last executing test programs: 6m42.774898886s ago: executing program 1 (id=2): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioperm(0x7, 0x81, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aa019900000000000000051e103400010000000000aaaa3f86dd6100272400183aff00000000000000000000ffffac1414bbff02100000000000000000000000000182009078040600"/88], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740), 0x40000000000024c, 0x40, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r1], 0x1c}}, 0x4008054) 6m41.89408384s ago: executing program 1 (id=12): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000580)="891dcfa5c6e55382e521adb32f970dfc324ef16c44cd077f7ec49842259910bd4edf9f54ba503e67bbf903e8acceace6feb638c6d855d4fc82ecd42569bb8c8b3f35c50d55d43b6057d375ee4038f97f864863abc0fd1cb5ee47dd3f6bc52d6e02703f75cc35c0e2e651208bf77436eb49531e3cc6c8876266638e85113531013b0c58f62f51f4a723d4d08983fda6951f40cbf553a0f8a57f514abd05f73b4ceaa1ee1efc765f8ad0c5686287d74ef581c982963f1b311d29b6a2dbb45244070eba70fc405b01c17fcfac7ec75ddc0459ce63128c9a740a2cc38b96f179e7b81cef64bcb05e9b334874", &(0x7f00000006c0)="c4a054b10e7f2b3c9ed009fa2bbd0541da9cb3a1302c70ef4e66779558305d5eff90cc563a0e3f994aee705f1faf1562f79378bdd8cf930a5951d582167c6804edb8718a529b6c05175a6cac9df84e8b7af5733b52dea4b28845b332ab74a225d111b77781690cd4c755da56e91ea0df3c57b3618d0003b2e770518e84f0c9305efaa4891000e277972dde070398378d3ecfca140d16a32a1585b894a9d0297e3bc9b8396338bdaf215d53e0e54c6590a0553d"}}, &(0x7f0000000540)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0xe88d, 0x8004, 0x5, 0x7f, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={r3, 0xa10}, 0x8) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000480)=r2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x121900, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8931, &(0x7f0000000000)={'syz_tun\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000000)="89e7ee3c6ccad9b4b47380c988ca", 0xe}, {&(0x7f0000000300)="c332694853941d23c37b87b73df9c3213b9e1252e5a1c3ac", 0x18}], 0x2) r9 = socket$inet_icmp(0x2, 0x2, 0x1) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) bind$bt_l2cap(r11, &(0x7f0000000340)={0x1f, 0x6, @none, 0x9, 0x1}, 0xe) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) 6m41.387684075s ago: executing program 1 (id=17): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x8}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='(\x00', 0x2, 0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)={0x12b8, 0x15, 0x800, 0x70bd28, 0x25dfdbfc, {0x2a, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xea, 0x1, "e089a3b376b39d393b91c87bf07920707fccad2e3fab4db54890cdae4217cb8382d0a26f64a7e67db6e51f2686f32ade454b834172beb1703632fbac2036cfa4a515a9b681ac152a646b37da4c947bc4653f8834ba244ae540ebc964dbfc8608373d893016c77951cc4ce37f84be0b56e3df70ce34b289571823800aef5b42c94af52ea16506f605cd958705975cadbefce085c22aaab9a84a5128a8cd6255b0ca2b104bde182db4ae2efd374c8b72d480bef4f817aa01882b6448226f6927cf09ddb3f16612babba3ed4f24c9ea0ef607841f41ac6d00afe7e33e2cbcfd41f58118b85dd800"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "47224a9d3f1f68200a5b021288e7e60d33786a010a28fe707f843fb11a65c850"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "cdad1f8a88d5d9"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "abe8e9b1fe9df13a027d1964913ebdd1866691621b83fd919ca35c9b3ef24e6bb76f17b0fc8ad190a99bebd97af0430caaf8b3d8ba37b02a170b825aefae2be59fabac6e8a7ea5ffbafe287008033e47ad0384168938a5255d10a56d3a2f0c39e8fdcd36b6587d897607bced0716651de162a815760a8a9e31b55c32e12efc626c16e38e0225aa9bd58a951e6ffd7a314887ea49e9df3c467c2dad32180b4d6dc8e12b085cd41d775f668aaea38cfb1738e125bf8c309d9257c2"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "d7a41ace9a3cdc0b34aa2310627da7eb265ac3c9e81145bdb389b798cfa4a490319daa6133d9462bcb03fa9a254208ca1c2d71d7f87ab9b57d4371f97f13006ff25a94aadf467e4937bd51b563a43ece73a1a1fc589e6af3af5064a01dd37f05257fcb915389f86a15702346580c088c32caf2f207df3d7c1a8f7c747d2e66f7a9e33344a036272a4a878a4f071eedd63254f33c3c39c1bcca3d80f9127767e52e2aba6936afbe994f3b55f1f07ba1cbeb5934ff316378b4591aadd297be9712320bc7144d50571f1af51a9bba15e821ad5257cf586601a721dec1d3a79f1341aa9a53362c6864fb51d2118ca3e73ffff620fa4f8866c479b929b07fdc45f1020e3eafbb4691c7f94016bff12cf2f3c9e680ee6bf742093f61e4744f21ae5bbf19db09f1c61f5dd12f880a758dc8bc4e92bac90faa5649b0539a0dd74d17a91a84d8d15f271c44a3c4734af619c0bf6e70a14277e80c027c8b2d3f6a6dc17d3fdc87a72351e8db3e04631185e7401d1d4445e7ec9baf8c0af3fc563179d17709965bc963728c1fee967f58ccd567f39c6db1b1e0642abefd034b83caab2bd998bf1b05f1da2d73c33ae4a21237d048ee4bbf8dd5ed34415b3dabd794e33ee7593b020a308902f3225045f427c3daca420ae5e3814bfd7b6e2a9c500a49e5fb87cd59c1e14efd65bba5494ecad7e6e7c0452eb1dd6fd28dc10bf7404bbcaf2127fdc456b1a706f03b807616b7954262d365b75325c5d130f9af9c48a01f295560e0c90ff091a2dddfcaf703e34c9be0a3460324f2d10365d9ffddba2380da358430bec225e4c8cda917dd49b163492ee1fca9985d90c4af9c66d51a7bbf38ec97128a6fdcb4c5173626ae3da1e714aca49aa0508f3597a58fc8bbfce1298cd14fbbefa71ac6e2da570eed977c73829b94370832c1de2b419c320779d7e0d6d7e6f6025b9027e374f5ba5500e66feaf94c3a60175e90452022139e84c0e6b7d56e6d1751e05fe69f56cb60f22fa0ebcb1a232df51110c67f0db2ccb971552ad273253e2a84b77328c5f6b5ec572936bc2ddcc096fd1a0fba2ff9264360413ecc15eb0098e88d2e6bddfd61e831c75e7b0c8132c3871420ba4a552e49ad752d5495df2ccba1751df04aeec93703b6074b02b3379967579249ffbd8ccaaa8360dd8a3e9a3a515a35feb7ac106a5d0abfd92ca42b0d4b8ca84187d2c75c26f6554c3c1fab65deef57beefb325c6476db301d21800f5661ebd04781b9bfd5f5043d4c57fa49217af9368d417d23089a9e6db630984fe52710f932df21cc5e4931c9c206c086859de22ce05107cfe9297a0444787397a449c295fff22fac06ea8ec29d6d4e18469466c83248625246c0104d51ab45404ed8febf0925222916c0118f56276ed91679d2fb4158c0a988fd849c64025d71f8eaf76702c117980988302cf7b48e2b2712b8ed3f4149c397a318a2d17d578d6861cce89a889d5f5cc70afb7b60f8b624c8a07430b8f4a550c883f6f5e7ac3ad179ff08b1be63ed481e8b18e185c7418e765bc4eef490b56a1916b2123b9ef78aa24e8f70aaeec5c260d2ce7d7f0fbdcb5517de3c2fee97ff2685828b1f373d12ab020516d8bfcc5e571c313e29c27f18709fc9ccf701e7e4afb30e71bc9a497641b146c68b2d1f6b064de6b0c21cba9e21a3eb9aa0a3ccd282ec2fe99ca0466f81e8ebe34db2bf7bdca843756d1f7152e09b46085ae609ca7835591c4772571b901ebfb4be083064ef8d25390095c6fcacf6a43ff80e99e05ee9dac2c6ba9ae6f93dfcce61d06e17965af2fbd4280684671236b2b811260ef827d4e09dc604042b64cb1e693995c203206f99a2f2659356cbb2455097b0596b73bc9dbe3049d73130914f6d749bbab375bb3959ca447658ac7b681d0d396fdb8a4de6ad9f37233f61fec48168c6c98e05d810c2352d705d88fc5f56b971d248488386809b382f0d60cc839f04797f51fbced07ddbf144647a06a3f37c3ff7cecbcc5c619358f481a52fc595b3ac902abd8bb25b604f6f19919cc19781c2f00703e0a10372f16368b5bc68b726662c37d7afe1d452fe35650dc7d725aa1726570cc565057c75e34eb0d2c7c21abbfeceb571b1068093d204c6ac0121e100daf34d4365d1408aee0da6397351b45ce32218abd1834d3038d9161e5dc631b997819a9f7b7f6bcc50470d0238e25428008dcac5423eb61ca86ae3970370cb7055e240720aeee3313e9215d4e77779ae706aead9d3fc8756c3aa2c71fa10070d894f4fd9bd96cbc33f6dbfaf3c8fb506b1a008720274c8b649ec1c91400e44f079d220d755685f9d8f4d362384eca61648dd33c3f48f46c000df719175783465420348e1b68ca8bd6b337d3bc517e0c44e72d7bd5223b321cf50568424665b1dc5a6eccfb74142eae1ada91247b06d5433d2c5715fa0b13e468b36f1dc475f158cb1ca62bf291165a9376a14a096e1f86e42984aef377484e673188dc9c9ba0f6ba1dd273e4b5ff6d5835b9d272e414c1718d9fe05829beeac81f930da271e96efdf42024871d9bcc211b5096c0075bd963fc5100c8ae0beaceb8d156d1eec1ea045d6d70cb485c1acb72aa8551bb1206fe3178972a0a5efde353645cce6016a0d5a35ad908e877e4ff196eae3ca8e1e93e4424bade59d402a419472575da5b40ed974e91fd888dce1aea72b0a89a416f39a41ca7a47cde2e45aff7b841cacff81cc99d17234d91df13160c0fefa03ff18b7be823b80d11f1617aee558d24150afd8c0ce6ae15ae651314f1b158d2d149bdb8efd81fc6ec3387aaa0878f1224f9c8c665bf1fae8d04ba757ba90e0b0de678880aad09b2a55da234e0e181cd6d9c73a0ef4ac829079069b92de238d765a2a192d8f729e9abf1077201d34b8f141531af98af17873ff57624e51f7f09d4acec78f33d6ab701f11cfe98c2f0617ac1493053a157900c40d6dce54d777dadaed55b797ed9d5867c673532bda461c8c13ad268d5ac32b83ed746eb9a78142f49c16060730edceb047661fe4b1257415a02e83cdcb19a1ed972753cd54bb75b641c99ec727c5e52147d545baabc609fa09441c4ca96d890c750a2fd6e30dcb1d6a6c966dde098b9cc82db36ae105f79d4e68817c190744007cd5c6eb650dd8f2f0a84ad34333a7a4c26dc29f295a8da6f6ccb2d455e189fe007eae3ef52f176b2cd0405adb48bae9bfbd48dd32d54602d1b06a473779489599475f031608e1155caee751186fa46fc95d1fb7347e9b4c0106d8e4d0c5897c5cc99967cd920d3524288c492ba2b6ca8a8e642a9947062a0c992a4e6ce80119467be48a23110e75eeacedf4719a0df73715fb982e9187367cba7cf5e33d842deb12007a5a1b822394fd9b3c0ff6b1d815d6b548d0c62832d3de185e891a9a80d1fc7f7be536d30a55753e8048abd85ed9243cc0dc30ca15fc28a0ab7bbd8791e8628daac65ce669ed10dd9efd4f4d6741bb5ffcccf467c877901a36fc6577cb9e5f18a7256f248b8190b43f51b6477e5211481e391ac1e7cc75916aabcc0089436998dd18cd71814138873d1c23c47e490fea225b922e9927b6b1c28fb456bc1b208e47c746c46eba9042a5d808985ead482cb7d5675980fe2d6d42327355f59118783544619337178ff46ae14f98c1f706c20268ffd1a9b18a748e440482f271d248f50b4a157da29d43fad9874ddb3c9489fca6f9eac5bffd919a8702030482d9f42f15a4eba15faa39ff947dec94a50b3f45234b6cd54e8e789cb483f6093a6428ad396e10e6fa5311fef9f929ac50bb78ae820cd2f7ad6abf4409597fd5cc97791448a70ba76bb3b08e38c4155e053b9e57e0d2d8fa07139e385218d33aebb065078e1ff903ee8da75b14cb25bf31be43c9cc9974d4ba155e7f4903a3dea5b5deacd9bec113b16b3cb92090fd486e9914349312c77ac55d85309a9530497878e6dd2016af8905ce248fdc0b411ed9de8b6f5dbee412d74c0c5bad1c190534642391c5be5a5a2938f0b085ea18186363a7a18fc2088a03ca545a4c6b3da9309535b731706afe8a01e55fc6feee32bfcabf8bca514cf72e1cd47b74221cd7228b979ff5881f4764974ea9fa2b61dc619291389db0e0ecb8389f1ab51dfa496e3e730cd73070810ddad7943f7b5e7097ae8ec1e44f881d8024918ee6fb1260283545abbf8082b1948b5f20de0740a6fbc82fa7a5cfed8861e8b9a3bbbcf2007015b5e87363067df7a24fae2f03e0f91190f945cda652ccd206dc3065bf5bf7aba12a38f0afa3ca49f8a5a72b11627cf2e276badda3c4cd4c5216b876b822d5aaec33da81897ca48ba2ec727fe80c71f4d865b3d197ef27291ff510e543d6ef7de275a0ce724a75a38b7b6e11f49a7b267c826cac87a626dfba93ac8c86635b81fc30b06ef14349c29b07708e10d986a92ab78149501992b53bd465042dbb09533e0276c29eb0078760b2ac840c80ca2f5f437cf75f090d64d1e9812d402102e4e9d7d59a30e8087cbca3705a4ddfe1402040ebfca8da321b72691ba8b26dc052d0a39a1c09bd3abac42f7b1634d64ef4a231ec95aa5632bf3615d632e11bc380efe7355c81713d32abd84e119851971baf5ae933d04854fc603ef432150d2b5d4a3e22b3ee9d4d2ff405c6398f5bacb3244fbc45d3974135094caef09ae72f147bf6bf61e94b30810ce04f7c8c163811393414bd6a8383b829db4e8b5322e82269dff3c3ca9bdda4d07b09ec0af3189dc1bc323a4347048af20ac461c5d3303105295c1b7dab57820c73c44d79ded1f49620d3d3366c08a747cb9215be5a51ff9ff7e7a7f8d91f50d9bba070553c84d7de9d5035b6b1874383cc6fc8ad11b52e42f1093b51b9324665826f6b356884669c8b5797a2cafbd2c116efdb97f7008685d7725c67a76433f0d2301a96e52d9b026c7deb58f0eb478f4f939d231c08da9c423774b4e1cad9fde0100194bd8d66221884e63d7e2975c1b69d5c0be1bfd58eac3229b461462fd4047e6f808594c9dc0c22724c0c1d71b172ecc14bff83e1f8c00f4cc8953bcc842a2ab63141e2f73423ac8f5f71bd293aa09c0c6e9c864dd721a787c3d87b25f7d7fa427c4c34791bbf9d9a16977de47100d0c937f2aec9c7fabce1de0d910d20a925d5c432d612a7b006ffd04ae7b998b4ea8c605f89be2870b25d4fdaf7bb83ca4b8a12205f3a6543c97f9710023f55fa90f45744aa775d7f6bd2702c5512cef1de5453284831a0af9d80d17888ecea021ef5de90ea70975cfa58eafc8d86da319500b51e902b4e1720d2760a5c901865e65dc5a0386b9d792f0cab60784c0a3bc3a02dfd3b681e1949868db2469cc38f0d6022a792673df7b2b5de45eae6193200eb2bfd21e0266aa8db03e67cc888ffad20dd50e8756d76182c3f76b6e1913c8921a78af42623e565a992fb4461e26a5d0bc1f4c2c2de69702df09ca458f188b2346e05a825a8c05587d018d4db64fc0a1f5f97998ea74e637c2763b761ea473a6014d4b5c319744080792f429a49df99b0ccf35752196721e04b10dbf499e83166929870c2f23d3e2cd0d3831186c2459ebcfa52c90a5917940b74c4d2aa6fd6abf77fd27c339fb9af1984a7571d8353a42793594d5b0ccb1b3c390a9550ae4f98c4a08580916b2020c4f393d5527c47436b171e202325cf19ab956b364bb8e63b8a5a781708fdbed5ce32a40c1869f470c1d31b7e5917549b3fbff8ac2f32fa32c8a70e2ef2959f6580ca18bbfd091da8d23c73b7b7a8c71082682a6daab90a441"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "1712d1ace362124c9bc3db05590685b6a1a8b6dd54242027bf1c95f6ae4eb535fbdac1a02660f9ed4ce161deb36d1daea09e92648b8dfd36b9aa4f461758ac9c0af8844d578e4d718865fa8c6ae9318c10915b4fbd6c47485caf2afea8b75b5e67161f83a169535e4a00328e647e4a9c4f2054c098af98114c1eae1637e78a7e33e2b895935d38b290e9e9639aa76e07187bcaa81d7f0335927e6fdb5f10d51fc9b5623f2a35a3b3abfe85e6eae0153c8700bbcaf2"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r6, 0x1000}, &(0x7f0000000180)=0x8) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0xa, 0x4e29, 0x100, @local, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000600)='F', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000400)='a', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000002900000008000000dcba8f5b0000000098000000000000002900000037000000620f000000000000c91000000000000000000000ffff0a010101c910fe8000000000000000000000000000bb05020002052893965261c0fff7fb2856778fc00e21280de5e33a37a30897500a968e6de7902e70254e9b254e32d80401050502000301050000000000c204000000050502d35fc910fe80000000000000000000000000001e00000000e0"], 0x190}}], 0x2, 0x40) shutdown(r1, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x81, 0x401}, &(0x7f0000000140)=0x90) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) 6m40.388954254s ago: executing program 1 (id=23): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="050000fbfeff0035da21685e1e6fd1000000eeaf355233acb2ffe117c54d35792bd93cbf9d8af9ec4a2cc20d8fb646408a61ad867f0f7908ef6ef0f6bd055ecea4b716e9e0e68b73de00a20dace6906925a256fdf495407805002e91df2c4c945158287d"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xae, &(0x7f00000004c0)=""/174, 0x41100, 0x2c, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x6, 0x3311de15, 0x9}, 0x10, 0x12b75, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff01}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="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", @ANYRES16=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c6, &(0x7f0000000240)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x115442, 0xd) write$binfmt_format(r3, &(0x7f00000008c0)='-1\x00', 0x3) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) io_setup(0x1001, &(0x7f0000000900)) r4 = socket$xdp(0x2c, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000001c0)) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r5, r5, 0x0, 0x8) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x11, r6) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x1000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000004283a8b5b1e15fe368e5044d05a415ad6ad8b4ed867ae8e2296842572279b42266cadd018956bba0ae7c99c056f190e0999c70b3ac30f423fdc85a7b936520fff2ff9e8b3da44b675dbf9778a0db3d4ec7a678fcbe8ceda2f09ccffc659c79c222f889708c2de4e0d1415da015e158d5e5f788c09dfacab0ee0a2f3149243d00bf90c2c52c4d3875e3ecbe87552ca2ef43191bc7da9792bd7fecfc224c0e257c9c19d45c4e3c08a6a90e87a941c8f62f", @ANYRES32=0x0, @ANYBLOB="08000a0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x8, r2, 0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206030000000000000000000200d80013000300686173683a6e65742c696661636500000900020073797a32000000000500040000000000050005000a0000000500010006"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a32000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r4}, 0x10) 6m39.591746444s ago: executing program 1 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$eJzs3c9PHFUcAPDvDGwplLo08VD1QtREEiMU2qpNNJF48dCe7KFHCdBKCq0BTGxD/BGNN000/gH1oP4JHvXg/6Bn60GbEMNB6sFkzezOwLo/aJfuupR+Pslk35s3O+/NvL7Zmdc3jwAeWeMR8VpEDETEqYgo5+vTfIkPa0u23fbWxvzfWxvzSVQqb/6ZRJKvK/aV5J/H8h1MpBHpJ0k81SLftRs3r84tLy+u5vGp9ZV3ptZu3HxhaWXuyuKVxWszL54+c/bsy+dmXurasW6uJJ89++353774dOHLn//4YSwr72ieVn8c3TIe4zvnpNG5bmfWZ0frwslgHwsCAMCe0vzef7B6/1+Ogdi9eSvH5z/1tXAAAABAV1QqxScAAABweCWe/QEAAOCQK8YBbG9tzBdLH4cj8D/bnI2IsVr9382XWsrgzju9pYb3e7tpPCLeOHphJluiR+9hAwAAADzKfpytTfzX3P/3T+Vk3XbDETFSzO3XReMN8eb+n/ROl7OkzuZsxCsRcbep/y8tNhkbyGPHq12FpeTy0vLiqYh4LCImojSUxaf3yOP9p69+1y6tvv/v1u1L01n+2efuFumdwaH/fmdhbn3uQY6ZXZsfRTw52Kr+k50+3/p5MjNLHebx1tL2q+3SsvrP6vvW7Uul1vVPL1W+TuK5lu1/d+bSZO/5Waeq14Op/Kow1JzHr6PffNwu//r2ny1Z/sX/BdB7Wfsf2bv+q/Pk7szXu9Z5Ht//deGXdmn3rv/W1/8jycVqAY/k696bW19fnY44kpxvXj9T6rzQD5t2Ew03qJ2P3fOV1f/EM61//0/W7fp4/ntf3kfRXv/gxMV2adp/f2X1v9BR++888PbIExPt8r+/9n+mWphiJ+7/7u1+K6jf5QQAAAAAAACgO9KIGC0n6WQRjjSdnKyN8308RtLl62vrz1++/u61hdoYwLEopcX4z3LdeNDp2mvkO/GZhvjpiDgREV+Vh6vxyfnh6rgDAAAAoPeOVZ/5m5//M7/v52UPAAAA4GAa63cBAAAAgJ7z/A8AAACH2oPM67+8uFr8iaB9fl3goQskcSCKMZD/wzsop+XwBfp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg/g0AAP//Ogi85g==") perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r3, r2, 0x0, 0x3ffff) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x1, 0x7, 0x602, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) close(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4004}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r0}, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$kcm(0x23, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xf18, 0x4) 6m39.05754124s ago: executing program 1 (id=29): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[], 0x540) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="8771370b9f828aa58c6a2a0fea43698b155ed61133d1c4dd8b602a0111a307c2af6601b4a3e4da1f905a92a43a0e70e177be84267859358228451ec2eae502d7d54afaef0b19de01cf6ac434d6805a834f52bb66681887"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) shutdown(r0, 0x1) 