last executing test programs: 5.625392011s ago: executing program 2 (id=4135): syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r5, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000b0000000500000007"], 0x50) unshare(0x6020400) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r6, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x7, {0x0}}, 0x18) getpid() 5.522416483s ago: executing program 2 (id=4137): r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={0xffffffffffffffff, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) mprotect(&(0x7f0000184000/0x3000)=nil, 0x3000, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000500)={0x5, 0x2000027, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000280)={0x20052f9, 0x7f, 0x100802, 0x2, 0x1000000a}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRES8, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x8011) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a00ff8000"/64], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCSLCKTRMIOS(r4, 0x80047437, &(0x7f0000020780)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x8000, @remote, 0x6}, 0x1c) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @empty, 0xd}, r7, 0x4}}, 0x48) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000001300)="21437d43d2b19082e79d372f3a9ad0e9309950d6941557c5010b360490eca7a620f5f1b6573c9c77c31c07f97a7a8f0a68f9ea1dd034503717268b953609f86c14825901c95b0cd318c1f15ed8a47a786998aca986c1c2af2b1c984e092955d159028afae823d8c87b7ebf5514987b16b9be8b0201ea9a5887337dcd602ab31253e239c53d5fd896e0fa1ce7b9f660cfc302f59c848bd4c2a44873a6c35438c867cce4b7e8a89d0d849d55b861f0f14a2c743c0ee4018f24bfa5299fef937ed8fa497ef42419b7826f69b9d077992bec57317fdc5b054df0fa35494fe2913283aacf0e321f01590084a2b958e6dd", 0xee}, {&(0x7f0000001240)="1963dcf0593f3743ef8fc49f12a6e5f122d669ba848a2879a7b9ffcb080f99ba060b6bec3e2b727ef8dcd24b0539543e436a9011f09a4a8e01fd06eb2dd232dc9f80152a98f753356f2846da039a7ef0687adf2a47a6f97eac19fd7a273768acedbc35347677ca3dc8f619263e1fcef4a4c2a769fc04fb", 0x77}], 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1007) syz_open_dev$rtc(&(0x7f0000001100), 0x6, 0x800) 5.388320256s ago: executing program 2 (id=4138): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x327e, 0x1c080, 0xa, 0x20002f7}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000031000/0x2000)=nil, 0x2000) socket(0x29, 0x5, 0x0) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r1, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xf, 0x17, 0xf6, 0x7, 0x0, 0x3, 0x10120, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x3, @perf_config_ext={0x9b, 0x2}, 0x400, 0xc, 0xac1c, 0x1, 0x77, 0x9, 0xff, 0x0, 0x2, 0x0, 0x6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendfile(r0, r2, 0x0, 0xfffa83) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.847167077s ago: executing program 4 (id=4146): syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r4, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) unshare(0x6020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r5, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x7, {0x0}}, 0x18) getpid() 4.801825018s ago: executing program 4 (id=4147): syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r5, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000b0000000500000007"], 0x50) unshare(0x6020400) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r6, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x7, {0x0}}, 0x18) getpid() 4.74419395s ago: executing program 4 (id=4149): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0xc}, {0x0, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x200c00, 0x0) fcntl$lock(r5, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 4.667696311s ago: executing program 4 (id=4151): io_setup(0x7, 0x0) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffff090000000000000000850000003600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[], 0x78}}, 0x400c084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 4.630209701s ago: executing program 3 (id=4153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a31000000000800410072786500140013"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400000a0000000000008000000000030006002b0000000200000400400000000000000000000002000100000000000000fb0200000000030005003200000002004e247f0000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611150000000000085000000a00000009500000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x2c, 0x5, 0x1, 0x0, 0x0, 0x9, 0x46864, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x4, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x3, 0x9, 0x5, 0x3, 0x0, 0x200000, 0x0, 0x200c}, r3, 0x0, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x40000000000000}}]}, 0x0, 0x76a, &(0x7f0000000fc0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x804, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xd, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.521595984s ago: executing program 1 (id=4154): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25180000001c00038008000300ff010000080002000100008008000100020000004c000280080000010000003400038008000200ffff000008000200c2000040080002007f0000000800010005000000080002000000000008000100080000000c00038008000200080000001c00098008800100060000"], 0x98}, 0x1, 0x0, 0x0, 0x24008054}, 0x20000001) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x5, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0xb, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x3, 0x5}, {0x6}, {0xb, 0x5}]}, @struct={0x6, 0x3, 0x0, 0x4, 0x1, 0xf, [{0x0, 0x5, 0x9}, {0xf, 0x2, 0x3ff800}, {0xd, 0x5, 0x8}]}, @fwd={0x4}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x67}, @enum64={0x5, 0x2, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x3, 0x4f3}, {0x10, 0x1, 0x1ff}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x2c, 0x5}]}, {0x0, [0x30, 0x0, 0x30]}}, &(0x7f0000000800)=""/218, 0xe1, 0xda, 0x1, 0xff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x81, 0x9, 0x9, 0x8080, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xd, @value=r5}, 0x50) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x36, 0x0, 0x0) r7 = io_uring_setup(0x3450, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0xee01, &(0x7f0000000540)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.520063924s ago: executing program 0 (id=4164): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) 3.450252427s ago: executing program 0 (id=4155): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="350400004100f787d25a35400c0002000200002037153e370e04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000e80)="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", 0x204}], 0x2}, 0x10049014) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0xff00) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x40090) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.374037749s ago: executing program 0 (id=4156): syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x981}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") lchown(&(0x7f0000000180)='.\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write(r1, &(0x7f00000000c0)="cb6c97c6bea932e8ec5cc4565374fea5ea1c1aa15adcafd04b3619ab7900275eb5fbdeb22286a8b1bf4bd87e116fa330e946597e3681abcd99c6c780112ddf81b11aacfb627a82db10dae7ca5c85e95250f156a5b470", 0x56) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007f, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) dup3(r4, r5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.262629581s ago: executing program 0 (id=4157): syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r4, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) unshare(0x6020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r5, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x7, {0x0}}, 0x18) getpid() 3.261221381s ago: executing program 2 (id=4158): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0xc}, {0x0, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x200c00, 0x0) fcntl$lock(r6, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 3.120856964s ago: executing program 1 (id=4159): syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100"], 0x30}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r5, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000b0000000500000007"], 0x50) unshare(0x6020400) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r6, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x7, {0x0}}, 0x18) getpid() 2.995988817s ago: executing program 0 (id=4160): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000380)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20000150) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.995630897s ago: executing program 3 (id=4161): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0xc}, {0x0, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x200c00, 0x0) fcntl$lock(r5, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 2.649469764s ago: executing program 3 (id=4162): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@init_itable}]}, 0x1, 0x5cd, &(0x7f0000000c40)="$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") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x1200000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c0002800500010000000000060003400000000008000740000000000400068041dd036f5f08ae5cc7b8ac55f6f39af6258ce4"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000400180006801400040020"], 0xac}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x100) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.648988024s ago: executing program 1 (id=4163): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@init_itable}]}, 0x1, 0x5cd, &(0x7f0000000c40)="$eJzs3W1oXXcdB/DfuUm6PmT2wU3drGu0zBXKctM0La34wlEf5mznRPFFGZTQ3CWlN7mxSWG5E9zwjSiI4BsZCBP3wolooW8mY24vNnyjoMwHJloLKogwdDIQQb3yvw/dbXuyDNPkuJzPB87N//zPSf7/m8v3nudzAiitkfSSRQxHxMWI2N4ZvXqGkc6P5sELM2nIotX69F+z9nxTBy/M9Gbt/d629DIYsTkidh3LYu/Q9e0uLDXPTtbrtXPd8eri7Hx1Yal595nZyenadG3u0JGJo+OHJ45M3Lj3OvbTrbf+6c77Lz/5wj/+9c1fH/5+6u9wd1r/+7hRRmKk+z8Zip199YNZxH03urGCDHQ+6rizry4bLLBDvGmt1q7vpc/v7RGxt53/7TEQnQ/v5Wce/Pv2+OW9RfcRWDutns7o49dMfrUFbFiV9jpwVhmNiE65Uhkd7azD3xJbK/XGwuL+hxrn56Y668o7Yqjy0Jl6bay7rbAjhrI0fqBdfn18/JrxgxHtdeAvDWxpj4+ebtSnivjCA1KWL1383OlN267J/58HOvkHNq6U/1+8+PRzqfzaQNG9AdZTyv93X5v9RMg/lI78Q3nJP5SX/EN5yT+Ul/xDeck/lJf8Q3nJP5SX/EN59fL/wIkT8cCJE61m9/r3ucb0mbMz80fHx0Znz58ePd04Nz863WhMt6/YmV3579YbjfkD43H+4epibWGxurDUPDXbOD+3eKp9Xf+pWs6tAIACnLy8+b6de55/OYuIRz+wpT0km7rTZRU2tlYri6KvQQaKYdMfysut2qC8bOMD2QrTNy83oX7j+wKsj0rRHQAKc9dtjv9BWdn/D+Vl/z+Ul3V8wP5/KB/7/6G8hpd5/tfNfc/uGouIt0XETwaGbuo96wt4S7lqU3844tKlb3+2euU53AoKG7OQNl3/D7rxVivkfYVsWbcvK2DtvR76onsCFGXq4IWZ3rBebT47vV4tAXleuadzElDKfbM7dKYMXjk2MLRG5wntvCO9/vB3T+ybGUhDdL+H1qApIMejj0XEu/KW/1n72MCO7ny7OrPFLRFxa0S8IyLeucq2v/GpiJF4sdZfJ/+wft5s/m+LiLS4vj0i3h0RuyPiPats++cXU/5/ddVORfmHcvj8C0X3ACjKx58uugdAUU66dgBK6zuPFN0DoCjP/KDoHgBF+epLRfcAyu35eyJiLO/4X6V9vL9nqHtfwJu69wLYEhFbI2Jb9xrCm7vXCG7vO2a4klOfjBiJO37UX+f4H6yf3vl/zevO/6tcOf9vICL2rKKNZz84/JW8+sndKf9PPtI7/y8Nqf3euYDA2nrlsYjbc/OfXTnnN4uU04j3/o9tjHzh8lN59S/dn/7u0M/kH4rR+lbE+yM//z2pVF2cna8uLDXvbj/He7o2d+jIxNHxwxNHJqrtW4RUezcKyXH8b6/uz6v/7XjK/+OH5B+KkZb/W5fJf//6//tW0caxr3/5ZF798B9S/nc/98b5r/xlU/aZ9njvuQQPTy4unjsQsSk7fn39+Co6ChtcLyO9DKX879ubv/2/q/s7afl/LCI+nNYXIuLfEfGfiPhIRHw0Ij4WEfe+QZtfu2v6cl79759K+X/irOU/FCPlf2qF5X/6+c9VtLF/34+/mFf/oT0p/6O/+ePxBwfTsEz+l731MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArW1hqnp2s12vn1rBQ9HsEAAAAAACAsvhvAAAA//9vAzKW") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x1200000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.J'], 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500fc02000000000000000000000000000114000400fc020000000000000000000000000000cc0625aaa55b398ab677e3bc5ff93244e9d48bb0eb15263165b1fee4de3ef43fbfb09976c94a232c2edf40a1c0d6e44bbd2f4ea9e2f82ac53ba74796685760793f5e71f2f9c9b98fe5a7584e907f5098bb23a5bcd0ef24f3abaf562c0a51a8e5e97354da36f018f2669afc"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c0002800500010000000000060003400000000008000740000000000400068041dd036f5f08ae5cc7b8ac55f6f39af6258ce4"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000400180006801400040020"], 0xac}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x100) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.610371925s ago: executing program 1 (id=4165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x40000000}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0xe, @in={0x2, 0x4e22, @local}}]}, 0x50}}, 0x4004) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x1dc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x1ac, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x8}, {0x2, 0x8, 0x0, "992522a2832e7d15"}}}]}]}, @TCA_BASIC_ACT={0x188}]}}]}, 0x1dc}}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) 2.547207096s ago: executing program 3 (id=4166): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) 2.541280026s ago: executing program 4 (id=4167): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000000, 0x0, 0x0, 0x200000000030, 0x200000000060], 0x0, 0x0, &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0xfffff9, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local}, 0x14) socket$inet6(0xa, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a00010000000000000000001c1400e8"], 0x30}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000480)=""/210) 2.466178958s ago: executing program 2 (id=4168): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000b0000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000520000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x100000}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000180)=0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000000240)}, {0x0}], 0x2}, 0x0) 1.356447142s ago: executing program 3 (id=4169): syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x981}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") lchown(&(0x7f0000000180)='.