last executing test programs: 32.702753728s ago: executing program 0 (id=1968): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x113, 0x2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000420103000000000000000007000010"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp, 0x1}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r5, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 32.504711362s ago: executing program 0 (id=1970): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x500) 25.2646917s ago: executing program 0 (id=2005): syz_ublk_setup_io_uring(0x989, &(0x7f0000000840)={0x0, 0x47e8, 0x4, 0x0, 0x12}, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) (fail_nth: 5) 24.878388569s ago: executing program 0 (id=2008): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8010, &(0x7f0000000040)={[{@session={'session', 0x3d, 0x28}}, {@gid}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000001040)="$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") fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c000000010000107fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0002000000000000a0001a80380002803400018008002100000000000800180007000000080003000000000008000c0064000000080012000000000008002300000000000400070004001c0020000a80050008000100000014000700ff010000000000000000000000000001380002803400018008000000040000000800000000000000080000000000000008000000000000000800160001000080080005000002000004001c00"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000010001fff27bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6310040000000000400012800b00010069703667726500003000028014000700fc028000080000000000000000000000080017000200000006000e000310"], 0x60}, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r3, 0x0, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01000c23cdb54fc57ec30000070000000000000700"/38], 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$inet_nvme(r5, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000400)=""/237, 0xed}], 0x2, &(0x7f0000000600)=""/129, 0x81}, 0x100) r10 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f00000000c0)={[], [{@uid_eq}]}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000240)={0x0, 0x1000, 0x4, 0x1, 0x3, 0x0, [{0x5, 0x2, 0x8001, '\x00', 0x1502}, {0x5, 0x5, 0x5, '\x00', 0x1}, {0x1000, 0x67c0ebbe, 0x800}]}) 23.957961298s ago: executing program 0 (id=2021): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffffffffffffdef, 0xd) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x4) 23.696864344s ago: executing program 0 (id=2028): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x0, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x0, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x0, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0x0, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x400}]}, 0x14}, 0x1, 0x0, 0x0, 0x60040040}, 0x8048) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}]}, 0x20}}, 0x0) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30}) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid={'resgid', 0x3d, r4}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) madvise(&(0x7f0000989000/0x2000)=nil, 0x2000, 0xeba64e673fce2707) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x1, 0x2, 0x8000, 0xffffff01}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioprio_get$uid(0x3, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44090}, 0x40041) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100)) 23.696246514s ago: executing program 32 (id=2028): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x0, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x0, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x0, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0x0, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x400}]}, 0x14}, 0x1, 0x0, 0x0, 0x60040040}, 0x8048) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}]}, 0x20}}, 0x0) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30}) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid={'resgid', 0x3d, r4}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) madvise(&(0x7f0000989000/0x2000)=nil, 0x2000, 0xeba64e673fce2707) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x1, 0x2, 0x8000, 0xffffff01}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioprio_get$uid(0x3, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44090}, 0x40041) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100)) 15.875467225s ago: executing program 5 (id=2037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) lseek(r1, 0x7, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x100010, r0, 0xfed56000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000040)={'veth0_to_hsr\x00', @ifru_names='ip6gre0\x00'}) 14.994595453s ago: executing program 5 (id=2085): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x30}}, 0x4004811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6020, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000980)={0x200000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, &(0x7f0000000880)=""/186, 0x0, 0x0, {r5}}, 0x58) 13.933067617s ago: executing program 5 (id=2087): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x4) 13.842646349s ago: executing program 5 (id=2090): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8010, &(0x7f0000000040)={[{@session={'session', 0x3d, 0x28}}, {@gid}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000001040)="$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") fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c000000010000107fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0002000000000000a0001a80380002803400018008002100000000000800180007000000080003000000000008000c0064000000080012000000000008002300000000000400070004001c0020000a80050008000100000014000700ff010000000000000000000000000001380002803400018008000000040000000800000000000000080000000000000008000000000000000800160001000080080005000002000004001c00"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000010001fff27bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6310040000000000400012800b00010069703667726500003000028014000700fc028000080000000000000000000000080017000200000006000e000310"], 0x60}, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r3, 0x0, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01000c23cdb54fc57ec30000070000000000000700"/38], 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$inet_nvme(r5, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000400)=""/237, 0xed}], 0x2, &(0x7f0000000600)=""/129, 0x81}, 0x100) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f00000000c0)={[], [{@uid_eq}]}) 13.473743607s ago: executing program 5 (id=2096): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163e0000000000bf67200000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) lseek(r1, 0x7, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x100010, r0, 0xfed56000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000040)={'veth0_to_hsr\x00', @ifru_names='ip6gre0\x00'}) 10.879062003s ago: executing program 5 (id=2114): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x4) 10.837632944s ago: executing program 33 (id=2114): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x4) 10.033423121s ago: executing program 3 (id=2121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x410100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x2}, 0x82, 0x0, 0x0, 0x8848319568f55aa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4000000002140011800c000100636f756e7465720004000280400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100e3ff0014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x200400d4) 7.219886642s ago: executing program 4 (id=2132): socket$nl_generic(0x10, 0x3, 0x10) restart_syscall() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3339f4c8b46919992edd4d94aa64b3c0da3da3e26ff30cdbb391a7a27c1c9ca332bccc7fe509f177fb7c042523be216f83fa5b00bfac336e02afec198cdfa3c029c9d5cd648b3c0f3a8c1cc2ea07713096ffc6dcc763a3c562e274e0e35b0f05e3f67955a6a40beb29dacc5763b131f6678e30d46e70ae268bfcbdd7d0b1163e5369af557041c9370d1f753300d7df6f7037a5e3afc1970ec8f9975ba8f08ea4d6b516f6f0c08a95ca66df2f305e93302f030f892304ece1d1f50930526e26affb6af86b12040f949603ead0a6b56f3e204c3473652da58a7634a89412173c3c85f6382d00d2d3cc7e72f2ed37", @ANYRES16=0x0, @ANYBLOB="250b26bd7000fbdbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x44041}, 0x8041) socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb"], 0x0) close(0xffffffffffffffff) fcntl$getflags(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 7.124654355s ago: executing program 2 (id=2135): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4004811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6020, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000980)={0x200000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, &(0x7f0000000880)=""/186, 0x0, 0x0, {r5}}, 0x58) 6.499978208s ago: executing program 4 (id=2138): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x590, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x901, 0x40, 0x5}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tos={{0x28}, {0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) capset(0x0, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.769753914s ago: executing program 2 (id=2139): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write(r1, &(0x7f0000000040)="45a59d4e33351f671648868ca8b3e30037b37d53dbcc42eb15044c117271def7e9ff9319ede119c791fa5b45e2bf617b5bd462bff1320e09684d8e6f67af3c957c4b37f232317c491b3c5f65750eabcf71c9c2b47484d20e11cd466ae7415b4ba3ce86c5e56ec855dd88e03656b59752d451e5a226d63e793ee6cece7ceea96d01c2564d962451d7470be4050ed9d90846deeed75f533f3eaea33e806d60aecabb2c3d9f4b7d9b48faf262ac3a34ed206f922cc7ccaa2e5565be0230383c99dd0017ea08d866c9dd2fee00e6651e6c15751d33693a125004c7ddc3e1b94534", 0xdf) close(r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x20008844) write$tun(r5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001380), 0x42100, 0x0) syz_mount_image$msdos(&(0x7f0000001340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c64c0af26851fb18187206f733178666c6f7070792c6e6f646f74732c606f74732c6e6f646f74732c6e6f646f74732c666d61736b3d30303030303034303030303030303030303000006c6c6f775f7574696d653d3030303030303030303030303034646774732c6e66733d6e6f7374616c655f726f2c666c7573682c646d61736b3d303030303030303030303030303030303030a52dc549b68cafdd84303030302c6e6f646f74732c6e6f0000000088b477c7691e89b800"], 0x1, 0x20e, &(0x7f0000000400)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001080)=@generic={&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 3.974109184s ago: executing program 2 (id=2140): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10000d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x7}, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/dev/ttyS3\x00') setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x4, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x4, 0x6}, 0x102260, 0x10000, 0x0, 0x1, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x404, &(0x7f0000000340)={[{@grpjquota}, {@usrquota}]}, 0xff, 0x4cb, &(0x7f0000001340)="$eJzs3c1rHOcZAPBndy1ZktX6o6XYLtgGF9wPrNUHxVLbg3tqezCUGnppwVWlteJopRXalWMJH+Tk5kMOISGBkEMuOeUvyCU+xQRCck3uIYfgkDgKJIHAhpndtfW1yeLIu0bz+8Fo35l3tM/7anlGM+/M7ASQWWeSH7mI4Yh4PyION2a3rnCm8bJx/+ZMMuWiXr/8eS5dL5lvrdr6vUMRsR4RAxHxr79F/D+3M251dW1+ulwuLTfni7WFpWJ1de38tYXpudJcaXFs8sLU1OToxPjUnvX19vNP37701j/63/z6uXt3X3jn7aRZw826zf3YS42u98XRTcsORMRfHkewHig0+zPY64bwSJLP7xcRcTbN/8NRSD9NIAvq9Xr9u/rBdtXrdWDfyqf7wLn8SEQ0yvn8yEhjH/6XMZQvV6q1P1ytrCzONvaVj0Rf/uq1cmm0eaxwJPpyyfxYWn44P75tfiIi3Qd+sTCYzo/MVMqz3d3UAdsc2pb/XxUa+Q9khEN+yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/Iru35X+hRO4Du8/8fMumfly4lU711//vs9dWV+cr187Ol6vzIwsrMyExleWlkrlKZS+/ZWfix9ytXKktjf4yVG8VaqVorVlfXrixUVhZrV9L7+q+U+rrSK6ATR0/f+SgXEet/GkynRH+zTq7C/lav56LX9yADvWGoD7LL0B9kl2N8YJev6N1ioF3F0iOHtOsBPZbvdQOAnjl3wvk/yCrj/5BdDsIhu+zjAz0Y/wd6zPg/ZNdwm+d//WzTs7tGI+LnEfFhoe9g61lfwH6Q/zTX3P8/d/g3w9tr+3PfpKcI+iPimVcvv3xjulZbHkuWf/Fgee2V5vLxXrQf6FQrT1t5DABk18b9mzOtqZtxP/tr4yKEnfEPNMcmB9JzlEMbuS3XKuT26NqF9VsRcXy3+Lnm884bZz6GNgo74h9rvuYab5G290D63PTuxD+xKf6pTfFP/uS/CmTDnWT7M7pb/uXTnI4H+bd1+zO8R9dOtN/+5R9s/wpttn+nO4zx1GvPftI2/q2Ik7vGb8UbSGNtj5+07VyH8e/999+/apU/eOPUxc119dcb77Nb/JakVKwtLBWrq2vn0++Rmystjk1emJqaHJ0YnyqmY9TF1kj1Tn8+/t7ddme4k/4PtYnfrv8Xm236XYf9//bX7/7nTJu6JP5vz+7++R9rEz8xGBG/7zD+l+Mf/69dXRJ/tk3/8z8QP1k20WH86kt/P9jhqgBAF1RX1+any+XSskLXCvWIeAKa0UGhPyKegGYo9KDQ6y0T8Lg9TPpetwQAAAAAAAAAAADoVDcuJ+51HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9oPvAwAA//+Ax9Yl") 3.973068293s ago: executing program 4 (id=2141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x113, 0x2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000420103000000000000000007000010"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp, 0x1}, 0x20) sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r3, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 3.893873175s ago: executing program 4 (id=2142): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4004811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6020, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000980)={0x200000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, &(0x7f0000000880)=""/186, 0x0, 0x0, {r5}}, 0x58) 3.869499456s ago: executing program 3 (id=2143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r1, 0x0, 0xffffffcc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0xa4306000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$inet(r4, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000380)="147c230554f63fef698fe6e324f90580daa6690fa1f369e4f6ec5d3f243be8e2f31cc10bc94a7b2e902bf315d0ec00d614189f12d5a959568492b113", 0x3c}, {&(0x7f00000003c0)="3eee470ceef583a7ddbc85d6cb9e9661e94ecfafe0ff869da9d30bda8447cf54fd579715a8e47609c55fe2f82b748e6c293b28b160999ced58dcd446c660c099738c1e6bce6312d15e45e3648d7478539966e9f30a8ef3b9ceb0429b331a965866e3cd676ef7618af94330d0e90460d61360d00f756566a599c3c910502f1d3b094af15f52a9447f9a27e0b8b6272e61184d59294c24ff8b5cf937141cae66418bff", 0xa2}, {&(0x7f0000000480)="811bfb1a7ae2081b78af6cdb858a1f429cd896ce5b9294476687b665c42e6736aa000d4cf0e1f8502adf350237d3f32ca3e968180ee2c0f7cee3fac6d6e192c9f6e57e3e4929449275e86debcef01e293af971a8794a2b23d4f26fdf29f58b48aa63df279181beb198a981f3", 0x6c}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="59df6562c240da925fecf3b3dd39940dc66f8f17cd15c7181809a0b2ff89a7891ce6779dfe1c1f2da0bc4d7da81b33d73dba88cecfb0a086952b78cfa097b444b5e7", 0x42}], 0x5, &(0x7f0000002580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xaf5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0xe8}}, {{&(0x7f0000002680)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002740)=[{&(0x7f00000026c0)="f6c4ba416238df7cd8244fcde7da168852ba834536064c4cd363d05e0d034dee2fdd1c761c4494d568394e60f27bda88fd05d5cbeee476ecf123f905d2294f8ac8903419befd66840790b6c5983929ccd9c53ff64ff578a6161ad9cc97c67d21f0fe5a962aa5f9c833b041ee797a0d02", 0x70}], 0x1, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xde}}], 0xa8}}], 0x2, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x3f26, &(0x7f0000000040)={0x0, 0x3cb1, 0x8, 0xa, 0x20002f4}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, '\\-\'&', 0x3a, '\x00', 0x3a, './file0'}, 0x1e) socketpair(0xb, 0x805, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 2.156135473s ago: executing program 3 (id=2146): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8c6, 0x89}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0x1, 0xffffffffffffffff, 0x1) epoll_create1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000084) unshare(0x2a020400) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x20000, 0x0, 0x5, 0x8, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000001c0)=""/234, &(0x7f00000002c0)=0xea) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x1000, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x62}}}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000040)=0xb4, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) 2.007834236s ago: executing program 4 (id=2147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0xbcc, 0xbd5, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)=0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000000005, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r3, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x1, {"433f0000000000000000000500"}, 0x6a, 0x1, 0x7}}}, 0xa0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='memory.oom.group\x00', 0x2, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 1.689319103s ago: executing program 4 (id=2149): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x590, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x901, 0x40, 0x5}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tos={{0x28}, {0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) capset(0x0, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.454429799s ago: executing program 2 (id=2150): mkdir(0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="14570000", @ANYRES16=r1, @ANYBLOB="114328bd7000fcdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x571f68543cec8180) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1, 