6m39.029895052s ago: executing program 32 (id=29): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[], 0x540) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="8771370b9f828aa58c6a2a0fea43698b155ed61133d1c4dd8b602a0111a307c2af6601b4a3e4da1f905a92a43a0e70e177be84267859358228451ec2eae502d7d54afaef0b19de01cf6ac434d6805a834f52bb66681887"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) shutdown(r0, 0x1) 3m25.869109409s ago: executing program 2 (id=1119): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd09, 0x70bd28, 0x800, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0x7, 0xf}, {0xfff1, 0xa}}}, 0x24}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x7101}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m24.916981246s ago: executing program 2 (id=1131): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffc0000000000000, 0xffffffffffffffff, 0x9) munmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m17.226459668s ago: executing program 2 (id=1181): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(0x0, 0x0, 0x9e7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = socket(0x10, 0x803, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9010, 0x12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) 3m17.157042702s ago: executing program 4 (id=1183): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) (fail_nth: 3) 3m17.058435246s ago: executing program 4 (id=1185): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0xa1d1}], 0x1, 0x0, 0x0) (fail_nth: 1) 3m16.929383663s ago: executing program 2 (id=1186): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m16.925546133s ago: executing program 4 (id=1187): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x980) 3m15.871558435s ago: executing program 4 (id=1188): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") r0 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xa43d, 0x400, 0x1, 0x153}, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xffffffff, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x100021}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r7, 0x80000) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80100020}, 0xc) r9 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r9, 0x29, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000100)='mb_optimize_scan', 0x8100, &(0x7f0000000140)={@align=0x10, {0x0, 0x3, 0x5, 0x1f79}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x9}) setsockopt$inet_tcp_int(r10, 0x6, 0x1, &(0x7f0000000380)=0xfffff1f7, 0x4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000440)=ANY=[], 0x0) 3m15.137422972s ago: executing program 2 (id=1193): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x8000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000000000)="2b206d0748010097737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m14.959487161s ago: executing program 4 (id=1198): get_mempolicy(0x0, &(0x7f0000000100), 0x80000000, &(0x7f000038d000/0x4000)=nil, 0x6) timer_create(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000002c0)={[{@utf8}, {@uid}, {@map_normal}, {@nocompress}, {@showassoc}, {@map_acorn}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@utf8}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}], [{@fowner_lt}]}, 0x2, 0xa2f, &(0x7f0000000ec0)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000240), 0x4) recvmmsg(r6, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/130, 0x82}], 0x1, &(0x7f0000000280)=""/83, 0x53}, 0xfffffff2}], 0x1, 0x10000, 0x0) sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x4002}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)='I', 0x1}], 0x1}, 0x4800) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', &(0x7f0000000180)='./file0\x00', r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r8, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket(0x1d, 0x4, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3m14.618229868s ago: executing program 2 (id=1200): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$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") r0 = fsopen(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000000000018) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x1000, 0x1, 0x37a, 0x0, r4}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0x2d0, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000240)=0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1962, 0x80, 0x3d98, 0xf7b6, 0x8}, 0x14) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 3m14.618073738s ago: executing program 33 (id=1200): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$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") r0 = fsopen(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000000000018) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x1000, 0x1, 0x37a, 0x0, r4}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0x2d0, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000240)=0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1962, 0x80, 0x3d98, 0xf7b6, 0x8}, 0x14) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 3m14.087865484s ago: executing program 4 (id=1204): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m14.061238486s ago: executing program 34 (id=1204): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m21.967987253s ago: executing program 5 (id=2058): r0 = syz_open_dev$hiddev(&(0x7f0000000140), 0x100000000, 0x8fd29877dcce4ac5) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x100) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x183400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket(0x1e, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r7, 0x0, 0x40000004, 0x0) pidfd_getfd(r7, r7, 0x0) 1m20.402162981s ago: executing program 5 (id=2076): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@jqfmt_vfsv0}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") ioprio_set$pid(0x1, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$setsig(0x4203, r0, 0x8, &(0x7f0000000180)={0x9, 0x6, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1m20.322654735s ago: executing program 5 (id=2081): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {0x2, 0xf}, {0x6, 0xf}}, [{0x8, 0xb, 0x9b}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x35a0000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xee4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="24268e26ce9b67325cb0", 0xa}, {0x0}], 0x2}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0xf, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) 1m20.322465775s ago: executing program 5 (id=2082): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002000000000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x3, 0x5}, 0x0) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m20.209844081s ago: executing program 5 (id=2086): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_clone(0x8000, &(0x7f0000000100)="01cf7b041217aa5bc0e2a19c9e2be239676bd21fb8a213ecc7a1f8745c8ffab864b108", 0x23, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340)="cc06be0f62882381b0f7809cf0925076f725e3571104587c33dc8156953a1ddd6c7df176e8d21035ee907e06e09dc4663b027df5de2ef360379eef31bf77fe9e39717bce10fe1104c972c577eca31beab6542c86473ed7ee68b0dba1edb7aa4e43506278cb0acc30b8a750edbbd4119f5ed1ec42c190e6bcd9e0b3925d28399d76296091a02825969a95a6cb3193628365c3c09618e428b6d92de1bfc0a7100b7bbfaf09e1ddfd7ec2b2e5196bbc1b23dca77712bfdeed24e90e5514489fe77ecbb58e360458d4584f81c71c68425f8573cdc29376942b485f194e9fd570fdb76c8eb33877d008afbaab053920f60e4c13625a6f48") fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x2, 0x1, 0x8, 0xfffa, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000000300)=0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000200)={0x0, 0x4, 0x20000000000061d9, 0xf0b}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) 1m19.341297474s ago: executing program 5 (id=2098): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m5.035097652s ago: executing program 35 (id=2098): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.115027095s ago: executing program 0 (id=3074): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f0000000400), &(0x7f0000000600)}, 0x20) 1.024139109s ago: executing program 0 (id=3075): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r0, 0x0, 0x0) 1.01608242s ago: executing program 0 (id=3077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x5b, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x78, 0x60, "210466d38547aa140db9a200000000"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 971.364842ms ago: executing program 0 (id=3081): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) 899.957356ms ago: executing program 0 (id=3085): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 899.529386ms ago: executing program 3 (id=3086): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 860.893918ms ago: executing program 3 (id=3088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x1, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x84) 816.541259ms ago: executing program 3 (id=3089): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 794.98134ms ago: executing program 0 (id=3090): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 660.084547ms ago: executing program 3 (id=3094): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 643.654488ms ago: executing program 6 (id=3096): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) 627.509239ms ago: executing program 3 (id=3097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 604.04501ms ago: executing program 6 (id=3098): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 557.206352ms ago: executing program 3 (id=3102): sendmsg$unix(0xffffffffffffffff, 0x0, 0x8c0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3000000, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 524.651634ms ago: executing program 7 (id=3104): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 505.723245ms ago: executing program 6 (id=3105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 456.001968ms ago: executing program 7 (id=3106): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, 0x0, 0x3000c0c0) 454.535748ms ago: executing program 7 (id=3108): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) 449.113248ms ago: executing program 8 (id=3109): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 429.103639ms ago: executing program 8 (id=3110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 414.792349ms ago: executing program 7 (id=3111): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010106, 0x4e20, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 373.940571ms ago: executing program 6 (id=3112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deda8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1b2ef4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f53d709959d7bd2f5cc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36fb0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4a7bce853249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8012392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccaca8154b8601213ee2296d2a27798c8ce2a305c0c8d1acf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c04701563816514f868a2b95319abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdff7f0000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977e37df17a321d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c6aea1d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89243a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a01040000a35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92de6b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250054f84b0fccd4f810bce02322b489b79aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d4b8123de6516737be55c06d9cdcfb1e20280e14700eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b19128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dceedb2ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b2f53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9f56cd47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b1e6860c305d1faca4d6e4680ab6a6d491ecc97a904cc9c643e489d1a5f7d8a359bea93ba2d95bd3341d98d4918118e5f7b6fa6f603274c561f63ee337ad8d0017bbd1e17b5ce71a18c8572810029fe5d0ac2a661d8b346240c46f0223981cd53c067b65b579c144a4c918504888132a19a6a1702afb8646cf8fbcc5a4f5fbc072388f7bd7955138fc4919d78cfc5f2fd7dccf3a20896045698d2b6770773412029db69c099fda38be5f37adc5bd48f7f11b5632bb63fa18718c1a24e0bad8d21f51f6bf3f"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 373.554932ms ago: executing program 8 (id=3113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) 373.265802ms ago: executing program 7 (id=3114): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000400), &(0x7f0000000600)}, 0x20) 337.716664ms ago: executing program 6 (id=3115): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 337.110824ms ago: executing program 6 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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") perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r3, r2, 0x0, 0x3ffff) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x1, 0x7, 0x602, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40000) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4004}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$kcm(0x23, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e5", 0x16}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xf18, 0x4) 144.024954ms ago: executing program 7 (id=3117): socket$packet(0x11, 0xa, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x11, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x2000c8d0) 105.629845ms ago: executing program 8 (id=3118): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, 0x0, 0x3000c0c0) 76.100056ms ago: executing program 8 (id=3119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 8 (id=3120): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): sysadm_t tclass=ieee802154_socket permissive=1 [ 291.164306][ T7759] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.205329][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 291.736775][ T9478] loop7: detected capacity change from 0 to 512 [ 291.850581][ T9484] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1636'. [ 291.892993][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1637'. [ 292.203917][ T28] audit: type=1400 audit(2000000022.906:1437): avc: denied { bind } for pid=9491 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.259283][ T28] audit: type=1400 audit(2000000022.906:1438): avc: denied { write } for pid=9491 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.297573][ T28] audit: type=1400 audit(2000000022.906:1439): avc: denied { write } for pid=9491 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.360858][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.424610][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 292.441471][ T9513] netlink: 'syz.3.1647': attribute type 7 has an invalid length. [ 292.451855][ T9513] netlink: 'syz.3.1647': attribute type 8 has an invalid length. [ 292.459945][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'. [ 295.029602][ T9495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.091173][ T9544] loop6: detected capacity change from 0 to 128 [ 295.101309][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1657'. [ 295.144381][ T9544] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.160294][ T9544] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.404367][ T9558] loop7: detected capacity change from 0 to 256 [ 297.735580][ T9575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.834747][ T28] audit: type=1400 audit(2000000028.817:1440): avc: denied { create } for pid=9574 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 297.906103][ T28] audit: type=1400 audit(2000000028.838:1441): avc: denied { sys_admin } for pid=9574 comm="syz.0.1664" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 298.048573][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1666'. [ 298.572490][ T9586] xt_TCPMSS: Only works on TCP SYN packets [ 299.390411][ T9599] loop7: detected capacity change from 0 to 2048 [ 299.548317][ T9594] loop5: detected capacity change from 0 to 1024 [ 299.574124][ T9594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.638244][ T9594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.685252][ T7737] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.768181][ T28] audit: type=1400 audit(2000000030.843:1442): avc: denied { nlmsg_read } for pid=9611 comm="syz.6.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.794086][ T9613] loop3: detected capacity change from 0 to 512 [ 299.811054][ T9613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.978950][ T9610] veth0_to_team: entered promiscuous mode [ 300.000762][ T9614] netlink: 'syz.5.1670': attribute type 8 has an invalid length. [ 300.008624][ T9614] sch_fq: defrate 0 ignored. [ 300.066989][ T3590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.304640][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.561500][ T9653] pimreg: tun_chr_ioctl cmd 1074812117 [ 300.573532][ T28] audit: type=1400 audit(2000000031.672:1443): avc: denied { append } for pid=9652 comm="syz.0.1686" name="tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/usr/sbin/cupsd" [ 300.591232][ T9657] loop3: detected capacity change from 0 to 128 [ 300.619760][ T9657] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.652608][ T9657] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.998251][ T28] audit: type=1400 audit(2000000032.060:1444): avc: denied { lock } for pid=9656 comm="syz.3.1687" path="/293/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.009525][ T9687] loop7: detected capacity change from 0 to 512 [ 303.028658][ T9687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.187385][ T28] audit: type=1400 audit(2000000034.433:1445): avc: denied { write } for pid=9702 comm="syz.5.