last executing test programs: 50.776998619s ago: executing program 0 (id=983): r0 = socket$inet(0x2, 0x2, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) unshare(0x6a040000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x6}, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 50.57358111s ago: executing program 0 (id=984): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r7, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7e9}, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 49.534048192s ago: executing program 0 (id=988): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r7, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7e9}, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 48.567985488s ago: executing program 0 (id=991): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000080000000000000000000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009582df9fee34bf11"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020207025000000000020"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x105400, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18cf000000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x280088, 0x0, 0x7c, 0x0, &(0x7f0000001000)) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="97fe0d2d1b4a88c43c64795c0b97acb594c78c45d3c0fcf72414e389d6442606f936af957b33a66221d64505fb08e9460072847e485d398b968e8bd8052001580de6bba6c98daff989cf8b0810e8dd6ab830397f9f0387feff818363953d1b1dfa4b990f6308c99f13e67ee743e66e55df6f5898ed085495f8a526a208234822", 0x80}, {&(0x7f0000000200)="1a295f2f19d9d24e4e85761551b4a50de0afd82891e497e92c5f12bc8e1f333915d2f2656b0be935ee865121aec01e9e9b1eaf09e13b26facbb317830a4ee1cea9ce105765977282818abbf164c37b77d7793226392b658381d9d7319e76e2abe999e22d893635dba7d5f1a55b", 0x6d}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x5, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4f3d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x91f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="cd547747518be305d563d22ef9617231a0918a4241a24d8f3b93e6202983d9d3639481b556e322590b6c3365489b56ffd8295cd2619a846ab1466da0b0afefd46f8cb6911340829fb1fd7eaf4e2e7c289f6bdc3d7d6784dea3b26ec1d8025478391d5075b44d", 0x66}, {&(0x7f00000006c0)="b6c9155aca5c266b3bf3c1041252b93a7663ef42441c713b0d462d7b99192a20557b82da6e1fed044d07d6725d940fb6be35ea83600a2a807950e63af3ec25ff8b17f5a929f90b6984e8a7afc6dc67b5f6c31f89d52612895538d2022f94e9161d06d011bd952c6fb7a12b424fa691ed774b29dfeb09f04faaf758a028ccae68a73a69d1a5f38fa90bafbc1f496f4e1e5135a46962aa5929706ccc0a9cb27a7a01b7b137762e1c0ec022f72de9d0c2cd3ca3bed5c1588437f3b1e8698a12c3a8801465b46c1d718c3a7d797fe0a9d717", 0xd0}, {&(0x7f00000007c0)="b759a2ff012922", 0x7}, {&(0x7f0000000800)="9c46c796ec69e28e6ddbc12d030984eca675b9eb64b11f637b782cd228fd0ec88c2423", 0x23}, {&(0x7f0000000840)="959a2604afd974834a6f5243ff6b4fc74e23747edffc7ee9b66a574c0cfcc998ce6f5185a9f2924951ea65293e4cb57c38049a5d3540a997d99da7a28220b15e02267593a1eaf00733800ffb686cef75a7c10382a65c15612f74db873ee8142515f951eef981bab938687bb11dd6f6754ff823ad51b124235565b6c55efd857e2316f24d1110ad571dcf85e7cfddd2092c", 0x91}, {&(0x7f0000000900)="f8cc4a0ac0f235a09fe7757fe9ba0bb8b3cc27322c2000ac26fff582a5aab7b7dce5330bd70f43b783f430d89015071e618edd5205d1a3c4068260e7e8a4ef05bf9f28983f2e5a4974ce7e999effb37f4c9df9bf98dcefdf0d61be8d4bc58ef304f57f4bd149e7544c8f67aab265abae7e2f0329dc3a3c4f3c6dbff7f9654a5dde3491ddf3f4ae5a2437dbda06911f7e1d9bb4e9079b3b79f238394b8e03107670ed0358260240", 0xa7}, {&(0x7f0000000a80)='N15', 0x3}, {&(0x7f0000000ac0)="a02f59ec761c885c2fa7b3540c2ace1e47fe77d034c528542f9395b795faabc889bae63ed7a33d61a4663b493695f4af84468e8902a2d8e6150a0597787476fca6f541bd383578ca62d49e23bca17b6c7356b2651d9c36a6f0e97195f2043d70bca788b3ccde37f00516238cda44a856264fdde7a413534a4df51b6bc31c6e48f292bcc81ddd9a6df2fa9ae38035858714491784a1c0ebf8428000e36a3781e78026449ef2d12a3e42b97f0fe11bd050ee17f656afcadd9a3d12977412c8fb2ad4ef29a9712f385d5a3d344f56c6b8c1bf5cebd889836f5ffb93ddd571f5667fb6786d9ae2100a1c8d9421df7ed5cb", 0xef}], 0x8}}], 0x2, 0x400a090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f00000002c0)=""/111) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=ANY=[@ANYBLOB="280900003bfcd2b4699b3abcc7d6a68cdae2e353b961292512a6a5966d8651dc4e100567bc9d0040f79a2aaaa36c5cbd48e529293a3d92211f3873e7c6990fe7546371b87a8daf08795a70c4658db6bc9d35ef1faeb2868b669ad52901b55ab526d823e5e79ef5", @ANYRES16=r7, @ANYBLOB="010021000000fedbdf250e0000000c0099001a0100001600020007000e002a010600"], 0x28}}, 0x4014080) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200000004000000990500000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000767d91fcab90cf10116a9c9c5d90b8d23c5a8b72e6f2914c5658898d25af54c1958deac2718bd6bde41369e03d1cf8f45e175bcbd9f39d4b68f1545a241f5c30ff3354c30d6de3427582e666a36862551a48054012da4b7389a4b7c92161a27e496ca2ceaf029c90dc4bff28e350f2b8c4952a84a78d52124c8457e97b0ebe6213d64a33d448aef7291a8b10bbbf4379008d3313c1201f0b3fe234ab", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_clone(0x28100200, 