\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write(r1, &(0x7f00000000c0)="cb6c97c6bea932e8ec5cc4565374fea5ea1c1aa15adcafd04b3619ab7900275eb5fbdeb22286a8b1bf4bd87e116fa330e946597e3681abcd99c6c780112ddf81b11aacfb627a82db10dae7ca5c85e95250f156a5b470", 0x56) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007f, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) dup3(r4, r5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.354995802s ago: executing program 4 (id=4170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x6d, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}]}, &(0x7f0000000140)=0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@errors_remount}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") inotify_add_watch(0xffffffffffffffff, 0x0, 0x100) r1 = inotify_init1(0x0) r2 = gettid() r3 = socket$igmp(0x2, 0x3, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000040)="1705a7b78287eb742eac9b3b", 0xc, 0x5, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) process_vm_writev(r2, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2, 0x4) r4 = syz_ublk_setup_io_uring(0x5fae, &(0x7f0000000100)={0x0, 0x9b28, 0x400, 0xfffffffd, 0x3c2, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000000600)=[{0x2, 0x0, 0x0}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x78) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x795, &(0x7f0000000740)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") syz_emit_ethernet(0x32, &(0x7f0000000400)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x112) getdents(r6, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x1, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x0) 367.237303ms ago: executing program 1 (id=4171): syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r4, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) unshare(0x6020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r5, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x7, {0x0}}, 0x18) getpid() 208.586486ms ago: executing program 3 (id=4172): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, 0x0) dup(r1) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xa5, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r2, 0x800000000000000}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2d64657669636573202dfc0bd5ad4d6114ce76970177db9f637d9542150b766837118b44a1326f895c1f3c0ae153d4397402149c6901565dd32c6b73eea3672401a4fae9b6f2346e236337c919b11734e0af6f22c12d1d3cc49f2705bbb85681538a82855e68efef9da27bebcb05a78500ebd41bb3a75244ac5cf946ad4da75f66fa20e9c8"], 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@can_delroute={0x3c, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xffffffffffffffff, 0xfffffffffffffffd}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x4, 0x2, 0x0, 0x0, "92c9040000001caf"}, 0x3}}]}, 0x3c}}, 0x20000) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r3, 0x0, r6, 0x0, 0x10d00, 0xf) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x50, 0x14, 0xf0b, 0x70bd29, 0x3, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7f}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000540)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffa, 0x8000095f}) r9 = socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) recvmsg(r9, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/98, 0x62}, 0x10060) 109.094958ms ago: executing program 2 (id=4173): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0xc}, {0x0, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x200c00, 0x0) fcntl$lock(r5, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 108.317109ms ago: executing program 1 (id=4174): syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100"], 0x30}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r5, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000b0000000500000007"], 0x50) unshare(0x6020400) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r6, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0x7, {0x0}}, 0x18) getpid() 0s ago: executing program 0 (id=4175): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@init_itable}]}, 0x1, 0x5cd, &(0x7f0000000c40)="$eJzs3W1oXXcdB/DfuUm6PmT2wU3drGu0zBXKctM0La34wlEf5mznRPFFGZTQ3CWlN7mxSWG5E9zwjSiI4BsZCBP3wolooW8mY24vNnyjoMwHJloLKogwdDIQQb3yvw/dbXuyDNPkuJzPB87N//zPSf7/m8v3nudzAiitkfSSRQxHxMWI2N4ZvXqGkc6P5sELM2nIotX69F+z9nxTBy/M9Gbt/d629DIYsTkidh3LYu/Q9e0uLDXPTtbrtXPd8eri7Hx1Yal595nZyenadG3u0JGJo+OHJ45M3Lj3OvbTrbf+6c77Lz/5wj/+9c1fH/5+6u9wd1r/+7hRRmKk+z8Zip199YNZxH03urGCDHQ+6rizry4bLLBDvGmt1q7vpc/v7RGxt53/7TEQnQ/v5Wce/Pv2+OW9RfcRWDutns7o49dMfrUFbFiV9jpwVhmNiE65Uhkd7azD3xJbK/XGwuL+hxrn56Y668o7Yqjy0Jl6bay7rbAjhrI0fqBdfn18/JrxgxHtdeAvDWxpj4+ebtSnivjCA1KWL1383OlN267J/58HOvkHNq6U/1+8+PRzqfzaQNG9AdZTyv93X5v9RMg/lI78Q3nJP5SX/EN5yT+Ul/xDeck/lJf8Q3nJP5SX/EN59fL/wIkT8cCJE61m9/r3ucb0mbMz80fHx0Znz58ePd04Nz863WhMt6/YmV3579YbjfkD43H+4epibWGxurDUPDXbOD+3eKp9Xf+pWs6tAIACnLy8+b6de55/OYuIRz+wpT0km7rTZRU2tlYri6KvQQaKYdMfysut2qC8bOMD2QrTNy83oX7j+wKsj0rRHQAKc9dtjv9BWdn/D+Vl/z+Ul3V8wP5/KB/7/6G8hpd5/tfNfc/uGouIt0XETwaGbuo96wt4S7lqU3844tKlb3+2euU53AoKG7OQNl3/D7rxVivkfYVsWbcvK2DtvR76onsCFGXq4IWZ3rBebT47vV4tAXleuadzElDKfbM7dKYMXjk2MLRG5wntvCO9/vB3T+ybGUhDdL+H1qApIMejj0XEu/KW/1n72MCO7ny7OrPFLRFxa0S8IyLeucq2v/GpiJF4sdZfJ/+wft5s/m+LiLS4vj0i3h0RuyPiPats++cXU/5/ddVORfmHcvj8C0X3ACjKx58uugdAUU66dgBK6zuPFN0DoCjP/KDoHgBF+epLRfcAyu35eyJiLO/4X6V9vL9nqHtfwJu69wLYEhFbI2Jb9xrCm7vXCG7vO2a4klOfjBiJO37UX+f4H6yf3vl/zevO/6tcOf9vICL2rKKNZz84/JW8+sndKf9PPtI7/y8Nqf3euYDA2nrlsYjbc/OfXTnnN4uU04j3/o9tjHzh8lN59S/dn/7u0M/kH4rR+lbE+yM//z2pVF2cna8uLDXvbj/He7o2d+jIxNHxwxNHJqrtW4RUezcKyXH8b6/uz6v/7XjK/+OH5B+KkZb/W5fJf//6//tW0caxr3/5ZF798B9S/nc/98b5r/xlU/aZ9njvuQQPTy4unjsQsSk7fn39+Co6ChtcLyO9DKX879ubv/2/q/s7afl/LCI+nNYXIuLfEfGfiPhIRHw0Ij4WEfe+QZtfu2v6cl79759K+X/irOU/FCPlf2qF5X/6+c9VtLF/34+/mFf/oT0p/6O/+ePxBwfTsEz+l731MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArW1hqnp2s12vn1rBQ9HsEAAAAAACAsvhvAAAA//9vAzKW") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x1200000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.J'], 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c0002800500010000000000060003400000000008000740000000000400068041dd036f5f08ae5cc7b8ac55f6f39af6258ce4"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000400180006801400040020"], 0xac}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x100) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 835.789477][T14662] IPVS: stopping backup sync thread 14688 ... [ 835.887344][T14693] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.961582][T14699] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 835.970248][T14693] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.983196][T14700] siw: device registration error -23 [ 835.998470][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'. [ 836.014769][T14701] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3095'. [ 836.026774][T14693] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.053968][T14700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14700 comm=syz.4.3094 [ 836.123666][T14706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14706 comm=syz.3.3098 [ 836.229017][T14693] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.358026][T14708] netlink: 'syz.3.3099': attribute type 7 has an invalid length. [ 836.412684][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 836.424153][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 836.441440][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 836.515920][ T3837] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.534917][ T3837] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.624013][T14724] netlink: 'syz.0.3107': attribute type 4 has an invalid length. [ 836.642940][T14724] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3107'. [ 836.643488][ T3837] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.669062][ T3837] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.720343][T14726] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 836.842479][T14732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14732 comm=syz.3.3110 [ 836.899620][T14733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14733 comm=syz.1.3109 [ 837.526223][T14741] netlink: 'syz.1.3112': attribute type 7 has an invalid length. [ 837.984233][T14755] netlink: 'syz.3.3116': attribute type 1 has an invalid length. [ 838.026409][T14759] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3115'. [ 838.039730][T14755] bond3: entered promiscuous mode [ 838.046313][T14755] bond3: entered allmulticast mode [ 838.053472][T14755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 838.332091][T14773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14773 comm=syz.0.3119 [ 838.361002][T14755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.374833][T14755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.169422][T14779] IPVS: Error connecting to the multicast addr [ 839.268328][T14792] netlink: 'syz.2.3126': attribute type 7 has an invalid length. [ 839.284083][T14790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14790 comm=syz.1.3136 [ 839.350690][T14794] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3127'. [ 839.405107][ T28] audit: type=1400 audit(1782832036.110:2515): avc: denied { listen } for pid=14793 comm="syz.2.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 840.035730][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'. [ 840.083120][T14815] netlink: 'syz.1.3133': attribute type 4 has an invalid length. [ 840.087012][T14813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14813 comm=syz.3.3134 [ 840.094808][T14815] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3133'. [ 841.077617][T14835] syz.3.3137 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 841.091958][T14835] CPU: 1 UID: 0 PID: 14835 Comm: syz.3.3137 Not tainted syzkaller #0 PREEMPT(lazy) [ 841.092012][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.092081][T14835] Call Trace: [ 841.092090][T14835] [ 841.092097][T14835] __dump_stack+0x1d/0x30 [ 841.092122][T14835] dump_stack_lvl+0x95/0xd0 [ 841.092146][T14835] dump_stack+0x15/0x1b [ 841.092221][T14835] dump_header+0x80/0x240 [ 841.092250][T14835] oom_kill_process+0x295/0x350 [ 841.092291][T14835] out_of_memory+0x981/0xbc0 [ 841.092330][T14835] try_charge_memcg+0x621/0xa00 [ 841.092369][T14835] ? __rcu_read_unlock+0x4e/0x70 [ 841.092411][T14835] __memcg_kmem_charge_page+0x199/0x3a0 [ 841.092441][T14835] __alloc_frozen_pages_noprof+0x18a/0x350 [ 841.092553][T14835] alloc_pages_mpol+0xa9/0x1d0 [ 841.092590][T14835] alloc_pages_noprof+0x8f/0x140 [ 841.092621][T14835] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 841.092715][T14835] __kvmalloc_node_noprof+0x3a0/0x590 [ 841.092746][T14835] ? futex_hash_allocate+0x192/0x920 [ 841.092780][T14835] ? futex_hash_allocate+0x192/0x920 [ 841.092857][T14835] ? futex_hash_allocate+0x192/0x920 [ 841.092884][T14835] futex_hash_allocate+0x192/0x920 [ 841.092911][T14835] ? cap_task_prctl+0x13f/0x6b0 [ 841.092953][T14835] futex_hash_prctl+0xd8/0xf0 [ 841.092977][T14835] __se_sys_prctl+0x4f4/0x13b0 [ 841.093062][T14835] __x64_sys_prctl+0x67/0x80 [ 841.093093][T14835] x64_sys_call+0x2533/0x3020 [ 841.093162][T14835] do_syscall_64+0x136/0x3c0 [ 841.093201][T14835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.093228][T14835] RIP: 0033:0x7ff7b77bce59 [ 841.093247][T14835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.093279][T14835] RSP: 002b:00007ff7b5db2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 841.093313][T14835] RAX: ffffffffffffffda RBX: 00007ff7b7a36270 RCX: 00007ff7b77bce59 [ 841.093328][T14835] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 841.093381][T14835] RBP: 00007ff7b7852e6f R08: 0000000000000000 R09: 0000000000000000 [ 841.093392][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.093402][T14835] R13: 00007ff7b7a36308 R14: 00007ff7b7a36270 R15: 00007ffe0439c748 [ 841.093421][T14835] [ 841.093433][T14835] memory: usage 307200kB, limit 307200kB, failcnt 128 [ 841.326427][T14835] memory+swap: usage 313172kB, limit 9007199254740988kB, failcnt 0 [ 841.334350][T14835] kmem: usage 276184kB, limit 9007199254740988kB, failcnt 0 [ 841.341687][T14835] Memory cgroup stats for /syz3: [ 841.341954][T14835] cache 29765632 [ 841.350519][T14835] rss 1994752 [ 841.353821][T14835] shmem 29761536 [ 841.357415][T14835] mapped_file 11755520 [ 841.361607][T14835] dirty 0 [ 841.364556][T14835] writeback 0 [ 841.367872][T14835] workingset_refault_anon 1410 [ 841.372738][T14835] workingset_refault_file 1034 [ 841.377599][T14835] swap 6115328 [ 841.381000][T14835] swapcached 24043520 [ 841.384994][T14835] pgpgin 637570 [ 841.388457][T14835] pgpgout 629816 [ 841.392039][T14835] pgfault 702910 [ 841.395609][T14835] pgmajfault 50 [ 841.399083][T14835] inactive_anon 12005376 [ 841.403433][T14835] active_anon 19746816 [ 841.407547][T14835] inactive_file 0 [ 841.411234][T14835] active_file 4096 [ 841.415052][T14835] unevictable 4096 [ 841.418995][T14835] hierarchical_memory_limit 314572800 [ 841.424545][T14835] hierarchical_memsw_limit 9223372036854771712 [ 841.430722][T14835] total_cache 29765632 [ 841.434824][T14835] total_rss 1994752 [ 841.438698][T14835] total_shmem 29761536 [ 841.442767][T14835] total_mapped_file 11755520 [ 841.447530][T14835] total_dirty 0 [ 841.451038][T14835] total_writeback 0 [ 841.454881][T14835] total_workingset_refault_anon 1410 [ 841.460186][T14835] total_workingset_refault_file 1034 [ 841.465514][T14835] total_swap 6115328 [ 841.469459][T14835] total_swapcached 24043520 [ 841.474088][T14835] total_pgpgin 637570 [ 841.478166][T14835] total_pgpgout 629816 [ 841.482484][T14835] total_pgfault 702910 [ 841.486999][T14835] total_pgmajfault 50 [ 841.491052][T14835] total_inactive_anon 12005376 [ 841.495854][T14835] total_active_anon 19746816 [ 841.500498][T14835] total_inactive_file 0 [ 841.504732][T14835] total_active_file 4096 [ 841.509216][T14835] total_unevictable 4096 [ 841.513515][T14835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3137,pid=14820,uid=0 [ 841.528466][T14835] Memory cgroup out of memory: Killed process 14820 (syz.3.3137) total-vm:100584kB, anon-rss:1432kB, file-rss:26508kB, shmem-rss:11480kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 841.595930][T14844] lo speed is unknown, defaulting to 1000 [ 841.602808][T14844] lo speed is unknown, defaulting to 1000 [ 841.696138][T14844] gre0 speed is unknown, defaulting to 1000 [ 841.793293][T14844] lo speed is unknown, defaulting to 1000 [ 842.109103][ T28] audit: type=1400 audit(1782832038.645:2516): avc: denied { write } for pid=14851 comm="syz.2.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 842.270375][T14858] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3149'. [ 842.311137][T14858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3149'. [ 842.402767][T14858] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3149'. [ 842.402920][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'. [ 842.444630][ T28] audit: type=1400 audit(1782832038.945:2517): avc: denied { create } for pid=14857 comm="syz.3.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 842.595596][T14871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14871 comm=syz.0.3152 [ 843.140482][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3166'. [ 843.302843][T14905] binfmt_misc: register: failed to install interpreter file ./file0 [ 843.755609][T14909] syz.4.3157 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 843.769805][T14909] CPU: 1 UID: 0 PID: 14909 Comm: syz.4.3157 Not tainted syzkaller #0 PREEMPT(lazy) [ 843.769828][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.769839][T14909] Call Trace: [ 843.769845][T14909] [ 843.769856][T14909] __dump_stack+0x1d/0x30 [ 843.769901][T14909] dump_stack_lvl+0x95/0xd0 [ 843.769925][T14909] dump_stack+0x15/0x1b [ 843.769945][T14909] dump_header+0x80/0x240 [ 843.769964][T14909] oom_kill_process+0x295/0x350 [ 843.770114][T14909] out_of_memory+0x981/0xbc0 [ 843.770146][T14909] try_charge_memcg+0x621/0xa00 [ 843.770175][T14909] ? __rcu_read_unlock+0x4e/0x70 [ 843.770223][T14909] __memcg_kmem_charge_page+0x199/0x3a0 [ 843.770248][T14909] __alloc_frozen_pages_noprof+0x18a/0x350 [ 843.770348][T14909] alloc_pages_mpol+0xa9/0x1d0 [ 843.770379][T14909] alloc_pages_noprof+0x8f/0x140 [ 843.770406][T14909] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 843.770454][T14909] __kvmalloc_node_noprof+0x3a0/0x590 [ 843.770478][T14909] ? futex_hash_allocate+0x192/0x920 [ 843.770507][T14909] ? futex_hash_allocate+0x192/0x920 [ 843.770529][T14909] ? futex_hash_allocate+0x192/0x920 [ 843.770611][T14909] futex_hash_allocate+0x192/0x920 [ 843.770630][T14909] ? cap_task_prctl+0x13f/0x6b0 [ 843.770665][T14909] futex_hash_prctl+0xd8/0xf0 [ 843.770687][T14909] __se_sys_prctl+0x4f4/0x13b0 [ 843.770765][T14909] __x64_sys_prctl+0x67/0x80 [ 843.770792][T14909] x64_sys_call+0x2533/0x3020 [ 843.770858][T14909] do_syscall_64+0x136/0x3c0 [ 843.770894][T14909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.770914][T14909] RIP: 0033:0x7f0f8d6bce59 [ 843.770959][T14909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.770975][T14909] RSP: 002b:00007f0f8bcaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 843.770991][T14909] RAX: ffffffffffffffda RBX: 00007f0f8d936270 RCX: 00007f0f8d6bce59 [ 843.771022][T14909] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 843.771036][T14909] RBP: 00007f0f8d752e6f R08: 0000000000000000 R09: 0000000000000000 [ 