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 303.207026][ T28] audit: type=1400 audit(2000000034.443:1446): avc: denied { getopt } for pid=9702 comm="syz.5.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.227646][ T7759] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.245270][ T9705] loop5: detected capacity change from 0 to 512 [ 303.252363][ T9705] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.267570][ T9643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.270235][ T9705] EXT4-fs (loop5): 1 truncate cleaned up [ 303.288791][ T9705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.361520][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.439716][ T9720] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 303.462463][ T28] audit: type=1400 audit(2000000034.727:1447): avc: denied { bind } for pid=9721 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.483678][ T9720] bpf: Bad value for 'gid' [ 303.507686][ T28] audit: type=1400 audit(2000000034.727:1448): avc: denied { listen } for pid=9721 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.546623][ T9722] lo speed is unknown, defaulting to 1000 [ 303.575986][ T28] audit: type=1400 audit(2000000034.727:1449): avc: denied { connect } for pid=9721 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.623446][ T28] audit: type=1400 audit(2000000034.727:1450): avc: denied { accept } for pid=9721 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.661642][ T28] audit: type=1400 audit(2000000034.727:1451): avc: denied { write } for pid=9721 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.698161][ T28] audit: type=1400 audit(2000000034.884:1452): avc: denied { setattr } for pid=9733 comm="syz.3.1709" name="KEY" dev="sockfs" ino=24672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 303.703911][ T9737] loop3: detected capacity change from 0 to 512 [ 303.766786][ T9737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.789288][ T9746] FAULT_INJECTION: forcing a failure. [ 303.789288][ T9746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.802539][ T9746] CPU: 1 UID: 0 PID: 9746 Comm: syz.6.1712 Tainted: G W syzkaller #0 PREEMPT(full) [ 303.802576][ T9746] Tainted: [W]=WARN [ 303.802584][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.802600][ T9746] Call Trace: [ 303.802608][ T9746] [ 303.802617][ T9746] __dump_stack+0x1d/0x30 [ 303.802685][ T9746] dump_stack_lvl+0x95/0xd0 [ 303.802712][ T9746] dump_stack+0x15/0x1b [ 303.802738][ T9746] should_fail_ex+0x263/0x280 [ 303.802770][ T9746] should_fail+0xb/0x20 [ 303.802832][ T9746] should_fail_usercopy+0x1a/0x20 [ 303.802864][ T9746] _copy_from_iter+0xcf/0xea0 [ 303.802897][ T9746] ? __alloc_skb+0x4f6/0x690 [ 303.802928][ T9746] ? __alloc_skb+0x200/0x690 [ 303.802971][ T9746] netlink_sendmsg+0x4ae/0x6f0 [ 303.803009][ T9746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.803121][ T9746] ____sys_sendmsg+0x563/0x5b0 [ 303.803186][ T9746] ___sys_sendmsg+0x195/0x1e0 [ 303.803230][ T9746] __x64_sys_sendmsg+0xd4/0x160 [ 303.803337][ T9746] x64_sys_call+0x194c/0x3020 [ 303.803413][ T9746] do_syscall_64+0x12c/0x370 [ 303.803441][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.803463][ T9746] RIP: 0033:0x7fb8b3a0c799 [ 303.803481][ T9746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.803502][ T9746] RSP: 002b:00007fb8b2467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.803529][ T9746] RAX: ffffffffffffffda RBX: 00007fb8b3c85fa0 RCX: 00007fb8b3a0c799 [ 303.803580][ T9746] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 303.803627][ T9746] RBP: 00007fb8b2467090 R08: 0000000000000000 R09: 0000000000000000 [ 303.803640][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.803654][ T9746] R13: 00007fb8b3c86038 R14: 00007fb8b3c85fa0 R15: 00007ffd52d00c18 [ 303.803675][ T9746] [ 304.038814][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1715'. [ 304.193481][ T9766] loop7: detected capacity change from 0 to 256 [ 306.442934][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.183861][ T9778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1726'. [ 307.202744][ T3590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.250163][ T28] audit: type=1400 audit(2000000038.695:1453): avc: denied { accept } for pid=9779 comm="syz.7.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 307.331530][ T9792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9792 comm=syz.6.1729 [ 307.366877][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1729'. [ 307.387882][ T28] audit: type=1400 audit(2000000038.842:1454): avc: denied { getopt } for pid=9786 comm="syz.6.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.460848][ T9810] loop3: detected capacity change from 0 to 512 [ 307.473561][ T9809] loop5: detected capacity change from 0 to 512 [ 307.492069][ T9809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.754729][ T9818] loop3: detected capacity change from 0 to 4096 [ 307.761888][ T9818] EXT4-fs: Ignoring removed bh option [ 307.891143][ T9818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.182250][ T3590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.315193][ T9829] loop5: detected capacity change from 0 to 256 [ 308.418746][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.063479][ T9780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.195624][ T9869] 9pnet_fd: p9_fd_create_unix (9869): problem connecting socket: ./file0: -2 [ 310.265735][ T9872] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1751'. [ 310.564359][ T9879] loop6: detected capacity change from 0 to 4096 [ 310.624886][ T9879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.653614][ T9879] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 310.764662][ T9880] loop6: detected capacity change from 0 to 1024 [ 310.771592][ T9880] EXT4-fs: inline encryption not supported [ 310.799431][ T9880] EXT4-fs: Ignoring removed nobh option [ 310.835483][ T9880] EXT4-fs: Ignoring removed bh option [ 310.886345][ T9880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.970325][ T9880] EXT4-fs (loop6): shut down requested (0) [ 311.022870][ T28] audit: type=1400 audit(2000000042.642:1455): avc: denied { unmount } for pid=3590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 311.065025][ T9890] FAULT_INJECTION: forcing a failure. [ 311.065025][ T9890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.088512][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.3.1757 Tainted: G W syzkaller #0 PREEMPT(full) [ 311.088547][ T9890] Tainted: [W]=WARN [ 311.088555][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.088592][ T9890] Call Trace: [ 311.088600][ T9890] [ 311.088610][ T9890] __dump_stack+0x1d/0x30 [ 311.088643][ T9890] dump_stack_lvl+0x95/0xd0 [ 311.088670][ T9890] dump_stack+0x15/0x1b [ 311.088691][ T9890] should_fail_ex+0x263/0x280 [ 311.088802][ T9890] should_fail+0xb/0x20 [ 311.088828][ T9890] should_fail_usercopy+0x1a/0x20 [ 311.088861][ T9890] _copy_from_iter+0xcf/0xea0 [ 311.088895][ T9890] ? __alloc_skb+0x4f6/0x690 [ 311.088975][ T9890] ? __alloc_skb+0x200/0x690 [ 311.089006][ T9890] netlink_sendmsg+0x4ae/0x6f0 [ 311.089052][ T9890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.089097][ T9890] ____sys_sendmsg+0x563/0x5b0 [ 311.089135][ T9890] ___sys_sendmsg+0x195/0x1e0 [ 311.089199][ T9890] __x64_sys_sendmsg+0xd4/0x160 [ 311.089231][ T9890] x64_sys_call+0x194c/0x3020 [ 311.089288][ T9890] do_syscall_64+0x12c/0x370 [ 311.089380][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.089474][ T9890] RIP: 0033:0x7fd72729c799 [ 311.089491][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.089512][ T9890] RSP: 002b:00007fd725cf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.089578][ T9890] RAX: ffffffffffffffda RBX: 00007fd727515fa0 RCX: 00007fd72729c799 [ 311.089594][ T9890] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 311.089629][ T9890] RBP: 00007fd725cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 311.089644][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.089656][ T9890] R13: 00007fd727516038 R14: 00007fd727515fa0 R15: 00007ffe66e0e498 [ 311.089677][ T9890] [ 311.421594][ T7737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.452789][ T9894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1759'. [ 311.493528][ T28] audit: type=1400 audit(2000000043.157:1456): avc: denied { getopt } for pid=9899 comm="syz.3.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.556548][ T9900] loop3: detected capacity change from 0 to 8192 [ 311.634465][ T28] audit: type=1400 audit(2000000043.157:1457): avc: denied { ioctl } for pid=9899 comm="syz.3.1762" path="socket:[25709]" dev="sockfs" ino=25709 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.664543][ T3613] loop3: p1 < > p2 p4 < p5 > [ 311.669341][ T3613] loop3: partition table partially beyond EOD, truncated [ 311.686359][ T3613] loop3: p1 start 134217728 is beyond EOD, truncated [ 311.701485][ T3613] loop3: p2 size 591360 extends beyond EOD, truncated [ 311.833248][ T28] audit: type=1400 audit(2000000043.503:1458): avc: denied { create } for pid=9899 comm="syz.3.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 311.882332][ T3613] loop3: p5 size 591360 extends beyond EOD, truncated [ 312.115445][ T28] audit: type=1400 audit(2000000043.503:1459): avc: denied { bind } for pid=9899 comm="syz.3.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 312.840766][ T9900] loop3: p1 < > p2 p4 < p5 > [ 312.853458][ T28] audit: type=1400 audit(2000000044.574:1460): avc: denied { create } for pid=9911 comm="syz.0.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 312.876665][ T9900] loop3: partition table partially beyond EOD, truncated [ 312.892129][ T9900] loop3: p1 start 134217728 is beyond EOD, truncated [ 312.909539][ T9900] loop3: p2 size 591360 extends beyond EOD, truncated [ 312.922111][ T9900] loop3: p5 size 591360 extends beyond EOD, truncated [ 312.979918][ T9921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=986 sclass=netlink_route_socket pid=9921 comm=syz.5.1767 [ 313.617390][ T9927] loop3: detected capacity change from 0 to 512 [ 313.634199][ T9929] loop6: detected capacity change from 0 to 512 [ 313.644909][ T9927] SELinux: security_context_str_to_sid () failed with errno=-22 [ 313.673724][ T9927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9927 comm=syz.3.1770 [ 313.687652][ T9933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1772'. [ 313.734038][ T9929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.753432][ T9936] loop5: detected capacity change from 0 to 164 [ 313.772191][ T9936] iso9660: Unknown parameter '' [ 313.787536][ T28] audit: type=1400 audit(2000000045.550:1461): avc: denied { mount } for pid=9937 comm="syz.3.1774" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 313.914989][ T28] audit: type=1400 audit(2000000045.592:1462): avc: denied { ioctl } for pid=9937 comm="syz.3.1774" path="socket:[25185]" dev="sockfs" ino=25185 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 314.064001][ T9942] veth0_to_team: left promiscuous mode [ 314.086539][ T9942] vlan2: left promiscuous mode [ 314.091379][ T9942] bridge0: left promiscuous mode [ 314.612234][ T9942] loop3: detected capacity change from 0 to 1024 [ 314.865451][ T35] lo speed is unknown, defaulting to 1000 [ 314.882351][ T28] audit: type=1400 audit(2000000046.443:1463): avc: denied { mounton } for pid=9937 comm="syz.3.1774" path="/314/file0" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 315.159216][ T9942] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 315.170177][ T9942] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 316.187905][ T9942] EXT4-fs (loop3): invalid journal inode [ 316.193587][ T9942] EXT4-fs (loop3): can't get journal size [ 317.197624][ T9942] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 317.197716][ T9942] EXT4-fs: failed to create workqueue [ 317.302348][ T9942] EXT4-fs (loop3): mount failed [ 317.904918][ T9952] FAULT_INJECTION: forcing a failure. [ 317.904918][ T9952] name failslab, interval 1, probability 0, space 0, times 0 [ 317.917642][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.7.1777 Tainted: G W syzkaller #0 PREEMPT(full) [ 317.917678][ T9952] Tainted: [W]=WARN [ 317.917686][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.917721][ T9952] Call Trace: [ 317.917728][ T9952] [ 317.917736][ T9952] __dump_stack+0x1d/0x30 [ 317.917763][ T9952] dump_stack_lvl+0x95/0xd0 [ 317.917865][ T9952] dump_stack+0x15/0x1b [ 317.917888][ T9952] should_fail_ex+0x263/0x280 [ 317.917919][ T9952] should_failslab+0x8c/0xb0 [ 317.917946][ T9952] __kmalloc_noprof+0xb8/0x4e0 [ 317.918041][ T9952] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 317.918117][ T9952] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 317.918147][ T9952] ? __rcu_read_unlock+0x4e/0x70 [ 317.918174][ T9952] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 317.918203][ T9952] ? genl_get_cmd+0x639/0x660 [ 317.918277][ T9952] genl_rcv_msg+0x432/0x470 [ 317.918301][ T9952] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 317.918334][ T9952] netlink_rcv_skb+0x123/0x220 [ 317.918401][ T9952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.918433][ T9952] genl_rcv+0x28/0x40 [ 317.918456][ T9952] netlink_unicast+0x5c0/0x690 [ 317.918514][ T9952] netlink_sendmsg+0x5c8/0x6f0 [ 317.918544][ T9952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.918579][ T9952] ____sys_sendmsg+0x563/0x5b0 [ 317.918685][ T9952] ___sys_sendmsg+0x195/0x1e0 [ 317.918726][ T9952] __x64_sys_sendmsg+0xd4/0x160 [ 317.918802][ T9952] x64_sys_call+0x194c/0x3020 [ 317.918833][ T9952] do_syscall_64+0x12c/0x370 [ 317.918857][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.918956][ T9952] RIP: 0033:0x7f533c4dc799 [ 317.918971][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.918989][ T9952] RSP: 002b:00007f533af2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.919012][ T9952] RAX: ffffffffffffffda RBX: 00007f533c755fa0 RCX: 00007f533c4dc799 [ 317.919027][ T9952] RDX: 0000000000040080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 317.919053][ T9952] RBP: 00007f533af2f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.919128][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.919141][ T9952] R13: 00007f533c756038 R14: 00007f533c755fa0 R15: 00007fff97dffa58 [ 317.919162][ T9952] [ 318.173305][ T9963] sg_write: data in/out 65/154 bytes for SCSI command 0x0-- guessing data in; [ 318.173305][ T9963] program syz.7.1781 not setting count and/or reply_len properly [ 318.245507][ T28] audit: type=1400 audit(2000000050.243:1464): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 318.290278][ T9970] FAULT_INJECTION: forcing a failure. [ 318.290278][ T9970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.330754][ T7737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.473029][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.5.1782 Tainted: G W syzkaller #0 PREEMPT(full) [ 318.473125][ T9970] Tainted: [W]=WARN [ 318.473133][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.473148][ T9970] Call Trace: [ 318.473156][ T9970] [ 318.473166][ T9970] __dump_stack+0x1d/0x30 [ 318.473196][ T9970] dump_stack_lvl+0x95/0xd0 [ 318.473327][ T9970] dump_stack+0x15/0x1b [ 318.473353][ T9970] should_fail_ex+0x263/0x280 [ 318.473418][ T9970] should_fail+0xb/0x20 [ 318.473444][ T9970] should_fail_usercopy+0x1a/0x20 [ 318.473540][ T9970] _copy_to_user+0x20/0xa0 [ 318.473574][ T9970] simple_read_from_buffer+0xb5/0x130 [ 318.473602][ T9970] proc_fail_nth_read+0x10e/0x150 [ 318.473638][ T9970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.473701][ T9970] vfs_read+0x1ab/0x7f0 [ 318.473737][ T9970] ? __rcu_read_unlock+0x4e/0x70 [ 318.473761][ T9970] ? __fget_files+0x184/0x1c0 [ 318.473787][ T9970] ? kfree+0x101/0x380 [ 318.473875][ T9970] ? mutex_lock+0x57/0x90 [ 318.474020][ T9970] ksys_read+0xdc/0x1a0 [ 318.474111][ T9970] __x64_sys_read+0x40/0x50 [ 318.474132][ T9970] x64_sys_call+0x2886/0x3020 [ 318.474233][ T9970] do_syscall_64+0x12c/0x370 [ 318.474262][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.474287][ T9970] RIP: 0033:0x7feff345cfce [ 318.474306][ T9970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.474327][ T9970] RSP: 002b:00007feff1ef6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.474387][ T9970] RAX: ffffffffffffffda RBX: 00007feff1ef76c0 RCX: 00007feff345cfce [ 318.474403][ T9970] RDX: 000000000000000f RSI: 00007feff1ef70a0 RDI: 0000000000000003 [ 318.474418][ T9970] RBP: 00007feff1ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.474484][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.474499][ T9970] R13: 00007feff3716038 R14: 00007feff3715fa0 R15: 00007ffd49a15df8 [ 318.474521][ T9970] [ 318.498548][ T28] audit: type=1400 audit(2000000050.369:1465): avc: denied { getopt } for pid=9962 comm="syz.7.