0x54e7, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 1.258459983s ago: executing program 1 (id=2151): socket$nl_generic(0x10, 0x3, 0x10) restart_syscall() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3339f4c8b46919992edd4d94aa64b3c0da3da3e26ff30cdbb391a7a27c1c9ca332bccc7fe509f177fb7c042523be216f83fa5b00bfac336e02afec198cdfa3c029c9d5cd648b3c0f3a8c1cc2ea07713096ffc6dcc763a3c562e274e0e35b0f05e3f67955a6a40beb29dacc5763b131f6678e30d46e70ae268bfcbdd7d0b1163e5369af557041c9370d1f753300d7df6f7037a5e3afc1970ec8f9975ba8f08ea4d6b516f6f0c08a95ca66df2f305e93302f030f892304ece1d1f50930526e26affb6af86b12040f949603ead0a6b56f3e204c3473652da58a7634a89412173c3c85f6382d00d2d3cc7e72f2ed37", @ANYRES16=0x0, @ANYBLOB="250b26bd7000fbdbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x44041}, 0x8041) socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) fcntl$getflags(r1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.233123743s ago: executing program 3 (id=2152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x410100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x2}, 0x82, 0x0, 0x0, 0x8848319568f55aa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4000000002140011800c000100636f756e7465720004000280400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100e3ff0014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x200400d4) 1.126527495s ago: executing program 1 (id=2153): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x590, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x901, 0x40, 0x5}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tos={{0x28}, {0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) capset(0x0, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtfilter={0x34, 0x2c, 0x1, 0x72bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048095}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 806.812253ms ago: executing program 2 (id=2154): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 463.29509ms ago: executing program 3 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/17, 0x11, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x3, 0xfffffffb, 0x1a) 254.865514ms ago: executing program 3 (id=2156): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f00000005c0)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@random="ff0c5f00", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "9318ae8381b25c24"}}}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000814000/0x2000)=nil, 0x5000) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580), 0x0, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x280000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[], &(0x7f0000000800)=""/80, 0x41, 0x50, 0x1, 0x6}, 0x28) recvfrom$inet6(r6, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) open$dir(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x800, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 134.791377ms ago: executing program 1 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x30000, 0x20009005}, 0x24000084) 134.047027ms ago: executing program 1 (id=2158): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000004600), 0x42, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) sendfile(r0, r0, 0x0, 0x4) 77.772328ms ago: executing program 2 (id=2159): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f00000005c0)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@random="ff0c5f00", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "9318ae8381b25c24"}}}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000814000/0x2000)=nil, 0x5000) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580), 0x0, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x280000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[], &(0x7f0000000800)=""/80, 0x41, 0x50, 0x1, 0x6}, 0x28) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) open$dir(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x800, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 77.496588ms ago: executing program 34 (id=2159): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f00000005c0)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@random="ff0c5f00", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "9318ae8381b25c24"}}}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000814000/0x2000)=nil, 0x5000) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580), 0x0, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x280000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[], &(0x7f0000000800)=""/80, 0x41, 0x50, 0x1, 0x6}, 0x28) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) open$dir(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x800, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 18.33947ms ago: executing program 1 (id=2161): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358) 0s ago: executing program 1 (id=2162): mkdirat(0xffffffffffffff9c, 0x0, 0x100) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r2, 0x5ee36000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000002e1f02000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e0040001000000000000"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000980)="8ff819011349850a69e9dc600733c942a066177e34fbafc34cd22dcdf25ab41945ec9b71eda8aeb2a3560b19800e44d21666762b4823a6dfe1c7dcebbab82b88b0629b4f31323edd15a8a1b100003c6c5b8929c77a4b98d7e40f0bc7f32fa4f53634b0c28abdf6a23cd07fcc9675e8d75ba8822afb72343db154e17d51e1a7cd7de494c6ebb981c1f7c45f34525c71b8b569637703b816d33ba4d2ba64", 0x9d, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x28, 0xc, 0x31}, 0x2c) socket(0x10, 0x803, 0xfffffffc) kernel console output (not intermixed with test programs): fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.331394][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.382344][ T9516] ªªªªªª: renamed from vlan0 (while UP) [ 342.389435][ T28] audit: type=1400 audit(1784197470.886:2316): avc: denied { bind } for pid=9515 comm="syz.1.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.439187][ T9516] loop1: detected capacity change from 0 to 128 [ 342.446901][ T9516] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 342.452411][ T9516] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 342.489308][ T28] audit: type=1400 audit(1784197470.886:2317): avc: denied { name_bind } for pid=9515 comm="syz.1.1775" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 342.489337][ T28] audit: type=1400 audit(1784197470.946:2318): avc: denied { write } for pid=9515 comm="syz.1.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.513214][ T9519] netlink: 'syz.3.1774': attribute type 2 has an invalid length. [ 342.517314][ T28] audit: type=1400 audit(1784197471.026:2319): avc: denied { write } for pid=9507 comm="syz.3.1774" path="socket:[27168]" dev="sockfs" ino=27168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 342.517346][ T28] audit: type=1400 audit(1784197471.026:2320): avc: denied { read } for pid=9507 comm="syz.3.1774" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 342.518849][ T28] audit: type=1400 audit(1784197471.026:2321): avc: denied { getopt } for pid=9515 comm="syz.1.1775" lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.672846][ T28] audit: type=1400 audit(1784197471.176:2322): avc: denied { read } for pid=9524 comm="syz.4.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.694850][ T9523] loop2: detected capacity change from 0 to 1764 [ 342.719278][ T28] audit: type=1400 audit(1784197471.226:2323): avc: denied { execute } for pid=9524 comm="syz.4.1777" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 342.732836][ T28] audit: type=1400 audit(1784197471.226:2324): avc: denied { execute_no_trans } for pid=9524 comm="syz.4.1777" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 342.777176][ T9526] loop4: detected capacity change from 0 to 8192 [ 343.246052][ T9536] FAULT_INJECTION: forcing a failure. [ 343.246052][ T9536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.260354][ T9536] CPU: 1 UID: 0 PID: 9536 Comm: syz.1.1780 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 343.260459][ T9536] Tainted: [W]=WARN [ 343.260465][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 343.260476][ T9536] Call Trace: [ 343.260483][ T9536] [ 343.260490][ T9536] __dump_stack+0x1d/0x30 [ 343.260519][ T9536] dump_stack_lvl+0x95/0xd0 [ 343.260542][ T9536] dump_stack+0x15/0x1b [ 343.260564][ T9536] should_fail_ex+0x25e/0x270 [ 343.260595][ T9536] should_fail+0xb/0x20 [ 343.260716][ T9536] should_fail_usercopy+0x1a/0x20 [ 343.260747][ T9536] _copy_to_user+0x20/0xa0 [ 343.260812][ T9536] simple_read_from_buffer+0xb5/0x130 [ 343.260836][ T9536] proc_fail_nth_read+0x10e/0x150 [ 343.260861][ T9536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.260885][ T9536] vfs_read+0x18e/0x7c0 [ 343.260907][ T9536] ? ksys_read+0xb1/0x1a0 [ 343.260937][ T9536] ksys_read+0xdc/0x1a0 [ 343.260954][ T9536] __x64_sys_read+0x40/0x50 [ 343.261044][ T9536] x64_sys_call+0x2886/0x3020 [ 343.261068][ T9536] do_syscall_64+0x136/0x3c0 [ 343.261098][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.261123][ T9536] RIP: 0033:0x7fe04341e68e [ 343.261159][ T9536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 343.261176][ T9536] RSP: 002b:00007fe041eb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.261194][ T9536] RAX: ffffffffffffffda RBX: 00007fe041eb76c0 RCX: 00007fe04341e68e [ 343.261207][ T9536] RDX: 000000000000000f RSI: 00007fe041eb70a0 RDI: 0000000000000007 [ 343.261221][ T9536] RBP: 00007fe041eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.261236][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.261269][ T9536] R13: 00007fe0436e6038 R14: 00007fe0436e5fa0 R15: 00007ffea59e37c8 [ 343.261289][ T9536] [ 345.638256][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.696452][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1781'. [ 345.712824][ T9543] FAULT_INJECTION: forcing a failure. [ 345.712824][ T9543] name failslab, interval 1, probability 0, space 0, times 0 [ 345.738396][ T9543] CPU: 1 UID: 0 PID: 9543 Comm: syz.3.1781 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 345.738502][ T9543] Tainted: [W]=WARN [ 345.738509][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 345.738520][ T9543] Call Trace: [ 345.738526][ T9543] [ 345.738535][ T9543] __dump_stack+0x1d/0x30 [ 345.738557][ T9543] dump_stack_lvl+0x95/0xd0 [ 345.738580][ T9543] dump_stack+0x15/0x1b [ 345.738597][ T9543] should_fail_ex+0x25e/0x270 [ 345.738669][ T9543] should_failslab+0x8c/0xb0 [ 345.738760][ T9543] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 345.738785][ T9543] ? skb_clone+0x151/0x1f0 [ 345.738853][ T9543] ? skb_clone+0x151/0x1f0 [ 345.738887][ T9543] skb_clone+0x151/0x1f0 [ 345.738917][ T9543] __netlink_deliver_tap+0x2be/0x510 [ 345.738962][ T9543] netlink_unicast+0x654/0x680 [ 345.738986][ T9543] netlink_sendmsg+0x5be/0x6f0 [ 345.739027][ T9543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.739054][ T9543] ____sys_sendmsg+0x532/0x580 [ 345.739088][ T9543] ___sys_sendmsg+0x195/0x1e0 [ 345.739127][ T9543] __x64_sys_sendmsg+0xd4/0x160 [ 345.739163][ T9543] x64_sys_call+0x194c/0x3020 [ 345.739190][ T9543] do_syscall_64+0x136/0x3c0 [ 345.739269][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.739370][ T9543] RIP: 0033:0x7facd77fde59 [ 345.739385][ T9543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.739402][ T9543] RSP: 002b:00007facd6257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.739421][ T9543] RAX: ffffffffffffffda RBX: 00007facd7a85fa0 RCX: 00007facd77fde59 [ 345.739437][ T9543] RDX: 0000000000040084 RSI: 00002000000002c0 RDI: 0000000000000007 [ 345.739504][ T9543] RBP: 00007facd6257090 R08: 0000000000000000 R09: 0000000000000000 [ 345.739518][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.739533][ T9543] R13: 00007facd7a86038 R14: 00007facd7a85fa0 R15: 00007ffc1a7a3f38 [ 345.739554][ T9543] [ 345.741635][ T9543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1781'. [ 345.904573][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 345.957517][ T9551] loop4: detected capacity change from 0 to 512 [ 345.959989][ T9548] loop2: detected capacity change from 0 to 8192 [ 345.989299][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1783'. [ 346.002895][ T9551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 346.026161][ T9551] EXT4-fs (loop4): 1 truncate cleaned up [ 346.035509][ T9551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.299487][ T9560] loop1: detected capacity change from 0 to 128 [ 346.544120][ T28] audit: type=1400 audit(1784197475.056:2325): avc: denied { write } for pid=9550 comm="syz.4.1785" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.680166][ T9564] FAULT_INJECTION: forcing a failure. [ 346.680166][ T9564] name failslab, interval 1, probability 0, space 0, times 0 [ 346.701333][ T9569] syzkaller0: entered promiscuous mode [ 346.706932][ T9569] syzkaller0: entered allmulticast mode [ 346.716887][ T9564] CPU: 0 UID: 0 PID: 9564 Comm: syz.4.1785 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 346.716917][ T9564] Tainted: [W]=WARN [ 346.716992][ T9564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 346.717071][ T9564] Call Trace: [ 346.717077][ T9564] [ 346.717085][ T9564] __dump_stack+0x1d/0x30 [ 346.717111][ T9564] dump_stack_lvl+0x95/0xd0 [ 346.717147][ T9564] dump_stack+0x15/0x1b [ 346.717229][ T9564] should_fail_ex+0x25e/0x270 [ 346.717332][ T9564] should_failslab+0x8c/0xb0 [ 346.717365][ T9564] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 346.717387][ T9564] ? ext4_init_io_end+0x31/0xb0 [ 346.717408][ T9564] ? ext4_init_io_end+0x31/0xb0 [ 346.717489][ T9564] ext4_init_io_end+0x31/0xb0 [ 346.717509][ T9564] ext4_do_writepages+0x6c7/0x2720 [ 346.717535][ T9564] ? __rb_insert_augmented+0x28f/0x2c0 [ 346.717615][ T9564] ? ttwu_do_activate+0x201/0x230 [ 346.717747][ T9564] ? kick_pool+0x267/0x2d0 [ 346.717824][ T9564] ? __rcu_read_unlock+0x33/0x70 [ 346.717848][ T9564] ? __queue_work+0x7a7/0xb90 [ 346.717881][ T9564] ? queue_work_on+0xca/0x140 [ 346.717960][ T9564] ext4_writepages+0x18f/0x300 [ 346.717993][ T9564] ? __pfx_ext4_writepages+0x10/0x10 [ 346.718018][ T9564] do_writepages+0x1b9/0x300 [ 346.718040][ T9564] ? ext4_get_group_desc+0x16b/0x190 [ 346.718095][ T9564] ? inode_to_bdi+0x47/0xa0 [ 346.718168][ T9564] ? _raw_spin_unlock+0x9/0x30 [ 346.718188][ T9564] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 346.718218][ T9564] filemap_write_and_wait_range+0x166/0x370 [ 346.718264][ T9564] kiocb_write_and_wait+0x7a/0x110 [ 346.718300][ T9564] __iomap_dio_rw+0x5c8/0x1410 [ 346.718332][ T9564] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 346.718381][ T9564] iomap_dio_rw+0x40/0x90 [ 346.718444][ T9564] ext4_file_read_iter+0x209/0x280 [ 346.718469][ T9564] copy_splice_read+0x47a/0x6b0 [ 346.718531][ T9564] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 346.718558][ T9564] splice_direct_to_actor+0x27c/0x680 [ 346.718583][ T9564] ? kstrtouint_from_user+0xa8/0xf0 [ 346.718693][ T9564] ? __pfx_direct_splice_actor+0x10/0x10 [ 346.718718][ T9564] do_splice_direct+0x119/0x1a0 [ 346.718849][ T9564] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 346.718935][ T9564] do_sendfile+0x37d/0x640 [ 346.719106][ T9564] __x64_sys_sendfile64+0x105/0x150 [ 346.719133][ T9564] x64_sys_call+0x2dc4/0x3020 [ 346.719160][ T9564] do_syscall_64+0x136/0x3c0 [ 346.719181][ T9564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.719208][ T9564] RIP: 0033:0x7f5e03cbde59 [ 346.719306][ T9564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.719326][ T9564] RSP: 002b:00007f5e026f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 346.719348][ T9564] RAX: ffffffffffffffda RBX: 00007f5e03f46090 RCX: 00007f5e03cbde59 [ 346.719370][ T9564] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 346.719429][ T9564] RBP: 00007f5e026f6090 R08: 0000000000000000 R09: 0000000000000000 [ 346.719444][ T9564] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000001 [ 346.719471][ T9564] R13: 00007f5e03f46128 R14: 00007f5e03f46090 R15: 00007ffcc11d9e68 [ 346.719492][ T9564] [ 347.071250][ T9575] loop2: detected capacity change from 0 to 128 [ 347.118667][ T9575] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.131134][ T9575] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.168651][ T9575] Cannot find del_set index 14804 as target [ 347.181597][ T28] audit: type=1400 audit(1784197475.666:2326): avc: denied { map } for pid=9572 comm="syz.2.1794" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 347.217477][ T9578] loop0: detected capacity change from 0 to 764 [ 347.218128][ T28] audit: type=1400 audit(1784197475.666:2327): avc: denied { read write } for pid=9572 comm="syz.2.1794" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 347.249545][ T28] audit: type=1400 audit(1784197475.766:2328): avc: denied { bind } for pid=9572 comm="syz.2.