843.771051][T14909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.771065][T14909] R13: 00007f0f8d936308 R14: 00007f0f8d936270 R15: 00007ffdfa717138 [ 843.771088][T14909] [ 843.771118][T14909] memory: usage 307200kB, limit 307200kB, failcnt 2908 [ 843.865048][T14915] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 843.866543][T14909] memory+swap: usage 308860kB, limit 9007199254740988kB, failcnt 0 [ 844.020559][T14909] kmem: usage 270952kB, limit 9007199254740988kB, failcnt 0 [ 844.027896][T14909] Memory cgroup stats for /syz4: [ 844.028103][T14909] cache 11763712 [ 844.036657][T14909] rss 892928 [ 844.039919][T14909] shmem 11763712 [ 844.043543][T14909] mapped_file 11755520 [ 844.047707][T14909] dirty 0 [ 844.050655][T14909] writeback 0 [ 844.053974][T14909] workingset_refault_anon 3060 [ 844.058750][T14909] workingset_refault_file 253 [ 844.063466][T14909] swap 1699840 [ 844.066949][T14909] swapcached 25214976 [ 844.070942][T14909] pgpgin 657860 [ 844.074432][T14909] pgpgout 649821 [ 844.078072][T14909] pgfault 719486 [ 844.081695][T14909] pgmajfault 2951 [ 844.085443][T14909] inactive_anon 8933376 [ 844.089610][T14909] active_anon 23994368 [ 844.093692][T14909] inactive_file 0 [ 844.097430][T14909] active_file 0 [ 844.100904][T14909] unevictable 0 [ 844.104371][T14909] hierarchical_memory_limit 314572800 [ 844.109785][T14909] hierarchical_memsw_limit 9223372036854771712 [ 844.116088][T14909] total_cache 15953920 [ 844.120206][T14909] total_rss 892928 [ 844.123938][T14909] total_shmem 15953920 [ 844.128058][T14909] total_mapped_file 11755520 [ 844.132729][T14909] total_dirty 0 [ 844.136213][T14909] total_writeback 0 [ 844.140103][T14909] total_workingset_refault_anon 3060 [ 844.145526][T14909] total_workingset_refault_file 253 [ 844.150794][T14909] total_swap 1699840 [ 844.154737][T14909] total_swapcached 25214976 [ 844.159289][T14909] total_pgpgin 658958 [ 844.163330][T14909] total_pgpgout 649896 [ 844.167483][T14909] total_pgfault 720583 [ 844.171699][T14909] total_pgmajfault 2951 [ 844.175892][T14909] total_inactive_anon 13123584 [ 844.180737][T14909] total_active_anon 23994368 [ 844.185353][T14909] total_inactive_file 0 [ 844.189615][T14909] total_active_file 0 [ 844.189626][T14909] total_unevictable 0 [ 844.189635][T14909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3157,pid=14886,uid=0 [ 844.189723][T14909] Memory cgroup out of memory: Killed process 14886 (syz.4.3157) total-vm:100584kB, anon-rss:1436kB, file-rss:26440kB, shmem-rss:11480kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 844.687743][T14933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14933 comm=syz.1.3175 [ 845.338000][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'. [ 846.471751][ T8540] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 846.510694][ T8540] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 846.652049][T14958] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 846.849305][T14974] netlink: 'syz.2.3188': attribute type 4 has an invalid length. [ 846.875197][T14974] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3188'. [ 847.485327][T14988] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 847.494163][T14988] vhci_hcd vhci_hcd.0: invalid port number 255 [ 847.583653][T14985] netlink: 'syz.2.3192': attribute type 10 has an invalid length. [ 847.680418][T14985] block device autoloading is deprecated and will be removed. [ 848.828631][T14991] tipc: Resetting bearer [ 848.855859][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'. [ 848.889181][T14996] loop4: detected capacity change from 0 to 512 [ 848.954926][T14997] netlink: 'syz.0.3193': attribute type 7 has an invalid length. [ 849.069748][T15011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3196'. [ 849.161159][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 849.240601][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'. [ 849.372974][T15017] loop4: detected capacity change from 0 to 512 [ 849.420798][T15017] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 849.489985][T15017] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 849.498068][T15017] EXT4-fs (loop4): failed to initialize system zone (-117) [ 849.505848][T15017] EXT4-fs (loop4): mount failed [ 849.570756][T15028] block device autoloading is deprecated and will be removed. [ 849.882547][T15037] loop4: detected capacity change from 0 to 512 [ 849.903693][T15037] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 849.911953][T15037] EXT4-fs (loop4): orphan cleanup on readonly fs [ 849.919177][T15037] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 849.928202][T15037] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 849.938124][T15037] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.3208: Failed to acquire dquot type 1 [ 849.949382][T15037] loop4: lost filesystem error report for type 5 error -5 [ 849.953688][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 849.967306][ C1] EXT4-fs (loop4): initial error at time 1782832045: ext4_acquire_dquot:7041 [ 849.976160][ C1] EXT4-fs (loop4): last error at time 1782832045: ext4_acquire_dquot:7041 [ 850.054553][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 850.749767][T15037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3208: bg 0: block 40: padding at end of block bitmap is not set [ 850.764127][T15037] loop4: lost filesystem error report for type 5 error -117 [ 850.764402][T15037] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 850.780427][T15037] loop4: lost filesystem error report for type 5 error -117 [ 850.792397][T15037] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.3208: data will be lost [ 850.811144][T15037] EXT4-fs (loop4): 1 truncate cleaned up [ 850.817858][T15037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 851.776869][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.838780][T15067] loop4: detected capacity change from 0 to 512 [ 851.855904][T15067] EXT4-fs: Ignoring removed i_version option [ 851.873438][T15069] siw: device registration error -23 [ 851.893544][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 851.922667][T15069] macvtap1: entered promiscuous mode [ 851.928203][T15069] syz_tun: entered promiscuous mode [ 851.933830][T15069] macvtap1: entered allmulticast mode [ 851.943720][T15071] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 851.968166][T15067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.982455][T15069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15069 comm=syz.0.3227 [ 851.987959][T15067] ext4 filesystem being mounted at /618/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.012394][T15078] 9pnet_fd: p9_fd_create_unix (15078): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 852.176034][T15085] netlink: 'syz.4.3217': attribute type 4 has an invalid length. [ 852.353468][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 853.048685][T15085] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3217'. [ 853.123356][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.143509][T15093] sit0: entered allmulticast mode [ 853.285396][T15093] sit0: entered promiscuous mode [ 853.770192][ T28] audit: type=1400 audit(1782832049.543:2518): avc: denied { setopt } for pid=15095 comm="syz.4.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 856.419018][T15119] 9pnet_fd: p9_fd_create_unix (15119): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 856.517838][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 856.681452][T15124] loop4: detected capacity change from 0 to 4096 [ 856.696890][T15123] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 856.735359][T15124] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 856.766156][T15124] System zones: 0-5 [ 856.817964][T15124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.876554][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.907103][T15135] netlink: 'syz.1.3236': attribute type 10 has an invalid length. [ 857.085506][T15140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.269861][T15143] siw: device registration error -23 [ 857.282179][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 857.300135][T15146] loop4: detected capacity change from 0 to 128 [ 857.318556][T15146] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 857.331238][T15146] ext4 filesystem being mounted at /622/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 857.353276][ T28] audit: type=1400 audit(1782832052.891:2519): avc: denied { write } for pid=15136 comm="syz.4.3248" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 857.426658][T15150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15150 comm=syz.2.3237 [ 857.452157][T15151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15151 comm=syz.1.3238 [ 857.490405][ T28] audit: type=1400 audit(1782832052.891:2520): avc: denied { create } for pid=15136 comm="syz.4.3248" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 857.568014][ T28] audit: type=1400 audit(1782832052.891:2521): avc: denied { read write open } for pid=15136 comm="syz.4.3248" path="/622/mnt/bus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 858.058895][T15157] netlink: 'syz.3.3241': attribute type 7 has an invalid length. [ 858.115441][T15141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 858.142994][T15143] macvtap1: entered promiscuous mode [ 858.148432][T15143] syz_tun: entered promiscuous mode [ 858.172092][T15143] macvtap1: entered allmulticast mode [ 858.191511][T15143] syz_tun: entered allmulticast mode [ 858.239374][T15140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.316666][T15140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.401952][T15140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.507364][ T3849] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.515741][ T3849] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.536957][ T3849] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.565640][ T3849] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.930680][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 859.494657][T15173] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 859.529384][T15178] loop4: detected capacity change from 0 to 512 [ 859.550265][T15178] EXT4-fs: Ignoring removed i_version option [ 859.687962][T15178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.996718][T15188] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3252'. [ 860.005498][T15178] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.018426][T15188] netlink: 'syz.2.3252': attribute type 3 has an invalid length. [ 860.120108][T15178] netlink: 'syz.4.3251': attribute type 4 has an invalid length. [ 860.129457][T15178] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3251'. [ 860.308253][T15192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3254'. [ 860.318089][T15192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3254'. [ 860.439073][T15192] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3254'. [ 860.480845][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.923872][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'. [ 860.933234][T15202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3257'. [ 861.236158][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3256'. [ 861.262116][T15205] ipvlan1: Caught tx_queue_len zero misconfig [ 861.345488][T15209] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 861.358432][T15205] IPVS: stopping backup sync thread 15209 ... [ 861.519089][T15211] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3260'. [ 861.647609][T15215] netlink: 'syz.2.3261': attribute type 1 has an invalid length. [ 861.683819][T15217] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 861.750128][T15215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.762153][T15221] loop4: detected capacity change from 0 to 512 [ 861.793213][T15221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.837130][ T28] audit: type=1400 audit(1782832057.091:2522): avc: denied { write } for pid=15220 comm="syz.4.3263" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 861.863245][ T28] audit: type=1400 audit(1782832057.091:2523): avc: denied { mounton } for pid=15220 comm="syz.4.3263" path="/627/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 861.993611][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.007156][T15234] 9pnet_fd: p9_fd_create_unix (15234): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 863.107066][T15245] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 863.735936][ T28] audit: type=1400 audit(1782832058.289:2524): avc: denied { setopt } for pid=15238 comm="syz.1.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 863.767244][ T28] audit: type=1400 audit(1782832058.831:2525): avc: denied { setattr } for pid=15240 comm="syz.4.3267" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 864.093818][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 864.107779][T15249] netlink: 'syz.1.3272': attribute type 29 has an invalid length. [ 864.117474][T15249] netlink: 'syz.1.3272': attribute type 3 has an invalid length. [ 864.140622][T15253] ipvlan1: Caught tx_queue_len zero misconfig [ 864.266477][T15253] IPVS: stopping backup sync thread 15257 ... [ 864.272700][T15257] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 864.510645][T15268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=15268 comm=syz.3.3277 [ 865.813631][T15282] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 866.682302][T15290] __nla_validate_parse: 1 callbacks suppressed [ 866.682349][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 866.700889][T15290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3285'. [ 866.837661][T15298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3283'. [ 866.922059][T15300] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 867.233351][ T28] audit: type=1400 audit(1782832061.815:2526): avc: denied { getattr } for pid=15288 comm="syz.4.3284" name="KEY" dev="sockfs" ino=51420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 867.293372][T15304] netlink: 'syz.3.3288': attribute type 7 has an invalid length. [ 867.376065][T15314] loop4: detected capacity change from 0 to 512 [ 867.404700][T15314] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 867.417279][T15314] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 867.427262][T15314] EXT4-fs (loop4): 1 truncate cleaned up [ 867.433615][T15314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.542413][T15322] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 867.558868][T15322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3292'. [ 867.587612][T15326] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 868.018003][T15337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15337 comm=syz.2.3299 [ 868.052119][T15316] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 869.069752][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.123651][T15346] netlink: 'syz.0.3302': attribute type 7 has an invalid length. [ 870.351684][T15349] netlink: 'syz.3.3303': attribute type 13 has an invalid length. [ 870.390397][T15351] loop4: detected capacity change from 0 to 2048 [ 870.878226][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 872.321666][T15385] netlink: 'syz.4.3312': attribute type 39 has an invalid length. [ 872.898103][T15393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3315'. [ 873.411816][T15396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15396 comm=syz.2.3316 [ 873.642979][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 873.708196][T15405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15405 comm=syz.4.3320 [ 873.907732][T15405] loop4: detected capacity change from 0 to 4096 [ 873.935659][T15405] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 873.952211][T15409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15409 comm=syz.1.3323 [ 873.952396][T15405] System zones: 0-5 [ 873.996717][T15405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.025502][T15413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15413 comm=syz.0.3325 [ 874.270538][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.383181][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3327'. [ 874.396512][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 874.752556][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 874.976982][T15451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15451 comm=syz.1.3338 [ 876.011677][T15458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15458 comm=syz.3.3339 [ 877.021872][T15463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15463 comm=syz.2.3341 [ 877.344037][ T28] audit: type=1400 audit(1782832071.609:2527): avc: denied { write } for pid=15443 comm="syz.0.