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 319.365361][ T9983] loop6: detected capacity change from 0 to 512 [ 319.393282][ T9983] EXT4-fs: Ignoring removed nobh option [ 319.444996][ T9983] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 319.600795][ T9983] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1785: bg 0: block 104: invalid block bitmap [ 319.652636][ T9983] loop6: lost filesystem error report for type 5 error -117 [ 319.664319][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 319.678068][ C0] EXT4-fs (loop6): initial error at time 2000000051: ext4_validate_block_bitmap:432 [ 319.687481][ C0] EXT4-fs (loop6): last error at time 2000000051: ext4_validate_block_bitmap:432 [ 319.697387][ T9983] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 319.730327][ T9992] loop7: detected capacity change from 0 to 512 [ 319.730642][ T9983] loop6: lost filesystem error report for type 5 error -117 [ 319.739807][ T9994] netlink: 'syz.0.1789': attribute type 8 has an invalid length. [ 319.761861][ T9983] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1785: invalid indirect mapped block 1 (level 1) [ 319.779743][ T9990] tap0: tun_chr_ioctl cmd 1074025677 [ 319.794640][ T9983] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 319.794931][ T9983] EXT4-fs (loop6): 1 truncate cleaned up [ 319.826434][ T9990] tap0: linktype set to 778 [ 319.849427][ T9983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.099721][ T9992] EXT4-fs (loop7): 1 orphan inode deleted [ 320.831683][ T9992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.304224][T10012] netlink: 'syz.5.1794': attribute type 30 has an invalid length. [ 321.598253][T10019] loop3: detected capacity change from 0 to 512 [ 321.645260][T10019] EXT4-fs: Ignoring removed bh option [ 321.804942][T10019] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 321.950654][T10019] EXT4-fs (loop3): 1 truncate cleaned up [ 322.039918][T10019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.746235][ T7737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.852388][T10033] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1797'. [ 322.885215][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.919834][T10035] lo speed is unknown, defaulting to 1000 [ 322.930784][ T28] audit: type=1326 audit(2000000055.156:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72729c799 code=0x7ffc0000 [ 322.960344][ T28] audit: type=1326 audit(2000000055.156:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72729c799 code=0x7ffc0000 [ 322.983993][ T28] audit: type=1326 audit(2000000055.156:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd72729c799 code=0x7ffc0000 [ 323.008120][ T28] audit: type=1326 audit(2000000055.156:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72729c799 code=0x7ffc0000 [ 323.034439][ T28] audit: type=1326 audit(2000000055.156:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72729c799 code=0x7ffc0000 [ 323.257880][T10046] netlink: 'syz.6.1802': attribute type 8 has an invalid length. [ 323.334319][ T7759] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.344474][T10044] netlink: 'syz.5.1801': attribute type 9 has an invalid length. [ 323.374608][T10051] loop3: detected capacity change from 0 to 256 [ 323.391960][T10044] netlink: 'syz.5.1801': attribute type 7 has an invalid length. [ 323.408731][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1805'. [ 323.427144][T10044] netlink: 'syz.5.1801': attribute type 8 has an invalid length. [ 323.563253][ T28] audit: type=1400 audit(2000000055.775:1471): avc: denied { execute } for pid=10043 comm="syz.5.1801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 323.660650][T10059] netlink: 'syz.7.1805': attribute type 4 has an invalid length. [ 323.911430][ T28] audit: type=1400 audit(2000000055.943:1472): avc: denied { connect } for pid=10052 comm="syz.7.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.323795][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1807'. [ 324.349538][T10069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1808'. [ 324.507697][T10080] netlink: 'syz.3.1813': attribute type 8 has an invalid length. [ 325.364701][ T28] audit: type=1400 audit(2000000057.718:1473): avc: denied { map } for pid=10107 comm="syz.0.1821" path="socket:[25459]" dev="sockfs" ino=25459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 326.358487][T10141] loop6: detected capacity change from 0 to 512 [ 330.844374][ T28] audit: type=1400 audit(2000000063.470:1474): avc: denied { unmount } for pid=7737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 331.022692][T10201] tap0: tun_chr_ioctl cmd 1074025677 [ 331.066887][T10201] tap0: linktype set to 778 [ 332.294192][ T28] audit: type=1400 audit(2000000064.982:1475): avc: denied { getopt } for pid=10207 comm="syz.6.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.751041][T10220] loop6: detected capacity change from 0 to 512 [ 332.807850][T10220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.990499][T10231] IPVS: Error connecting to the multicast addr [ 332.994928][T10229] loop7: detected capacity change from 0 to 2048 [ 333.234728][ T7737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.301069][T10246] loop6: detected capacity change from 0 to 512 [ 333.331206][T10246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.344953][T10246] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.517613][T10250] loop7: detected capacity change from 0 to 512 [ 333.627211][T10254] loop7: detected capacity change from 0 to 1024 [ 333.649729][T10254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.831239][ T7759] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.907019][T10268] loop7: detected capacity change from 0 to 128 [ 334.008137][T10271] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1871'. [ 334.035316][T10271] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 334.150094][T10280] loop7: detected capacity change from 0 to 512 [ 334.157228][T10280] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.186143][T10280] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 334.200416][T10280] Quota error (device loop7): write_blk: dquota write failed [ 334.207784][T10280] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 334.216973][T10280] Quota error (device loop7): write_blk: dquota write failed [ 334.224375][T10280] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 334.234210][T10280] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1875: Failed to acquire dquot type 1 [ 334.245429][T10280] loop7: lost filesystem error report for type 5 error -28 [ 334.246093][T10280] EXT4-fs (loop7): 1 truncate cleaned up [ 334.253312][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 334.253332][ C0] EXT4-fs (loop7): initial error at time 2000000066: ext4_mb_generate_buddy:1315 [ 334.253351][ C0] EXT4-fs (loop7): last error at time 2000000067: ext4_acquire_dquot:7001 [ 334.283448][T10280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.310433][ T7759] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.536615][T10290] loop7: detected capacity change from 0 to 512 [ 334.594947][T10290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.620015][T10290] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.881919][T10310] loop3: detected capacity change from 0 to 256 [ 334.903269][T10310] futex_wake_op: syz.3.1884 tries to shift op by -3; fix this program [ 336.189511][T10340] loop3: detected capacity change from 0 to 1024 [ 336.221261][T10252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.322024][T10340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.431683][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1898'. [ 337.858353][T10222] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 338.328488][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.677717][T10386] FAULT_INJECTION: forcing a failure. [ 339.677717][T10386] name failslab, interval 1, probability 0, space 0, times 0 [ 339.726336][T10386] CPU: 0 UID: 0 PID: 10386 Comm: syz.3.1906 Tainted: G W syzkaller #0 PREEMPT(full) [ 339.726369][T10386] Tainted: [W]=WARN [ 339.726375][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.726393][T10386] Call Trace: [ 339.726401][T10386] [ 339.726413][T10386] __dump_stack+0x1d/0x30 [ 339.726457][T10386] dump_stack_lvl+0x95/0xd0 [ 339.726482][T10386] dump_stack+0x15/0x1b [ 339.726505][T10386] should_fail_ex+0x263/0x280 [ 339.726530][T10386] should_failslab+0x8c/0xb0 [ 339.726557][T10386] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 339.726585][T10386] ? __alloc_skb+0x2d6/0x690 [ 339.726691][T10386] __alloc_skb+0x2d6/0x690 [ 339.726753][T10386] ? __alloc_skb+0x200/0x690 [ 339.726781][T10386] alloc_skb_with_frags+0x7d/0x470 [ 339.726859][T10386] ? __rcu_read_unlock+0x4e/0x70 [ 339.726885][T10386] ? ref_tracker_alloc+0x1eb/0x2f0 [ 339.726914][T10386] sock_alloc_send_pskb+0x44d/0x500 [ 339.727013][T10386] ? _raw_spin_lock_bh+0x56/0xb0 [ 339.727040][T10386] raw_sendmsg+0x1ac/0x510 [ 339.727082][T10386] ieee802154_sock_sendmsg+0x51/0x60 [ 339.727116][T10386] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 339.727247][T10386] ____sys_sendmsg+0x563/0x5b0 [ 339.727285][T10386] ___sys_sendmsg+0x195/0x1e0 [ 339.727324][T10386] __x64_sys_sendmsg+0xd4/0x160 [ 339.727433][T10386] x64_sys_call+0x194c/0x3020 [ 339.727464][T10386] do_syscall_64+0x12c/0x370 [ 339.727492][T10386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.727585][T10386] RIP: 0033:0x7fd72729c799 [ 339.727603][T10386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.727642][T10386] RSP: 002b:00007fd725cf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.727665][T10386] RAX: ffffffffffffffda RBX: 00007fd727515fa0 RCX: 00007fd72729c799 [ 339.727679][T10386] RDX: 6e64543f0ae2cee6 RSI: 0000200000000240 RDI: 0000000000000004 [ 339.727725][T10386] RBP: 00007fd725cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.727739][T10386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.727754][T10386] R13: 00007fd727516038 R14: 00007fd727515fa0 R15: 00007ffe66e0e498 [ 339.727838][T10386] [ 340.221668][T10302] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.257870][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1918'. [ 340.286455][T10395] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 340.612370][T10407] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1918'. [ 340.623394][T10402] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1910'. [ 340.795806][T10407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.866132][T10407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.927024][T10407] bond0 (unregistering): Released all slaves [ 341.011483][ T3389] syz1: Port: 1 Link DOWN [ 341.060204][T10419] netlink: 'syz.7.1910': attribute type 4 has an invalid length. [ 341.098531][T10420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=10420 comm=syz.0.1914 [ 341.129999][T10423] loop3: detected capacity change from 0 to 256 [ 341.660872][T10442] cgroup: subsys name conflicts with all [ 341.832703][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1925'. [ 341.866250][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1925'. [ 342.303040][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1932'. [ 342.322066][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1932'. [ 342.413063][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1935'. [ 342.423325][T10480] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1934'. [ 342.689783][T10491] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1939'. [ 343.182772][ T28] audit: type=1326 audit(2000000076.414:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.236981][ T28] audit: type=1326 audit(2000000076.414:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.307299][ T28] audit: type=1326 audit(2000000076.414:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.334386][ T28] audit: type=1326 audit(2000000076.414:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.358050][ T28] audit: type=1326 audit(2000000076.425:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.381789][ T28] audit: type=1326 audit(2000000076.425:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.405516][ T28] audit: type=1326 audit(2000000076.425:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.447925][ T28] audit: type=1326 audit(2000000076.446:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.475556][ T28] audit: type=1326 audit(2000000076.446:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 343.507505][ T28] audit: type=1326 audit(2000000076.446:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 345.066327][T10585] loop3: detected capacity change from 0 to 256 [ 345.578646][T10602] xt_nat: multiple ranges no longer supported [ 346.845437][T10638] bridge3: entered promiscuous mode [ 346.851180][T10638] bridge3: entered allmulticast mode [ 346.857936][T10638] team0: Port device bridge3 added [ 346.868097][T10638] bridge0: port 3(team0) entered blocking state [ 346.874714][T10638] bridge0: port 3(team0) entered disabled state [ 346.881961][T10638] team0: entered allmulticast mode [ 346.887168][T10638] team_slave_0: entered allmulticast mode [ 346.893218][T10638] team_slave_1: entered allmulticast mode [ 346.900602][T10638] team0: entered promiscuous mode [ 346.905763][T10638] team_slave_0: entered promiscuous mode [ 346.912028][T10638] team_slave_1: entered promiscuous mode [ 346.918459][T10638] macvlan1: entered promiscuous mode [ 346.924641][T10638] bridge0: port 3(team0) entered blocking state [ 346.931040][T10638] bridge0: port 3(team0) entered forwarding state [ 347.020654][T10644] __nla_validate_parse: 1 callbacks suppressed [ 347.020759][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1993'. [ 347.188045][T10645] loop3: detected capacity change from 0 to 8192 [ 347.326488][T10654] netlink: 'syz.3.1993': attribute type 4 has an invalid length. [ 347.700982][T10682] Process accounting resumed [ 347.813511][T10643] syz.3.1993 (10643) used greatest stack depth: 5968 bytes left [ 348.463103][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 348.463117][ T28] audit: type=1400 audit(2000000081.968:1620): avc: denied { map } for pid=10696 comm="syz.0.2011" path="socket:[27355]" dev="sockfs" ino=27355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.498210][T10699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2012'. [ 348.525093][T10699] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2012'. [ 348.545829][ T28] audit: type=1400 audit(2000000081.999:1621): avc: denied { read } for pid=10696 comm="syz.0.2011" path="socket:[27355]" dev="sockfs" ino=27355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.816790][T10713] Process accounting resumed [ 349.946329][ T28] audit: type=1400 audit(2000000083.511:1622): avc: denied { append } for pid=10760 comm="syz.3.2033" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 352.002919][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2070'. [ 352.031044][T10864] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2070'. [ 352.072969][T10864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.091473][T10866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2071'. [ 352.107618][T10864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.121036][T10864] bond0 (unregistering): Released all slaves [ 352.143135][T10866] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2071'. [ 352.821790][T10896] sctp: [Deprecated]: syz.3.2083 (pid 10896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.821790][T10896] Use struct sctp_sack_info instead [ 352.840691][T10893] xt_TCPMSS: Only works on TCP SYN packets [ 353.005051][T10910] loop3: detected capacity change from 0 to 736 [ 353.014202][T10910] iso9660: Unknown parameter '€' [ 353.036087][T10910] sctp: [Deprecated]: syz.3.2087 (pid 10910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.036087][T10910] Use struct sctp_sack_info instead [ 353.141844][T10916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2089'. [ 353.165007][T10916] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2089'. [ 353.655969][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2093'. [ 353.943127][T10940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2099'. [ 355.066238][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2105'. [ 355.090878][T10967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2106'. [ 355.110314][T10968] netlink: 'syz.0.2099': attribute type 4 has an invalid length. [ 355.213385][T10969] loop3: detected capacity change from 0 to 8192 [ 355.320701][T10972] ipip0: entered promiscuous mode [ 355.373840][T10969] netlink: 'syz.3.2105': attribute type 4 has an invalid length. [ 355.730626][T10978] netlink: 'syz.6.2106': attribute type 4 has an invalid length. [ 356.262194][T10936] syz.0.2099 (10936) used greatest stack depth: 5400 bytes left [ 356.652715][ T28] audit: type=1400 audit(2000000090.555:1623): avc: denied { setopt } for pid=10985 comm="syz.0.