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.296646][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.333995][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.386482][ T9588] loop1: detected capacity change from 0 to 512 [ 347.413990][ T9586] loop4: detected capacity change from 0 to 8192 [ 347.434955][ T9588] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 347.447703][ T9588] System zones: 0-2, 18-18, 34-35 [ 347.463533][ T9588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.479607][ T9588] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.500423][ T28] audit: type=1400 audit(1784197476.006:2329): avc: denied { ioctl } for pid=9589 comm="syz.0.1800" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28076 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 347.536999][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.555796][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.415561][ T28] audit: type=1400 audit(1784197476.926:2330): avc: denied { connect } for pid=9613 comm="syz.3.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 349.953525][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.063627][ T9645] syzkaller0: entered promiscuous mode [ 350.082697][ T9645] syzkaller0: entered allmulticast mode [ 350.115339][ T28] audit: type=1400 audit(1784197478.616:2331): avc: denied { relabelfrom } for pid=9644 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 350.159916][ T28] audit: type=1400 audit(1784197478.616:2332): avc: denied { relabelto } for pid=9644 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 350.211811][ T28] audit: type=1326 audit(1784197478.716:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.1815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04345de59 code=0x7ffc0000 [ 350.260991][ T28] audit: type=1326 audit(1784197478.716:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.1815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04345de59 code=0x7ffc0000 [ 350.651657][ T9649] loop0: detected capacity change from 0 to 512 [ 350.660629][ T9649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 350.682837][ T9649] EXT4-fs (loop0): 1 truncate cleaned up [ 350.694423][ T9649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.936105][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.978405][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'. [ 351.019634][ T9661] loop0: detected capacity change from 0 to 1024 [ 351.087362][ T9661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.352260][ T9672] netlink: 'syz.1.1823': attribute type 4 has an invalid length. [ 351.363520][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.431709][ T9677] netlink: 'syz.1.1823': attribute type 4 has an invalid length. [ 351.557096][ T9680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9680 comm=syz.0.1826 [ 351.593215][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 351.620288][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1823'. [ 351.741534][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1829'. [ 351.755170][ T9690] netlink: 'syz.2.1829': attribute type 7 has an invalid length. [ 351.770985][ T9690] netlink: 'syz.2.1829': attribute type 8 has an invalid length. [ 351.796904][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 351.982472][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 351.982563][ T28] audit: type=1400 audit(1784197480.486:2346): avc: denied { append } for pid=9694 comm="syz.2.1830" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 352.454235][ T9699] loop1: detected capacity change from 0 to 1024 [ 352.462777][ T9699] EXT4-fs: Ignoring removed bh option [ 352.532685][ T9701] loop0: detected capacity change from 0 to 256 [ 352.584654][ T9699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.656523][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.752523][ T9706] syzkaller0: entered promiscuous mode [ 352.783694][ T9706] syzkaller0: entered allmulticast mode [ 352.855160][ T9706] syzkaller0: tun_net_xmit 1280 [ 352.873711][ T9706] syzkaller0: create flow: hash 94705595 index 1 [ 352.927891][ T9726] loop1: detected capacity change from 0 to 512 [ 352.949123][ T9726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.964427][ T9726] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.977011][ T28] audit: type=1400 audit(1784197481.496:2347): avc: denied { write } for pid=9725 comm="syz.1.1838" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.978194][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1837'. [ 353.023552][ T9700] syzkaller0: delete flow: hash 94705595 index 1 [ 353.205579][ T9736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9736 comm=syz.4.1839 [ 353.220674][ T9737] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.250015][ T9738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1842'. [ 353.426617][ T28] audit: type=1400 audit(1784197481.936:2348): avc: denied { write } for pid=9725 comm="syz.1.1838" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.453923][ T9743] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1838: corrupted inode contents [ 353.777978][ T9743] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.1838: mark_inode_dirty error [ 353.863510][ T28] audit: type=1400 audit(1784197482.366:2349): avc: denied { read } for pid=9744 comm="syz.0.1844" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.323189][ T9743] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1838: corrupted inode contents [ 354.426087][ T9743] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1838: mark_inode_dirty error [ 354.456011][ T9751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1845'. [ 354.575903][ T9754] loop4: detected capacity change from 0 to 164 [ 354.588779][ T9743] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1838: corrupted inode contents [ 354.658113][ T9743] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1838: mark_inode_dirty error [ 354.729762][ T9743] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1838: corrupted inode contents [ 354.771952][ T9761] loop3: detected capacity change from 0 to 128 [ 354.779705][ T9743] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.1838: mark_inode_dirty error [ 354.810367][ T9761] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.860006][ T9761] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.871957][ T9743] EXT4-fs error (device loop1) in ext4_setattr:6172: Corrupt filesystem [ 354.980621][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.043732][ T9767] bond14 (unregistering): Released all slaves [ 355.085112][ T28] audit: type=1400 audit(1784197483.596:2350): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 355.125961][ T28] audit: type=1400 audit(1784197483.626:2351): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.167701][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.179743][ T28] audit: type=1400 audit(1784197483.626:2352): avc: denied { open } for pid=3298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.206915][ T28] audit: type=1400 audit(1784197483.626:2353): avc: denied { ioctl } for pid=3298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.281818][ T28] audit: type=1400 audit(1784197483.666:2354): avc: denied { create } for pid=9773 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 355.367484][ T28] audit: type=1400 audit(1784197483.696:2355): avc: denied { execmem } for pid=9772 comm="syz.3.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 355.891137][ T9788] loop4: detected capacity change from 0 to 128 [ 356.319900][ T9788] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.406828][ T9788] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.539154][ T9793] syz.1.1854 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 356.545635][ T113] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.562612][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.1.1854 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 356.562647][ T9793] Tainted: [W]=WARN [ 356.562655][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 356.562667][ T9793] Call Trace: [ 356.562675][ T9793] [ 356.562708][ T9793] __dump_stack+0x1d/0x30 [ 356.562734][ T9793] dump_stack_lvl+0x95/0xd0 [ 356.562754][ T9793] dump_stack+0x15/0x1b [ 356.562797][ T9793] dump_header+0x80/0x240 [ 356.562824][ T9793] oom_kill_process+0x295/0x350 [ 356.562860][ T9793] out_of_memory+0x981/0xbc0 [ 356.562902][ T9793] try_charge_memcg+0x621/0xa00 [ 356.562938][ T9793] ? __rcu_read_unlock+0x4e/0x70 [ 356.562974][ T9793] __memcg_kmem_charge_page+0x199/0x3a0 [ 356.563025][ T9793] __alloc_frozen_pages_noprof+0x18a/0x350 [ 356.563059][ T9793] alloc_pages_mpol+0xa9/0x1d0 [ 356.563126][ T9793] alloc_pages_noprof+0x8f/0x140 [ 356.563220][ T9793] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 356.563291][ T9793] __kvmalloc_node_noprof+0x3a0/0x590 [ 356.563393][ T9793] ? futex_hash_allocate+0x192/0x920 [ 356.563455][ T9793] ? futex_hash_allocate+0x192/0x920 [ 356.563493][ T9793] ? futex_hash_allocate+0x192/0x920 [ 356.563522][ T9793] futex_hash_allocate+0x192/0x920 [ 356.563550][ T9793] ? cap_task_prctl+0x13f/0x6b0 [ 356.563657][ T9793] futex_hash_prctl+0xd8/0xf0 [ 356.563683][ T9793] __se_sys_prctl+0x4f4/0x13b0 [ 356.563718][ T9793] __x64_sys_prctl+0x67/0x80 [ 356.563828][ T9793] x64_sys_call+0x2533/0x3020 [ 356.563857][ T9793] do_syscall_64+0x136/0x3c0 [ 356.563907][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.563934][ T9793] RIP: 0033:0x7fe04345de59 [ 356.563951][ T9793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.564028][ T9793] RSP: 002b:00007fe041a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 356.564048][ T9793] RAX: ffffffffffffffda RBX: 00007fe0436e6270 RCX: 00007fe04345de59 [ 356.564062][ T9793] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 356.564075][ T9793] RBP: 00007fe0434f3e6f R08: 0000000000000000 R09: 0000000000000000 [ 356.564092][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.564179][ T9793] R13: 00007fe0436e6308 R14: 00007fe0436e6270 R15: 00007ffea59e37c8 [ 356.564277][ T9793] [ 356.794011][ T9793] memory: usage 306996kB, limit 307200kB, failcnt 145 [ 356.801100][ T9793] memory+swap: usage 311320kB, limit 9007199254740988kB, failcnt 0 [ 356.809023][ T9793] kmem: usage 306980kB, limit 9007199254740988kB, failcnt 0 [ 356.816315][ T9793] Memory cgroup stats for /syz1: [ 356.816546][ T9793] cache 0 [ 356.824473][ T9793] rss 0 [ 356.827233][ T9793] shmem 0 [ 356.830163][ T9793] mapped_file 0 [ 356.833638][ T9793] dirty 0 [ 356.836592][ T9793] writeback 0 [ 356.839880][ T9793] workingset_refault_anon 19 [ 356.844562][ T9793] workingset_refault_file 256 [ 356.849226][ T9793] swap 4427776 [ 356.852599][ T9793] swapcached 4521984 [ 356.856558][ T9793] pgpgin 357666 [ 356.860019][ T9793] pgpgout 357662 [ 356.863592][ T9793] pgfault 410924 [ 356.867153][ T9793] pgmajfault 10 [ 356.870612][ T9793] inactive_anon 0 [ 356.874253][ T9793] active_anon 16384 [ 356.878124][ T9793] inactive_file 0 [ 356.881744][ T9793] active_file 0 [ 356.885205][ T9793] unevictable 0 [ 356.888646][ T9793] hierarchical_memory_limit 314572800 [ 356.894090][ T9793] hierarchical_memsw_limit 9223372036854771712 [ 356.900232][ T9793] total_cache 0 [ 356.903708][ T9793] total_rss 0 [ 356.907018][ T9793] total_shmem 0 [ 356.910480][ T9793] total_mapped_file 0 [ 356.914495][ T9793] total_dirty 0 [ 356.917945][ T9793] total_writeback 0 [ 356.921745][ T9793] total_workingset_refault_anon 19 [ 356.926939][ T9793] total_workingset_refault_file 256 [ 356.932127][ T9793] total_swap 4427776 [ 356.936031][ T9793] total_swapcached 4521984 [ 356.940486][ T9793] total_pgpgin 357666 [ 356.944470][ T9793] total_pgpgout 357662 [ 356.948535][ T9793] total_pgfault 410924 [ 356.952597][ T9793] total_pgmajfault 10 [ 356.956609][ T9793] total_inactive_anon 0 [ 356.960767][ T9793] total_active_anon 16384 [ 356.965178][ T9793] total_inactive_file 0 [ 356.969330][ T9793] total_active_file 0 [ 356.973337][ T9793] total_unevictable 0 [ 356.977308][ T9793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1854,pid=9784,uid=0 [ 356.991934][ T9793] Memory cgroup out of memory: Killed process 9784 (syz.1.1854) total-vm:100596kB, anon-rss:1240kB, file-rss:26184kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 357.498698][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 357.498789][ T28] audit: type=1400 audit(1784197485.576:2381): avc: denied { create } for pid=9785 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.544444][ T28] audit: type=1400 audit(1784197485.586:2382): avc: denied { write } for pid=9785 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 357.565040][ T28] audit: type=1400 audit(1784197485.586:2383): avc: denied { read } for pid=9785 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 357.592056][ T28] audit: type=1400 audit(1784197485.616:2384): avc: denied { getopt } for pid=9785 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.643657][ T28] audit: type=1400 audit(1784197486.056:2385): avc: denied { create } for pid=9803 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.680300][ T28] audit: type=1400 audit(1784197486.096:2386): avc: denied { create } for pid=9803 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 357.700004][ T28] audit: type=1400 audit(1784197486.096:2387): avc: denied { setopt } for pid=9803 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 357.744651][ T28] audit: type=1400 audit(1784197486.126:2388): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 357.772327][ T9804] loop3: detected capacity change from 0 to 128 [ 357.775262][ T28] audit: type=1400 audit(1784197486.216:2389): avc: denied { sys_module } for pid=9806 comm="syz.4.1864" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 357.803958][ T28] audit: type=1400 audit(1784197486.236:2390): avc: denied { ioctl } for pid=9803 comm="syz.3.1863" path="socket:[27624]" dev="sockfs" ino=27624 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 357.817150][ T9817] loop2: detected capacity change from 0 to 1024 [ 357.915126][ T9824] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 357.915126][ T9824] Please contact the netfilter-devel mailing list or update your nftables rules. [ 357.954651][ T9817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.102147][ T9822] syzkaller0: entered promiscuous mode [ 358.107718][ T9822] syzkaller0: entered allmulticast mode [ 358.284129][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.319880][ T9829] xt_connbytes: Forcing CT accounting to be enabled [ 358.349971][ T9845] loop2: detected capacity change from 0 to 512 [ 358.357691][ T9845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.374455][ T9845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.387209][ T9845] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.892378][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.089713][ T9858] pim6reg: entered allmulticast mode [ 359.137721][ T9858] pim6reg: left allmulticast mode [ 359.210362][ T9869] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1878'. [ 359.241115][ T9865] loop0: detected capacity change from 0 to 512 [ 359.270788][ T9873] loop3: detected capacity change from 0 to 512 [ 359.288175][ T9873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.307707][ T9865] EXT4-fs: Ignoring removed oldalloc option [ 359.325592][ T9873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.325811][ T9865] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 359.352841][ T9873] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.383003][ T9865] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1877: invalid indirect mapped block 83886080 (level 1) [ 359.404781][ T9865] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.405518][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.422663][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 359.430136][ C1] EXT4-fs (loop0): initial error at time 1784197487: ext4_free_branches:1023: inode 16 [ 359.439811][ C1] EXT4-fs (loop0): last error at time 1784197487: ext4_free_branches:1023: inode 16 [ 359.450957][ T9865] EXT4-fs (loop0): Remounting filesystem read-only [ 359.458917][ T9865] EXT4-fs (loop0): 1 orphan inode deleted [ 359.465017][ T9865] EXT4-fs (loop0): 1 truncate cleaned up [ 359.482024][ T9865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.528466][ T9883] loop4: detected capacity change from 0 to 1024 [ 359.546053][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1881'. [ 359.551626][ T9865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.591383][ T9883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.756256][ T9874] syz.2.1880 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 359.770592][ T9874] CPU: 1 UID: 0 PID: 9874 Comm: syz.2.1880 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 359.770686][ T9874] Tainted: [W]=WARN [ 359.770694][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 359.770706][ T9874] Call Trace: [ 359.770714][ T9874] [ 359.770743][ T9874] __dump_stack+0x1d/0x30 [ 359.770769][ T9874] dump_stack_lvl+0x95/0xd0 [ 359.770811][ T9874] dump_stack+0x15/0x1b [ 359.770913][ T9874] dump_header+0x80/0x240 [ 359.770984][ T9874] oom_kill_process+0x295/0x350 [ 359.771078][ T9874] out_of_memory+0x981/0xbc0 [ 359.771111][ T9874] try_charge_memcg+0x621/0xa00 [ 359.771194][ T9874] ? _raw_spin_unlock+0x9/0x30 [ 359.771227][ T9874] __memcg_kmem_charge_page+0x199/0x3a0 [ 359.771314][ T9874] __alloc_frozen_pages_noprof+0x18a/0x350 [ 359.771352][ T9874] alloc_pages_mpol+0xa9/0x1d0 [ 359.771407][ T9874] alloc_pages_noprof+0x8f/0x140 [ 359.771439][ T9874] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 359.771529][ T9874] __kvmalloc_node_noprof+0x3a0/0x590 [ 359.771560][ T9874] ? futex_hash_allocate+0x192/0x920 [ 359.771633][ T9874] ? futex_hash_allocate+0x192/0x920 [ 359.771657][ T9874] ? futex_hash_allocate+0x192/0x920 [ 359.771685][ T9874] futex_hash_allocate+0x192/0x920 [ 359.771799][ T9874] ? cap_task_prctl+0x13f/0x6b0 [ 359.771900][ T9874] futex_hash_prctl+0xd8/0xf0 [ 359.771925][ T9874] __se_sys_prctl+0x4f4/0x13b0 [ 359.771962][ T9874] __x64_sys_prctl+0x67/0x80 [ 359.772015][ T9874] x64_sys_call+0x2533/0x3020 [ 359.772046][ T9874] do_syscall_64+0x136/0x3c0 [ 359.772087][ T9874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.772178][ T9874] RIP: 0033:0x7fa22f43de59 [ 359.772226][ T9874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.772249][ T9874] RSP: 002b:00007fa22de97028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 359.772274][ T9874] RAX: ffffffffffffffda RBX: 00007fa22f6c5fa0 RCX: 00007fa22f43de59 [ 359.772289][ T9874] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 359.772348][ T9874] RBP: 00007fa22f4d3e6f R08: 0000000000000000 R09: 0000000000000000 [ 359.772362][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.772374][ T9874] R13: 00007fa22f6c6038 R14: 00007fa22f6c5fa0 R15: 00007ffe7e4b2648 [ 359.772395][ T9874] [ 359.772414][ T9874] memory: usage 307200kB, limit 307200kB, failcnt 449 [ 360.011915][ T9874] memory+swap: usage 2508kB, limit 9007199254740988kB, failcnt 0 [ 360.019672][ T9874] kmem: usage 2048kB, limit 9007199254740988kB, failcnt 0 [ 360.026791][ T9874] Memory cgroup stats for /syz2: [ 360.027051][ T9874] cache 0 [ 360.034923][ T9874] rss 0 [ 360.037684][ T9874] shmem 0 [ 360.040665][ T9874] mapped_file 0 [ 360.041472][ T9889] lo speed is unknown, defaulting to 1000 [ 360.044387][ T9874] dirty 0 [ 360.053026][ T9874] writeback 0 [ 360.056346][ T9874] workingset_refault_anon 215 [ 360.061128][ T9874] workingset_refault_file 1212 [ 360.066196][ T9874] swap 294912 [ 360.069692][ T9874] swapcached 5406720 [ 360.073840][ T9874] pgpgin 381529 [ 360.077405][ T9874] pgpgout 381529 [ 360.078419][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.081272][ T9874] pgfault 441114 [ 360.093798][ T9874] pgmajfault 150 [ 360.104218][ T9874] inactive_anon 0 [ 360.107898][ T9874] active_anon 0 [ 360.111366][ T9874] inactive_file 0 [ 360.126592][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 360.165179][ T9874] active_file 0 [ 360.170063][ T9874] unevictable 0 [ 360.178907][ T9874] hierarchical_memory_limit 314572800 [ 360.189625][ T9874] hierarchical_memsw_limit 9223372036854771712 [ 360.196962][ T9874] total_cache 0 [ 360.200483][ T9874] total_rss 0 [ 360.203825][ T9874] total_shmem 0 [ 360.207501][ T9874] total_mapped_file 0 [ 360.211700][ T9874] total_dirty 0 [ 360.215621][ T9874] total_writeback 0 [ 360.219571][ T9874] total_workingset_refault_anon 215 [ 360.225143][ T9874] total_workingset_refault_file 1212 [ 360.230677][ T9874] total_swap 294912 [ 360.235988][ T9874] total_swapcached 5406720 [ 360.246257][ T9874] total_pgpgin 381529 [ 360.258407][ T9874] total_pgpgout 381529 [ 360.262614][ T9874] total_pgfault 441114 [ 360.268605][ T9874] total_pgmajfault 150 [ 360.278227][ T9874] total_inactive_anon 0 [ 360.282412][ T9874] total_active_anon 0 [ 360.286827][ T9874] total_inactive_file 0 [ 360.291085][ T9874] total_active_file 0 [ 360.295286][ T9874] total_unevictable 0 [ 360.299433][ T9874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1880,pid=9872,uid=0 [ 360.314805][ T9874] Memory cgroup out of memory: Killed process 9872 (syz.2.1880) total-vm:94048kB, anon-rss:1244kB, file-rss:21512kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 360.389327][ T9898] bond12: option resend_igmp: invalid value (1243329439) [ 360.396410][ T9898] bond12: option resend_igmp: allowed values 0 - 255 [ 360.404215][ T9898] bond12 (unregistering): Released all slaves [ 360.501317][ T9918] loop0: detected capacity change from 0 to 128 [ 360.512536][ T9918] FAT-fs (loop0): bogus number of reserved sectors [ 360.519233][ T9918] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 360.528522][ T9918] FAT-fs (loop0): Can't find a valid FAT filesystem [ 360.560227][ T9918] loop0: detected capacity change from 0 to 512 [ 360.583306][ T9918] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 360.593320][ T9918] FAT-fs (loop0): Filesystem has been set read-only [ 360.601715][ T9918] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000103) [ 360.645057][ T9920] loop3: detected capacity change from 0 to 512 [ 360.658617][ T9920] EXT4-fs (loop3): unable to read superblock [ 360.732293][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.740729][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.764600][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 360.967237][ T9920] 8021q: VLANs not supported on ipvlan1 [ 361.489929][ T9935] loop2: detected capacity change from 0 to 512 [ 361.497451][ T9935] EXT4-fs: Ignoring removed oldalloc option [ 361.504701][ T9935] EXT4-fs: Ignoring removed bh option [ 361.520203][ T9937] loop3: detected capacity change from 0 to 1024 [ 361.527387][ T9937] EXT4-fs: Ignoring removed orlov option [ 361.575262][ T9937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.577885][ T9935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.650003][ T9937] netlink: 'syz.3.1900': attribute type 2 has an invalid length. [ 361.677927][ T9951] lo speed is unknown, defaulting to 1000 [ 361.722133][ T9954] loop0: detected capacity change from 0 to 128 [ 361.761400][ T9958] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1906'. [ 361.790752][ T9954] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 361.803024][ T9954] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #2: comm syz.0.1903: corrupted xattr block 5: invalid header [ 361.817522][ T9954] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 361.825013][ T9954] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.851239][ T9951] ip6t_srh: unknown srh match flags 41C4 [ 362.382040][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.923366][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.945569][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.978409][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 362.978423][ T28] audit: type=1400 audit(1784197491.486:2506): avc: denied { create } for pid=9971 comm="syz.4.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 363.020408][ T28] audit: type=1400 audit(1784197491.526:2507): avc: denied { ioctl } for pid=9971 comm="syz.4.1910" path="socket:[29792]" dev="sockfs" ino=29792 ioctlcmd=0x8920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 363.393342][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.471790][ T9985] loop1: detected capacity change from 0 to 1764 [ 363.511096][ T9987] loop2: detected capacity change from 0 to 1764 [ 363.828383][ T9994] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1917'. [ 363.848880][ T9994] bond0 (unregistering): left promiscuous mode [ 363.855736][ T9994] bond_slave_0: left promiscuous mode [ 363.862498][ T9994] bond_slave_1: left promiscuous mode [ 363.950779][ T9995] loop0: detected capacity change from 0 to 8192 [ 363.961260][ T9994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.989306][ T9994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.013404][ T9994] bond0 (unregistering): Released all slaves [ 364.066076][ T9995] loop0: p1 p2 p3 [ 364.072685][ T9995] loop0: p2 start 9961480 is beyond EOD, truncated [ 364.079317][ T9995] loop0: p3 start 117772289 is beyond EOD, truncated [ 364.755135][T10003] loop3: detected capacity change from 0 to 512 [ 364.773105][T10003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.789485][ T9999] pim6reg: entered allmulticast mode [ 364.795025][T10000] pim6reg: left allmulticast mode [ 364.844850][T10003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.996975][T10003] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.792101][ T28] audit: type=1400 audit(1784197494.296:2508): avc: denied { write } for pid=10011 comm="syz.2.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 366.245111][T10012] lo speed is unknown, defaulting to 1000 [ 366.253373][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.260785][T10012] lo speed is unknown, defaulting to 1000 [ 366.268636][T10012] lo speed is unknown, defaulting to 1000 [ 366.302196][ T28] audit: type=1400 audit(1784197494.806:2509): avc: denied { mmap_zero } for pid=10023 comm="syz.3.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 366.322936][ T28] audit: type=1400 audit(1784197494.816:2510): avc: denied { getopt } for pid=10023 comm="syz.3.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.365129][ T28] audit: type=1400 audit(1784197494.876:2511): avc: denied { map } for pid=10023 comm="syz.3.1924" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.432030][ T28] audit: type=1400 audit(1784197494.876:2512): avc: denied { read write } for pid=10023 comm="syz.3.1924" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.445005][T10012] infiniband sz1: set active [ 366.461808][ T3362] lo speed is unknown, defaulting to 1000 [ 366.482902][T10012] infiniband sz1: added lo [ 366.507530][T10012] RDS/IB: sz1: added [ 366.521900][T10012] smc: adding ib device sz1 with port count 1 [ 366.548036][T10012] smc: ib device sz1 port 1 has no pnetid [ 366.556795][T10012] lo speed is unknown, defaulting to 1000 [ 366.567864][ T11] lo speed is unknown, defaulting to 1000 [ 366.669328][T10020] syz.4.1920 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 366.683557][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.4.1920 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 366.683627][T10020] Tainted: [W]=WARN [ 366.683708][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 366.683722][T10020] Call Trace: [ 366.683731][T10020] [ 366.683741][T10020] __dump_stack+0x1d/0x30 [ 366.683770][T10020] dump_stack_lvl+0x95/0xd0 [ 366.683791][T10020] dump_stack+0x15/0x1b [ 366.683895][T10020] dump_header+0x80/0x240 [ 366.683917][T10020] oom_kill_process+0x295/0x350 [ 366.684016][T10020] out_of_memory+0x981/0xbc0 [ 366.684054][T10020] try_charge_memcg+0x621/0xa00 [ 366.684097][T10020] ? __rcu_read_unlock+0x4e/0x70 [ 366.684133][T10020] __memcg_kmem_charge_page+0x199/0x3a0 [ 366.684169][T10020] __alloc_frozen_pages_noprof+0x18a/0x350 [ 366.684269][T10020] alloc_pages_mpol+0xa9/0x1d0 [ 366.684304][T10020] alloc_pages_noprof+0x8f/0x140 [ 366.684338][T10020] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 366.684460][T10020] __kvmalloc_node_noprof+0x3a0/0x590 [ 366.684492][T10020] ? futex_hash_allocate+0x192/0x920 [ 366.684516][T10020] ? futex_hash_allocate+0x192/0x920 [ 366.684613][T10020] ? futex_hash_allocate+0x192/0x920 [ 366.684640][T10020] futex_hash_allocate+0x192/0x920 [ 366.684665][T10020] ? cap_task_prctl+0x13f/0x6b0 [ 366.684706][T10020] futex_hash_prctl+0xd8/0xf0 [ 366.684777][T10020] __se_sys_prctl+0x4f4/0x13b0 [ 366.684826][T10020] __x64_sys_prctl+0x67/0x80 [ 366.684852][T10020] x64_sys_call+0x2533/0x3020 [ 366.684880][T10020] do_syscall_64+0x136/0x3c0 [ 366.684904][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.684974][T10020] RIP: 0033:0x7f5e03cbde59 [ 366.684994][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.685016][T10020] RSP: 002b:00007f5e01e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 366.685103][T10020] RAX: ffffffffffffffda RBX: 00007f5e03f46360 RCX: 00007f5e03cbde59 [ 366.685129][T10020] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 366.685146][T10020] RBP: 00007f5e03d53e6f R08: 0000000000000000 R09: 0000000000000000 [ 366.685238][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.685251][T10020] R13: 00007f5e03f463f8 R14: 00007f5e03f46360 R15: 00007ffcc11d9e68 [ 366.685325][T10020] [ 366.685334][T10020] memory: usage 307200kB, limit 307200kB, failcnt 366 [ 366.691539][T10012] lo speed is unknown, defaulting to 1000 [ 366.696281][T10020] memory+swap: usage 311648kB, limit 9007199254740988kB, failcnt 0 [ 366.696298][T10020] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 366.696312][T10020] Memory cgroup stats for /syz4: [ 366.696538][T10020] cache 4096 [ 366.916360][T10012] lo speed is unknown, defaulting to 1000 [ 366.959386][T10020] rss 0 [ 366.962155][T10020] shmem 0 [ 366.966107][T10020] mapped_file 0 [ 366.969563][T10020] dirty 0 [ 366.972495][T10020] writeback 0 [ 366.975794][T10020] workingset_refault_anon 1347 [ 366.980540][T10020] workingset_refault_file 505 [ 366.985222][T10020] swap 4554752 [ 366.988644][T10020] swapcached 10072064 [ 366.992661][T10020] pgpgin 345391 [ 366.996114][T10020] pgpgout 345390 [ 366.999646][T10020] pgfault 426464 [ 367.003279][T10020] pgmajfault 189 [ 367.006812][T10020] inactive_anon 0 [ 367.010477][T10020] active_anon 0 [ 367.013980][T10020] inactive_file 0 [ 367.017600][T10020] active_file 0 [ 367.021053][T10020] unevictable 0 [ 367.024672][T10020] hierarchical_memory_limit 314572800 [ 367.030033][T10020] hierarchical_memsw_limit 9223372036854771712 [ 367.036210][T10020] total_cache 4096 [ 367.039972][T10020] total_rss 0 [ 367.043261][T10020] total_shmem 0 [ 367.046707][T10020] total_mapped_file 0 [ 367.050950][T10020] total_dirty 0 [ 367.054469][T10020] total_writeback 0 [ 367.058262][T10020] total_workingset_refault_anon 1347 [ 367.063612][T10020] total_workingset_refault_file 505 [ 367.068815][T10020] total_swap 4554752 [ 367.072743][T10020] total_swapcached 10072064 [ 367.077238][T10020] total_pgpgin 345391 [ 367.081220][T10020] total_pgpgout 345390 [ 367.085333][T10020] total_pgfault 426464 [ 367.089397][T10020] total_pgmajfault 189 [ 367.093481][T10020] total_inactive_anon 0 [ 367.097697][T10020] total_active_anon 0 [ 367.101665][T10020] total_inactive_file 0 [ 367.105900][T10020] total_active_file 0 [ 367.109872][T10020] total_unevictable 0 [ 367.113917][T10020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1920,pid=10004,uid=0 [ 367.128635][T10020] Memory cgroup out of memory: Killed process 10004 (syz.4.1920) total-vm:109068kB, anon-rss:1240kB, file-rss:34376kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 367.154731][T10012] lo speed is unknown, defaulting to 1000 [ 367.297714][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1927'. [ 367.320932][T10012] lo speed is unknown, defaulting to 1000 [ 367.536563][T10041] loop1: detected capacity change from 0 to 1764 [ 367.558080][T10047] loop2: detected capacity change from 0 to 736 [ 367.604801][ T28] audit: type=1400 audit(1784197496.116:2513): avc: denied { mount } for pid=10046 comm="syz.2.1933" name="/" dev="loop2" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 368.135996][ T28] audit: type=1400 audit(1784197496.646:2514): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 368.233303][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1934'. [ 368.259725][T10049] syz.4.1928 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 368.265363][ T28] audit: type=1400 audit(1784197496.736:2515): avc: denied { create } for pid=10051 comm="syz.2.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 368.273928][T10049] CPU: 1 UID: 0 PID: 10049 Comm: syz.4.1928 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 368.273964][T10049] Tainted: [W]=WARN [ 368.274048][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 368.274062][T10049] Call Trace: [ 368.274069][T10049] [ 368.274078][T10049] __dump_stack+0x1d/0x30 [ 368.274105][T10049] dump_stack_lvl+0x95/0xd0 [ 368.274171][T10049] dump_stack+0x15/0x1b [ 368.274193][T10049] dump_header+0x80/0x240 [ 368.274257][T10049] oom_kill_process+0x295/0x350 [ 368.274296][T10049] out_of_memory+0x981/0xbc0 [ 368.274403][T10049] try_charge_memcg+0x621/0xa00 [ 368.274454][T10049] __memcg_kmem_charge_page+0x199/0x3a0 [ 368.274489][T10049] __alloc_frozen_pages_noprof+0x18a/0x350 [ 368.274524][T10049] alloc_pages_bulk_noprof+0x4c3/0x550 [ 368.274555][T10049] ? policy_nodemask+0x417/0x5e0 [ 368.274639][T10049] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 368.274678][T10049] ? alloc_pages_mpol+0xd9/0x1d0 [ 368.274746][T10049] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 368.274816][T10049] __kvmalloc_node_noprof+0x3a0/0x590 [ 368.274846][T10049] ? futex_hash_allocate+0x192/0x920 [ 368.274871][T10049] ? futex_hash_allocate+0x192/0x920 [ 368.274895][T10049] ? futex_hash_allocate+0x192/0x920 [ 368.274981][T10049] futex_hash_allocate+0x192/0x920 [ 368.275005][T10049] ? __pfx_kcov_ioctl+0x10/0x10 [ 368.275032][T10049] ? cap_task_prctl+0x13f/0x6b0 [ 368.275130][T10049] futex_hash_prctl+0xd8/0xf0 [ 368.275154][T10049] __se_sys_prctl+0x4f4/0x13b0 [ 368.275186][T10049] __x64_sys_prctl+0x67/0x80 [ 368.275240][T10049] x64_sys_call+0x2533/0x3020 [ 368.275268][T10049] do_syscall_64+0x136/0x3c0 [ 368.275291][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.275317][T10049] RIP: 0033:0x7f5e03cbde59 [ 368.275405][T10049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.275427][T10049] RSP: 002b:00007f5e022b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 368.275451][T10049] RAX: ffffffffffffffda RBX: 00007f5e03f46270 RCX: 00007f5e03cbde59 [ 368.275537][T10049] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 368.275552][T10049] RBP: 00007f5e03d53e6f R08: 0000000000000000 R09: 0000000000000000 [ 368.275568][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.275582][T10049] R13: 00007f5e03f46308 R14: 00007f5e03f46270 R15: 00007ffcc11d9e68 [ 368.275604][T10049] [ 368.275612][T10049] memory: usage 307200kB, limit 307200kB, failcnt 479 [ 368.363173][ T28] audit: type=1400 audit(1784197496.736:2516): avc: denied { write } for pid=10051 comm="syz.2.