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 877.455488][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 878.410433][T15468] loop4: detected capacity change from 0 to 512 [ 878.433123][T15468] EXT4-fs: Ignoring removed nobh option [ 878.505203][T15468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 878.525475][T15468] EXT4-fs (loop4): 1 truncate cleaned up [ 878.531703][T15468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.071220][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 879.105532][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.206087][T15488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15488 comm=syz.1.3351 [ 879.261672][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3353'. [ 879.275998][T15490] bridge_slave_0: Caught tx_queue_len zero misconfig [ 879.384158][T15496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15496 comm=syz.2.3354 [ 879.755583][T15506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15506 comm=syz.2.3358 [ 880.268532][T15514] loop4: detected capacity change from 0 to 512 [ 880.406330][T15514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.441987][T15514] 9p: Bad value for 'rfdno' [ 880.446041][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'. [ 880.524627][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.536045][ T28] audit: type=1400 audit(1782832074.583:2528): avc: denied { connect } for pid=15502 comm="syz.3.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 880.629504][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.1.3368 [ 880.737463][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3371'. [ 880.759022][T15538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15538 comm=syz.0.3370 [ 880.865113][T15547] loop4: detected capacity change from 0 to 512 [ 880.891794][T15547] EXT4-fs: Ignoring removed nobh option [ 880.911998][T15549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15549 comm=syz.3.3374 [ 880.937593][T15547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 880.960772][T15547] EXT4-fs (loop4): 1 truncate cleaned up [ 880.967232][T15547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.036435][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.324756][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 882.325804][T15564] loop4: detected capacity change from 0 to 512 [ 882.398175][T15564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.459234][ T28] audit: type=1400 audit(1782832076.379:2529): avc: denied { write } for pid=15562 comm="syz.4.3379" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 882.485653][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.611017][T15578] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 882.697934][T15594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15594 comm=syz.4.3391 [ 882.823362][T15598] loop4: detected capacity change from 0 to 4096 [ 882.840809][T15598] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 882.864452][T15598] System zones: 0-5 [ 882.874829][T15598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.193413][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.238607][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 883.262580][T15611] loop4: detected capacity change from 0 to 512 [ 883.280102][T15611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.304191][ T28] audit: type=1400 audit(1782832077.174:2530): avc: denied { write } for pid=15610 comm="syz.4.3393" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 883.347208][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.385694][T15621] loop4: detected capacity change from 0 to 512 [ 883.417661][T15621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.434046][ T28] audit: type=1400 audit(1782832077.296:2531): avc: denied { write } for pid=15620 comm="syz.4.3398" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 883.482034][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.860372][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 884.070592][T15648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15648 comm=syz.1.3406 [ 884.255381][T15654] loop4: detected capacity change from 0 to 512 [ 884.340994][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 884.427952][T15654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.684498][T15659] IPVS: Unknown mcast interface: vlan1 [ 884.708376][T15659] IPVS: stopping backup sync thread 6785 ... [ 884.773024][ T28] audit: type=1400 audit(1782832078.521:2532): avc: denied { write } for pid=15651 comm="syz.4.3408" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 884.830232][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.022597][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3423'. [ 885.241596][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 885.337557][T15692] gretap1: entered promiscuous mode [ 885.381379][T15695] bridge_slave_0: Caught tx_queue_len zero misconfig [ 885.434242][T15698] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 885.504962][T15708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15708 comm=syz.1.3425 [ 886.193130][T15724] loop4: detected capacity change from 0 to 512 [ 886.271456][T15724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.311426][ T28] audit: type=1400 audit(1782832079.981:2533): avc: denied { write } for pid=15718 comm="syz.4.3430" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 886.438253][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'. [ 886.692523][T15723] IPVS: Unknown mcast interface: vlan1 [ 887.242031][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.519376][T15749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15749 comm=syz.2.3438 [ 887.575636][T15751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15751 comm=syz.3.3439 [ 890.401134][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 890.446480][T15771] loop4: detected capacity change from 0 to 512 [ 890.473529][T15771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.508864][ T28] audit: type=1400 audit(1782832083.919:2534): avc: denied { write } for pid=15764 comm="syz.4.3443" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 890.567004][T15778] IPVS: Unknown mcast interface: vlan1 [ 890.716451][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.624387][T15795] loop4: detected capacity change from 0 to 512 [ 891.638682][T15795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.767788][ T28] audit: type=1400 audit(1782832085.088:2535): avc: denied { write } for pid=15794 comm="syz.4.3449" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 892.651345][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3450'. [ 892.751358][T15797] hsr_slave_0: left promiscuous mode [ 892.766928][T15797] hsr_slave_1: left promiscuous mode [ 892.782767][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.939091][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3451'. [ 893.001050][ T28] audit: type=1400 audit(1782832086.238:2536): avc: denied { write } for pid=15812 comm="syz.4.3453" path="socket:[54370]" dev="sockfs" ino=54370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 893.021582][T15813] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3453'. [ 893.169520][T15818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15818 comm=syz.4.3455 [ 893.333517][T15819] loop4: detected capacity change from 0 to 4096 [ 893.412139][T15819] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 893.459009][T15819] System zones: 0-5 [ 893.482027][T15819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.546541][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.122734][T15824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15824 comm=syz.4.3456 [ 894.292135][T15836] ip6tnl0: Caught tx_queue_len zero misconfig [ 894.333168][T15832] loop4: detected capacity change from 0 to 4096 [ 894.350220][T15840] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 894.374393][T15832] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 894.408679][T15832] System zones: 0-5 [ 894.418621][T15840] bond2: (slave lo): Enslaving as an active interface with an up link [ 894.437088][T15832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.461732][T15846] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3462'. [ 894.477124][ T28] audit: type=1400 audit(1782832087.613:2537): avc: denied { lock } for pid=15835 comm="syz.1.3462" path="socket:[53457]" dev="sockfs" ino=53457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 894.504702][T15840] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 894.534435][T15846] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3462'. [ 894.580158][T15834] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3461'. [ 894.597065][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.608061][T15834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 894.630225][ T8540] lo speed is unknown, defaulting to 1000 [ 894.636147][ T3562] lo speed is unknown, defaulting to 1000 [ 894.643229][ T8540] syz2: Port: 1 Link ACTIVE [ 894.690502][T15849] loop4: detected capacity change from 0 to 512 [ 894.729743][T15849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.753899][ T28] audit: type=1400 audit(1782832087.885:2538): avc: denied { write } for pid=15848 comm="syz.4.3464" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 894.791790][T15855] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 894.832076][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.185977][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3467'. [ 897.511930][ T28] audit: type=1400 audit(1782832090.466:2539): avc: denied { append } for pid=15875 comm="syz.4.3471" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 897.547272][ T28] audit: type=1400 audit(1782832090.466:2540): avc: denied { open } for pid=15875 comm="syz.4.3471" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 897.847003][ T28] audit: type=1400 audit(1782832090.466:2541): avc: denied { ioctl } for pid=15875 comm="syz.4.3471" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 897.872122][ T28] audit: type=1400 audit(1782832090.644:2542): avc: denied { setopt } for pid=15873 comm="syz.0.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 897.949076][T15894] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 898.187092][T15908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15908 comm=syz.1.3481 [ 898.791301][T15918] block device autoloading is deprecated and will be removed. [ 899.022403][T15930] pim6reg: left allmulticast mode [ 900.529595][T15948] bond0: option primary: mode dependency failed, not supported in mode broadcast(3) [ 900.689395][T15948] bond0 (unregistering): Released all slaves [ 901.563434][T15951] lo speed is unknown, defaulting to 1000 [ 901.569755][T15951] lo speed is unknown, defaulting to 1000 [ 901.625156][T15952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15952 comm=syz.1.3495 [ 903.439360][T15967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15967 comm=syz.0.3499 [ 903.603484][T15971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15971 comm=syz.1.3501 [ 903.795173][T15973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15973 comm=syz.1.3502 [ 904.115685][T15951] gre0 speed is unknown, defaulting to 1000 [ 904.133189][T15965] block device autoloading is deprecated and will be removed. [ 904.201057][T15980] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 904.290332][T15951] lo speed is unknown, defaulting to 1000 [ 904.549096][ T28] audit: type=1400 audit(1782832097.042:2543): avc: denied { connect } for pid=15986 comm="syz.4.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 904.636868][T15989] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 905.349043][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3510'. [ 905.357189][T16004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16004 comm=syz.0.3512 [ 905.384292][T15998] hsr_slave_0: left promiscuous mode [ 905.573931][T16010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16010 comm=syz.4.3513 [ 905.822022][T16017] block device autoloading is deprecated and will be removed. [ 905.840707][T16019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3516'. [ 905.868746][T16017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16017 comm=syz.2.3515 [ 905.881921][T16019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3516'. [ 905.892453][T16019] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3516'. [ 906.004883][T16022] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 906.322478][T16030] netlink: 'syz.2.3519': attribute type 13 has an invalid length. [ 906.340034][T16031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3518'. [ 906.892274][T16028] uprobe: syz.2.3519:16028 failed to unregister, leaking uprobe [ 907.270281][T16012] ipip0: entered promiscuous mode [ 907.809009][T16058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16058 comm=syz.4.3527 [ 907.929039][T16060] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 908.225639][T16068] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 908.260664][T16070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16070 comm=syz.3.3531 [ 908.432796][T16079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16079 comm=syz.2.3534 [ 908.472318][T16085] netlink: 'syz.1.3535': attribute type 13 has an invalid length. [ 908.679194][T16089] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 908.723335][T16089] batman_adv: batadv0: Adding interface: gretap1 [ 908.729982][T16081] uprobe: syz.1.3535:16081 failed to unregister, leaking uprobe [ 908.745460][T16089] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.798244][T16089] batman_adv: batadv0: Interface activated: gretap1 [ 908.869271][ T28] audit: type=1400 audit(1782832101.083:2544): avc: denied { connect } for pid=16092 comm="syz.1.