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 357.618169][T11013] Process accounting resumed [ 359.138609][T11043] __nla_validate_parse: 1 callbacks suppressed [ 359.138629][T11043] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2130'. [ 359.901175][T11051] netlink: 'syz.7.2130': attribute type 4 has an invalid length. [ 360.219944][T11056] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2134'. [ 360.251600][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2133'. [ 360.274187][T11056] gtp0: entered promiscuous mode [ 360.279287][T11056] gtp0: entered allmulticast mode [ 360.296747][T11054] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2133'. [ 360.323574][T11054] smc: removing net device bond0 with user defined pnetid SYZ2 [ 360.357372][T11054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.381915][T11054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.397520][T11054] bond0 (unregistering): Released all slaves [ 361.068447][ T28] audit: type=1400 audit(2000000095.195:1624): avc: denied { getopt } for pid=11103 comm="syz.7.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 361.136082][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 361.264788][T11123] usb usb8: usbfs: process 11123 (syz.3.2155) did not claim interface 0 before use [ 361.494593][T11130] loop3: detected capacity change from 0 to 128 [ 361.507786][T11130] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.577437][T11130] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.638569][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.097256][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2174'. [ 363.219328][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2175'. [ 363.222412][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2176'. [ 363.612822][T11192] syz.0.2174 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 363.639915][T11206] netlink: 'syz.7.2176': attribute type 4 has an invalid length. [ 363.691774][T11192] CPU: 1 UID: 0 PID: 11192 Comm: syz.0.2174 Tainted: G W syzkaller #0 PREEMPT(full) [ 363.691813][T11192] Tainted: [W]=WARN [ 363.691822][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.691848][T11192] Call Trace: [ 363.691855][T11192] [ 363.691864][T11192] __dump_stack+0x1d/0x30 [ 363.691951][T11192] dump_stack_lvl+0x95/0xd0 [ 363.691984][T11192] dump_stack+0x15/0x1b [ 363.692009][T11192] dump_header+0x80/0x240 [ 363.692036][T11192] oom_kill_process+0x295/0x350 [ 363.692115][T11192] out_of_memory+0x97d/0xb80 [ 363.692142][T11192] try_charge_memcg+0x62e/0xa10 [ 363.692187][T11192] obj_cgroup_charge_pages+0x23/0xc0 [ 363.692280][T11192] __memcg_kmem_charge_page+0x9e/0x170 [ 363.692310][T11192] __alloc_frozen_pages_noprof+0x18a/0x360 [ 363.692347][T11192] alloc_pages_mpol+0xb3/0x260 [ 363.692405][T11192] alloc_pages_noprof+0x8f/0x130 [ 363.692438][T11192] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 363.692509][T11192] __kvmalloc_node_noprof+0x3d4/0x650 [ 363.692540][T11192] ? ip_set_alloc+0x24/0x30 [ 363.692571][T11192] ? ip_set_alloc+0x24/0x30 [ 363.692604][T11192] ? __kmalloc_cache_noprof+0x18a/0x410 [ 363.692633][T11192] ip_set_alloc+0x24/0x30 [ 363.692665][T11192] hash_netiface_create+0x282/0x740 [ 363.692738][T11192] ? __pfx_hash_netiface_create+0x10/0x10 [ 363.692770][T11192] ip_set_create+0x3cf/0x970 [ 363.692857][T11192] ? __nla_parse+0x40/0x60 [ 363.692899][T11192] nfnetlink_rcv_msg+0x509/0x5d0 [ 363.692995][T11192] netlink_rcv_skb+0x123/0x220 [ 363.693071][T11192] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 363.693158][T11192] nfnetlink_rcv+0x167/0x1720 [ 363.693182][T11192] ? vm_area_free+0x71/0xb0 [ 363.693209][T11192] ? kmem_cache_free+0x237/0x380 [ 363.693308][T11192] ? percpu_counter_add_batch+0xb6/0x130 [ 363.693336][T11192] ? __mt_destroy+0xce/0xe0 [ 363.693366][T11192] ? uprobe_mmap+0xe6/0xf80 [ 363.693397][T11192] ? vms_complete_munmap_vmas+0x57b/0x5e0 [ 363.693505][T11192] ? inode_to_bdi+0x47/0xa0 [ 363.693533][T11192] ? vma_wants_writenotify+0x148/0x1a0 [ 363.693572][T11192] ? vma_set_page_prot+0xc3/0xf0 [ 363.693604][T11192] ? __mmap_complete+0x1f2/0x220 [ 363.693629][T11192] ? mmap_region+0x1d1b/0x2050 [ 363.693713][T11192] ? _raw_spin_lock_bh+0x56/0xb0 [ 363.693743][T11192] ? _raw_spin_unlock_bh+0x18/0x20 [ 363.693773][T11192] ? selinux_nlmsg_lookup+0x99/0x890 [ 363.693813][T11192] ? __rcu_read_unlock+0x33/0x70 [ 363.693915][T11192] ? __netlink_lookup+0x276/0x2b0 [ 363.693999][T11192] netlink_unicast+0x5c0/0x690 [ 363.694059][T11192] netlink_sendmsg+0x5c8/0x6f0 [ 363.694096][T11192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.694171][T11192] ____sys_sendmsg+0x563/0x5b0 [ 363.694205][T11192] ___sys_sendmsg+0x195/0x1e0 [ 363.694316][T11192] __x64_sys_sendmsg+0xd4/0x160 [ 363.694357][T11192] x64_sys_call+0x194c/0x3020 [ 363.694386][T11192] do_syscall_64+0x12c/0x370 [ 363.694413][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.694474][T11192] RIP: 0033:0x7f02921fc799 [ 363.694494][T11192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.694514][T11192] RSP: 002b:00007f0290c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.694537][T11192] RAX: ffffffffffffffda RBX: 00007f0292475fa0 RCX: 00007f02921fc799 [ 363.694628][T11192] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 363.694643][T11192] RBP: 00007f0292292c99 R08: 0000000000000000 R09: 0000000000000000 [ 363.694658][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.694673][T11192] R13: 00007f0292476038 R14: 00007f0292475fa0 R15: 00007ffd93b6a8b8 [ 363.694696][T11192] [ 363.694735][T11192] memory: usage 307200kB, limit 307200kB, failcnt 6221 [ 364.060571][T11192] memory+swap: usage 375496kB, limit 9007199254740988kB, failcnt 0 [ 364.068507][T11192] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 364.076078][T11192] Memory cgroup stats for /syz0: [ 364.076350][T11192] cache 4096 [ 364.084607][T11192] rss 4096 [ 364.085968][T11194] bridge0: port 3(team0) entered disabled state [ 364.087626][T11192] shmem 0 [ 364.087634][T11192] mapped_file 4096 [ 364.087643][T11192] dirty 0 [ 364.093943][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.096794][T11192] writeback 0 [ 364.096803][T11192] workingset_refault_anon 211 [ 364.100672][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.111182][T11192] workingset_refault_file 4434 [ 364.145516][T11192] swap 69935104 [ 364.149007][T11192] swapcached 77193216 [ 364.155704][T11192] pgpgin 484812 [ 364.162825][T11192] pgpgout 484810 [ 364.167618][T11192] pgfault 346964 [ 364.173409][T11194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.176278][T11192] pgmajfault 185 [ 364.190010][T11194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.194463][T11192] inactive_anon 0 [ 364.201144][T11192] active_anon 4096 [ 364.205001][T11192] inactive_file 4096 [ 364.209118][T11192] active_file 0 [ 364.212567][T11192] unevictable 0 [ 364.216251][T11192] hierarchical_memory_limit 314572800 [ 364.222496][T11194] veth1_vlan: left allmulticast mode [ 364.225709][T11192] hierarchical_memsw_limit 9223372036854771712 [ 364.234858][T11192] total_cache 4096 [ 364.239872][T11192] total_rss 4096 [ 364.245832][T11192] total_shmem 0 [ 364.250332][T11192] total_mapped_file 4096 [ 364.256508][T11192] total_dirty 0 [ 364.263442][T11192] total_writeback 0 [ 364.267350][T11192] total_workingset_refault_anon 211 [ 364.272638][T11192] total_workingset_refault_file 4434 [ 364.273902][ T6954] lo speed is unknown, defaulting to 1000 [ 364.284414][ T317] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.301549][ T317] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.301967][ T6954] syU×: Port: 1 Link DOWN [ 364.314860][ T317] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.338865][T11192] total_swap 69935104 [ 364.343103][ T6949] lo speed is unknown, defaulting to 1000 [ 364.344434][ T317] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.377428][T11192] total_swapcached 77193216 [ 364.386137][T11192] total_pgpgin 484812 [ 364.406124][T11192] total_pgpgout 484810 [ 364.410329][T11192] total_pgfault 346964 [ 364.414538][T11192] total_pgmajfault 185 [ 364.421860][T11219] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2182'. [ 364.428676][T11192] total_inactive_anon 0 [ 364.434914][T11192] total_active_anon 4096 [ 364.439339][T11192] total_inactive_file 4096 [ 364.439514][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2182'. [ 364.443738][T11192] total_active_file 0 [ 364.443748][T11192] total_unevictable 0 [ 364.443775][T11192] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2174,pid=11191,uid=0 [ 364.530067][T11222] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 364.548656][T11192] Memory cgroup out of memory: Killed process 11191 (syz.0.2174) total-vm:164068kB, anon-rss:1228kB, file-rss:26392kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 364.723624][T11237] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2189'. [ 365.387810][T11264] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2195'. [ 365.989313][T11266] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2197'. [ 366.018158][T11266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.074776][T11266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.096433][T11266] bond0 (unregistering): Released all slaves [ 366.171819][T11275] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2200'. [ 366.321455][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2202'. [ 366.476178][T11287] loop3: detected capacity change from 0 to 8192 [ 366.629346][T11296] netlink: 'syz.3.2202': attribute type 4 has an invalid length. [ 368.126825][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2219'. [ 368.203382][T11328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11328 comm=syz.7.2219 [ 368.219328][T11336] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2220'. [ 368.314128][T11330] lo speed is unknown, defaulting to 1000 [ 368.408426][ T9382] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.469395][ T9382] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.546374][ T9382] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.615911][ T9382] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.667947][T11330] chnl_net:caif_netlink_parms(): no params data found [ 368.837232][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2223'. [ 368.863375][T11330] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.885307][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.903937][T11330] bridge_slave_0: entered allmulticast mode [ 368.910964][T11330] bridge_slave_0: entered promiscuous mode [ 368.920698][T11330] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.937322][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.952497][T11330] bridge_slave_1: entered allmulticast mode [ 368.962269][T11330] bridge_slave_1: entered promiscuous mode [ 368.978476][ T9382] bridge_slave_1: left allmulticast mode [ 368.994014][ T9382] bridge_slave_1: left promiscuous mode [ 369.029389][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.078192][ T9382] bridge_slave_0: left allmulticast mode [ 369.095837][ T9382] bridge_slave_0: left promiscuous mode [ 369.124419][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.175084][T11360] loop3: detected capacity change from 0 to 8192 [ 369.325081][ T9382] bond1 (unregistering): Released all slaves [ 369.341256][ T9382] bond2 (unregistering): Released all slaves [ 369.362986][ T9382] bond3 (unregistering): Released all slaves [ 369.383589][ T9382] bond4 (unregistering): Released all slaves [ 369.409444][T11363] tipc: Started in network mode [ 369.414324][T11363] tipc: Node identity 4, cluster identity 4711 [ 369.428174][T11363] tipc: Node number set to 4 [ 369.523606][T11330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.545827][T11378] netlink: 'syz.3.2223': attribute type 4 has an invalid length. [ 369.555029][T11330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.600650][ T9382] hsr_slave_0: left promiscuous mode [ 369.621714][ T9382] hsr_slave_1: left promiscuous mode [ 369.634362][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.661619][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.685188][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.708262][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.743401][ T9382] veth1_macvtap: left promiscuous mode [ 369.754641][ T9382] veth0_macvtap: left promiscuous mode [ 369.766818][ T9382] veth1_vlan: left promiscuous mode [ 369.777667][ T9382] veth0_vlan: left promiscuous mode [ 370.044660][T11330] team0: Port device team_slave_0 added [ 370.084848][T11330] team0: Port device team_slave_1 added [ 370.143075][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2231'. [ 370.153294][T11330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.160282][T11397] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2232'. [ 370.183325][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.255943][T11330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.286799][T11330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.312510][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.379113][T11330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.444594][T11330] hsr_slave_0: entered promiscuous mode [ 370.460761][T11330] hsr_slave_1: entered promiscuous mode [ 370.530687][ T9382] IPVS: stop unused estimator thread 0... [ 370.657539][T11330] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 370.683964][T11404] netlink: 'syz.6.2231': attribute type 4 has an invalid length. [ 370.693847][T11330] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 370.728501][T11392] syz.6.2231 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 370.751371][T11330] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 370.771888][T11330] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 370.790489][T11392] CPU: 0 UID: 0 PID: 11392 Comm: syz.6.2231 Tainted: G W syzkaller #0 PREEMPT(full) [ 370.790528][T11392] Tainted: [W]=WARN [ 370.790537][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.790551][T11392] Call Trace: [ 370.790625][T11392] [ 370.790634][T11392] __dump_stack+0x1d/0x30 [ 370.790667][T11392] dump_stack_lvl+0x95/0xd0 [ 370.790695][T11392] dump_stack+0x15/0x1b [ 370.790720][T11392] dump_header+0x80/0x240 [ 370.790828][T11392] oom_kill_process+0x295/0x350 [ 370.790934][T11392] out_of_memory+0x97d/0xb80 [ 370.790957][T11392] try_charge_memcg+0x62e/0xa10 [ 370.791006][T11392] obj_cgroup_charge_pages+0x23/0xc0 [ 370.791122][T11392] __memcg_kmem_charge_page+0x9e/0x170 [ 370.791161][T11392] __alloc_frozen_pages_noprof+0x18a/0x360 [ 370.791204][T11392] alloc_pages_mpol+0xb3/0x260 [ 370.791271][T11392] alloc_pages_noprof+0x8f/0x130 [ 370.791355][T11392] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 370.791394][T11392] __kvmalloc_node_noprof+0x3d4/0x650 [ 370.791457][T11392] ? ip_set_alloc+0x24/0x30 [ 370.791485][T11392] ? ip_set_alloc+0x24/0x30 [ 370.791520][T11392] ? __kmalloc_cache_noprof+0x18a/0x410 [ 370.791550][T11392] ip_set_alloc+0x24/0x30 [ 370.791658][T11392] hash_netiface_create+0x282/0x740 [ 370.791691][T11392] ? __pfx_hash_netiface_create+0x10/0x10 [ 370.791725][T11392] ip_set_create+0x3cf/0x970 [ 370.791857][T11392] ? __nla_parse+0x40/0x60 [ 370.791887][T11392] nfnetlink_rcv_msg+0x509/0x5d0 [ 370.792010][T11392] netlink_rcv_skb+0x123/0x220 [ 370.792046][T11392] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 370.792081][T11392] nfnetlink_rcv+0x167/0x1720 [ 370.792135][T11392] ? vm_area_free+0x71/0xb0 [ 370.792162][T11392] ? kmem_cache_free+0x237/0x380 [ 370.792195][T11392] ? percpu_counter_add_batch+0xb6/0x130 [ 370.792312][T11392] ? __mt_destroy+0xce/0xe0 [ 370.792340][T11392] ? uprobe_mmap+0xe6/0xf80 [ 370.792373][T11392] ? vms_complete_munmap_vmas+0x57b/0x5e0 [ 370.792459][T11392] ? inode_to_bdi+0x47/0xa0 [ 370.792482][T11392] ? vma_wants_writenotify+0x148/0x1a0 [ 370.792505][T11392] ? vma_set_page_prot+0xc3/0xf0 [ 370.792591][T11392] ? __mmap_complete+0x1f2/0x220 [ 370.792611][T11392] ? mmap_region+0x1d1b/0x2050 [ 370.792633][T11392] ? _raw_spin_lock_bh+0x56/0xb0 [ 370.792703][T11392] ? _raw_spin_unlock_bh+0x18/0x20 [ 370.792727][T11392] ? selinux_nlmsg_lookup+0x99/0x890 [ 370.792837][T11392] ? __rcu_read_unlock+0x33/0x70 [ 370.792954][T11392] ? __netlink_lookup+0x276/0x2b0 [ 370.792993][T11392] netlink_unicast+0x5c0/0x690 [ 370.793108][T11392] netlink_sendmsg+0x5c8/0x6f0 [ 370.793145][T11392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.793243][T11392] ____sys_sendmsg+0x563/0x5b0 [ 370.793357][T11392] ___sys_sendmsg+0x195/0x1e0 [ 370.793404][T11392] __x64_sys_sendmsg+0xd4/0x160 [ 370.793499][T11392] x64_sys_call+0x194c/0x3020 [ 370.793524][T11392] do_syscall_64+0x12c/0x370 [ 370.793548][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.793646][T11392] RIP: 0033:0x7fb8b3a0c799 [ 370.793662][T11392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.793684][T11392] RSP: 002b:00007fb8b2467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.793707][T11392] RAX: ffffffffffffffda RBX: 00007fb8b3c85fa0 RCX: 00007fb8b3a0c799 [ 370.793724][T11392] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 370.793740][T11392] RBP: 00007fb8b3aa2c99 R08: 0000000000000000 R09: 0000000000000000 [ 370.793826][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.793846][T11392] R13: 00007fb8b3c86038 R14: 00007fb8b3c85fa0 R15: 00007ffd52d00c18 [ 370.793869][T11392] [ 370.793906][T11392] memory: usage 253608kB, limit 307200kB, failcnt 3292 [ 371.207860][T11392] memory+swap: usage 178840kB, limit 9007199254740988kB, failcnt 0 [ 371.216660][T11392] kmem: usage 110036kB, limit 9007199254740988kB, failcnt 0 [ 371.244383][T11392] Memory cgroup stats for /syz6: [ 371.244665][T11392] cache 59125760 [ 