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 368.363742][T10049] memory+swap: usage 311632kB, limit 9007199254740988kB, failcnt 0 [ 368.371137][T10053] loop2: detected capacity change from 0 to 512 [ 368.374911][T10049] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 368.374929][T10049] Memory cgroup stats for /syz4: [ 368.375242][T10049] cache 8192 [ 368.390474][ T28] audit: type=1400 audit(1784197496.836:2517): avc: denied { append } for pid=10051 comm="syz.2.1934" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.391159][T10049] rss 0 [ 368.452088][ T28] audit: type=1400 audit(1784197496.916:2518): avc: denied { read write } for pid=10055 comm="syz.3.1935" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 368.456419][T10049] shmem 0 [ 368.456429][T10049] mapped_file 0 [ 368.456437][T10049] dirty 0 [ 368.456444][T10049] writeback 0 [ 368.466882][T10053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 368.486463][T10049] workingset_refault_anon 1414 [ 368.486477][T10049] workingset_refault_file 891 [ 368.486486][T10049] swap 4538368 [ 368.486493][T10049] swapcached 14704640 [ 368.486502][T10049] pgpgin 348757 [ 368.486510][T10049] pgpgout 348755 [ 368.514217][ T28] audit: type=1400 audit(1784197496.916:2519): avc: denied { ioctl open } for pid=10055 comm="syz.3.1935" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 368.518826][T10049] pgfault 429509 [ 368.579916][T10053] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 368.586322][T10049] pgmajfault 238 [ 368.586332][T10049] inactive_anon 0 [ 368.586340][T10049] active_anon 0 [ 368.718627][ T28] audit: type=1400 audit(1784197497.226:2520): avc: denied { create } for pid=10044 comm="syz.0.1932" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.725709][T10049] inactive_file 0 [ 368.725720][T10049] active_file 8192 [ 368.725738][T10049] unevictable 0 [ 368.725745][T10049] hierarchical_memory_limit 314572800 [ 368.725754][T10049] hierarchical_memsw_limit 9223372036854771712 [ 368.725763][T10049] total_cache 8192 [ 368.752758][ T28] audit: type=1400 audit(1784197497.246:2521): avc: denied { create } for pid=10044 comm="syz.0.1932" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 368.757246][T10049] total_rss 0 [ 368.807871][T10049] total_shmem 0 [ 368.811324][T10049] total_mapped_file 0 [ 368.815308][T10049] total_dirty 0 [ 368.818760][T10049] total_writeback 0 [ 368.822989][T10049] total_workingset_refault_anon 1414 [ 368.828344][T10049] total_workingset_refault_file 891 [ 368.833552][T10049] total_swap 4538368 [ 368.837546][T10049] total_swapcached 14704640 [ 368.842039][T10049] total_pgpgin 348757 [ 368.846027][T10049] total_pgpgout 348755 [ 368.850093][T10049] total_pgfault 429509 [ 368.854353][T10049] total_pgmajfault 238 [ 368.858441][T10049] total_inactive_anon 0 [ 368.862598][T10049] total_active_anon 0 [ 368.866590][T10049] total_inactive_file 0 [ 368.870750][T10049] total_active_file 8192 [ 368.875081][T10049] total_unevictable 0 [ 368.879051][T10049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1928,pid=10034,uid=0 [ 368.893796][T10049] Memory cgroup out of memory: Killed process 10034 (syz.4.1928) total-vm:100596kB, anon-rss:1240kB, file-rss:26236kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 368.995342][T10052] loop2: detected capacity change from 0 to 512 [ 369.132089][T10052] EXT4-fs (loop2): invalid inodes per group: 0 [ 369.132089][T10052] [ 369.201020][T10052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10052 comm=syz.2.1934 [ 369.412956][ T28] audit: type=1400 audit(1784197497.916:2522): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 369.436509][ T28] audit: type=1400 audit(1784197497.916:2523): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file1" dev="tmpfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 370.615925][T10069] loop0: detected capacity change from 0 to 128 [ 370.729464][T10073] loop4: detected capacity change from 0 to 1024 [ 370.740679][T10073] EXT4-fs: Ignoring removed bh option [ 370.975275][T10073] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 371.012396][T10069] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.067344][T10073] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 371.079634][T10069] ext4 filesystem being mounted at /383/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.097364][T10073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 371.249144][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.274423][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.279208][T10099] netlink: 'syz.0.1945': attribute type 21 has an invalid length. [ 371.309042][T10101] xt_connbytes: Forcing CT accounting to be enabled [ 371.351135][T10103] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 371.407090][T10107] loop4: detected capacity change from 0 to 1024 [ 371.407569][T10107] EXT4-fs: Ignoring removed bh option [ 371.433367][T10107] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 371.529159][T10107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.594695][T10123] loop2: detected capacity change from 0 to 128 [ 371.636040][T10123] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.658896][T10123] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.225659][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.248417][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.266530][T10134] loop2: detected capacity change from 0 to 7 [ 372.338755][T10146] FAULT_INJECTION: forcing a failure. [ 372.338755][T10146] name failslab, interval 1, probability 0, space 0, times 0 [ 372.414982][T10146] CPU: 1 UID: 0 PID: 10146 Comm: syz.2.1964 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 372.415148][T10146] Tainted: [W]=WARN [ 372.415154][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 372.415175][T10146] Call Trace: [ 372.415182][T10146] [ 372.415244][T10146] __dump_stack+0x1d/0x30 [ 372.415305][T10146] dump_stack_lvl+0x95/0xd0 [ 372.415343][T10146] dump_stack+0x15/0x1b [ 372.415365][T10146] should_fail_ex+0x25e/0x270 [ 372.415441][T10146] should_failslab+0x8c/0xb0 [ 372.415462][T10146] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 372.415483][T10146] ? __alloc_skb+0x2db/0x6f0 [ 372.415569][T10146] ? __alloc_skb+0x2db/0x6f0 [ 372.415592][T10146] __alloc_skb+0x2db/0x6f0 [ 372.415614][T10146] ? __alloc_skb+0x205/0x6f0 [ 372.415666][T10146] netlink_ack+0xfd/0x530 [ 372.415700][T10146] netlink_rcv_skb+0x18d/0x220 [ 372.415722][T10146] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 372.415744][T10146] nfnetlink_rcv+0x15f/0x1740 [ 372.415832][T10146] ? skb_release_data+0x5d5/0x600 [ 372.415857][T10146] ? kmem_cache_free+0xca/0x380 [ 372.415950][T10146] ? __kfree_skb+0x109/0x150 [ 372.415974][T10146] ? nlmon_xmit+0x4f/0x60 [ 372.416000][T10146] ? consume_skb+0x4b/0x130 [ 372.416029][T10146] ? nlmon_xmit+0x4f/0x60 [ 372.416075][T10146] ? dev_hard_start_xmit+0x34e/0x380 [ 372.416179][T10146] ? __dev_queue_xmit+0x135e/0x1e60 [ 372.416211][T10146] ? __dev_queue_xmit+0x151/0x1e60 [ 372.416243][T10146] ? ref_tracker_free+0x380/0x3f0 [ 372.416292][T10146] ? __netlink_deliver_tap+0x4e6/0x510 [ 372.416322][T10146] netlink_unicast+0x5a7/0x680 [ 372.416345][T10146] netlink_sendmsg+0x5be/0x6f0 [ 372.416415][T10146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.416481][T10146] ____sys_sendmsg+0x532/0x580 [ 372.416629][T10146] ___sys_sendmsg+0x195/0x1e0 [ 372.416811][T10146] __x64_sys_sendmsg+0xd4/0x160 [ 372.416842][T10146] x64_sys_call+0x194c/0x3020 [ 372.416863][T10146] do_syscall_64+0x136/0x3c0 [ 372.416882][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.416970][T10146] RIP: 0033:0x7fa22f43de59 [ 372.416985][T10146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.417004][T10146] RSP: 002b:00007fa22de97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.417088][T10146] RAX: ffffffffffffffda RBX: 00007fa22f6c5fa0 RCX: 00007fa22f43de59 [ 372.417101][T10146] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 372.417113][T10146] RBP: 00007fa22de97090 R08: 0000000000000000 R09: 0000000000000000 [ 372.417125][T10146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.417137][T10146] R13: 00007fa22f6c6038 R14: 00007fa22f6c5fa0 R15: 00007ffe7e4b2648 [ 372.417184][T10146] [ 372.726096][T10151] loop4: detected capacity change from 0 to 512 [ 372.739044][T10151] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 372.767767][T10151] pim6reg: entered allmulticast mode [ 372.774773][T10151] pim6reg: left allmulticast mode [ 373.432154][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 373.432224][ T28] audit: type=1400 audit(1784197501.896:2543): avc: denied { write } for pid=10166 comm="syz.0.1968" name="unix" dev="proc" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 374.700249][T10194] syz.1.1975 (10194) used greatest stack depth: 9120 bytes left [ 374.952000][ T28] audit: type=1400 audit(1784197503.456:2544): avc: denied { map } for pid=10205 comm="syz.2.1980" path="socket:[30222]" dev="sockfs" ino=30222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 375.813043][ T28] audit: type=1400 audit(1784197503.456:2545): avc: denied { accept } for pid=10205 comm="syz.2.1980" path="socket:[30222]" dev="sockfs" ino=30222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 376.276049][T10215] syz.1.1977 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 376.290208][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.1.1977 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 376.290245][T10215] Tainted: [W]=WARN [ 376.290254][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 376.290333][T10215] Call Trace: [ 376.290341][T10215] [ 376.290350][T10215] __dump_stack+0x1d/0x30 [ 376.290375][T10215] dump_stack_lvl+0x95/0xd0 [ 376.290423][T10215] dump_stack+0x15/0x1b [ 376.290446][T10215] dump_header+0x80/0x240 [ 376.290474][T10215] oom_kill_process+0x295/0x350 [ 376.290587][T10215] out_of_memory+0x981/0xbc0 [ 376.290676][T10215] try_charge_memcg+0x621/0xa00 [ 376.290714][T10215] ? __rcu_read_unlock+0x4e/0x70 [ 376.290751][T10215] __memcg_kmem_charge_page+0x199/0x3a0 [ 376.290918][T10215] __alloc_frozen_pages_noprof+0x18a/0x350 [ 376.290951][T10215] alloc_pages_mpol+0xa9/0x1d0 [ 376.291054][T10215] alloc_pages_noprof+0x8f/0x140 [ 376.291090][T10215] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 376.291189][T10215] __kvmalloc_node_noprof+0x3a0/0x590 [ 376.291230][T10215] ? futex_hash_allocate+0x192/0x920 [ 376.291251][T10215] ? futex_hash_allocate+0x192/0x920 [ 376.291282][T10215] ? futex_hash_allocate+0x192/0x920 [ 376.291310][T10215] futex_hash_allocate+0x192/0x920 [ 376.291347][T10215] ? cap_task_prctl+0x13f/0x6b0 [ 376.291387][T10215] futex_hash_prctl+0xd8/0xf0 [ 376.291408][T10215] __se_sys_prctl+0x4f4/0x13b0 [ 376.291475][T10215] __x64_sys_prctl+0x67/0x80 [ 376.291506][T10215] x64_sys_call+0x2533/0x3020 [ 376.291588][T10215] do_syscall_64+0x136/0x3c0 [ 376.291612][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.291638][T10215] RIP: 0033:0x7fe04345de59 [ 376.291654][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.291674][T10215] RSP: 002b:00007fe041e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 376.291693][T10215] RAX: ffffffffffffffda RBX: 00007fe0436e6180 RCX: 00007fe04345de59 [ 376.291756][T10215] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 376.291772][T10215] RBP: 00007fe0434f3e6f R08: 0000000000000000 R09: 0000000000000000 [ 376.291789][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.291802][T10215] R13: 00007fe0436e6218 R14: 00007fe0436e6180 R15: 00007ffea59e37c8 [ 376.291821][T10215] [ 376.291828][T10215] memory: usage 307200kB, limit 307200kB, failcnt 3033 [ 376.529836][T10215] memory+swap: usage 308824kB, limit 9007199254740988kB, failcnt 0 [ 376.537757][T10215] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 376.545054][T10215] Memory cgroup stats for /syz1: [ 376.545311][T10215] cache 4096 [ 376.553506][T10215] rss 8192 [ 376.556567][T10215] shmem 0 [ 376.559493][T10215] mapped_file 4096 [ 376.563236][T10215] dirty 4096 [ 376.566426][T10215] writeback 4096 [ 376.569992][T10215] workingset_refault_anon 206 [ 376.574734][T10215] workingset_refault_file 1278 [ 376.579616][T10215] swap 1667072 [ 376.583061][T10215] swapcached 15699968 [ 376.587045][T10215] pgpgin 382823 [ 376.590489][T10215] pgpgout 382816 [ 376.594051][T10215] pgfault 437535 [ 376.597611][T10215] pgmajfault 112 [ 376.601140][T10215] inactive_anon 24576 [ 376.605217][T10215] active_anon 0 [ 376.608702][T10215] inactive_file 0 [ 376.612319][T10215] active_file 0 [ 376.615811][T10215] unevictable 0 [ 376.619312][T10215] hierarchical_memory_limit 314572800 [ 376.624763][T10215] hierarchical_memsw_limit 9223372036854771712 [ 376.630909][T10215] total_cache 4096 [ 376.634645][T10215] total_rss 8192 [ 376.638270][T10215] total_shmem 0 [ 376.641723][T10215] total_mapped_file 4096 [ 376.646256][T10215] total_dirty 4096 [ 376.650014][T10215] total_writeback 4096 [ 376.654098][T10215] total_workingset_refault_anon 206 [ 376.659320][T10215] total_workingset_refault_file 1278 [ 376.664616][T10215] total_swap 1667072 [ 376.668503][T10215] total_swapcached 15699968 [ 376.673127][T10215] total_pgpgin 382823 [ 376.677102][T10215] total_pgpgout 382816 [ 376.681186][T10215] total_pgfault 437535 [ 376.685271][T10215] total_pgmajfault 112 [ 376.689331][T10215] total_inactive_anon 24576 [ 376.693855][T10215] total_active_anon 0 [ 376.697841][T10215] total_inactive_file 0 [ 376.701997][T10215] total_active_file 0 [ 376.706017][T10215] total_unevictable 0 [ 376.710034][T10215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1977,pid=10199,uid=0 [ 376.724779][T10215] Memory cgroup out of memory: Killed process 10199 (syz.1.1977) total-vm:98548kB, anon-rss:1248kB, file-rss:26256kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 377.346032][T10221] syz.2.1981 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 377.361882][T10221] CPU: 1 UID: 0 PID: 10221 Comm: syz.2.1981 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 377.361930][T10221] Tainted: [W]=WARN [ 377.361938][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 377.361954][T10221] Call Trace: [ 377.361961][T10221] [ 377.361970][T10221] __dump_stack+0x1d/0x30 [ 377.361995][T10221] dump_stack_lvl+0x95/0xd0 [ 377.362076][T10221] dump_stack+0x15/0x1b [ 377.362095][T10221] dump_header+0x80/0x240 [ 377.362160][T10221] oom_kill_process+0x295/0x350 [ 377.362250][T10221] out_of_memory+0x981/0xbc0 [ 377.362286][T10221] try_charge_memcg+0x621/0xa00 [ 377.362379][T10221] ? __rcu_read_unlock+0x4e/0x70 [ 377.362411][T10221] __memcg_kmem_charge_page+0x199/0x3a0 [ 377.362509][T10221] __alloc_frozen_pages_noprof+0x18a/0x350 [ 377.362542][T10221] alloc_pages_mpol+0xa9/0x1d0 [ 377.362574][T10221] alloc_pages_noprof+0x8f/0x140 [ 377.362641][T10221] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 377.362681][T10221] __kvmalloc_node_noprof+0x3a0/0x590 [ 377.362724][T10221] ? futex_hash_allocate+0x192/0x920 [ 377.362749][T10221] ? futex_hash_allocate+0x192/0x920 [ 377.362798][T10221] ? futex_hash_allocate+0x192/0x920 [ 377.362821][T10221] futex_hash_allocate+0x192/0x920 [ 377.362843][T10221] ? cap_task_prctl+0x13f/0x6b0 [ 377.362942][T10221] futex_hash_prctl+0xd8/0xf0 [ 377.362968][T10221] __se_sys_prctl+0x4f4/0x13b0 [ 377.363104][T10221] __x64_sys_prctl+0x67/0x80 [ 377.363134][T10221] x64_sys_call+0x2533/0x3020 [ 377.363165][T10221] do_syscall_64+0x136/0x3c0 [ 377.363188][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.363209][T10221] RIP: 0033:0x7fa22f43de59 [ 377.363244][T10221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.363263][T10221] RSP: 002b:00007fa22da32028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 377.363284][T10221] RAX: ffffffffffffffda RBX: 00007fa22f6c6270 RCX: 00007fa22f43de59 [ 377.363383][T10221] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 377.363399][T10221] RBP: 00007fa22f4d3e6f R08: 0000000000000000 R09: 0000000000000000 [ 377.363416][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.363431][T10221] R13: 00007fa22f6c6308 R14: 00007fa22f6c6270 R15: 00007ffe7e4b2648 [ 377.363450][T10221] [ 377.596051][T10221] memory: usage 307196kB, limit 307200kB, failcnt 541 [ 377.602994][T10221] memory+swap: usage 311712kB, limit 9007199254740988kB, failcnt 0 [ 377.610960][T10221] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 377.618611][T10221] Memory cgroup stats for /syz2: [ 377.618843][T10221] cache 0 [ 377.626897][T10221] rss 0 [ 377.629739][T10221] shmem 0 [ 377.632680][T10221] mapped_file 0 [ 377.636129][T10221] dirty 0 [ 377.639074][T10221] writeback 4096 [ 377.642603][T10221] workingset_refault_anon 