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 908.979215][T16096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16096 comm=syz.3.3539 [ 908.983458][T16098] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 909.057666][T16100] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 909.145132][T16104] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 909.250063][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3543'. [ 909.301995][T16105] gretap1: entered promiscuous mode [ 909.409176][T16120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16120 comm=syz.3.3547 [ 910.630930][T16138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16138 comm=syz.4.3551 [ 912.037217][T16147] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 913.217673][T16156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16156 comm=syz.4.3558 [ 914.320126][T16160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16160 comm=syz.0.3559 [ 914.341710][T16159] block device autoloading is deprecated and will be removed. [ 914.948393][T16172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16172 comm=syz.4.3564 [ 915.164837][T16180] gretap2: entered allmulticast mode [ 915.190859][T16180] team0: Port device gretap2 added [ 915.324953][T16185] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 915.407686][T16199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16199 comm=syz.3.3574 [ 917.310446][T16207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16207 comm=syz.3.3576 [ 917.363409][T16216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16216 comm=syz.1.3580 [ 917.541975][T16221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3575'. [ 918.796746][T16229] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 919.833500][T16243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16243 comm=syz.4.3588 [ 920.575506][ T28] audit: type=1400 audit(1782832112.037:2545): avc: denied { accept } for pid=16245 comm="syz.2.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 921.235076][T16260] can0: slcan on ttyS3. [ 921.301570][T16265] block device autoloading is deprecated and will be removed. [ 921.310897][T16271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16271 comm=syz.0.3596 [ 921.324719][T16260] can0 (unregistered): slcan off ttyS3. [ 921.338941][ T28] audit: type=1326 audit(1782832112.757:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16262 comm="syz.4.3595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d6bce59 code=0x0 [ 921.425727][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 921.484532][ T28] audit: type=1400 audit(1782832112.888:2547): avc: denied { write } for pid=16270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.529983][T16287] atomic_op ffff88811b4a2d28 conn xmit_atomic 0000000000000000 [ 921.559747][ T28] audit: type=1400 audit(1782832112.953:2548): avc: denied { write } for pid=16290 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.673226][T16289] pim6reg: entered allmulticast mode [ 921.703971][T16302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16302 comm=syz.1.3601 [ 921.706299][T16303] pim6reg: left allmulticast mode [ 921.765929][ T28] audit: type=1400 audit(1782832113.159:2549): avc: denied { write } for pid=16292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.849569][ T28] audit: type=1400 audit(1782832113.234:2550): avc: denied { write } for pid=16309 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.114362][T16321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16321 comm=syz.3.3605 [ 922.647623][T16331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3607'. [ 922.701274][T16324] syz.2.3604 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 922.702538][T16333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16333 comm=syz.1.3608 [ 922.715595][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.2.3604 Not tainted syzkaller #0 PREEMPT(lazy) [ 922.715626][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 922.715676][T16324] Call Trace: [ 922.715681][T16324] [ 922.715688][T16324] __dump_stack+0x1d/0x30 [ 922.715714][T16324] dump_stack_lvl+0x95/0xd0 [ 922.715774][T16324] dump_stack+0x15/0x1b [ 922.715793][T16324] dump_header+0x80/0x240 [ 922.715812][T16324] oom_kill_process+0x295/0x350 [ 922.715842][T16324] out_of_memory+0x981/0xbc0 [ 922.715961][T16324] try_charge_memcg+0x621/0xa00 [ 922.716080][T16324] __memcg_kmem_charge_page+0x199/0x3a0 [ 922.716203][T16324] __alloc_frozen_pages_noprof+0x18a/0x350 [ 922.716308][T16324] alloc_pages_bulk_noprof+0x4c3/0x550 [ 922.716387][T16324] ? policy_nodemask+0x417/0x5e0 [ 922.716564][T16324] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 922.716695][T16324] ? alloc_pages_mpol+0xd9/0x1d0 [ 922.716862][T16324] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 922.716994][T16324] __kvmalloc_node_noprof+0x3a0/0x590 [ 922.717077][T16324] ? futex_hash_allocate+0x192/0x920 [ 922.717186][T16324] ? futex_hash_allocate+0x192/0x920 [ 922.717249][T16324] ? futex_hash_allocate+0x192/0x920 [ 922.717339][T16324] futex_hash_allocate+0x192/0x920 [ 922.717448][T16324] ? cap_task_prctl+0x13f/0x6b0 [ 922.717587][T16324] futex_hash_prctl+0xd8/0xf0 [ 922.717616][T16324] __se_sys_prctl+0x4f4/0x13b0 [ 922.717675][T16324] __x64_sys_prctl+0x67/0x80 [ 922.717831][T16324] x64_sys_call+0x2533/0x3020 [ 922.717875][T16324] do_syscall_64+0x136/0x3c0 [ 922.718009][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.718068][T16324] RIP: 0033:0x7f7bc6f6ce59 [ 922.718114][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.718169][T16324] RSP: 002b:00007f7bc555a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 922.718223][T16324] RAX: ffffffffffffffda RBX: 00007f7bc71e6270 RCX: 00007f7bc6f6ce59 [ 922.718321][T16324] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 922.718357][T16324] RBP: 00007f7bc7002e6f R08: 0000000000000000 R09: 0000000000000000 [ 922.718408][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.718444][T16324] R13: 00007f7bc71e6308 R14: 00007f7bc71e6270 R15: 00007ffd75014878 [ 922.718508][T16324] [ 922.718521][T16324] memory: usage 307200kB, limit 307200kB, failcnt 223 [ 922.738910][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 922.747748][T16324] memory+swap: usage 333680kB, limit 9007199254740988kB, failcnt 0 [ 922.747814][T16324] kmem: usage 283812kB, limit 9007199254740988kB, failcnt 0 [ 922.747829][T16324] Memory cgroup stats for /syz2: [ 922.748310][T16324] cache 23519232 [ 923.000471][T16324] rss 401408 [ 923.003823][T16324] shmem 23515136 [ 923.007407][T16324] mapped_file 4198400 [ 923.011459][T16324] dirty 0 [ 923.014423][T16324] writeback 0 [ 923.017714][T16324] workingset_refault_anon 1424 [ 923.022485][T16324] workingset_refault_file 4607 [ 923.027282][T16324] swap 27115520 [ 923.030789][T16324] swapcached 51372032 [ 923.034845][T16324] pgpgin 788091 [ 923.038334][T16324] pgpgout 782244 [ 923.041887][T16324] pgfault 831508 [ 923.045467][T16324] pgmajfault 87 [ 923.048940][T16324] inactive_anon 16384 [ 923.052929][T16324] active_anon 23924736 [ 923.057030][T16324] inactive_file 0 [ 923.060674][T16324] active_file 4096 [ 923.064409][T16324] unevictable 4096 [ 923.068150][T16324] hierarchical_memory_limit 314572800 [ 923.073545][T16324] hierarchical_memsw_limit 9223372036854771712 [ 923.079720][T16324] total_cache 23519232 [ 923.083852][T16324] total_rss 401408 [ 923.087594][T16324] total_shmem 23515136 [ 923.091710][T16324] total_mapped_file 4198400 [ 923.096211][T16324] total_dirty 0 [ 923.099732][T16324] total_writeback 0 [ 923.103541][T16324] total_workingset_refault_anon 1424 [ 923.108838][T16324] total_workingset_refault_file 4607 [ 923.114274][T16324] total_swap 27115520 [ 923.118261][T16324] total_swapcached 51372032 [ 923.122797][T16324] total_pgpgin 788091 [ 923.126791][T16324] total_pgpgout 782244 [ 923.130927][T16324] total_pgfault 831508 [ 923.135027][T16324] total_pgmajfault 87 [ 923.139012][T16324] total_inactive_anon 16384 [ 923.143548][T16324] total_active_anon 23924736 [ 923.148153][T16324] total_inactive_file 0 [ 923.152364][T16324] total_active_file 4096 [ 923.156620][T16324] total_unevictable 4096 [ 923.160877][T16324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3604,pid=16313,uid=0 [ 923.175650][T16324] Memory cgroup out of memory: Killed process 16313 (syz.2.3604) total-vm:88300kB, anon-rss:1432kB, file-rss:26460kB, shmem-rss:4100kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 923.209481][ T28] audit: type=1400 audit(1782832114.506:2551): avc: denied { create } for pid=16340 comm="syz.0.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 923.389195][T16347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16347 comm=syz.2.3612 [ 923.626226][ T28] audit: type=1400 audit(1782832114.899:2552): avc: denied { kexec_image_load } for pid=16334 comm="syz.4.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 924.273463][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 924.284087][T16360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3615'. [ 924.346767][T16366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16366 comm=syz.2.3617 [ 924.580590][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 924.600192][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 924.600226][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 924.600237][ T3303] Call Trace: [ 924.600243][ T3303] [ 924.600251][ T3303] __dump_stack+0x1d/0x30 [ 924.600271][ T3303] dump_stack_lvl+0x95/0xd0 [ 924.600329][ T3303] dump_stack+0x15/0x1b [ 924.600345][ T3303] dump_header+0x80/0x240 [ 924.600369][ T3303] oom_kill_process+0x295/0x350 [ 924.600405][ T3303] out_of_memory+0x981/0xbc0 [ 924.600466][ T3303] try_charge_memcg+0x621/0xa00 [ 924.600499][ T3303] ? should_fail_ex+0x30/0x270 [ 924.600536][ T3303] charge_memcg+0x6d/0x120 [ 924.600624][ T3303] __mem_cgroup_charge+0x28/0xb0 [ 924.600698][ T3303] filemap_add_folio+0x110/0x350 [ 924.600726][ T3303] __filemap_get_folio_mpol+0x32e/0x840 [ 924.600761][ T3303] filemap_fault+0x458/0xb60 [ 924.600855][ T3303] handle_mm_fault+0x167a/0x2da0 [ 924.600890][ T3303] do_user_addr_fault+0x634/0x1060 [ 924.600916][ T3303] ? trace_page_fault_user+0x1f/0xa0 [ 924.601022][ T3303] exc_page_fault+0x62/0xa0 [ 924.601051][ T3303] asm_exc_page_fault+0x26/0x30 [ 924.601074][ T3303] RIP: 0033:0x7f33a810ae74 [ 924.601091][ T3303] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 924.601113][ T3303] RSP: 002b:00007ffc338baa00 EFLAGS: 00010206 [ 924.601131][ T3303] RAX: 0000001b32724000 RBX: 0000000000000945 RCX: 00000000000d5228 [ 924.601146][ T3303] RDX: 0000000002a08de6 RSI: 00007ffc338baa90 RDI: 0000000000000001 [ 924.601162][ T3303] RBP: 00007ffc338baa3c R08: 000000000a05974e R09: 3fffffffffffffff [ 924.601178][ T3303] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 924.601192][ T3303] R13: 00000000000927c0 R14: 00000000000d4e12 R15: 00007ffc338baa90 [ 924.601255][ T3303] [ 924.601275][ T3303] memory: usage 307200kB, limit 307200kB, failcnt 329 [ 924.843709][T16375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16375 comm=syz.1.3620 [ 925.934297][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'. [ 925.998701][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16387 comm=syz.1.3623 [ 926.489009][ T3303] memory+swap: usage 107696kB, limit 9007199254740988kB, failcnt 0 [ 926.497112][ T3303] kmem: usage 4872kB, limit 9007199254740988kB, failcnt 0 [ 926.504276][ T3303] Memory cgroup stats for /syz0: [ 926.504624][ T3303] cache 22102016 [ 926.513120][ T3303] rss 2813952 [ 926.516410][ T3303] shmem 21577728 [ 926.519990][ T3303] mapped_file 0 [ 926.523467][ T3303] dirty 0 [ 926.526419][ T3303] writeback 0 [ 926.529715][ T3303] workingset_refault_anon 2440 [ 926.534556][ T3303] workingset_refault_file 5490 [ 926.539355][ T3303] swap 76038144 [ 926.542845][ T3303] swapcached 104292352 [ 926.546918][ T3303] pgpgin 730718 [ 926.550388][ T3303] pgpgout 724632 [ 926.553967][ T3303] pgfault 779369 [ 926.557558][ T3303] pgmajfault 159 [ 926.561111][ T3303] inactive_anon 5668864 [ 926.565296][ T3303] active_anon 18735104 [ 926.569369][ T3303] inactive_file 0 [ 926.573011][ T3303] active_file 524288 [ 926.576951][ T3303] unevictable 0 [ 926.580433][ T3303] hierarchical_memory_limit 314572800 [ 926.585859][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 926.592074][ T3303] total_cache 26255360 [ 926.596786][ T3303] total_rss 2813952 [ 926.600809][ T3303] total_shmem 25731072 [ 926.604887][ T3303] total_mapped_file 0 [ 926.609010][ T3303] total_dirty 0 [ 926.612490][ T3303] total_writeback 0 [ 926.617014][ T3303] total_workingset_refault_anon 2440 [ 926.622342][ T3303] total_workingset_refault_file 5490 [ 926.627700][ T3303] total_swap 76066816 [ 926.640919][ T3303] total_swapcached 104329216 [ 926.645601][ T3303] total_pgpgin 731926 [ 926.649776][ T3303] total_pgpgout 724824 [ 926.653872][ T3303] total_pgfault 780473 [ 926.712505][ T3303] total_pgmajfault 160 [ 926.716776][ T3303] total_inactive_anon 9830400 [ 926.721536][ T3303] total_active_anon 18735104 [ 926.726546][ T3303] total_inactive_file 0 [ 926.735637][ T3303] total_active_file 524288 [ 926.738599][T16392] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 926.744046][ T3303] total_unevictable 0 [ 926.970625][T16397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16397 comm=syz.1.3627 [ 927.753769][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.341,pid=4923,uid=0 [ 927.776634][ T3303] Memory cgroup out of memory: Killed process 4923 (syz.0.341) total-vm:96348kB, anon-rss:1256kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 928.419064][T16401] netlink: 'syz.4.3628': attribute type 4 has an invalid length. [ 928.434048][T16401] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 928.434048][T16401] program syz.4.3628 not setting count and/or reply_len properly [ 928.769852][T16403] pim6reg: entered allmulticast mode [ 928.796668][T16408] pim6reg: left allmulticast mode [ 928.829097][T16410] veth1_macvtap: Caught tx_queue_len zero misconfig [ 928.934974][T16422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16422 comm=syz.2.3636 [ 929.066038][T16428] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 929.845779][T16434] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 929.956923][T16434] bond3: (slave veth3): Enslaving as an active interface with a down link [ 930.029115][T16437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16437 comm=syz.4.3640 [ 930.462863][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 931.504047][T16462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16462 comm=syz.0.3647 [ 931.631248][T16464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16464 comm=syz.2.3648 [ 931.793895][T16468] gretap0: left allmulticast mode [ 931.805143][T16468] gretap0: left promiscuous mode [ 932.078724][T16474] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 932.811301][T16468] bridge0: port 2(gretap0) entered disabled state [ 932.977353][T16468] team0: left allmulticast mode [ 932.983262][T16468] team0: left promiscuous mode [ 932.995940][T16493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16493 comm=syz.2.3657 [ 933.018549][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 933.029763][T16468] bridge0: port 1(team0) entered disabled state [ 933.037894][T16495] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3660'. [ 933.295071][T16498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16498 comm=syz.0.3660 [ 933.324834][T16498] 9p: Bad value for 'rfdno' [ 933.357210][T16468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 933.993537][T16497] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 934.009949][T16497] bond4 (unregistering): Released all slaves [ 934.022988][T16505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16505 comm=syz.2.3662 [ 934.444136][T16521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16521 comm=syz.2.3667 [ 934.766795][T16540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16540 comm=syz.4.3672 [ 934.979700][ T28] audit: type=1326 audit(1782832125.516:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.107103][T16546] ipvlan0: Caught tx_queue_len zero misconfig [ 935.159623][ T28] audit: type=1326 audit(1782832125.535:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.284065][ T28] audit: type=1326 audit(1782832125.553:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.553424][ T28] audit: type=1326 audit(1782832125.553:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.593334][T16544] ip6tnl0: Caught tx_queue_len zero misconfig [ 935.614567][ T28] audit: type=1326 audit(1782832125.553:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.656499][ T28] audit: type=1326 