371.251281][T11330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.255548][T11392] rss 233472 [ 371.277041][T11392] shmem 59125760 [ 371.280608][T11392] mapped_file 20480 [ 371.287241][T11330] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.293651][T11392] dirty 0 [ 371.303126][T11392] writeback 0 [ 371.306499][T11392] workingset_refault_anon 0 [ 371.310999][T11392] workingset_refault_file 0 [ 371.325593][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.328971][T11392] swap 10637312 [ 371.332673][ T9382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.343647][T11392] swapcached 10637312 [ 371.347626][T11392] pgpgin 188709 [ 371.353583][T11392] pgpgout 174217 [ 371.358626][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.369255][ T9382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.407516][T11392] pgfault 112496 [ 371.411317][T11392] pgmajfault 1 [ 371.414840][T11392] inactive_anon 59113472 [ 371.434130][T11392] active_anon 245760 [ 371.453799][T11392] inactive_file 0 [ 371.458330][T11392] active_file 0 [ 371.461809][T11392] unevictable 0 [ 371.468127][T11392] hierarchical_memory_limit 314572800 [ 371.473511][T11392] hierarchical_memsw_limit 9223372036854771712 [ 371.483933][T11392] total_cache 59125760 [ 371.493645][T11392] total_rss 233472 [ 371.497462][T11392] total_shmem 59125760 [ 371.501550][T11392] total_mapped_file 20480 [ 371.510920][T11392] total_dirty 0 [ 371.519387][T11392] total_writeback 0 [ 371.532295][T11392] total_workingset_refault_anon 0 [ 371.537409][T11392] total_workingset_refault_file 0 [ 371.582614][T11392] total_swap 10637312 [ 371.597769][T11392] total_swapcached 10637312 [ 371.614303][T11392] total_pgpgin 188709 [ 371.651310][T11392] total_pgpgout 174217 [ 371.677514][T11392] total_pgfault 112496 [ 371.692643][T11392] total_pgmajfault 1 [ 371.713932][T11392] total_inactive_anon 59113472 [ 371.737183][T11392] total_active_anon 245760 [ 371.764604][T11392] total_inactive_file 0 [ 371.817064][T11392] total_active_file 0 [ 371.872366][T11392] total_unevictable 0 [ 371.912683][T11392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2231,pid=11391,uid=0 [ 371.992750][T11392] Memory cgroup out of memory: Killed process 11392 (syz.6.2231) total-vm:168304kB, anon-rss:1440kB, file-rss:30688kB, shmem-rss:20kB, UID:0 pgtables:148kB oom_score_adj:0 [ 372.332853][ T28] audit: type=1326 audit(2000000107.016:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 372.389123][ T28] audit: type=1326 audit(2000000107.058:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 372.438798][ T28] audit: type=1326 audit(2000000107.058:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 372.506437][T11330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.511677][ T28] audit: type=1326 audit(2000000107.058:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 372.615760][ T28] audit: type=1326 audit(2000000107.058:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3a0c799 code=0x7ffc0000 [ 373.434125][T11330] veth0_vlan: entered promiscuous mode [ 373.449027][T11330] veth1_vlan: entered promiscuous mode [ 373.471571][T11516] loop3: detected capacity change from 0 to 512 [ 373.486361][T11516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.502765][T11330] veth0_macvtap: entered promiscuous mode [ 373.520455][T11330] veth1_macvtap: entered promiscuous mode [ 373.534261][T11330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.545900][T11330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.578261][ T4096] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.598729][ T4096] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.647037][ T4096] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.655862][ T9382] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.779573][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2248'. [ 373.793095][T11531] loop8: detected capacity change from 0 to 512 [ 373.807547][T11529] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2249'. [ 373.822019][T11529] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2249'. [ 373.848528][T11531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.863380][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.930829][T11531] FAULT_INJECTION: forcing a failure. [ 373.930829][T11531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.941990][T11523] syz.7.2248 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 373.957900][T11523] CPU: 0 UID: 0 PID: 11523 Comm: syz.7.2248 Tainted: G W syzkaller #0 PREEMPT(full) [ 373.957990][T11523] Tainted: [W]=WARN [ 373.957997][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.958011][T11523] Call Trace: [ 373.958019][T11523] [ 373.958028][T11523] __dump_stack+0x1d/0x30 [ 373.958136][T11523] dump_stack_lvl+0x95/0xd0 [ 373.958163][T11523] dump_stack+0x15/0x1b [ 373.958186][T11523] dump_header+0x80/0x240 [ 373.958221][T11523] oom_kill_process+0x295/0x350 [ 373.958275][T11523] out_of_memory+0x97d/0xb80 [ 373.958302][T11523] try_charge_memcg+0x62e/0xa10 [ 373.958347][T11523] obj_cgroup_charge_pages+0x23/0xc0 [ 373.958497][T11523] __memcg_kmem_charge_page+0x9e/0x170 [ 373.958531][T11523] __alloc_frozen_pages_noprof+0x18a/0x360 [ 373.958568][T11523] alloc_pages_mpol+0xb3/0x260 [ 373.958661][T11523] alloc_pages_noprof+0x8f/0x130 [ 373.958693][T11523] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 373.958780][T11523] __kvmalloc_node_noprof+0x3d4/0x650 [ 373.958818][T11523] ? ip_set_alloc+0x24/0x30 [ 373.958901][T11523] ? ip_set_alloc+0x24/0x30 [ 373.958935][T11523] ? __kmalloc_cache_noprof+0x18a/0x410 [ 373.959022][T11523] ip_set_alloc+0x24/0x30 [ 373.959048][T11523] hash_netiface_create+0x282/0x740 [ 373.959082][T11523] ? __pfx_hash_netiface_create+0x10/0x10 [ 373.959110][T11523] ip_set_create+0x3cf/0x970 [ 373.959207][T11523] ? __nla_parse+0x40/0x60 [ 373.959243][T11523] nfnetlink_rcv_msg+0x509/0x5d0 [ 373.959412][T11523] netlink_rcv_skb+0x123/0x220 [ 373.959446][T11523] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 373.959483][T11523] nfnetlink_rcv+0x167/0x1720 [ 373.959513][T11523] ? vm_area_free+0x71/0xb0 [ 373.959572][T11523] ? kmem_cache_free+0x237/0x380 [ 373.959597][T11523] ? percpu_counter_add_batch+0xb6/0x130 [ 373.959703][T11523] ? __mt_destroy+0xce/0xe0 [ 373.959753][T11523] ? uprobe_mmap+0xe6/0xf80 [ 373.959780][T11523] ? vms_complete_munmap_vmas+0x57b/0x5e0 [ 373.959895][T11523] ? inode_to_bdi+0x47/0xa0 [ 373.959918][T11523] ? vma_wants_writenotify+0x148/0x1a0 [ 373.959939][T11523] ? vma_set_page_prot+0xc3/0xf0 [ 373.959969][T11523] ? tracing_gen_ctx_irq_test+0xe4/0x120 [ 373.960002][T11523] ? __rcu_read_unlock+0x4e/0x70 [ 373.960058][T11523] ? perf_tp_event+0x161f/0x1660 [ 373.960137][T11523] ? _raw_spin_lock_bh+0x56/0xb0 [ 373.960181][T11523] ? _raw_spin_unlock_bh+0x18/0x20 [ 373.960215][T11523] ? selinux_nlmsg_lookup+0x99/0x890 [ 373.960334][T11523] ? __rcu_read_unlock+0x33/0x70 [ 373.960354][T11523] ? __netlink_lookup+0x276/0x2b0 [ 373.960408][T11523] netlink_unicast+0x5c0/0x690 [ 373.960443][T11523] netlink_sendmsg+0x5c8/0x6f0 [ 373.960483][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.960568][T11523] ____sys_sendmsg+0x563/0x5b0 [ 373.960603][T11523] ___sys_sendmsg+0x195/0x1e0 [ 373.960649][T11523] __x64_sys_sendmsg+0xd4/0x160 [ 373.960740][T11523] x64_sys_call+0x194c/0x3020 [ 373.960815][T11523] do_syscall_64+0x12c/0x370 [ 373.960839][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.960863][T11523] RIP: 0033:0x7f533c4dc799 [ 373.960881][T11523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.960902][T11523] RSP: 002b:00007f533af2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.961022][T11523] RAX: ffffffffffffffda RBX: 00007f533c755fa0 RCX: 00007f533c4dc799 [ 373.961038][T11523] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 373.961053][T11523] RBP: 00007f533c572c99 R08: 0000000000000000 R09: 0000000000000000 [ 373.961101][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.961116][T11523] R13: 00007f533c756038 R14: 00007f533c755fa0 R15: 00007fff97dffa58 [ 373.961216][T11523] [ 373.998483][T11531] CPU: 1 UID: 0 PID: 11531 Comm: syz.8.2216 Tainted: G W syzkaller #0 PREEMPT(full) [ 373.998578][T11531] Tainted: [W]=WARN [ 373.998586][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.998599][T11531] Call Trace: [ 373.998627][T11531] [ 373.998636][T11531] __dump_stack+0x1d/0x30 [ 373.998665][T11531] dump_stack_lvl+0x95/0xd0 [ 373.998691][T11531] dump_stack+0x15/0x1b [ 373.998724][T11531] should_fail_ex+0x263/0x280 [ 373.998769][T11531] should_fail+0xb/0x20 [ 373.998793][T11531] should_fail_usercopy+0x1a/0x20 [ 373.998823][T11531] _copy_to_user+0x20/0xa0 [ 373.998908][T11531] simple_read_from_buffer+0xb5/0x130 [ 373.998933][T11531] proc_fail_nth_read+0x10e/0x150 [ 373.998973][T11531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.999031][T11531] vfs_read+0x1ab/0x7f0 [ 373.999064][T11531] ? __rcu_read_unlock+0x4e/0x70 [ 373.999088][T11531] ? __fget_files+0x184/0x1c0 [ 373.999114][T11531] ? mutex_lock+0x57/0x90 [ 373.999187][T11531] ksys_read+0xdc/0x1a0 [ 373.999220][T11531] __x64_sys_read+0x40/0x50 [ 373.999239][T11531] x64_sys_call+0x2886/0x3020 [ 373.999267][T11531] do_syscall_64+0x12c/0x370 [ 373.999355][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.999381][T11531] RIP: 0033:0x7f63f7b5cfce [ 373.999399][T11531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.999437][T11531] RSP: 002b:00007f63f65f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.999459][T11531] RAX: ffffffffffffffda RBX: 00007f63f65f76c0 RCX: 00007f63f7b5cfce [ 373.999474][T11531] RDX: 000000000000000f RSI: 00007f63f65f70a0 RDI: 000000000000000b [ 373.999488][T11531] RBP: 00007f63f65f7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.999502][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.999573][T11531] R13: 00007f63f7e16038 R14: 00007f63f7e15fa0 R15: 00007ffe4399ed78 [ 373.999594][T11531] [ 374.560591][T11523] memory: usage 171324kB, limit 307200kB, failcnt 3335 [ 374.602954][T11523] memory+swap: usage 132468kB, limit 9007199254740988kB, failcnt 0 [ 374.618943][T11523] kmem: usage 63224kB, limit 9007199254740988kB, failcnt 0 [ 374.626364][T11523] Memory cgroup stats for /syz7: [ 374.626981][T11523] cache 23044096 [ 374.639305][T11523] rss 192512 [ 374.642577][T11523] shmem 23044096 [ 374.646184][T11523] mapped_file 16384 [ 374.650863][T11523] dirty 0 [ 374.653815][T11523] writeback 0 [ 374.656508][T11330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.657220][T11523] workingset_refault_anon 10 [ 374.669715][T11546] smc: adding net device bond0 with user defined pnetid SYZ2 [ 374.670655][T11523] workingset_refault_file 320 [ 374.685171][T11523] swap 47009792 [ 374.688647][T11523] swapcached 47079424 [ 374.696097][T11546] bond0: entered promiscuous mode [ 374.700366][T11551] loop8: detected capacity change from 0 to 256 [ 374.701518][T11546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.708353][T11523] pgpgin 161316 [ 374.760652][T11523] pgpgout 155627 [ 374.764449][T11523] pgfault 120539 [ 374.768431][T11523] pgmajfault 9 [ 374.772046][T11523] inactive_anon 159744 [ 374.782623][T11554] loop3: detected capacity change from 0 to 512 [ 374.789175][T11523] active_anon 23138304 [ 374.838719][ T28] audit: type=1400 audit(2000000109.651:1630): avc: denied { listen } for pid=11552 comm="syz.6.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 374.904744][T11559] netlink: 'syz.7.2248': attribute type 4 has an invalid length. [ 374.926118][T11523] inactive_file 0 [ 374.944436][T11523] active_file 4096 [ 374.988191][T11554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.005636][T11523] unevictable 0 [ 375.103784][T11563] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2257'. [ 375.143568][T11523] hierarchical_memory_limit 314572800 [ 375.167426][T11523] hierarchical_memsw_limit 9223372036854771712 [ 375.401493][T11523] total_cache 23044096 [ 375.520295][T11523] total_rss 192512 [ 375.790960][T11523] total_shmem 23044096 [ 375.838376][T11523] total_mapped_file 16384 [ 375.880243][T11523] total_dirty 0 [ 375.910790][T11523] total_writeback 0 [ 375.944888][T11523] total_workingset_refault_anon 10 [ 375.967218][T11523] total_workingset_refault_file 320 [ 375.991985][T11523] total_swap 47009792 [ 376.047739][T11523] total_swapcached 47079424 [ 376.156270][T11523] total_pgpgin 161316 [ 376.172428][T11568] FAULT_INJECTION: forcing a failure. [ 376.172428][T11568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.227545][T11523] total_pgpgout 155627 [ 376.244252][T11568] CPU: 1 UID: 0 PID: 11568 Comm: syz.0.2258 Tainted: G W syzkaller #0 PREEMPT(full) [ 376.244288][T11568] Tainted: [W]=WARN [ 376.244296][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.244311][T11568] Call Trace: [ 376.244318][T11568] [ 376.244327][T11568] __dump_stack+0x1d/0x30 [ 376.244355][T11568] dump_stack_lvl+0x95/0xd0 [ 376.244402][T11568] dump_stack+0x15/0x1b [ 376.244429][T11568] should_fail_ex+0x263/0x280 [ 376.244461][T11568] should_fail+0xb/0x20 [ 376.244515][T11568] should_fail_usercopy+0x1a/0x20 [ 376.244557][T11568] strncpy_from_user+0x27/0x250 [ 376.244647][T11568] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 376.244676][T11568] do_getname+0x59/0x1c0 [ 376.244700][T11568] user_path_at+0x28/0x100 [ 376.244728][T11568] __se_sys_mount+0x25b/0x2e0 [ 376.244821][T11568] ? fput+0x8f/0xc0 [ 376.244847][T11568] __x64_sys_mount+0x67/0x80 [ 376.244932][T11568] x64_sys_call+0x2d61/0x3020 [ 376.244964][T11568] do_syscall_64+0x12c/0x370 [ 376.244989][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.245020][T11568] RIP: 0033:0x7f02921fc799 [ 376.245037][T11568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.245059][T11568] RSP: 002b:00007f0290c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.245080][T11568] RAX: ffffffffffffffda RBX: 00007f0292475fa0 RCX: 00007f02921fc799 [ 376.245137][T11568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000002000 [ 376.245151][T11568] RBP: 00007f0290c57090 R08: 0000000000000000 R09: 0000000000000000 [ 376.245164][T11568] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 376.245228][T11568] R13: 00007f0292476038 R14: 00007f0292475fa0 R15: 00007ffd93b6a8b8 [ 376.245252][T11568] [ 376.439267][T11523] total_pgfault 120539 [ 376.443609][T11523] total_pgmajfault 9 [ 376.447591][T11523] total_inactive_anon 159744 [ 376.452225][T11523] total_active_anon 23138304 [ 376.456934][T11523] total_inactive_file 0 [ 376.461216][T11523] total_active_file 4096 [ 376.465575][T11523] total_unevictable 0 [ 376.469562][T11523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1347,pid=8487,uid=0 [ 376.484433][T11523] Memory cgroup out of memory: Killed process 8487 (syz.7.1347) total-vm:96080kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 377.190691][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2265'. [ 377.201932][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.393950][T11589] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2267'. [ 377.424500][T11589] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2267'. [ 381.037517][ T28] audit: type=1326 audit(2000000116.160:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.073653][ T28] audit: type=1326 audit(2000000116.160:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.097410][ T28] audit: type=1326 audit(2000000116.160:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.109610][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 381.121295][ T28] audit: type=1326 audit(2000000116.160:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.162080][ T28] audit: type=1326 audit(2000000116.160:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.187652][ T28] audit: type=1326 audit(2000000116.160:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.211559][ T28] audit: type=1326 audit(2000000116.160:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.212713][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2279'. [ 381.235192][ T28] audit: type=1326 audit(2000000116.191:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.314511][ T28] audit: type=1326 audit(2000000116.191:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.343606][T11630] loop8: detected capacity change from 0 to 512 [ 381.429269][T11630] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 381.480954][T11630] EXT4-fs (loop8): 1 truncate cleaned up [ 381.491046][T11630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.507945][ T28] audit: type=1326 audit(2000000116.191:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.8.