235 [ 377.647278][T10221] workingset_refault_file 1789 [ 377.652023][T10221] swap 4620288 [ 377.655417][T10221] swapcached 9875456 [ 377.659296][T10221] pgpgin 395471 [ 377.662746][T10221] pgpgout 395468 [ 377.666278][T10221] pgfault 455771 [ 377.669804][T10221] pgmajfault 172 [ 377.673341][T10221] inactive_anon 8192 [ 377.677216][T10221] active_anon 0 [ 377.680659][T10221] inactive_file 0 [ 377.684287][T10221] active_file 0 [ 377.687790][T10221] unevictable 0 [ 377.691231][T10221] hierarchical_memory_limit 314572800 [ 377.696612][T10221] hierarchical_memsw_limit 9223372036854771712 [ 377.702828][T10221] total_cache 0 [ 377.706486][T10221] total_rss 0 [ 377.709760][T10221] total_shmem 0 [ 377.713234][T10221] total_mapped_file 0 [ 377.717218][T10221] total_dirty 0 [ 377.720670][T10221] total_writeback 4096 [ 377.724772][T10221] total_workingset_refault_anon 235 [ 377.729961][T10221] total_workingset_refault_file 1789 [ 377.735251][T10221] total_swap 4620288 [ 377.739128][T10221] total_swapcached 9875456 [ 377.743546][T10221] total_pgpgin 395471 [ 377.747515][T10221] total_pgpgout 395468 [ 377.751646][T10221] total_pgfault 455771 [ 377.755778][T10221] total_pgmajfault 172 [ 377.759834][T10221] total_inactive_anon 8192 [ 377.764331][T10221] total_active_anon 0 [ 377.768295][T10221] total_inactive_file 0 [ 377.772506][T10221] total_active_file 0 [ 377.776508][T10221] total_unevictable 0 [ 377.780516][T10221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1981,pid=10217,uid=0 [ 377.795260][T10221] Memory cgroup out of memory: Killed process 10217 (syz.2.1981) total-vm:104832kB, anon-rss:1240kB, file-rss:30280kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 377.985205][ T28] audit: type=1400 audit(1784197506.496:2546): avc: denied { read write } for pid=10229 comm="syz.4.1985" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 378.008558][ T28] audit: type=1400 audit(1784197506.496:2547): avc: denied { open } for pid=10229 comm="syz.4.1985" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 378.031756][ T28] audit: type=1400 audit(1784197506.496:2548): avc: denied { ioctl } for pid=10229 comm="syz.4.1985" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 378.072569][T10230] lo speed is unknown, defaulting to 1000 [ 378.083958][T10230] lo speed is unknown, defaulting to 1000 [ 378.103682][ T28] audit: type=1400 audit(1784197506.606:2549): avc: denied { create } for pid=10227 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 378.192844][T10235] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1986'. [ 378.246048][ T28] audit: type=1400 audit(1784197506.636:2550): avc: denied { sys_admin } for pid=10227 comm="syz.3.1983" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 378.343198][ T28] audit: type=1400 audit(1784197506.856:2551): avc: denied { read } for pid=10241 comm="syz.1.1989" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 378.382602][T10242] futex_wake_op: syz.1.1989 tries to shift op by 36; fix this program [ 378.391270][ T28] audit: type=1400 audit(1784197506.856:2552): avc: denied { open } for pid=10241 comm="syz.1.1989" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 378.481797][ T28] audit: type=1400 audit(1784197506.986:2553): avc: denied { getopt } for pid=10241 comm="syz.1.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 380.405942][T10271] loop4: detected capacity change from 0 to 1024 [ 380.430641][T10271] EXT4-fs: Ignoring removed orlov option [ 380.463234][T10271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.490179][T10273] lo speed is unknown, defaulting to 1000 [ 380.501177][T10284] loop1: detected capacity change from 0 to 512 [ 380.538542][T10273] lo speed is unknown, defaulting to 1000 [ 380.554421][T10284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 380.632421][T10284] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #11: comm syz.1.1999: corrupted in-inode xattr: invalid ea_ino [ 380.632455][T10284] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 380.632651][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 380.632674][ C0] EXT4-fs (loop1): initial error at time 1784197509: ext4_iget_extra_inode:5180: inode 11 [ 380.632707][ C0] EXT4-fs (loop1): last error at time 1784197509: ext4_iget_extra_inode:5180: inode 11 [ 380.634085][T10284] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1999: couldn't read orphan inode 11 (err -117) [ 380.634110][T10284] loop1: lost filesystem error report for type 5 error -117 [ 380.636096][T10284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.639727][ T28] audit: type=1400 audit(1784197509.146:2554): avc: denied { ioctl } for pid=10272 comm="syz.1.1999" path="/dev/usbmon2" dev="devtmpfs" ino=148 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 380.673235][T10292] netlink: 'syz.4.1997': attribute type 2 has an invalid length. [ 380.729031][ T28] audit: type=1400 audit(1784197509.236:2555): avc: denied { write } for pid=10270 comm="syz.4.1997" path="socket:[30351]" dev="sockfs" ino=30351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 380.773812][T10299] loop3: detected capacity change from 0 to 736 [ 380.813252][T10297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10297 comm=syz.2.2004 [ 380.834695][T10303] FAULT_INJECTION: forcing a failure. [ 380.834695][T10303] name failslab, interval 1, probability 0, space 0, times 0 [ 380.870903][T10297] loop2: detected capacity change from 0 to 256 [ 380.889974][ T28] audit: type=1400 audit(1784197509.296:2556): avc: denied { read write } for pid=10270 comm="syz.4.1997" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 380.960379][T10303] CPU: 1 UID: 0 PID: 10303 Comm: syz.0.2005 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 380.960414][T10303] Tainted: [W]=WARN [ 380.960421][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 380.960432][T10303] Call Trace: [ 380.960439][T10303] [ 380.960447][T10303] __dump_stack+0x1d/0x30 [ 380.960472][T10303] dump_stack_lvl+0x95/0xd0 [ 380.960550][T10303] dump_stack+0x15/0x1b [ 380.960599][T10303] should_fail_ex+0x25e/0x270 [ 380.960696][T10303] should_failslab+0x8c/0xb0 [ 380.960718][T10303] __kvmalloc_node_noprof+0x15b/0x590 [ 380.960741][T10303] ? io_alloc_cache_init+0x36/0xb0 [ 380.960849][T10303] ? io_alloc_cache_init+0x36/0xb0 [ 380.960881][T10303] io_alloc_cache_init+0x36/0xb0 [ 380.961032][T10303] io_ring_ctx_alloc+0x2a6/0x630 [ 380.961061][T10303] io_uring_create+0x4d/0x4f0 [ 380.961089][T10303] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 380.961148][T10303] __x64_sys_io_uring_setup+0x31/0x40 [ 380.961168][T10303] x64_sys_call+0x2962/0x3020 [ 380.961259][T10303] do_syscall_64+0x136/0x3c0 [ 380.961278][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.961297][T10303] RIP: 0033:0x7f30768fde59 [ 380.961312][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.961353][T10303] RSP: 002b:00007f3075356fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 380.961371][T10303] RAX: ffffffffffffffda RBX: 0000200000000840 RCX: 00007f30768fde59 [ 380.961383][T10303] RDX: 0000200000000900 RSI: 0000200000000840 RDI: 0000000000000989 [ 380.961442][T10303] RBP: 00007f3075357090 R08: 0000000000000000 R09: 0000000000000101 [ 380.961453][T10303] R10: 0000200000000940 R11: 0000000000000206 R12: 0000200000000900 [ 380.961465][T10303] R13: 0000200000000940 R14: 00002000000008c0 R15: 00007fffba6766a8 [ 380.961489][T10303] [ 380.961698][ T28] audit: type=1400 audit(1784197509.296:2557): avc: denied { open } for pid=10270 comm="syz.4.1997" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 380.963772][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.984805][T10297] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 381.059654][T10299] FAULT_INJECTION: forcing a failure. [ 381.059654][T10299] name failslab, interval 1, probability 0, space 0, times 0 [ 381.137602][T10306] loop0: detected capacity change from 0 to 736 [ 381.178330][T10299] CPU: 0 UID: 0 PID: 10299 Comm: syz.3.2006 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 381.178443][T10299] Tainted: [W]=WARN [ 381.178450][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 381.178540][T10299] Call Trace: [ 381.178547][T10299] [ 381.178556][T10299] __dump_stack+0x1d/0x30 [ 381.178655][T10299] dump_stack_lvl+0x95/0xd0 [ 381.178685][T10299] dump_stack+0x15/0x1b [ 381.178715][T10299] should_fail_ex+0x25e/0x270 [ 381.178744][T10299] ? isofs_readdir+0x54/0xbc0 [ 381.178843][T10299] should_failslab+0x8c/0xb0 [ 381.178866][T10299] __kmalloc_cache_noprof+0x7b/0x3d0 [ 381.178892][T10299] ? isofs_readdir+0x54/0xbc0 [ 381.178957][T10299] isofs_readdir+0x54/0xbc0 [ 381.178986][T10299] ? __rcu_read_unlock+0x4e/0x70 [ 381.179012][T10299] ? get_pid_task+0x92/0xc0 [ 381.179096][T10299] ? proc_fail_nth_write+0x13b/0x160 [ 381.179118][T10299] ? avc_policy_seqno+0x15/0x30 [ 381.179140][T10299] ? selinux_file_permission+0x1dc/0x310 [ 381.179176][T10299] iterate_dir+0x109/0x2f0 [ 381.179243][T10299] __se_sys_getdents+0xd2/0x220 [ 381.179263][T10299] ? __pfx_filldir+0x10/0x10 [ 381.179285][T10299] __x64_sys_getdents+0x43/0x50 [ 381.179306][T10299] x64_sys_call+0xea8/0x3020 [ 381.179375][T10299] do_syscall_64+0x136/0x3c0 [ 381.179396][T10299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.179424][T10299] RIP: 0033:0x7facd77fde59 [ 381.179441][T10299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.179461][T10299] RSP: 002b:00007facd6257028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 381.179492][T10299] RAX: ffffffffffffffda RBX: 00007facd7a85fa0 RCX: 00007facd77fde59 [ 381.179562][T10299] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000004 [ 381.179576][T10299] RBP: 00007facd6257090 R08: 0000000000000000 R09: 0000000000000000 [ 381.179590][T10299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.179603][T10299] R13: 00007facd7a86038 R14: 00007facd7a85fa0 R15: 00007ffc1a7a3f38 [ 381.179623][T10299] [ 381.205473][T10297] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.358484][T10306] netlink: 'syz.0.2008': attribute type 23 has an invalid length. [ 381.404303][T10316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10316 comm=syz.1.2012 [ 381.408202][ T28] audit: type=1400 audit(1784197509.916:2558): avc: denied { mount } for pid=10315 comm="syz.1.2012" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 381.503366][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 381.508461][T10320] syzkaller0: entered promiscuous mode [ 381.518735][T10320] syzkaller0: entered allmulticast mode [ 381.546150][T10320] @0Ù: renamed from bond_slave_1 (while UP) [ 381.572968][T10320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2014'. [ 381.585919][ T28] audit: type=1400 audit(1784197510.076:2559): avc: denied { create } for pid=10318 comm="syz.1.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.616535][ T28] audit: type=1400 audit(1784197510.076:2560): avc: denied { setopt } for pid=10318 comm="syz.1.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.637902][T10329] loop2: detected capacity change from 0 to 1024 [ 381.638942][ T28] audit: type=1400 audit(1784197510.076:2561): avc: denied { read } for pid=10318 comm="syz.1.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.664226][ T28] audit: type=1400 audit(1784197510.126:2562): avc: denied { getopt } for pid=10318 comm="syz.1.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.674883][T10329] EXT4-fs: Ignoring removed orlov option [ 381.707212][T10329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.728065][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.752514][T10329] netlink: 'syz.2.2016': attribute type 2 has an invalid length. [ 381.765674][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.775477][T10338] loop1: detected capacity change from 0 to 256 [ 381.789080][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 381.798909][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 381.843937][T10341] loop1: detected capacity change from 0 to 512 [ 381.917355][T10341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.930165][T10341] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.978349][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.040627][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.126195][T10348] pim6reg: entered allmulticast mode [ 382.133099][T10348] pim6reg: left allmulticast mode [ 382.185923][T10357] loop1: detected capacity change from 0 to 512 [ 382.195697][T10357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.215722][T10357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.228625][T10357] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.246261][ T332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.281840][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.295753][ T332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.411418][T10369] loop1: detected capacity change from 0 to 1764 [ 382.420497][ T332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.071125][ T332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.339360][T10366] lo speed is unknown, defaulting to 1000 [ 383.359005][T10366] lo speed is unknown, defaulting to 1000 [ 383.446966][T10374] syz.4.2027 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 383.461092][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.4.2027 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 383.461223][T10374] Tainted: [W]=WARN [ 383.461231][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 383.461246][T10374] Call Trace: [ 383.461255][T10374] [ 383.461262][T10374] __dump_stack+0x1d/0x30 [ 383.461289][T10374] dump_stack_lvl+0x95/0xd0 [ 383.461315][T10374] dump_stack+0x15/0x1b [ 383.461402][T10374] dump_header+0x80/0x240 [ 383.461428][T10374] oom_kill_process+0x295/0x350 [ 383.461464][T10374] out_of_memory+0x981/0xbc0 [ 383.461515][T10374] try_charge_memcg+0x621/0xa00 [ 383.461583][T10374] ? __rcu_read_unlock+0x4e/0x70 [ 383.461678][T10374] __memcg_kmem_charge_page+0x199/0x3a0 [ 383.461772][T10374] __alloc_frozen_pages_noprof+0x18a/0x350 [ 383.461864][T10374] alloc_pages_mpol+0xa9/0x1d0 [ 383.461903][T10374] alloc_pages_noprof+0x8f/0x140 [ 383.462009][T10374] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 383.462084][T10374] __kvmalloc_node_noprof+0x3a0/0x590 [ 383.462118][T10374] ? futex_hash_allocate+0x192/0x920 [ 383.462158][T10374] ? futex_hash_allocate+0x192/0x920 [ 383.462181][T10374] ? futex_hash_allocate+0x192/0x920 [ 383.462204][T10374] futex_hash_allocate+0x192/0x920 [ 383.462302][T10374] ? cap_task_prctl+0x13f/0x6b0 [ 383.462337][T10374] futex_hash_prctl+0xd8/0xf0 [ 383.462363][T10374] __se_sys_prctl+0x4f4/0x13b0 [ 383.462424][T10374] __x64_sys_prctl+0x67/0x80 [ 383.462451][T10374] x64_sys_call+0x2533/0x3020 [ 383.462476][T10374] do_syscall_64+0x136/0x3c0 [ 383.462497][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.462580][T10374] RIP: 0033:0x7f5e03cbde59 [ 383.462597][T10374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.462616][T10374] RSP: 002b:00007f5e01e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 383.462638][T10374] RAX: ffffffffffffffda RBX: 00007f5e03f46360 RCX: 00007f5e03cbde59 [ 383.462655][T10374] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 383.462742][T10374] RBP: 00007f5e03d53e6f R08: 0000000000000000 R09: 0000000000000000 [ 383.462759][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.462834][T10374] R13: 00007f5e03f463f8 R14: 00007f5e03f46360 R15: 00007ffcc11d9e68 [ 383.462859][T10374] [ 383.462867][T10374] memory: usage 307200kB, limit 307200kB, failcnt 900 [ 383.658590][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.658928][T10374] memory+swap: usage 311808kB, limit 9007199254740988kB, failcnt 0 [ 383.667177][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.674894][T10374] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 383.674917][T10374] Memory cgroup stats for /syz4: [ 383.675251][T10374] cache 0 [ 383.683402][T10366] bridge_slave_0: entered allmulticast mode [ 383.690890][T10374] rss 0 [ 383.690899][T10374] shmem 0 [ 383.690905][T10374] mapped_file 0 [ 383.690937][T10374] dirty 0 [ 383.690944][T10374] writeback 0 [ 383.690951][T10374] workingset_refault_anon 1445 [ 383.690961][T10374] workingset_refault_file 1151 [ 383.690970][T10374] swap 4718592 [ 383.691017][T10374] swapcached 19410944 [ 383.695437][T10366] bridge_slave_0: entered promiscuous mode [ 383.700813][T10374] pgpgin 355972 [ 383.700823][T10374] pgpgout 355966 [ 383.700832][T10374] pgfault 437469 [ 383.709131][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.715903][T10374] pgmajfault 256 [ 383.723265][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.730262][T10374] inactive_anon 16384 [ 383.730273][T10374] active_anon 8192 [ 383.737501][T10366] bridge_slave_1: entered allmulticast mode [ 383.738219][T10374] inactive_file 0 [ 383.738282][T10374] active_file 0 [ 383.745452][T10366] bridge_slave_1: entered promiscuous mode [ 383.746905][T10374] unevictable 0 [ 383.746916][T10374] hierarchical_memory_limit 314572800 [ 383.746926][T10374] hierarchical_memsw_limit 9223372036854771712 [ 383.746935][T10374] total_cache 0 [ 383.746942][T10374] total_rss 0 [ 383.746949][T10374] total_shmem 0 [ 383.746956][T10374] total_mapped_file 