audit(1782832125.563:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.683576][ T28] audit: type=1326 audit(1782832125.553:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.710614][ T28] audit: type=1326 audit(1782832125.563:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.737830][ T28] audit: type=1326 audit(1782832125.563:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 935.764872][ T28] audit: type=1326 audit(1782832125.563:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff7b77bce59 code=0x7ffc0000 [ 936.119854][T16561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16561 comm=syz.1.3678 [ 936.392312][T16572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16572 comm=syz.2.3685 [ 936.601725][T16577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16577 comm=syz.0.3687 [ 937.208062][T16582] lo speed is unknown, defaulting to 1000 [ 937.359541][T16582] lo speed is unknown, defaulting to 1000 [ 937.989455][T16582] gre0 speed is unknown, defaulting to 1000 [ 938.052329][T16582] lo speed is unknown, defaulting to 1000 [ 938.355849][T16610] 9p: Bad value for 'rfdno' [ 938.368634][T16607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16607 comm=syz.1.3696 [ 939.871808][T16619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16619 comm=syz.0.3699 [ 940.836250][T16628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16628 comm=syz.0.3702 [ 941.153002][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'. [ 941.355294][T16645] netlink: 'syz.0.3707': attribute type 12 has an invalid length. [ 942.075943][T16659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16659 comm=syz.3.3712 [ 943.290564][T16670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16670 comm=syz.1.3715 [ 944.276678][T16675] netlink: 'syz.0.3716': attribute type 1 has an invalid length. [ 944.378215][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 944.400372][T16679] netlink: 'syz.0.3716': attribute type 10 has an invalid length. [ 944.408408][T16679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3716'. [ 944.543832][T16679] ÿ: entered promiscuous mode [ 945.309095][T16704] syzkaller0: entered promiscuous mode [ 945.322189][T16704] syzkaller0: entered allmulticast mode [ 946.261770][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 946.349681][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3731'. [ 946.400363][T16717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3732'. [ 946.418795][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 946.418820][ T28] audit: type=1400 audit(1782832136.161:2640): avc: denied { map } for pid=16714 comm="syz.0.3731" path="socket:[56984]" dev="sockfs" ino=56984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 946.453916][T16717] ip6gre2: entered promiscuous mode [ 946.460013][T16717] ip6gre2: entered allmulticast mode [ 946.467250][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3732'. [ 946.567661][T16718] netlink: 'syz.0.3732': attribute type 6 has an invalid length. [ 946.610128][T16718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3732'. [ 947.103550][T16730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16730 comm=syz.0.3736 [ 947.621902][T16734] bridge_slave_0: Caught tx_queue_len zero misconfig [ 947.836512][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3742'. [ 948.797275][T16771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16771 comm=syz.4.3750 [ 949.551959][T16778] bond4: option lp_interval: invalid value (0) [ 949.558750][T16778] bond4: option lp_interval: allowed values 1 - 2147483647 [ 949.599538][T16778] bond4 (unregistering): Released all slaves [ 950.273036][T16781] lo speed is unknown, defaulting to 1000 [ 950.302683][T16781] lo speed is unknown, defaulting to 1000 [ 950.335771][T16788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16788 comm=syz.4.3755 [ 950.414901][T16793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16793 comm=syz.2.3756 [ 950.438676][T16790] block device autoloading is deprecated and will be removed. [ 950.451794][T16781] gre0 speed is unknown, defaulting to 1000 [ 950.564217][T16781] lo speed is unknown, defaulting to 1000 [ 950.623308][T16796] block device autoloading is deprecated and will be removed. [ 951.079091][T16817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16817 comm=syz.1.3765 [ 953.402606][T16839] block device autoloading is deprecated and will be removed. [ 953.612127][T16849] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 953.710570][T16852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16852 comm=syz.2.3777 [ 954.908771][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3781'. [ 955.061493][ T28] audit: type=1400 audit(1782832144.299:2641): avc: denied { execute } for pid=16869 comm="syz.3.3783" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=57446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 955.097461][T16871] random: crng reseeded on system resumption [ 955.221046][ T28] audit: type=1400 audit(1782832144.439:2642): avc: denied { read } for pid=16869 comm="syz.3.3783" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 955.477875][T16872] veth0: Caught tx_queue_len zero misconfig [ 956.365982][T16909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16909 comm=syz.3.3794 [ 956.367982][T16903] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 956.564587][T16913] netlink: 604 bytes leftover after parsing attributes in process `syz.3.3795'. [ 957.020389][ T28] audit: type=1400 audit(1782832146.132:2643): avc: denied { watch watch_reads } for pid=16919 comm="syz.3.3798" path="/734/file1" dev="tmpfs" ino=4019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 957.096152][T16917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3796'. [ 957.114410][T16916] PID 16916 killed due to inadequate hugepage pool [ 957.155621][T16925] block device autoloading is deprecated and will be removed. [ 957.276646][T16942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16942 comm=syz.0.3805 [ 957.339880][T16945] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 959.545494][T16964] syz.1.3811 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 959.559435][T16964] CPU: 1 UID: 0 PID: 16964 Comm: syz.1.3811 Not tainted syzkaller #0 PREEMPT(lazy) [ 959.559504][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 959.559515][T16964] Call Trace: [ 959.559521][T16964] [ 959.559527][T16964] __dump_stack+0x1d/0x30 [ 959.559554][T16964] dump_stack_lvl+0x95/0xd0 [ 959.559630][T16964] dump_stack+0x15/0x1b [ 959.559651][T16964] dump_header+0x80/0x240 [ 959.559730][T16964] oom_kill_process+0x295/0x350 [ 959.559766][T16964] out_of_memory+0x981/0xbc0 [ 959.559803][T16964] try_charge_memcg+0x621/0xa00 [ 959.559886][T16964] ? __rcu_read_unlock+0x4e/0x70 [ 959.559917][T16964] __memcg_kmem_charge_page+0x199/0x3a0 [ 959.559975][T16964] __alloc_frozen_pages_noprof+0x18a/0x350 [ 959.560074][T16964] alloc_pages_mpol+0xa9/0x1d0 [ 959.560169][T16964] alloc_pages_noprof+0x8f/0x140 [ 959.560205][T16964] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 959.560252][T16964] __kvmalloc_node_noprof+0x3a0/0x590 [ 959.560305][T16964] ? futex_hash_allocate+0x192/0x920 [ 959.560330][T16964] ? futex_hash_allocate+0x192/0x920 [ 959.560354][T16964] ? futex_hash_allocate+0x192/0x920 [ 959.560380][T16964] futex_hash_allocate+0x192/0x920 [ 959.560440][T16964] ? cap_task_prctl+0x13f/0x6b0 [ 959.560479][T16964] futex_hash_prctl+0xd8/0xf0 [ 959.560503][T16964] __se_sys_prctl+0x4f4/0x13b0 [ 959.560537][T16964] __x64_sys_prctl+0x67/0x80 [ 959.560586][T16964] x64_sys_call+0x2533/0x3020 [ 959.560620][T16964] do_syscall_64+0x136/0x3c0 [ 959.560726][T16964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.560803][T16964] RIP: 0033:0x7f014080ce59 [ 959.560819][T16964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.560842][T16964] RSP: 002b:00007f013ee02028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 959.560865][T16964] RAX: ffffffffffffffda RBX: 00007f0140a86270 RCX: 00007f014080ce59 [ 959.560882][T16964] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 959.560897][T16964] RBP: 00007f01408a2e6f R08: 0000000000000000 R09: 0000000000000000 [ 959.560974][T16964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.560985][T16964] R13: 00007f0140a86308 R14: 00007f0140a86270 R15: 00007fffcae09988 [ 959.561004][T16964] [ 959.561009][T16964] memory: usage 307200kB, limit 307200kB, failcnt 153 [ 959.848512][T16964] memory+swap: usage 329788kB, limit 9007199254740988kB, failcnt 0 [ 959.856608][T16964] kmem: usage 200120kB, limit 9007199254740988kB, failcnt 0 [ 959.864309][T16964] Memory cgroup stats for /syz1: [ 959.864596][T16964] cache 105996288 [ 959.873802][T16964] rss 3551232 [ 959.877492][T16964] shmem 105996288 [ 959.881395][T16964] mapped_file 4214784 [ 959.885678][T16964] dirty 0 [ 959.888825][T16964] writeback 0 [ 959.892310][T16964] workingset_refault_anon 1421 [ 959.897595][T16964] workingset_refault_file 3009 [ 959.902625][T16964] swap 23162880 [ 959.906233][T16964] swapcached 55209984 [ 959.910479][T16964] pgpgin 823451 [ 959.914132][T16964] pgpgout 796706 [ 959.917988][T16964] pgfault 854832 [ 959.921721][T16964] pgmajfault 40 [ 959.925408][T16964] inactive_anon 97165312 [ 959.929921][T16964] active_anon 12382208 [ 959.934231][T16964] inactive_file 0 [ 959.938129][T16964] active_file 0 [ 959.941826][T16964] unevictable 0 [ 959.945595][T16964] hierarchical_memory_limit 314572800 [ 959.951353][T16964] hierarchical_memsw_limit 9223372036854771712 [ 959.957905][T16964] total_cache 105996288 [ 959.957913][T16964] total_rss 3551232 [ 959.957966][T16964] total_shmem 105996288 [ 959.957984][T16964] total_mapped_file 4214784 [ 959.957991][T16964] total_dirty 0 [ 959.957997][T16964] total_writeback 0 [ 959.958013][T16964] total_workingset_refault_anon 1421 [ 959.958022][T16964] total_workingset_refault_file 3009 [ 959.958032][T16964] total_swap 23162880 [ 959.958052][T16964] total_swapcached 55209984 [ 959.958149][T16964] total_pgpgin 823451 [ 959.958159][T16964] total_pgpgout 796706 [ 959.958186][T16964] total_pgfault 854832 [ 959.958195][T16964] total_pgmajfault 40 [ 959.958220][T16964] total_inactive_anon 97165312 [ 959.958229][T16964] total_active_anon 12382208 [ 959.958235][T16964] total_inactive_file 0 [ 959.958242][T16964] total_active_file 0 [ 959.958257][T16964] total_unevictable 0 [ 959.958266][T16964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2282,pid=11930,uid=0 [ 959.958446][T16964] Memory cgroup out of memory: Killed process 11930 (syz.1.2282) total-vm:96084kB, anon-rss:2428kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 960.195551][T16991] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 960.320334][T17002] lo speed is unknown, defaulting to 1000 [ 960.337435][T17002] lo speed is unknown, defaulting to 1000 [ 960.353467][T17006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17006 comm=syz.3.3825 [ 960.404673][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 960.424681][T17011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3827'. [ 960.454466][T17002] gre0 speed is unknown, defaulting to 1000 [ 960.590041][T17002] lo speed is unknown, defaulting to 1000 [ 960.647867][T17028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17028 comm=syz.3.3831 [ 961.104032][T17048] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 961.206067][T17058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17058 comm=syz.3.3843 [ 961.235770][T17056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17056 comm=syz.2.3842 [ 961.242470][T17060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17060 comm=syz.4.3844 [ 961.490701][ T28] audit: type=1400 audit(1782832150.313:2644): avc: denied { lock } for pid=17070 comm="syz.4.3848" path="socket:[57806]" dev="sockfs" ino=57806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 961.562440][T17076] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 961.769292][T17084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17084 comm=syz.1.3853 [ 961.848486][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 961.990098][T17096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17096 comm=syz.0.3858 [ 962.002471][T17101] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 962.009062][T17098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17098 comm=syz.4.3859 [ 962.030356][T17102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17102 comm=syz.3.3860 [ 963.150260][T17129] syz.2.3866 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 963.164495][T17129] CPU: 1 UID: 0 PID: 17129 Comm: syz.2.3866 Not tainted syzkaller #0 PREEMPT(lazy) [ 963.164523][T17129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 963.164539][T17129] Call Trace: [ 963.164558][T17129] [ 963.164568][T17129] __dump_stack+0x1d/0x30 [ 963.164595][T17129] dump_stack_lvl+0x95/0xd0 [ 963.164613][T17129] dump_stack+0x15/0x1b [ 963.164629][T17129] dump_header+0x80/0x240 [ 963.164648][T17129] oom_kill_process+0x295/0x350 [ 963.164726][T17129] out_of_memory+0x981/0xbc0 [ 963.164766][T17129] try_charge_memcg+0x621/0xa00 [ 963.164850][T17129] ? __rcu_read_unlock+0x4e/0x70 [ 963.164909][T17129] __memcg_kmem_charge_page+0x199/0x3a0 [ 963.164957][T17129] __alloc_frozen_pages_noprof+0x18a/0x350 [ 963.164984][T17129] alloc_pages_mpol+0xa9/0x1d0 [ 963.165018][T17129] alloc_pages_noprof+0x8f/0x140 [ 963.165117][T17129] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 963.165169][T17129] __kvmalloc_node_noprof+0x3a0/0x590 [ 963.165191][T17129] ? futex_hash_allocate+0x192/0x920 [ 963.165208][T17129] ? futex_hash_allocate+0x192/0x920 [ 963.165228][T17129] ? futex_hash_allocate+0x192/0x920 [ 963.165336][T17129] futex_hash_allocate+0x192/0x920 [ 963.165362][T17129] ? cap_task_prctl+0x13f/0x6b0 [ 963.165396][T17129] futex_hash_prctl+0xd8/0xf0 [ 963.165414][T17129] __se_sys_prctl+0x4f4/0x13b0 [ 963.165510][T17129] __x64_sys_prctl+0x67/0x80 [ 963.165573][T17129] x64_sys_call+0x2533/0x3020 [ 963.165633][T17129] do_syscall_64+0x136/0x3c0 [ 963.165662][T17129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.165686][T17129] RIP: 0033:0x7f7bc6f6ce59 [ 963.165705][T17129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.165727][T17129] RSP: 002b:00007f7bc5137028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 963.165813][T17129] RAX: ffffffffffffffda RBX: 00007f7bc71e6360 RCX: 00007f7bc6f6ce59 [ 963.165830][T17129] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 963.165841][T17129] RBP: 00007f7bc7002e6f R08: 0000000000000000 R09: 0000000000000000 [ 963.165853][T17129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.165896][T17129] R13: 00007f7bc71e63f8 R14: 00007f7bc71e6360 R15: 00007ffd75014878 [ 963.165919][T17129] [ 963.165978][T17129] memory: usage 307200kB, limit 307200kB, failcnt 280 [ 963.388046][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 963.408613][T17129] memory+swap: usage 333880kB, limit 9007199254740988kB, failcnt 0 [ 963.417026][T17129] kmem: usage 283928kB, limit 9007199254740988kB, failcnt 0 [ 963.424928][T17129] Memory cgroup stats for /syz2: [ 963.425397][T17129] cache 23252992 [ 963.434287][T17129] rss 278528 [ 963.437850][T17129] shmem 23175168 [ 963.441619][T17129] mapped_file 11743232 [ 963.445911][T17129] dirty 4096 [ 963.449241][T17129] writeback 0 [ 963.452711][T17129] workingset_refault_anon 1424 [ 963.457766][T17129] workingset_refault_file 4726 [ 963.462802][T17129] swap 27463680 [ 963.466613][T17129] swapcached 51830784 [ 963.470818][T17129] pgpgin 832726 [ 963.474478][T17129] pgpgout 826947 [ 963.478330][T17129] pgfault 891953 [ 963.482031][T17129] pgmajfault 89 [ 963.485670][T17129] inactive_anon 11132928 [ 963.490171][T17129] active_anon 12455936 [ 963.494462][T17129] inactive_file 69632 [ 963.498685][T17129] active_file 4096 [ 963.502602][T17129] unevictable 4096 [ 963.506550][T17129] hierarchical_memory_limit 314572800 [ 963.512263][T17129] hierarchical_memsw_limit 9223372036854771712 [ 963.518707][T17129] total_cache 23252992 [ 963.523192][T17129] total_rss 278528 [ 963.527192][T17129] total_shmem 23175168 [ 963.531491][T17129] total_mapped_file 11743232 [ 963.536341][T17129] total_dirty 4096 [ 963.540329][T17129] total_writeback 0 [ 963.544355][T17129] total_workingset_refault_anon 1424 [ 963.549922][T17129] total_workingset_refault_file 4726 [ 963.555564][T17129] total_swap 27463680 [ 963.559836][T17129] total_swapcached 51830784 [ 963.564681][T17129] total_pgpgin 832726 [ 963.568874][T17129] total_pgpgout 826947 [ 963.573333][T17129] total_pgfault 891953 [ 963.577708][T17129] total_pgmajfault 89 [ 963.581914][T17129] total_inactive_anon 11132928 [ 963.586999][T17129] total_active_anon 12455936 [ 963.591822][T17129] total_inactive_file 69632 [ 963.596740][T17129] total_active_file 4096 [ 963.601568][T17129] total_unevictable 4096 [ 963.606656][T17129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3866,pid=17114,uid=0 [ 963.622611][T17129] Memory cgroup out of memory: Killed process 17114 (syz.2.3866) total-vm:102772kB, anon-rss:1440kB, file-rss:30544kB, shmem-rss:11464kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 963.749305][T17137] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 963.767678][T17140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17140 comm=syz.1.3873 [ 965.177962][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3884'. [ 965.208705][T17174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3884'. [ 965.767079][T17188] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 967.992320][ T28] audit: type=1400 audit(1782832156.103:2645): avc: denied { setopt } for pid=17192 comm="syz.3.