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63f7b9c799 code=0x7ffc0000 [ 381.649431][T11630] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2274'. [ 381.807306][T11667] lo speed is unknown, defaulting to 1000 [ 382.002563][T11688] tipc: Failed to remove unknown binding: 66,0,0/4:3274032018/3274032019 [ 382.035297][T11330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.090462][T11676] lo speed is unknown, defaulting to 1000 [ 382.208814][T11693] Cannot find del_set index 0 as target [ 382.312048][T11696] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2290'. [ 382.670700][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2293'. [ 382.684379][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2293'. [ 382.877591][T11723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2295'. [ 383.078940][T11731] loop3: detected capacity change from 0 to 8192 [ 383.927015][T11766] loop8: detected capacity change from 0 to 512 [ 383.968569][T11766] EXT4-fs: Ignoring removed bh option [ 384.013491][T11766] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 384.077048][T11766] EXT4-fs (loop8): 1 truncate cleaned up [ 384.115744][T11766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.282017][T11330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.303261][T11731] netlink: 'syz.3.2295': attribute type 4 has an invalid length. [ 384.831290][T11798] netlink: 'syz.6.2309': attribute type 8 has an invalid length. [ 384.854725][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2309'. [ 384.887145][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2309'. [ 384.917513][T11807] loop8: detected capacity change from 0 to 128 [ 384.917642][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2309'. [ 384.949426][T11798] netlink: 'syz.6.2309': attribute type 10 has an invalid length. [ 384.972977][T11807] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.991450][T11807] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.994978][T11798] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 385.041699][T11330] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.070778][T11798] team0: Failed to send options change via netlink (err -105) [ 385.092836][T11798] team0: Port device netdevsim1 added [ 385.228361][T11826] Process accounting resumed [ 385.523623][T11844] netlink: 'syz.0.2315': attribute type 4 has an invalid length. [ 385.916305][T11849] FAULT_INJECTION: forcing a failure. [ 385.916305][T11849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.932282][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.3.2319 Tainted: G W syzkaller #0 PREEMPT(full) [ 385.932374][T11849] Tainted: [W]=WARN [ 385.932382][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.932397][T11849] Call Trace: [ 385.932406][T11849] [ 385.932415][T11849] __dump_stack+0x1d/0x30 [ 385.932446][T11849] dump_stack_lvl+0x95/0xd0 [ 385.932482][T11849] dump_stack+0x15/0x1b [ 385.932506][T11849] should_fail_ex+0x263/0x280 [ 385.932535][T11849] should_fail+0xb/0x20 [ 385.932593][T11849] should_fail_usercopy+0x1a/0x20 [ 385.932635][T11849] _copy_from_user+0x1c/0xb0 [ 385.932672][T11849] ___sys_recvmsg+0xaa/0x3b0 [ 385.932762][T11849] do_recvmmsg+0x1ef/0x560 [ 385.932803][T11849] ? fput+0x8f/0xc0 [ 385.932879][T11849] __x64_sys_recvmmsg+0xe5/0x170 [ 385.932917][T11849] x64_sys_call+0x80f/0x3020 [ 385.932944][T11849] do_syscall_64+0x12c/0x370 [ 385.932969][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.933028][T11849] RIP: 0033:0x7fd72729c799 [ 385.933048][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.933070][T11849] RSP: 002b:00007fd725cf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 385.933094][T11849] RAX: ffffffffffffffda RBX: 00007fd727515fa0 RCX: 00007fd72729c799 [ 385.933112][T11849] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000004 [ 385.933135][T11849] RBP: 00007fd725cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 385.933149][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.933223][T11849] R13: 00007fd727516038 R14: 00007fd727515fa0 R15: 00007ffe66e0e498 [ 385.933242][T11849] [ 386.336202][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 386.336217][ T28] audit: type=1400 audit(2000000121.724:1850): avc: denied { append } for pid=11852 comm="syz.8.2321" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 386.354180][T11856] __nla_validate_parse: 1 callbacks suppressed [ 386.354240][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2322'. [ 386.430107][ T28] audit: type=1400 audit(2000000121.724:1851): avc: denied { map } for pid=11852 comm="syz.8.2321" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 386.483585][T11856] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2322'. [ 386.504362][ T28] audit: type=1400 audit(2000000121.724:1852): avc: denied { execute } for pid=11852 comm="syz.8.2321" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 386.577547][T11864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2324'. [ 386.619846][T11864] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2324'. [ 386.835425][ T28] audit: type=1400 audit(2000000122.249:1853): avc: denied { append } for pid=11886 comm="syz.0.2331" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 387.153061][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2336'. [ 387.567003][T11905] netlink: 'syz.7.2336': attribute type 4 has an invalid length. [ 387.609890][T11903] syz.7.2336 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 387.730549][T11903] CPU: 1 UID: 0 PID: 11903 Comm: syz.7.2336 Tainted: G W syzkaller #0 PREEMPT(full) [ 387.730588][T11903] Tainted: [W]=WARN [ 387.730595][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.730608][T11903] Call Trace: [ 387.730615][T11903] [ 387.730624][T11903] __dump_stack+0x1d/0x30 [ 387.730710][T11903] dump_stack_lvl+0x95/0xd0 [ 387.730788][T11903] dump_stack+0x15/0x1b [ 387.730808][T11903] dump_header+0x80/0x240 [ 387.730833][T11903] oom_kill_process+0x295/0x350 [ 387.730885][T11903] out_of_memory+0x97d/0xb80 [ 387.730907][T11903] try_charge_memcg+0x62e/0xa10 [ 387.731001][T11903] __mem_cgroup_charge+0x65/0x150 [ 387.731037][T11903] shmem_get_folio_gfp+0x47b/0xd60 [ 387.731072][T11903] shmem_fallocate+0x628/0x920 [ 387.731128][T11903] vfs_fallocate+0x3b6/0x450 [ 387.731154][T11903] __x64_sys_fallocate+0x7a/0xd0 [ 387.731254][T11903] x64_sys_call+0x298e/0x3020 [ 387.731299][T11903] do_syscall_64+0x12c/0x370 [ 387.731370][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.731397][T11903] RIP: 0033:0x7f533c4dc799 [ 387.731415][T11903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.731498][T11903] RSP: 002b:00007f533aeed028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 387.731621][T11903] RAX: ffffffffffffffda RBX: 00007f533c756180 RCX: 00007f533c4dc799 [ 387.731636][T11903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 387.731651][T11903] RBP: 00007f533c572c99 R08: 0000000000000000 R09: 0000000000000000 [ 387.731666][T11903] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 387.731682][T11903] R13: 00007f533c756218 R14: 00007f533c756180 R15: 00007fff97dffa58 [ 387.731705][T11903] [ 387.731713][T11903] memory: usage 307200kB, limit 307200kB, failcnt 3434 [ 388.018894][T11903] memory+swap: usage 350336kB, limit 9007199254740988kB, failcnt 0 [ 388.077751][T11903] kmem: usage 239620kB, limit 9007199254740988kB, failcnt 0 [ 388.085069][T11903] Memory cgroup stats for /syz7: [ 388.085501][T11903] cache 25772032 [ 388.115874][T11903] rss 217088 [ 388.128954][T11903] shmem 25772032 [ 388.132576][T11903] mapped_file 16384 [ 388.158038][T11903] dirty 0 [ 388.161000][T11903] writeback 0 [ 388.199139][T11903] workingset_refault_anon 11 [ 388.215214][T11903] workingset_refault_file 320 [ 388.236609][T11903] swap 46833664 [ 388.251066][T11903] swapcached 47063040 [ 388.255130][T11903] pgpgin 179628 [ 388.281491][T11903] pgpgout 173270 [ 388.285056][T11903] pgfault 129759 [ 388.309450][T11903] pgmajfault 9 [ 388.312981][T11903] inactive_anon 200704 [ 388.334677][T11903] active_anon 25837568 [ 388.348672][T11903] inactive_file 0 [ 388.352327][T11903] active_file 4096 [ 388.372842][T11903] unevictable 0 [ 388.383969][T11903] hierarchical_memory_limit 314572800 [ 388.400522][T11903] hierarchical_memsw_limit 9223372036854771712 [ 388.414253][T11903] total_cache 25772032 [ 388.418319][T11903] total_rss 217088 [ 388.433017][T11903] total_shmem 25772032 [ 388.437154][T11903] total_mapped_file 16384 [ 388.452658][T11903] total_dirty 0 [ 388.456135][T11903] total_writeback 0 [ 388.469873][T11903] total_workingset_refault_anon 11 [ 388.480553][T11903] total_workingset_refault_file 320 [ 388.493336][T11903] total_swap 46833664 [ 388.502921][T11903] total_swapcached 47063040 [ 388.514251][T11903] total_pgpgin 179628 [ 388.525013][T11903] total_pgpgout 173270 [ 388.533597][T11903] total_pgfault 129759 [ 388.543401][T11903] total_pgmajfault 9 [ 388.554076][T11903] total_inactive_anon 200704 [ 388.564324][T11903] total_active_anon 25837568 [ 388.573364][T11903] total_inactive_file 0 [ 388.581957][T11903] total_active_file 4096 [ 388.590695][T11903] total_unevictable 0 [ 388.601263][T11903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1253,pid=8105,uid=0 [ 388.640667][T11903] Memory cgroup out of memory: Killed process 8105 (syz.7.1253) total-vm:94092kB, anon-rss:1236kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 394.824227][T11992] loop3: detected capacity change from 0 to 512 [ 394.890162][T11992] ext4: Unknown parameter 'subj_role' [ 395.016796][T11994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2363'. [ 395.074160][T12002] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 395.107447][ T3391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 395.216846][T12009] Process accounting resumed [ 395.358769][ T3389] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 395.421985][T12011] loop3: detected capacity change from 0 to 512 [ 395.441722][T12011] EXT4-fs: Ignoring removed bh option [ 395.455665][ T28] audit: type=1400 audit(2000000131.298:1854): avc: denied { read } for pid=12018 comm="syz.6.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.476265][T12011] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 395.508863][T12011] EXT4-fs (loop3): 1 truncate cleaned up [ 395.520919][T12011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.550608][ T28] audit: type=1400 audit(2000000131.392:1855): avc: denied { create } for pid=12028 comm="syz.8.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 395.727752][ T41] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 395.789835][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.820734][ T28] audit: type=1400 audit(2000000131.665:1856): avc: denied { override_creds } for pid=12043 comm="syz.8.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 396.412510][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2383'. [ 396.717625][ T9382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.725433][ T9382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.740552][ T28] audit: type=1400 audit(2000000132.642:1857): avc: denied { setattr } for pid=12070 comm="syz.0.2392" name="SCTPv6" dev="sockfs" ino=31449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 396.801455][T12052] loop3: detected capacity change from 0 to 8192 [ 396.838059][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2393'. [ 396.918331][T12078] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2393'. [ 396.936372][ T3323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 397.092578][ T3323] CPU: 1 UID: 0 PID: 3323 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 397.092611][ T3323] Tainted: [W]=WARN [ 397.092618][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.092630][ T3323] Call Trace: [ 397.092639][ T3323] [ 397.092649][ T3323] __dump_stack+0x1d/0x30 [ 397.092749][ T3323] dump_stack_lvl+0x95/0xd0 [ 397.092778][ T3323] dump_stack+0x15/0x1b [ 397.092802][ T3323] dump_header+0x80/0x240 [ 397.092829][ T3323] oom_kill_process+0x295/0x350 [ 397.092935][ T3323] out_of_memory+0x97d/0xb80 [ 397.092999][ T3323] try_charge_memcg+0x62e/0xa10 [ 397.093044][ T3323] __mem_cgroup_charge+0x65/0x150 [ 397.093074][ T3323] filemap_add_folio+0x110/0x350 [ 397.093122][ T3323] __filemap_get_folio_mpol+0x326/0x680 [ 397.093152][ T3323] filemap_fault+0x486/0xb90 [ 397.093179][ T3323] __do_fault+0xbc/0x200 [ 397.093199][ T3323] handle_mm_fault+0x11e2/0x3020 [ 397.093257][ T3323] ? vma_start_read+0x1c7/0x2c0 [ 397.093285][ T3323] do_user_addr_fault+0x62f/0x1050 [ 397.093320][ T3323] ? trace_page_fault_user+0x1f/0xe0 [ 397.093354][ T3323] exc_page_fault+0x62/0xa0 [ 397.093391][ T3323] asm_exc_page_fault+0x26/0x30 [ 397.093415][ T3323] RIP: 0033:0x7fd72716a7b4 [ 397.093491][ T3323] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 [ 397.093577][ T3323] RSP: 002b:00007ffe66e0e800 EFLAGS: 00010202 [ 397.093642][ T3323] RAX: 0000001b33624000 RBX: 0000000000000531 RCX: 0000000000062e08 [ 397.093656][ T3323] RDX: 000000000f6c251f RSI: 00007ffe66e0e890 RDI: 0000000000000001 [ 397.093669][ T3323] RBP: 00007ffe66e0e83c R08: 000000003ad4fa5e R09: 7fffffffffffffff [ 397.093684][ T3323] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 397.093745][ T3323] R13: 00000000000927c0 R14: 0000000000063024 R15: 00007ffe66e0e890 [ 397.093763][ T3323] [ 397.307185][ T3323] memory: usage 172608kB, limit 307200kB, failcnt 1686 [ 397.386019][ T3323] memory+swap: usage 174396kB, limit 9007199254740988kB, failcnt 0 [ 397.398721][ T3323] kmem: usage 168160kB, limit 9007199254740988kB, failcnt 0 [ 397.406179][ T6951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.422029][ T3323] Memory cgroup stats for /syz3: [ 397.422482][ T3323] cache 5210112 [ 397.434207][T12089] netlink: 'syz.3.2383': attribute type 4 has an invalid length. [ 397.438262][ T3323] rss 221184 [ 397.449340][ T3323] shmem 3969024 [ 397.456185][ T3323] mapped_file 61440 [ 397.460158][ T3323] dirty 221184 [ 397.463634][ T3323] writeback 0 [ 397.466942][ T3323] workingset_refault_anon 2768 [ 397.471765][ T3323] workingset_refault_file 3560 [ 397.476554][ T3323] swap 782336 [ 397.479884][ T3323] swapcached 18620416 [ 397.486809][ T3323] pgpgin 371411 [ 397.492996][ T3323] pgpgout 370078 [ 397.496567][ T3323] pgfault 369471 [ 397.500184][ T3323] pgmajfault 454 [ 397.503741][ T3323] inactive_anon 2457600 [ 397.507924][ T3323] active_anon 1761280 [ 397.511918][ T3323] inactive_file 90112 [ 397.515914][ T3323] active_file 1048576 [ 397.519945][ T3323] unevictable 0 [ 397.523415][ T3323] hierarchical_memory_limit 314572800 [ 397.528890][ T3323] hierarchical_memsw_limit 9223372036854771712 [ 397.535058][ T3323] total_cache 5210112 [ 397.546782][T12078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.588341][T12078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.597143][ T3323] total_rss 221184 [ 397.598202][T12078] bond0 (unregistering): Released all slaves [ 397.609463][ T3323] total_shmem 3969024 [ 397.613846][ T3323] total_mapped_file 61440 [ 397.618331][ T3323] total_dirty 221184 [ 397.622481][ T3323] total_writeback 0 [ 397.626322][ T3323] total_workingset_refault_anon 2768 [ 397.632021][ T3323] total_workingset_refault_file 3560 [ 397.637329][ T3323] total_swap 782336 [ 397.641300][ T3323] total_swapcached 18620416 [ 397.676317][ T3323] total_pgpgin 371411 [ 397.680519][ T3323] total_pgpgout 370078 [ 397.684629][ T3323] total_pgfault 369471 [ 397.688859][ T3323] total_pgmajfault 454 [ 397.693113][ T3323] total_inactive_anon 2457600 [ 397.697823][ T3323] total_active_anon 1761280 [ 397.703033][ T3323] total_inactive_file 90112 [ 397.707573][ T3323] total_active_file 1048576 [ 397.716630][ T3323] total_unevictable 0 [ 397.731867][T12096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58134 sclass=netlink_route_socket pid=12096 comm=syz.8.2397 [ 397.755943][ T3323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2383,pid=12049,uid=0 [ 397.840204][ T3323] Memory cgroup out of memory: Killed process 12049 (syz.3.2383) total-vm:166116kB, anon-rss:1428kB, file-rss:26688kB, shmem-rss:356kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 398.092408][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2410'. [ 398.106035][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2410'. [ 398.123881][T12122] netlink: 'syz.8.2409': attribute type 39 has an invalid length. [ 398.138370][T12122] hsr_slave_1 (unregistering): left promiscuous mode [ 398.181038][T12129] lo speed is unknown, defaulting to 1000 [ 398.268357][T12135] lo speed is unknown, defaulting to 1000 [ 398.636143][T12159] netlink: 'syz.8.2423': attribute type 10 has an invalid length. [ 398.866905][T12176] sock: sock_set_timeout: `syz.8.2430' (pid 12176) tries to set negative timeout [ 398.964770][T12182] netdevsim netdevsim8: Direct firmware load for Ö failed with error -2 [ 398.998086][T12184] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2434'. [ 399.040005][T12184] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2434'. [ 399.062479][T12184] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2434'. [ 399.563225][T12221] netlink: 'syz.7.2451': attribute type 27 has an invalid length. [ 399.578133][T12221] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2451'. [ 399.646538][T12225] netlink: 'syz.3.2454': attribute type 39 has an invalid length. [ 400.375408][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 400.541145][T12271] netlink: 'syz.7.2474': attribute type 2 has an invalid length. [ 400.549337][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2474'. [ 400.573644][T12273] lo speed is unknown, defaulting to 1000 [ 400.652458][T12277] lo speed is unknown, defaulting to 1000 [ 400.740896][T12288] netlink: 'syz.8.2480': attribute type 2 has an invalid length. [ 400.749791][T12288] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2480'. [ 400.836962][T12276] lo speed is unknown, defaulting to 1000 [ 400.999625][ T28] audit: type=1400 audit(2000000137.114:1858): avc: denied { read } for pid=12298 comm="syz.8.