0 [ 383.763193][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.764372][T10374] total_dirty 0 [ 383.770228][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.772507][T10374] total_writeback 0 [ 383.772517][T10374] total_workingset_refault_anon 1445 [ 383.772527][T10374] total_workingset_refault_file 1151 [ 383.788342][T10366] team0: Port device team_slave_0 added [ 383.789646][T10374] total_swap 4718592 [ 383.794426][T10366] team0: Port device team_slave_1 added [ 383.800268][T10374] total_swapcached 19410944 [ 383.800278][T10374] total_pgpgin 355972 [ 383.800285][T10374] total_pgpgout 355966 [ 383.800293][T10374] total_pgfault 437469 [ 383.800301][T10374] total_pgmajfault 256 [ 383.815363][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.818569][T10374] total_inactive_anon 16384 [ 383.818579][T10374] total_active_anon 8192 [ 383.818587][T10374] total_inactive_file 0 [ 383.818596][T10374] total_active_file 0 [ 383.824914][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.828108][T10374] total_unevictable 0 [ 383.828120][T10374] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 383.831561][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.837398][T10374] ,cpuset= [ 383.841732][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.846231][T10374] /,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2027,pid=10360,uid=0 [ 383.846366][T10374] Memory cgroup out of memory: Killed process 10360 (syz.4.2027) total-vm:109068kB, anon-rss:1240kB, file-rss:34456kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 383.857312][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.073998][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.407950][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.466776][T10397] set_capacity_and_notify: 1 callbacks suppressed [ 385.466795][T10397] loop2: detected capacity change from 0 to 1024 [ 385.483398][T10399] FAULT_INJECTION: forcing a failure. [ 385.483398][T10399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.499482][T10397] EXT4-fs: Ignoring removed orlov option [ 385.500780][T10366] hsr_slave_0: entered promiscuous mode [ 385.524445][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.3.2036 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 385.524480][T10399] Tainted: [W]=WARN [ 385.524487][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 385.524502][T10399] Call Trace: [ 385.524531][T10399] [ 385.524539][T10399] __dump_stack+0x1d/0x30 [ 385.524572][T10399] dump_stack_lvl+0x95/0xd0 [ 385.524672][T10399] dump_stack+0x15/0x1b [ 385.524723][T10399] should_fail_ex+0x25e/0x270 [ 385.524817][T10399] should_fail+0xb/0x20 [ 385.524887][T10399] should_fail_usercopy+0x1a/0x20 [ 385.524916][T10399] _copy_from_iter+0xcc/0xe70 [ 385.524949][T10399] ? __alloc_skb+0x511/0x6f0 [ 385.524977][T10399] ? __alloc_skb+0x205/0x6f0 [ 385.525062][T10399] netlink_sendmsg+0x4a4/0x6f0 [ 385.525146][T10399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.525168][T10399] ____sys_sendmsg+0x532/0x580 [ 385.525238][T10399] ___sys_sendmsg+0x195/0x1e0 [ 385.525281][T10399] __x64_sys_sendmsg+0xd4/0x160 [ 385.525312][T10399] x64_sys_call+0x194c/0x3020 [ 385.525449][T10399] do_syscall_64+0x136/0x3c0 [ 385.525472][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.525545][T10399] RIP: 0033:0x7facd77fde59 [ 385.525564][T10399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.525581][T10399] RSP: 002b:00007facd6257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.525608][T10399] RAX: ffffffffffffffda RBX: 00007facd7a85fa0 RCX: 00007facd77fde59 [ 385.525624][T10399] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 385.525699][T10399] RBP: 00007facd6257090 R08: 0000000000000000 R09: 0000000000000000 [ 385.525712][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.525725][T10399] R13: 00007facd7a86038 R14: 00007facd7a85fa0 R15: 00007ffc1a7a3f38 [ 385.525805][T10399] [ 385.526244][T10366] hsr_slave_1: entered promiscuous mode [ 385.673941][T10397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.720621][T10366] debugfs: 'hsr0' already exists in 'hsr' [ 385.765204][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 385.765219][ T28] audit: type=1400 audit(1784197514.266:2575): avc: denied { read } for pid=10396 comm="syz.2.2032" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.766165][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 385.785518][ T28] audit: type=1400 audit(1784197514.266:2576): avc: denied { open } for pid=10396 comm="syz.2.2032" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.794860][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 385.845119][T10366] Cannot create hsr debugfs directory [ 385.852809][ T28] audit: type=1400 audit(1784197514.266:2577): avc: denied { ioctl } for pid=10396 comm="syz.2.2032" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.862853][T10414] loop1: detected capacity change from 0 to 2048 [ 385.899388][ T28] audit: type=1400 audit(1784197514.406:2578): avc: denied { setattr } for pid=10396 comm="syz.2.2032" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 385.949064][ T28] audit: type=1400 audit(1784197514.446:2579): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 385.973725][T10414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.995087][ T28] audit: type=1400 audit(1784197514.506:2580): avc: denied { write } for pid=10410 comm="syz.1.2041" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.018169][ T28] audit: type=1400 audit(1784197514.506:2581): avc: denied { create } for pid=10410 comm="syz.1.2041" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 386.061558][ T28] audit: type=1400 audit(1784197514.556:2582): avc: denied { search } for pid=3020 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.083053][ T28] audit: type=1400 audit(1784197514.556:2583): avc: denied { search } for pid=3020 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.110100][ T28] audit: type=1400 audit(1784197514.556:2584): avc: denied { search } for pid=3020 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.149955][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.209168][ T332] bridge_slave_1: left allmulticast mode [ 386.215439][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.225020][ T332] bridge_slave_1: left promiscuous mode [ 386.230997][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.449191][T10428] loop3: detected capacity change from 0 to 1024 [ 386.519991][T10428] EXT4-fs: Ignoring removed bh option [ 386.537088][T10428] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 386.676720][T10428] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 386.696531][T10428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.756367][ T332] bridge_slave_0: left allmulticast mode [ 386.795260][ T332] bridge_slave_0: left promiscuous mode [ 386.812276][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.327653][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.395963][T10453] loop4: detected capacity change from 0 to 256 [ 387.476696][T10451] loop3: detected capacity change from 0 to 8192 [ 387.517727][ T332] bond1 (unregistering): Released all slaves [ 387.546858][ T332] bond2 (unregistering): Released all slaves [ 387.556379][ T332] bond3 (unregistering): Released all slaves [ 387.566121][ T332] bond4 (unregistering): Released all slaves [ 387.575619][ T332] bond5 (unregistering): Released all slaves [ 387.584699][ T332] bond6 (unregistering): Released all slaves [ 387.594342][ T332] bond7 (unregistering): Released all slaves [ 387.610912][ T332] bond8 (unregistering): Released all slaves [ 387.620680][ T332] bond9 (unregistering): Released all slaves [ 387.624851][T10444] syz.2.2048 (10444) used greatest stack depth: 9104 bytes left [ 387.637551][ T332] bond10 (unregistering): Released all slaves [ 387.651838][ T332] bond11 (unregistering): Released all slaves [ 387.671412][ T332] bond12 (unregistering): Released all slaves [ 387.693229][ T332] bond13 (unregistering): Released all slaves [ 387.746560][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2057'. [ 387.775485][T10473] loop4: detected capacity change from 0 to 256 [ 387.793362][ T332] IPVS: stopping backup sync thread 3524 ... [ 387.826479][T10478] loop2: detected capacity change from 0 to 1024 [ 387.849898][T10478] EXT4-fs: Ignoring removed orlov option [ 387.893735][T10478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.943234][T10478] netlink: 'syz.2.2060': attribute type 2 has an invalid length. [ 387.970704][T10484] loop1: detected capacity change from 0 to 1024 [ 387.977627][T10484] EXT4-fs: Ignoring removed bh option [ 387.986114][T10484] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 387.999474][T10486] netlink: 'syz.3.2062': attribute type 5 has an invalid length. [ 388.012306][ T332] batadv0: left promiscuous mode [ 388.035047][ T332] hsr_slave_0: left promiscuous mode [ 388.042397][ T332] hsr_slave_1: left promiscuous mode [ 388.056876][T10484] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 388.067448][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.084759][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.104638][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.105393][T10484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 388.113187][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.142703][ T332] veth1_macvtap: left promiscuous mode [ 388.150837][ T332] veth0_macvtap: left promiscuous mode [ 388.175830][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.221515][ T332] team0 (unregistering): Port device team_slave_1 removed [ 388.231964][ T332] team0 (unregistering): Port device team_slave_0 removed [ 388.274095][ T3362] lo speed is unknown, defaulting to 1000 [ 388.274423][T10513] tipc: Started in network mode [ 388.279955][ T3362] infiniband syz0: ib_query_port failed (-19) [ 388.294757][T10513] tipc: Node identity 4, cluster identity 4711 [ 388.302449][T10513] tipc: Node number set to 4 [ 388.354962][T10366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.363902][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.372247][T10366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.381612][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.400276][T10366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.421187][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.429209][T10366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.440333][T10366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.534808][T10366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.562978][T10366] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.613160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.620306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.634388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.641505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.095230][T10366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.146450][ T332] IPVS: stop unused estimator thread 0... [ 389.687772][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.756161][T10604] loop4: detected capacity change from 0 to 1024 [ 389.765119][T10604] EXT4-fs: Ignoring removed bh option [ 389.779773][T10604] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 389.795658][T10612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.804099][T10612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.810639][T10366] veth0_vlan: entered promiscuous mode [ 389.814274][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 389.820448][T10366] veth1_vlan: entered promiscuous mode [ 389.840216][T10366] veth0_macvtap: entered promiscuous mode [ 389.847521][T10366] veth1_macvtap: entered promiscuous mode [ 389.882321][T10366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.891383][T10366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.899883][T10366] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 389.916891][T10366] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 389.955696][T10366] wireguard: wg0: Could not create IPv4 socket [ 389.956337][T10604] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 389.974048][T10366] wireguard: wg1: Could not create IPv4 socket [ 389.981272][T10366] wireguard: wg2: Could not create IPv4 socket [ 390.000178][T10604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 390.097961][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.937257][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 392.132298][T10671] program syz.1.2088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.173405][T10676] loop5: detected capacity change from 0 to 736 [ 392.216997][T10676] netlink: 'syz.5.2090': attribute type 23 has an invalid length. [ 392.238130][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2090'. [ 393.373889][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 393.373904][ T28] audit: type=1400 audit(1784197521.886:2616): avc: denied { create } for pid=10695 comm="syz.4.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.428260][ T28] audit: type=1400 audit(1784197521.916:2617): avc: denied { connect } for pid=10695 comm="syz.4.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.653991][T10682] loop1: detected capacity change from 0 to 128 [ 393.673030][T10708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=10708 comm=syz.3.2100 [ 393.675647][T10710] loop2: detected capacity change from 0 to 1764 [ 393.686045][ T28] audit: type=1400 audit(1784197522.176:2618): avc: denied { map } for pid=10707 comm="syz.3.2100" path="socket:[32308]" dev="sockfs" ino=32308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 393.698114][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2099'. [ 393.723871][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2100'. [ 393.739423][T10708] loop3: detected capacity change from 0 to 512 [ 393.745394][T10710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10710 comm=syz.2.2099 [ 393.747904][T10708] EXT4-fs: Ignoring removed nobh option [ 393.765905][T10710] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 393.773704][T10710] netlink: 'syz.2.2099': attribute type 2 has an invalid length. [ 393.774069][T10708] EXT4-fs warning (device loop3): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 393.781476][T10710] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2099'. [ 393.856857][T10712] loop1: detected capacity change from 0 to 1764 [ 394.020942][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 394.846703][T10736] syzkaller0: entered promiscuous mode [ 394.852213][T10736] syzkaller0: entered allmulticast mode [ 395.228772][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.264403][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.404801][ T30] bridge_slave_1: left allmulticast mode [ 395.412040][ T30] bridge_slave_1: left promiscuous mode [ 395.429344][ T28] audit: type=1400 audit(1784197523.936:2619): avc: denied { create } for pid=10745 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 395.443931][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.456725][ T28] audit: type=1400 audit(1784197523.956:2620): avc: denied { ioctl } for pid=10745 comm="syz.3.2113" path="socket:[31273]" dev="sockfs" ino=31273 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 395.482548][ T28] audit: type=1400 audit(1784197523.976:2621): avc: denied { write } for pid=10745 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 395.502467][ T30] bridge_slave_0: left allmulticast mode [ 395.512212][ T30] bridge_slave_0: left promiscuous mode [ 395.518238][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.526653][ T28] audit: type=1400 audit(1784197524.036:2622): avc: denied { create } for pid=10745 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 395.539575][T10764] loop2: detected capacity change from 0 to 1764 [ 395.805761][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.821439][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.833718][ T30] bond0 (unregistering): Released all slaves [ 395.847521][T10769] loop3: detected capacity change from 0 to 512 [ 395.865835][T10769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.899074][T10769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.913253][T10769] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.953420][T10752] Failed to initialize the IGMP autojoin socket (err -2) [ 396.072107][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2123'. [ 396.089205][ T28] audit: type=1400 audit(1784197524.596:2623): avc: denied { write } for pid=10773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.158869][ T28] audit: type=1400 audit(1784197524.646:2624): avc: denied { write } for pid=10794 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.353457][ T28] audit: type=1400 audit(1784197524.856:2625): avc: denied { write } for pid=10800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.537674][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.593041][ T30] hsr_slave_0: left promiscuous mode [ 398.601409][ T30] hsr_slave_1: left promiscuous mode [ 398.608207][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.622158][T10848] loop1: detected capacity change from 0 to 128 [ 