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 968.020092][T17208] selinux_netlink_send: 1 callbacks suppressed [ 968.020200][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz.2.3892 [ 968.282108][ T28] audit: type=1400 audit(1782832156.646:2646): avc: denied { append } for pid=17196 comm="syz.2.3892" name="file0" dev="tmpfs" ino=4306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 968.625070][T17213] PID 17213 killed due to inadequate hugepage pool [ 968.847433][T17236] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 968.950498][T17243] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 968.959800][T17244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3903'. [ 969.303810][T17250] bond0: option arp_interval: invalid value (18446744073480273669) [ 969.320810][T17250] bond0: option arp_interval: allowed values 0 - 2147483647 [ 969.343510][T17250] bond0 (unregistering): Released all slaves [ 969.697816][T17259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17259 comm=syz.1.3907 [ 970.600164][ T28] audit: type=1400 audit(1782832158.517:2647): avc: denied { accept } for pid=17266 comm="syz.3.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 970.747866][T17274] syz.3.3909 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 970.763924][T17274] CPU: 0 UID: 0 PID: 17274 Comm: syz.3.3909 Not tainted syzkaller #0 PREEMPT(lazy) [ 970.763957][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 970.763973][T17274] Call Trace: [ 970.764025][T17274] [ 970.764033][T17274] __dump_stack+0x1d/0x30 [ 970.764060][T17274] dump_stack_lvl+0x95/0xd0 [ 970.764084][T17274] dump_stack+0x15/0x1b [ 970.764105][T17274] dump_header+0x80/0x240 [ 970.764206][T17274] oom_kill_process+0x295/0x350 [ 970.764290][T17274] out_of_memory+0x981/0xbc0 [ 970.764326][T17274] try_charge_memcg+0x621/0xa00 [ 970.764386][T17274] ? __rcu_read_unlock+0x4e/0x70 [ 970.764422][T17274] __memcg_kmem_charge_page+0x199/0x3a0 [ 970.764531][T17274] __alloc_frozen_pages_noprof+0x18a/0x350 [ 970.764566][T17274] alloc_pages_mpol+0xa9/0x1d0 [ 970.764599][T17274] alloc_pages_noprof+0x8f/0x140 [ 970.764666][T17274] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 970.764708][T17274] __kvmalloc_node_noprof+0x3a0/0x590 [ 970.764736][T17274] ? futex_hash_allocate+0x192/0x920 [ 970.764783][T17274] ? futex_hash_allocate+0x192/0x920 [ 970.764805][T17274] ? futex_hash_allocate+0x192/0x920 [ 970.764844][T17274] futex_hash_allocate+0x192/0x920 [ 970.764885][T17274] ? __se_sys_prctl+0x4e5/0x13b0 [ 970.764913][T17274] futex_hash_prctl+0xd8/0xf0 [ 970.764936][T17274] __se_sys_prctl+0x4f4/0x13b0 [ 970.765042][T17274] __x64_sys_prctl+0x67/0x80 [ 970.765070][T17274] x64_sys_call+0x2533/0x3020 [ 970.765096][T17274] do_syscall_64+0x136/0x3c0 [ 970.765215][T17274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.765240][T17274] RIP: 0033:0x7ff7b77bce59 [ 970.765296][T17274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.765318][T17274] RSP: 002b:00007ff7b5db2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 970.765342][T17274] RAX: ffffffffffffffda RBX: 00007ff7b7a36270 RCX: 00007ff7b77bce59 [ 970.765359][T17274] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 970.765374][T17274] RBP: 00007ff7b7852e6f R08: 0000000000000000 R09: 0000000000000000 [ 970.765416][T17274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.765431][T17274] R13: 00007ff7b7a36308 R14: 00007ff7b7a36270 R15: 00007ffe0439c748 [ 970.765455][T17274] [ 970.765731][T17274] memory: usage 307200kB, limit 307200kB, failcnt 250 [ 971.017538][T17274] memory+swap: usage 312916kB, limit 9007199254740988kB, failcnt 0 [ 971.025549][T17274] kmem: usage 275752kB, limit 9007199254740988kB, failcnt 0 [ 971.032878][T17274] Memory cgroup stats for /syz3: [ 971.033332][T17274] cache 30076928 [ 971.045519][T17274] rss 2015232 [ 971.048853][T17274] shmem 29982720 [ 971.054691][T17274] mapped_file 11821056 [ 971.069498][T17274] dirty 4096 [ 971.073772][T17274] writeback 0 [ 971.100539][T17274] workingset_refault_anon 1474 [ 971.105357][T17274] workingset_refault_file 3389 [ 971.110131][T17274] swap 5853184 [ 971.113526][T17274] swapcached 24080384 [ 971.117548][T17274] pgpgin 789020 [ 971.121123][T17274] pgpgout 781176 [ 971.124686][T17274] pgfault 847116 [ 971.128308][T17274] pgmajfault 55 [ 971.131811][T17274] inactive_anon 270336 [ 971.135890][T17274] active_anon 31760384 [ 971.139975][T17274] inactive_file 77824 [ 971.143988][T17274] active_file 16384 [ 971.147869][T17274] unevictable 4096 [ 971.151673][T17274] hierarchical_memory_limit 314572800 [ 971.157091][T17274] hierarchical_memsw_limit 9223372036854771712 [ 971.163264][T17274] total_cache 30076928 [ 971.167391][T17274] total_rss 2015232 [ 971.171216][T17274] total_shmem 29982720 [ 971.175334][T17274] total_mapped_file 11821056 [ 971.179963][T17274] total_dirty 4096 [ 971.183692][T17274] total_writeback 0 [ 971.187539][T17274] total_workingset_refault_anon 1474 [ 971.192863][T17274] total_workingset_refault_file 3389 [ 971.198196][T17274] total_swap 5853184 [ 971.202173][T17274] total_swapcached 24080384 [ 971.206725][T17274] total_pgpgin 789020 [ 971.210779][T17274] total_pgpgout 781176 [ 971.214903][T17274] total_pgfault 847116 [ 971.219026][T17274] total_pgmajfault 55 [ 971.223020][T17274] total_inactive_anon 270336 [ 971.227627][T17274] total_active_anon 31760384 [ 971.232248][T17274] total_inactive_file 77824 [ 971.236847][T17274] total_active_file 16384 [ 971.241203][T17274] total_unevictable 4096 [ 971.245447][T17274] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3909,pid=17266,uid=0 [ 971.260243][T17274] Memory cgroup out of memory: Killed process 17273 (syz.3.3909) total-vm:104820kB, anon-rss:1440kB, file-rss:30556kB, shmem-rss:11480kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 973.443062][T17303] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 974.640220][T17326] netlink: 'syz.3.3924': attribute type 1 has an invalid length. [ 974.766284][T17328] netlink: 'syz.3.3924': attribute type 10 has an invalid length. [ 974.774278][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3924'. [ 975.344493][T17327] batman_adv: batadv0: Removing interface: dummy0 [ 975.352505][T17328] dummy0: entered promiscuous mode [ 976.464100][T17345] netlink: 'syz.2.3928': attribute type 12 has an invalid length. [ 977.729672][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 979.816188][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3938'. [ 979.851784][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3941'. [ 980.012727][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3942'. [ 981.610842][T17398] netlink: 'syz.3.3945': attribute type 12 has an invalid length. [ 982.388044][T17411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17411 comm=syz.3.3952 [ 982.796312][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3955'. [ 984.896600][T17431] netlink: 'syz.2.3958': attribute type 21 has an invalid length. [ 984.913586][T17431] netlink: 'syz.2.3958': attribute type 6 has an invalid length. [ 984.940577][T17431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3958'. [ 984.952824][T17444] block device autoloading is deprecated and will be removed. [ 984.963695][T17447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17447 comm=syz.0.3964 [ 985.927141][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'. [ 986.283945][T17470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17470 comm=syz.1.3970 [ 988.224030][T17499] lo speed is unknown, defaulting to 1000 [ 988.244347][T17499] lo speed is unknown, defaulting to 1000 [ 988.308582][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3982'. [ 988.435473][T17506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17506 comm=syz.2.3984 [ 988.451461][T17499] gre0 speed is unknown, defaulting to 1000 [ 988.519765][T17508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17508 comm=syz.4.3985 [ 988.608331][T17499] lo speed is unknown, defaulting to 1000 [ 991.164010][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3994'. [ 991.918691][T17550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17550 comm=syz.1.3996 [ 992.012312][T17554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17554 comm=syz.4.4001 [ 992.398827][T17569] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 993.525667][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 994.004061][T17595] netlink: 'syz.1.4015': attribute type 29 has an invalid length. [ 994.022784][T17595] netlink: 'syz.1.4015': attribute type 29 has an invalid length. [ 995.121643][ T28] audit: type=1400 audit(1782832181.649:2648): avc: denied { relabelfrom } for pid=17599 comm="syz.4.4016" name="NETLINK" dev="sockfs" ino=60596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 995.146517][ T28] audit: type=1400 audit(1782832181.649:2649): avc: denied { relabelto } for pid=17599 comm="syz.4.4016" name="NETLINK" dev="sockfs" ino=60596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 995.399211][T17598] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 996.051632][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 996.058792][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 996.906151][T17618] block device autoloading is deprecated and will be removed. [ 997.163378][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 997.170417][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 997.679703][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4021'. [ 997.932876][T17635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.944371][T17635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.984801][T17637] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 997.996995][T17637] batman_adv: batadv0: Adding interface: gretap0 [ 998.003697][T17637] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.030854][T17637] batman_adv: batadv0: Interface activated: gretap0 [ 998.092506][T17633] pim6reg: entered allmulticast mode [ 998.275320][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 998.282490][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 998.356554][ T28] audit: type=1400 audit(1782832184.792:2650): avc: denied { map } for pid=17648 comm="syz.0.4029" path="socket:[60691]" dev="sockfs" ino=60691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 998.432898][T17649] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4029'. [ 998.518629][ T28] audit: type=1400 audit(1782832184.792:2651): avc: denied { read } for pid=17648 comm="syz.0.4029" path="socket:[60691]" dev="sockfs" ino=60691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 998.855489][T17661] team0: Port device team_slave_0 removed [ 998.868081][T17661] team0: Port device team_slave_1 removed [ 998.892268][T17661] team0: Port device bond0 removed [ 998.909180][ T28] audit: type=1400 audit(1782832185.316:2652): avc: denied { bind } for pid=17656 comm="syz.0.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 998.953034][T17661] team0: Port device gretap2 removed [ 999.078501][T17669] can0: slcan on ttyS3. [ 999.126881][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'. [ 999.259117][T17670] can0 (unregistered): slcan off ttyS3. [ 999.387723][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 999.396168][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1000.432431][T17690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17690 comm=syz.0.4039 [ 1000.498934][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1001.610701][ C1] net_ratelimit: 1 callbacks suppressed [ 1001.610719][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1001.623355][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1001.640997][T17701] lo speed is unknown, defaulting to 1000 [ 1001.649600][T17701] lo speed is unknown, defaulting to 1000 [ 1001.776614][T17701] gre0 speed is unknown, defaulting to 1000 [ 1001.932144][T17701] lo speed is unknown, defaulting to 1000 [ 1002.724093][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1002.732559][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1003.834341][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1003.841417][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1003.863025][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1004.946221][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1004.953316][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1005.340034][T17720] lo speed is unknown, defaulting to 1000 [ 1005.374561][T17720] lo speed is unknown, defaulting to 1000 [ 1005.698278][T17720] gre0 speed is unknown, defaulting to 1000 [ 1005.777607][T17720] lo speed is unknown, defaulting to 1000 [ 1005.904097][T17724] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1005.951849][T17733] smc: net device lo applied user defined pnetid SYZ2 [ 1005.959300][T17733] smc: net device lo erased user defined pnetid SYZ2 [ 1006.057972][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1006.065040][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1006.415752][ T28] audit: type=1400 audit(1782832192.331:2653): avc: denied { compute_member } for pid=17745 comm="syz.4.4056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1006.527242][T17749] team_slave_1: Caught tx_queue_len zero misconfig [ 1006.551150][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1006.562477][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1006.585996][T17751] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1006.834390][T17754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17754 comm=syz.1.4058 [ 1007.169942][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1007.177057][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1007.388517][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1007.556017][T17769] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1008.281633][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1008.288702][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1008.810607][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4062'. [ 