529][T13070] total_inactive_anon 65536 [ 454.069074][T13070] total_active_anon 0 [ 454.073334][T13070] total_inactive_file 0 [ 454.077538][T13070] total_active_file 0 [ 454.081798][T13070] total_unevictable 0 [ 454.085795][T13070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3300,pid=14942,uid=0 [ 454.100757][T13070] Memory cgroup out of memory: Killed process 14942 (syz.9.3300) total-vm:98528kB, anon-rss:1228kB, file-rss:26508kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000