398.622397][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.637275][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.662894][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.677717][T10848] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 398.694095][T10848] ext4 filesystem being mounted at /431/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 398.710234][ T30] veth1_macvtap: left promiscuous mode [ 398.725809][ T30] veth0_macvtap: left promiscuous mode [ 398.735120][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.745827][ T30] veth1_vlan: left promiscuous mode [ 398.750275][T10859] loop2: detected capacity change from 0 to 8192 [ 398.758678][ T30] veth0_vlan: left promiscuous mode [ 398.819674][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.831489][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.898347][ T30] team0 (unregistering): Port device team_slave_1 removed [ 398.914901][ T30] team0 (unregistering): Port device team_slave_0 removed [ 398.948824][T10875] loop1: detected capacity change from 0 to 1764 [ 399.585721][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 399.585736][ T28] audit: type=1400 audit(1784197528.096:2631): avc: denied { write } for pid=10884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.593144][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.622195][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.629598][T10752] bridge_slave_0: entered allmulticast mode [ 399.644839][T10752] bridge_slave_0: entered promiscuous mode [ 399.665629][ T28] audit: type=1400 audit(1784197528.166:2632): avc: denied { write } for pid=10901 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.675540][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.697139][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.705271][T10752] bridge_slave_1: entered allmulticast mode [ 399.712228][T10752] bridge_slave_1: entered promiscuous mode [ 399.916485][T10752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.159012][ T28] audit: type=1400 audit(1784197528.586:2633): avc: denied { write } for pid=10908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.223577][ T28] audit: type=1400 audit(1784197528.636:2634): avc: denied { write } for pid=10919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.231505][T10922] loop2: detected capacity change from 0 to 1024 [ 400.263984][T10922] EXT4-fs: Ignoring removed orlov option [ 400.276135][T10922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.305508][T10922] netlink: 'syz.2.2139': attribute type 2 has an invalid length. [ 401.946066][T10752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.963429][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.022244][T10752] team0: Port device team_slave_0 added [ 402.083035][T10752] team0: Port device team_slave_1 added [ 402.140018][T10752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.155839][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.261251][T10752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.327466][T10930] loop2: detected capacity change from 0 to 512 [ 403.978524][T10752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.988391][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.014605][T10752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.029121][T10930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.098256][ T28] audit: type=1400 audit(1784197532.596:2635): avc: denied { getopt } for pid=10954 comm="syz.3.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.104607][T10752] hsr_slave_0: entered promiscuous mode [ 404.127204][T10752] hsr_slave_1: entered promiscuous mode [ 404.144939][T10752] debugfs: 'hsr0' already exists in 'hsr' [ 404.159406][T10930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.190507][T10752] Cannot create hsr debugfs directory [ 404.256148][ T28] audit: type=1400 audit(1784197532.756:2636): avc: denied { write } for pid=10949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.280589][T10930] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.310448][ T28] audit: type=1400 audit(1784197532.776:2637): avc: denied { write } for pid=10974 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.532279][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.719662][T10988] loop2: detected capacity change from 0 to 128 [ 404.760638][T10988] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.777660][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 404.789307][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 404.807013][T10988] ext4 filesystem being mounted at /420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.850462][T10988] SELinux: Context : is not valid (left unmapped). [ 404.897375][ T28] audit: type=1400 audit(1784197533.356:2638): avc: denied { write } for pid=10987 comm="syz.2.2150" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.012341][ T28] audit: type=1400 audit(1784197533.356:2639): avc: denied { read append open } for pid=10987 comm="syz.2.2150" path="/420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/rdma.current" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 405.018293][T10752] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 405.080954][ T28] audit: type=1400 audit(1784197533.356:2640): avc: denied { mac_admin } for pid=10987 comm="syz.2.2150" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 405.106004][ T28] audit: type=1400 audit(1784197533.506:2641): avc: denied { relabelto } for pid=10987 comm="syz.2.2150" name="rdma.current" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 405.335513][T10752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.428723][T10752] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 405.497524][T10752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.533136][T10752] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 405.548030][T10752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.562817][ T9120] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.575665][T10752] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 405.588723][ T28] audit: type=1400 audit(1784197534.096:2642): avc: denied { accept } for pid=11001 comm="syz.3.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.611268][T10752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.624174][ T28] audit: type=1400 audit(1784197534.096:2643): avc: denied { setopt } for pid=11001 comm="syz.3.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.644834][ T28] audit: type=1400 audit(1784197534.096:2644): avc: denied { read } for pid=11001 comm="syz.3.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.774928][T10752] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.811330][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.818439][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.853779][ T28] audit: type=1400 audit(1784197534.366:2645): avc: denied { write } for pid=11015 comm="syz.1.2158" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 405.923652][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.930750][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.951239][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.332720][T11024] ================================================================== [ 406.340832][T11024] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 406.350827][T11024] [ 406.353142][T11024] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 406.361213][T11024] tick_do_update_jiffies64+0x113/0x1c0 [ 406.366762][T11024] tick_nohz_handler+0x88/0x380 [ 406.371698][T11024] __hrtimer_run_queues+0x1f8/0x510 [ 406.377028][T11024] hrtimer_interrupt+0x257/0x810 [ 406.381998][T11024] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 406.387893][T11024] sysvec_apic_timer_interrupt+0x6f/0x80 [ 406.393536][T11024] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.399518][T11024] kcsan_disable_current+0x39/0x40 [ 406.404641][T11024] __skb_try_recv_datagram+0x40/0x2b0 [ 406.410027][T11024] __unix_dgram_recvmsg+0x257/0x860 [ 406.415236][T11024] unix_dgram_recvmsg+0x7e/0x90 [ 406.420083][T11024] sock_recvmsg_nosec+0xc2/0xf0 [ 406.424935][T11024] ____sys_recvmsg+0x26f/0x280 [ 406.429722][T11024] ___sys_recvmsg+0x11f/0x3a0 [ 406.434500][T11024] do_recvmmsg+0x1e5/0x560 [ 406.438933][T11024] __x64_sys_recvmmsg+0xe5/0x170 [ 406.443889][T11024] x64_sys_call+0x80f/0x3020 [ 406.448485][T11024] do_syscall_64+0x136/0x3c0 [ 406.453336][T11024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.459237][T11024] [ 406.461558][T11024] read to 0xffffffff86c07a00 of 8 bytes by task 11024 on cpu 1: [ 406.469183][T11024] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 406.475424][T11024] count_shadow_nodes+0x6a/0x250 [ 406.480365][T11024] do_shrink_slab+0x61/0x650 [ 406.484960][T11024] shrink_slab+0x53b/0x8e0 [ 406.489371][T11024] shrink_node+0x6d9/0x20f0 [ 406.493885][T11024] do_try_to_free_pages+0x408/0xc90 [ 406.499083][T11024] try_to_free_mem_cgroup_pages+0x201/0x420 [ 406.504998][T11024] try_charge_memcg+0x375/0xa00 [ 406.509868][T11024] __memcg_kmem_charge_page+0x199/0x3a0 [ 406.515420][T11024] __alloc_frozen_pages_noprof+0x18a/0x350 [ 406.521234][T11024] alloc_pages_mpol+0xa9/0x1d0 [ 406.525999][T11024] alloc_pages_noprof+0x8f/0x140 [ 406.530939][T11024] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 406.536844][T11024] __kvmalloc_node_noprof+0x3a0/0x590 [ 406.542227][T11024] futex_hash_allocate+0x192/0x920 [ 406.547331][T11024] futex_hash_prctl+0xd8/0xf0 [ 406.552008][T11024] __se_sys_prctl+0x4f4/0x13b0 [ 406.556779][T11024] __x64_sys_prctl+0x67/0x80 [ 406.561367][T11024] x64_sys_call+0x2533/0x3020 [ 406.566049][T11024] do_syscall_64+0x136/0x3c0 [ 406.570629][T11024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.576530][T11024] [ 406.578853][T11024] value changed: 0x000000010000295b -> 0x000000010000295c [ 406.585960][T11024] [ 406.588275][T11024] Reported by Kernel Concurrency Sanitizer on: [ 406.594423][T11024] CPU: 1 UID: 0 PID: 11024 Comm: syz.3.2156 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 406.605370][T11024] Tainted: [W]=WARN [ 406.609166][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 406.619210][T11024] ================================================================== [ 406.971415][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.057401][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.127655][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.153412][T11028] Failed to initialize the IGMP autojoin socket (err -2) [ 407.227874][ T12] bridge_slave_1: left allmulticast mode [ 407.243769][ T12] bridge_slave_1: left promiscuous mode [ 407.249443][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.257433][ T12] bridge_slave_0: left allmulticast mode [ 407.263295][ T12] bridge_slave_0: left promiscuous mode [ 407.269094][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.337166][ T12] bond0 (unregistering): left promiscuous mode [ 407.343367][ T12] bond_slave_0: left promiscuous mode [ 407.348819][ T12] bond_slave_1: left promiscuous mode [ 407.355120][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.365568][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.375893][ T12] bond0 (unregistering): Released all slaves [ 407.383614][ T12] bond1 (unregistering): Released all slaves [ 407.391853][ T12] bond2 (unregistering): Released all slaves [ 407.400617][ T12] bond3 (unregistering): Released all slaves [ 407.409073][ T12] bond4 (unregistering): Released all slaves [ 407.417549][ T12] bond5 (unregistering): Released all slaves [ 407.425912][ T12] bond6 (unregistering): Released all slaves [ 407.434023][ T12] bond7 (unregistering): Released all slaves [ 407.442310][ T12] bond8 (unregistering): Released all slaves [ 407.450579][ T12] bond9 (unregistering): Released all slaves [ 407.458843][ T12] bond10 (unregistering): Released all slaves [ 407.467821][ T12] bond11 (unregistering): Released all slaves [ 407.476466][ T12] bond12 (unregistering): Released all slaves [ 407.484607][ T28] audit: type=1400 audit(1784197535.996:2646): avc: denied { relabelfrom } for pid=11028 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 407.504851][ T28] audit: type=1400 audit(1784197535.996:2647): avc: denied { relabelto } for pid=11028 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 407.539183][T10752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.547112][ T12] IPVS: stopping master sync thread 9271 ... [ 407.557707][ T12] IPVS: stopping backup sync thread 4403 ... [ 407.601613][ T12] batadv0: left promiscuous mode [ 407.609217][ T12] hsr_slave_0: left promiscuous mode [ 407.615180][ T12] hsr_slave_1: left promiscuous mode [ 407.620748][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.628231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.635905][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.643311][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.653456][ T12] veth1_macvtap: left promiscuous mode [ 407.658950][ T12] veth0_macvtap: left promiscuous mode [ 407.664666][ T12] veth1_vlan: left promiscuous mode [ 407.669872][ T12] veth0_vlan: left promiscuous mode [ 407.730633][ T12] team0 (unregistering): Port device team_slave_1 removed [ 407.742177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 407.771008][ T30] smc: removing ib device sz1 [ 407.780037][ T9] lo speed is unknown, defaulting to 1000 [ 407.791738][ T9] sz1: Port: 1 Link DOWN [ 407.955669][T10752] veth0_vlan: entered promiscuous mode [ 407.964176][T10752] veth1_vlan: entered promiscuous mode [ 408.004613][T10752] veth0_macvtap: entered promiscuous mode [ 408.017243][T10752] veth1_macvtap: entered promiscuous mode [ 408.047430][T10752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.058789][ T12] IPVS: stop unused estimator thread 0... [ 408.061578][T10752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.080822][T10752] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 408.098198][T10752] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 408.115644][T10752] wireguard: wg0: Could not create IPv4 socket [ 408.123471][T10752] wireguard: wg1: Could not create IPv4 socket [ 408.130934][T10752] wireguard: wg2: Could not create IPv4 socket [ 409.920380][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 409.920426][ T28] audit: type=1400 audit(1784197538.426:2696): avc: denied { write } for pid=11401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.950266][ T28] audit: type=1400 audit(1784197538.446:2697): avc: denied { write } for pid=11412 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.011831][ T28] audit: type=1400 audit(1784197538.516:2698): avc: denied { write } for pid=11415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.035256][ T28] audit: type=1400 audit(1784197538.536:2699): avc: denied { write } for pid=11426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.105415][ T28] audit: type=1400 audit(1784197538.616:2700): avc: denied { write } for pid=11429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.128807][ T28] audit: type=1400 audit(1784197538.616:2701): avc: denied { write } for pid=11440 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.194185][ T28] audit: type=1400 audit(1784197538.706:2702): avc: denied { write } for pid=11443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.230150][ T28] audit: type=1400 audit(1784197538.736:2703): avc: denied { write } for pid=11454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.314656][ T28] audit: type=1400 audit(1784197538.826:2704): avc: denied { write } for pid=11457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.337853][ T28] audit: type=1400 audit(1784197538.826:2705): avc: denied { write } for pid=11468 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.962853][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 414.962908][ T28] audit: type=1400 audit(1784197543.476:2792): avc: denied { write } for pid=12140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.992608][ T28] audit: type=1400 audit(1784197543.486:2793): avc: denied { write } for pid=12151 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.059957][ T28] audit: type=1400 audit(1784197543.566:2794): avc: denied { write } for pid=12154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.084466][ T28] audit: type=1400 audit(1784197543.566:2795): avc: denied { write } for pid=12165 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.158366][ T28] audit: type=1400 audit(1784197543.666:2796): avc: denied { write } for pid=12168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.181522][ T28] audit: type=1400 audit(1784197543.666:2797): avc: denied { write } for pid=12179 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.257112][ T28] audit: type=1400 audit(1784197543.766:2798): avc: denied { write } for pid=12182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.292902][ T28] audit: type=1400 audit(1784197543.806:2799): avc: denied { write } for pid=12193 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.384060][ T28] audit: type=1400 audit(1784197543.896:2800): avc: denied { write } for pid=12196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.407201][ T28] audit: type=1400 audit(1784197543.916:2801): avc: denied { write } for pid=12207 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1