1008.863338][T17767] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1009.007134][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4074'. [ 1009.041230][T17805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17805 comm=syz.3.4073 [ 1009.393518][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1009.400587][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1010.230744][T17821] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1010.505264][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1010.512392][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1011.459282][T17820] netlink: 'syz.1.4077': attribute type 4 has an invalid length. [ 1011.463019][T17823] block device autoloading is deprecated and will be removed. [ 1011.672714][T17823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17823 comm=syz.0.4089 [ 1013.736943][T17852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17852 comm=syz.0.4088 [ 1013.765263][T17855] program syz.3.4086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.811983][T17855] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1014.193902][T17863] gretap1: entered allmulticast mode [ 1014.217024][T17863] gretap1: entered promiscuous mode [ 1015.069928][T17872] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1015.232674][T17863] team0: Port device gretap1 added [ 1015.233060][T17874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17874 comm=syz.0.4094 [ 1015.272520][ T3296] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1015.336873][ T3296] CPU: 0 UID: 0 PID: 3296 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 1015.336912][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.337005][ T3296] Call Trace: [ 1015.337011][ T3296] [ 1015.337018][ T3296] __dump_stack+0x1d/0x30 [ 1015.337047][ T3296] dump_stack_lvl+0x95/0xd0 [ 1015.337074][ T3296] dump_stack+0x15/0x1b [ 1015.337093][ T3296] dump_header+0x80/0x240 [ 1015.337159][ T3296] oom_kill_process+0x295/0x350 [ 1015.337193][ T3296] out_of_memory+0x981/0xbc0 [ 1015.337274][ T3296] try_charge_memcg+0x621/0xa00 [ 1015.337325][ T3296] ? should_fail_ex+0x30/0x270 [ 1015.337367][ T3296] charge_memcg+0x6d/0x120 [ 1015.337407][ T3296] __mem_cgroup_charge+0x28/0xb0 [ 1015.337497][ T3296] filemap_add_folio+0x110/0x350 [ 1015.337600][ T3296] __filemap_get_folio_mpol+0x32e/0x840 [ 1015.337635][ T3296] filemap_fault+0x458/0xb60 [ 1015.337659][ T3296] handle_mm_fault+0x167a/0x2da0 [ 1015.337757][ T3296] do_user_addr_fault+0x634/0x1060 [ 1015.337836][ T3296] ? trace_page_fault_user+0x1f/0xa0 [ 1015.337863][ T3296] exc_page_fault+0x62/0xa0 [ 1015.337962][ T3296] asm_exc_page_fault+0x26/0x30 [ 1015.338012][ T3296] RIP: 0033:0x7ff7b768ae74 [ 1015.338027][ T3296] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 1015.338046][ T3296] RSP: 002b:00007ffe0439cab0 EFLAGS: 00010206 [ 1015.338074][ T3296] RAX: 0000001b32a24000 RBX: 00000000000009c7 RCX: 00000000000e9a48 [ 1015.338089][ T3296] RDX: 000000000e898561 RSI: 00007ffe0439cb40 RDI: 0000000000000001 [ 1015.338103][ T3296] RBP: 00007ffe0439caec R08: 00000000377479e0 R09: 3fffffffffffffff [ 1015.338115][ T3296] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1015.338127][ T3296] R13: 00000000000927c0 R14: 00000000000e990b R15: 00007ffe0439cb40 [ 1015.338160][ T3296] [ 1015.928482][ T3296] memory: usage 24580kB, limit 307200kB, failcnt 345 [ 1015.935681][ T3296] memory+swap: usage 30296kB, limit 9007199254740988kB, failcnt 0 [ 1015.944175][ T3296] kmem: usage 4572kB, limit 9007199254740988kB, failcnt 0 [ 1015.952097][ T3296] Memory cgroup stats for /syz3: [ 1015.952524][ T3296] cache 18243584 [ 1015.961742][ T3296] rss 2203648 [ 1015.965344][ T3296] shmem 18231296 [ 1015.969380][ T3296] mapped_file 0 [ 1015.973052][ T3296] dirty 0 [ 1015.988251][ T3296] writeback 0 [ 1015.991662][ T3296] workingset_refault_anon 1475 [ 1015.996447][ T3296] workingset_refault_file 4272 [ 1016.001224][ T3296] swap 5853184 [ 1016.004632][ T3296] swapcached 24084480 [ 1016.008612][ T3296] pgpgin 828497 [ 1016.012075][ T3296] pgpgout 823496 [ 1016.015627][ T3296] pgfault 895316 [ 1016.019212][ T3296] pgmajfault 66 [ 1016.022721][ T3296] inactive_anon 20336640 [ 1016.026969][ T3296] active_anon 135168 [ 1016.030883][ T3296] inactive_file 4096 [ 1016.034782][ T3296] active_file 8192 [ 1016.038510][ T3296] unevictable 0 [ 1016.041971][ T3296] hierarchical_memory_limit 314572800 [ 1016.047363][ T3296] hierarchical_memsw_limit 9223372036854771712 [ 1016.053528][ T3296] total_cache 18243584 [ 1016.057600][ T3296] total_rss 2203648 [ 1016.061430][ T3296] total_shmem 18231296 [ 1016.065513][ T3296] total_mapped_file 0 [ 1016.069503][ T3296] total_dirty 0 [ 1016.072967][ T3296] total_writeback 0 [ 1016.076836][ T3296] total_workingset_refault_anon 1475 [ 1016.100805][ T3296] total_workingset_refault_file 4272 [ 1016.106262][ T3296] total_swap 5853184 [ 1016.110367][ T3296] total_swapcached 24084480 [ 1016.114947][ T3296] total_pgpgin 828497 [ 1016.119079][ T3296] total_pgpgout 823496 [ 1016.123180][ T3296] total_pgfault 895316 [ 1016.127314][ T3296] total_pgmajfault 66 [ 1016.147236][ T3296] total_inactive_anon 20336640 [ 1016.158071][ T3296] total_active_anon 135168 [ 1016.168287][ T3296] total_inactive_file 4096 [ 1016.176907][ T3296] total_active_file 8192 [ 1016.181220][ T3296] total_unevictable 0 [ 1016.185581][ T3296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4086,pid=17846,uid=0 [ 1016.205736][ T3296] Memory cgroup out of memory: Killed process 17846 (syz.3.4086) total-vm:96348kB, anon-rss:1460kB, file-rss:22620kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1017.005501][T17897] syz.0.4097 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1017.019450][T17897] CPU: 1 UID: 0 PID: 17897 Comm: syz.0.4097 Not tainted syzkaller #0 PREEMPT(lazy) [ 1017.019487][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1017.019500][T17897] Call Trace: [ 1017.019506][T17897] [ 1017.019515][T17897] __dump_stack+0x1d/0x30 [ 1017.019576][T17897] dump_stack_lvl+0x95/0xd0 [ 1017.019605][T17897] dump_stack+0x15/0x1b [ 1017.019630][T17897] dump_header+0x80/0x240 [ 1017.019725][T17897] oom_kill_process+0x295/0x350 [ 1017.019768][T17897] out_of_memory+0x981/0xbc0 [ 1017.019811][T17897] try_charge_memcg+0x621/0xa00 [ 1017.019855][T17897] ? __rcu_read_unlock+0x4e/0x70 [ 1017.019898][T17897] __memcg_kmem_charge_page+0x199/0x3a0 [ 1017.019938][T17897] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1017.020058][T17897] alloc_pages_mpol+0xa9/0x1d0 [ 1017.020098][T17897] alloc_pages_noprof+0x8f/0x140 [ 1017.020143][T17897] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1017.020190][T17897] __kvmalloc_node_noprof+0x3a0/0x590 [ 1017.020317][T17897] ? futex_hash_allocate+0x192/0x920 [ 1017.020336][T17897] ? futex_hash_allocate+0x192/0x920 [ 1017.020353][T17897] ? futex_hash_allocate+0x192/0x920 [ 1017.020441][T17897] futex_hash_allocate+0x192/0x920 [ 1017.020474][T17897] ? cap_task_prctl+0x13f/0x6b0 [ 1017.020530][T17897] futex_hash_prctl+0xd8/0xf0 [ 1017.020554][T17897] __se_sys_prctl+0x4f4/0x13b0 [ 1017.020588][T17897] __x64_sys_prctl+0x67/0x80 [ 1017.020619][T17897] x64_sys_call+0x2533/0x3020 [ 1017.020689][T17897] do_syscall_64+0x136/0x3c0 [ 1017.020718][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.020742][T17897] RIP: 0033:0x7f33a823ce59 [ 1017.020782][T17897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.020804][T17897] RSP: 002b:00007f33a682a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1017.020828][T17897] RAX: ffffffffffffffda RBX: 00007f33a84b6270 RCX: 00007f33a823ce59 [ 1017.020919][T17897] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1017.020931][T17897] RBP: 00007f33a82d2e6f R08: 0000000000000000 R09: 0000000000000000 [ 1017.020942][T17897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.020954][T17897] R13: 00007f33a84b6308 R14: 00007f33a84b6270 R15: 00007ffc338ba698 [ 1017.020974][T17897] [ 1017.020991][T17897] memory: usage 307200kB, limit 307200kB, failcnt 439 [ 1017.285025][T17897] memory+swap: usage 374996kB, limit 9007199254740988kB, failcnt 0 [ 1017.293017][T17897] kmem: usage 272816kB, limit 9007199254740988kB, failcnt 0 [ 1017.300346][T17897] Memory cgroup stats for /syz0: [ 1017.300748][T17897] cache 27983872 [ 1017.309271][T17897] rss 2953216 [ 1017.312568][T17897] shmem 27983872 [ 1017.316154][T17897] mapped_file 11747328 [ 1017.320240][T17897] dirty 0 [ 1017.323248][T17897] writeback 0 [ 1017.326580][T17897] workingset_refault_anon 2455 [ 1017.331369][T17897] workingset_refault_file 5990 [ 1017.336166][T17897] swap 69406720 [ 1017.339682][T17897] swapcached 104345600 [ 1017.343779][T17897] pgpgin 794636 [ 1017.347374][T17897] pgpgout 787068 [ 1017.350942][T17897] pgfault 852822 [ 1017.354535][T17897] pgmajfault 164 [ 1017.358199][T17897] inactive_anon 12460032 [ 1017.362452][T17897] active_anon 18538496 [ 1017.366539][T17897] inactive_file 0 [ 1017.370226][T17897] active_file 0 [ 1017.373695][T17897] unevictable 0 [ 1017.377216][T17897] hierarchical_memory_limit 314572800 [ 1017.382729][T17897] hierarchical_memsw_limit 9223372036854771712 [ 1017.388892][T17897] total_cache 32137216 [ 1017.393312][T17897] total_rss 2953216 [ 1017.397136][T17897] total_shmem 32137216 [ 1017.401257][T17897] total_mapped_file 11747328 [ 1017.405918][T17897] total_dirty 0 [ 1017.409413][T17897] total_writeback 0 [ 1017.413247][T17897] total_workingset_refault_anon 2455 [ 1017.418606][T17897] total_workingset_refault_file 5990 [ 1017.423948][T17897] total_swap 69435392 [ 1017.427943][T17897] total_swapcached 104382464 [ 1017.432578][T17897] total_pgpgin 795844 [ 1017.436626][T17897] total_pgpgout 787260 [ 1017.440704][T17897] total_pgfault 853926 [ 1017.444837][T17897] total_pgmajfault 165 [ 1017.448901][T17897] total_inactive_anon 16621568 [ 1017.453703][T17897] total_active_anon 18538496 [ 1017.458324][T17897] total_inactive_file 0 [ 1017.462481][T17897] total_active_file 0 [ 1017.466493][T17897] total_unevictable 0 [ 1017.470543][T17897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4097,pid=17881,uid=0 [ 1017.485304][T17897] Memory cgroup out of memory: Killed process 17884 (syz.0.4097) total-vm:100584kB, anon-rss:1436kB, file-rss:26536kB, shmem-rss:11472kB, UID:0 pgtables:156kB oom_score_adj:0 [ 1017.704005][T17912] netlink: 'syz.0.4102': attribute type 5 has an invalid length. [ 1017.739977][T17912] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4102'. [ 1017.760329][T17912] xt_TCPMSS: Only works on TCP SYN packets [ 1018.038861][T17921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17921 comm=syz.0.4105 [ 1018.078581][T17918] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1018.158644][T17925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17925 comm=syz.0.4107 [ 1018.717685][T17938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4111'. [ 1019.484575][T17944] pim6reg: left allmulticast mode [ 1020.881712][T17961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17961 comm=syz.0.4118 [ 1022.304282][T17957] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1023.139668][T17978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17978 comm=syz.0.4122 [ 1023.671920][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4120'. [ 1023.682355][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4120'. [ 1023.700505][T17993] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4120'. [ 1023.940225][T17998] netlink: 'syz.2.4128': attribute type 1 has an invalid length. [ 1023.948151][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1024.533925][T18007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18007 comm=syz.2.4132 [ 1024.748321][T18011] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1024.760493][T18013] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1024.813079][T18015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18015 comm=syz.4.4136 [ 1024.844833][T18017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1025.445356][T18046] block device autoloading is deprecated and will be removed. [ 1025.469454][T18046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18046 comm=syz.0.4145 [ 1025.489720][T18049] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1025.545808][T18051] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1026.116866][T18077] netlink: 'syz.1.4154': attribute type 1 has an invalid length. [ 1026.793818][T18077] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1027.103588][T18090] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1027.234637][T18094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18094 comm=syz.2.4158 [ 1027.291239][T18095] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1027.802478][T18091] block device autoloading is deprecated and will be removed. [ 1027.820324][T18099] ipip1: entered promiscuous mode [ 1027.830350][T18114] veth1_macvtap: Caught tx_queue_len zero misconfig [ 1028.001564][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1028.014158][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1028.040212][T18122] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1028.154834][T18124] lo speed is unknown, defaulting to 1000 [ 1028.162132][T18124] lo speed is unknown, defaulting to 1000 [ 1028.271562][T18124] gre0 speed is unknown, defaulting to 1000 [ 1028.385169][T18124] lo speed is unknown, defaulting to 1000 [ 1030.137103][T18134] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1030.280228][ T3303] ================================================================== [ 1030.288372][ T3303] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 1030.296304][ T3303] [ 1030.298661][ T3303] read-write to 0xffff88811fb36848 of 8 bytes by task 18101 on cpu 0: [ 1030.306829][ T3303] shmem_add_to_page_cache+0x4b2/0x5b0 [ 1030.312308][ T3303] shmem_get_folio_gfp+0x517/0xd90 [ 1030.317467][ T3303] shmem_write_begin+0xfc/0x1f0 [ 1030.322366][ T3303] generic_perform_write+0x186/0x490 [ 1030.327670][ T3303] shmem_file_write_iter+0xc5/0xf0 [ 1030.332812][ T3303] __kernel_write_iter+0x30f/0x590 [ 1030.337955][ T3303] dump_user_range+0xa73/0xd00 [ 1030.342758][ T3303] elf_core_dump+0x21c0/0x2340 [ 1030.347558][ T3303] coredump_write+0xaf9/0xdd0 [ 1030.352281][ T3303] vfs_coredump+0x2770/0x3290 [ 1030.356994][ T3303] get_signal+0xd33/0xf10 [ 1030.361359][ T3303] arch_do_signal_or_restart+0x96/0x480 [ 1030.366936][ T3303] irqentry_exit+0x14d/0x610 [ 1030.371554][ T3303] asm_exc_page_fault+0x26/0x30 [ 1030.376435][ T3303] [ 1030.378779][ T3303] read to 0xffff88811fb36848 of 8 bytes by task 3303 on cpu 1: [ 1030.386349][ T3303] shmem_getattr+0x68/0x200 [ 1030.390895][ T3303] vfs_getattr_nosec+0x146/0x1e0 [ 1030.395863][ T3303] vfs_getattr+0x48/0x60 [ 1030.400129][ T3303] vfs_statx_path+0x28/0x140 [ 1030.404754][ T3303] vfs_statx+0xc4/0x170 [ 1030.408938][ T3303] vfs_fstatat+0x118/0x170 [ 1030.413374][ T3303] __se_sys_newfstatat+0x55/0x3e0 [ 1030.418420][ T3303] __x64_sys_newfstatat+0x55/0x70 [ 1030.423471][ T3303] x64_sys_call+0x2c64/0x3020 [ 1030.428179][ T3303] do_syscall_64+0x136/0x3c0 [ 1030.432794][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.438716][ T3303] [ 1030.441055][ T3303] value changed: 0x00000000000030cd -> 0x00000000000030ce [ 1030.448183][ T3303] [ 1030.450540][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 1030.456729][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 1030.466216][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.476303][ T3303] ================================================================== [ 1030.591912][T18144] x_tables: ip6_tables: icmp6 match: only valid for protocol 58