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 401.143341][T12314] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2491'. [ 401.217501][ T28] audit: type=1400 audit(2000000137.334:1859): avc: denied { ioctl } for pid=12313 comm="syz.6.2491" path="socket:[32862]" dev="sockfs" ino=32862 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 402.360816][T12365] netlink: 'syz.0.2512': attribute type 2 has an invalid length. [ 402.378472][T12365] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 402.856003][T12374] netlink: 'syz.3.2516': attribute type 12 has an invalid length. [ 402.868016][T12374] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2516'. [ 402.944411][T12381] netlink: 'syz.6.2520': attribute type 4 has an invalid length. [ 402.962528][T12382] netlink: 6683 bytes leftover after parsing attributes in process `syz.7.2519'. [ 403.056826][ T28] audit: type=1400 audit(2000000139.276:1860): avc: denied { ioctl } for pid=12391 comm="syz.8.2525" path="net:[4026532861]" dev="nsfs" ino=4026532861 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 403.113618][T12395] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2526'. [ 403.131384][T12392] netlink: 'syz.8.2525': attribute type 21 has an invalid length. [ 403.156399][T12392] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2525'. [ 403.175687][T12392] netlink: 'syz.8.2525': attribute type 4 has an invalid length. [ 403.196466][T12406] netlink: 'syz.8.2525': attribute type 3 has an invalid length. [ 403.204213][T12406] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2525'. [ 403.213676][T12392] netlink: 'syz.8.2525': attribute type 5 has an invalid length. [ 403.221450][T12392] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2525'. [ 403.399601][T12421] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2536'. [ 403.751425][T12459] netlink: 'syz.3.2551': attribute type 19 has an invalid length. [ 403.891612][T12471] netlink: 'syz.8.2556': attribute type 4 has an invalid length. [ 404.002377][T12474] batadv_slave_1: entered promiscuous mode [ 404.009522][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.017672][T12474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.032254][T12474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.047947][T12474] tc_dump_action: action bad kind [ 404.389287][T12502] bridge0: entered allmulticast mode [ 404.402507][T12502] bridge_slave_1: left allmulticast mode [ 404.413426][T12502] bridge_slave_1: left promiscuous mode [ 404.421775][T12502] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.441390][T12502] bridge_slave_0: left allmulticast mode [ 404.480592][T12502] bridge_slave_0: left promiscuous mode [ 404.488914][T12502] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.752731][ T28] audit: type=1400 audit(2000000141.051:1861): avc: denied { create } for pid=12510 comm="syz.0.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 405.829396][T12534] delete_channel: no stack [ 407.940558][T12562] validate_nla: 2 callbacks suppressed [ 407.940571][T12562] netlink: 'syz.7.2595': attribute type 21 has an invalid length. [ 407.990429][T12575] __nla_validate_parse: 7 callbacks suppressed [ 407.990446][T12575] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2601'. [ 408.131580][T12593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.251275][T12611] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2617'. [ 408.309769][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 408.366459][ T28] audit: type=1400 audit(2000000144.851:1862): avc: denied { name_connect } for pid=12621 comm="syz.6.2620" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 409.206382][T12660] lo: entered promiscuous mode [ 410.012304][T12672] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.2641'. [ 410.302054][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2649'. [ 410.706662][T12722] syzkaller0: entered promiscuous mode [ 410.712659][T12722] syzkaller0: entered allmulticast mode [ 410.858240][T12742] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2670'. [ 413.280293][T12756] delete_channel: no stack [ 413.704978][T12770] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2681'. [ 413.842387][T12786] netlink: 'syz.6.2689': attribute type 20 has an invalid length. [ 413.872629][T12794] l2tp_ppp: sess 2/0: no socket in recv [ 413.940096][ T28] audit: type=1400 audit(2000000150.698:1863): avc: denied { connect } for pid=12806 comm="syz.3.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.985831][ T28] audit: type=1400 audit(2000000150.698:1864): avc: denied { write } for pid=12806 comm="syz.3.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.988490][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.031769][T12813] syzkaller0: entered promiscuous mode [ 414.037916][T12813] syzkaller0: entered allmulticast mode [ 414.055008][T12819] bond0: (slave geneve2): Opening slave failed [ 414.151595][T12827] lo speed is unknown, defaulting to 1000 [ 414.199474][ T28] audit: type=1400 audit(2000000150.961:1865): avc: denied { bind } for pid=12844 comm="syz.8.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 414.349048][ T28] audit: type=1400 audit(2000000151.118:1866): avc: denied { create } for pid=12860 comm="syz.3.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 414.378339][T12863] lo speed is unknown, defaulting to 1000 [ 414.389263][ T28] audit: type=1400 audit(2000000151.118:1867): avc: denied { bind } for pid=12860 comm="syz.3.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 414.413432][ T3389] IPVS: starting estimator thread 0... [ 414.501744][T12870] IPVS: using max 2304 ests per chain, 115200 per kthread [ 414.567487][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 414.646309][T12897] bond1: entered promiscuous mode [ 414.653926][T12897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.333126][T12961] geneve2: entered promiscuous mode [ 415.359411][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 33639 - 0 [ 415.390747][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 33639 - 0 [ 415.416303][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 33639 - 0 [ 415.435212][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 33639 - 0 [ 415.571829][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2751'. [ 415.586939][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2751'. [ 415.610464][T13018] syzkaller1: entered promiscuous mode [ 415.616130][T13018] syzkaller1: entered allmulticast mode [ 415.806146][T13027] lo speed is unknown, defaulting to 1000 [ 416.040139][T13083] syzkaller0: entered promiscuous mode [ 416.045745][T13083] syzkaller0: entered allmulticast mode [ 416.064920][T13088] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2769'. [ 416.134106][ T28] audit: type=1400 audit(2000000153.008:1868): avc: denied { read } for pid=13087 comm="syz.6.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.198065][T13027] chnl_net:caif_netlink_parms(): no params data found [ 416.273306][T13027] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.280960][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.288551][T13027] bridge_slave_0: entered allmulticast mode [ 416.295255][T13027] bridge_slave_0: entered promiscuous mode [ 416.304169][T13027] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.311628][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.318966][T13027] bridge_slave_1: entered allmulticast mode [ 416.326140][T13027] bridge_slave_1: entered promiscuous mode [ 416.353145][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.375935][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.399929][T13027] team0: Port device team_slave_0 added [ 416.406711][T13027] team0: Port device team_slave_1 added [ 416.430004][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.437566][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.463758][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.475419][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.482357][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.529781][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.595851][T13027] hsr_slave_0: entered promiscuous mode [ 416.618641][T13027] hsr_slave_1: entered promiscuous mode [ 416.631801][T13027] debugfs: 'hsr0' already exists in 'hsr' [ 416.642019][T13027] Cannot create hsr debugfs directory [ 416.947443][ T30] tipc: Left network mode [ 416.995142][ T30] hsr_slave_0: left promiscuous mode [ 417.001125][ T30] hsr_slave_1: left promiscuous mode [ 417.007125][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.014854][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.048898][ T30] team0 (unregistering): Port device team_slave_1 removed [ 417.049033][ T3391] IPVS: starting estimator thread 0... [ 417.062635][ T30] team0 (unregistering): Port device team_slave_0 removed [ 417.104381][ T28] audit: type=1400 audit(2000000154.026:1869): avc: denied { create } for pid=13148 comm="syz.7.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 417.128546][T13153] lo speed is unknown, defaulting to 1000 [ 417.149747][T13155] IPVS: using max 2400 ests per chain, 120000 per kthread [ 417.339264][T13183] lo speed is unknown, defaulting to 1000 [ 417.395290][T13189] lo speed is unknown, defaulting to 1000 [ 417.409486][ T30] IPVS: stop unused estimator thread 0... [ 417.667348][T13218] lo speed is unknown, defaulting to 1000 [ 417.701361][ T3391] IPVS: starting estimator thread 0... [ 417.788047][T13225] IPVS: using max 2160 ests per chain, 108000 per kthread [ 418.048663][ T28] audit: type=1400 audit(2000000155.013:1870): avc: denied { setopt } for pid=13240 comm="syz.3.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.159352][T13251] IPVS: sh: FWM 3 0x00000003 - no destination available [ 418.166723][T13251] IPVS: sh: FWM 3 0x00000003 - no destination available [ 419.095769][T13094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.105960][T13027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.137899][T13027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.182349][T13027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.217239][T13027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.324499][T13281] lo speed is unknown, defaulting to 1000 [ 419.361125][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.386453][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.431078][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.438238][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.473054][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.480141][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.570044][T13316] gtp0: left promiscuous mode [ 419.575010][T13316] gtp0: left allmulticast mode [ 419.583332][T13306] syzkaller0: entered promiscuous mode [ 419.597977][T13306] syzkaller0: entered allmulticast mode [ 419.715402][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.726168][T13335] lo speed is unknown, defaulting to 1000 [ 419.886215][T13027] veth0_vlan: entered promiscuous mode [ 419.900682][T13027] veth1_vlan: entered promiscuous mode [ 419.936239][T13345] lo speed is unknown, defaulting to 1000 [ 419.944656][T13374] syzkaller0: entered promiscuous mode [ 419.960178][T13374] syzkaller0: entered allmulticast mode [ 420.018917][T13027] veth0_macvtap: entered promiscuous mode [ 420.026197][T13027] veth1_macvtap: entered promiscuous mode [ 420.077680][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.098732][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 420.109326][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.134220][ T9379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.143629][ T9379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.181379][ T9379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.222309][ T9379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.489751][T13406] syzkaller1: entered allmulticast mode [ 420.506131][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'. [ 420.578004][T13407] lo speed is unknown, defaulting to 1000 [ 420.614319][ T28] audit: type=1400 audit(2000000157.700:1871): avc: denied { create } for pid=13411 comm="syz.7.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 420.752366][ T6954] IPVS: starting estimator thread 0... [ 420.856218][T13423] IPVS: using max 2208 ests per chain, 110400 per kthread [ 420.865903][T13418] lo speed is unknown, defaulting to 1000 [ 421.149927][T13445] lo speed is unknown, defaulting to 1000 [ 421.284803][T13461] syzkaller0: entered promiscuous mode [ 421.332596][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 421.338333][T13461] syzkaller0: entered allmulticast mode [ 421.436573][T13465] lo speed is unknown, defaulting to 1000 [ 421.883974][T13496] netlink: 'syz.8.2907': attribute type 3 has an invalid length. [ 422.841792][T13515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.871490][T13531] netlink: 'syz.7.2920': attribute type 4 has an invalid length. [ 422.915394][T13524] lo speed is unknown, defaulting to 1000 [ 423.396900][T13611] IPVS: sh: FWM 3 0x00000003 - no destination available [ 423.414011][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 423.517344][T13603] lo speed is unknown, defaulting to 1000 [ 424.320193][T13628] vlan3: entered promiscuous mode [ 424.339318][T13628] bridge0: entered promiscuous mode [ 424.376762][T13638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2966'. [ 424.578982][T13671] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2979'. [ 424.767051][T13678] lo speed is unknown, defaulting to 1000 [ 424.807940][T13684] netlink: 67 bytes leftover after parsing attributes in process `syz.8.2983'. [ 424.939264][T13698] syzkaller0: entered promiscuous mode [ 424.946532][T13698] syzkaller0: entered allmulticast mode [ 425.099464][T13723] IPVS: sh: FWM 3 0x00000003 - no destination available [ 425.106847][T13723] IPVS: sh: FWM 3 0x00000003 - no destination available [ 425.198831][T13712] lo speed is unknown, defaulting to 1000 [ 425.315542][ T28] audit: type=1400 audit(2000000162.645:1872): avc: denied { bind } for pid=13739 comm="syz.7.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 425.394204][T13744] syzkaller0: entered promiscuous mode [ 425.415082][T13744] syzkaller0: entered allmulticast mode [ 425.415406][T13747] loop8: detected capacity change from 0 to 512 [ 425.436580][T13752] loop3: detected capacity change from 0 to 128 [ 425.444403][T13747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.542827][T13752] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.556193][T13752] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.095349][T11330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.593470][T13792] lo speed is unknown, defaulting to 1000 [ 427.936333][T13807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13807 comm=syz.7.3029 [ 428.664736][T13821] lo speed is unknown, defaulting to 1000 [ 430.988480][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.005057][T13886] lo speed is unknown, defaulting to 1000 [ 431.197124][T13899] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3059'. [ 431.245200][T13903] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3059'. [ 431.267158][T13896] syzkaller0: entered promiscuous mode [ 431.276070][T13896] syzkaller0: entered allmulticast mode [ 432.026349][T13924] lo speed is unknown, defaulting to 1000 [ 432.064653][T13933] IPVS: sh: FWM 3 0x00000003 - no destination available [ 432.097606][T13933] IPVS: sh: FWM 3 0x00000003 - no destination available [ 432.165703][T13942] loop8: detected capacity change from 0 to 512 [ 432.199863][T13942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.594181][T11330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.152973][T14038] ================================================================== [ 433.161083][T14038] BUG: KCSAN: data-race in touch_atime / touch_atime [ 433.167779][T14038] [ 433.170092][T14038] write to 0xffff88811b7480f0 of 4 bytes by task 14040 on cpu 1: [ 433.177803][T14038] touch_atime+0x1d7/0x330 [ 433.182230][T14038] shmem_file_read_iter+0x477/0x540 [ 433.187433][T14038] copy_splice_read+0x471/0x6c0 [ 433.192280][T14038] splice_direct_to_actor+0x28f/0x670 [ 433.197649][T14038] do_splice_direct+0x119/0x1a0 [ 433.202496][T14038] do_sendfile+0x382/0x650 [ 433.206912][T14038] __x64_sys_sendfile64+0x105/0x150 [ 433.212108][T14038] x64_sys_call+0x2dc4/0x3020 [ 433.216797][T14038] do_syscall_64+0x12c/0x370 [ 433.221395][T14038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.227291][T14038] [ 433.229604][T14038] read to 0xffff88811b7480f0 of 4 bytes by task 14038 on cpu 0: [ 433.237232][T14038] touch_atime+0x16c/0x330 [ 433.241762][T14038] shmem_file_read_iter+0x477/0x540 [ 433.246983][T14038] copy_splice_read+0x471/0x6c0 [ 433.251844][T14038] splice_direct_to_actor+0x28f/0x670 [ 433.257211][T14038] do_splice_direct+0x119/0x1a0 [ 433.262052][T14038] do_sendfile+0x382/0x650 [ 433.266466][T14038] __x64_sys_sendfile64+0x105/0x150 [ 433.271659][T14038] x64_sys_call+0x2dc4/0x3020 [ 433.276332][T14038] do_syscall_64+0x12c/0x370 [ 433.280912][T14038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.286795][T14038] [ 433.289101][T14038] value changed: 0x3395b1cf -> 0x3435e1a0 [ 433.294800][T14038] [ 433.297108][T14038] Reported by Kernel Concurrency Sanitizer on: [ 433.303243][T14038] CPU: 0 UID: 0 PID: 14038 Comm: syz.6.3116 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.314179][T14038] Tainted: [W]=WARN [ 433.317970][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.328013][T14038] ==================================================================