0x0, 0x0, 0x0, 0x0, 0x0) 47.575587029s ago: executing program 0 (id=996): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611484000000007c00000000000000000004000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x11418d, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = gettid() fstat(r10, 0x0) fstat(r9, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$unix(r6, &(0x7f0000000880)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r11, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r9, r6, r11, r0, r8, r5, r10, r11, r7]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r13}}}, @rights={{0x24, 0x1, 0x1, [r4, r3, r3, r0, r3]}}, @rights={{0x20, 0x1, 0x1, [r0, r14, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x118, 0x20000000}, 0x80) 47.288083364s ago: executing program 0 (id=1000): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x8000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1441, 0x0) pwritev2(r4, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) 47.287836134s ago: executing program 32 (id=1000): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x8000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1441, 0x0) pwritev2(r4, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) 15.897237577s ago: executing program 1 (id=1184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @local}) 15.515354444s ago: executing program 1 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x700) 14.532588997s ago: executing program 1 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x46, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x8}, 0x2f) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)="1800000072006bcd9e3fe3dc6c080000070900000f000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x3c, 0x0}, 0x20004899) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c0000000b0a010100000000000000000a0000030900010073797a31000000000c0010400000000000000005140000001100011203000000000000000500000a"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) 14.351221083s ago: executing program 1 (id=1196): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) chroot(&(0x7f0000000040)='./file0\x00') r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14.001043507s ago: executing program 1 (id=1199): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x3a, 0x0, 0xa}, 0x28) r1 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="c9922b24d0803fc64a0866b862befbffed08c127c128aeb8373f5fff9250bff62bf92868b90ad0248d37b29b070c749bbbfcbb84602499c399470cec4a2e87f033", @ANYBLOB="3cafbc2bb1c71361ce3a62aea45774dd83dae11bd188fc7b497f560fef48734428018e3c5747b88437bf742478f1d11c16f1", @ANYRES8=0x0], 0x4, 0x7cc, &(0x7f0000002200)="$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") mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="e586e02a8744d98467aa50f76910a5a268ecb2dfb78ea179cdd0f3f278ac746a5f73cf184c89ad07e39dbcef846badb9f84d17049eb7e205046e74e8ae862f6f7d3ead7658dcc7a41532905aba1d234202fe94185dff06b1ccf1d7456b95b17e92e4bd02a33b51c2d144193c39f10d2b05d627b77d3a3057360112c9cc650e84a5225282f80c694f1b12f631cb449b94496668ee07311bc9647d8c2c93d5bcc0ea4f22d85ed391bab26795aa3d9748ebd80fdab6eb6eab428ac1de31a256dd5ea00ae814010f0f", 0xc7, 0x9fd, &(0x7f0000000380)={0x77359400}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x181902, 0x195) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000000)='7', 0x34000, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESDEC], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_set$uid(0x0, r9, 0x2000) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 13.65178316s ago: executing program 1 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000001440)) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x10064) 13.647375709s ago: executing program 33 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000001440)) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x10064) 5.992386272s ago: executing program 3 (id=1238): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090300000000000000001d0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xb, @remote, 0x788}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="82a1216f3e1d21800f5da9b22b5e65517eb4cfcba25a9f685ed080517172f799ca2f76b49b1d07b975c9e0e8e87a4b04c3920d3da4d455f22c81ffc3a5dec9496a373ced13a4fc06ce9caba302d64b9a7ea191bd42fcee7be32f52ddaeac388c474711aea38fbcca4bce402a5be5bc49f67ed5ad28eaa237638db200d8e424f85f952da2c1a1d2c3c5a2f0efb4c1e0253fee2748b88430eb00d77d88b9807c478bcba3284c63649de12b675e92136c8d1b5117cfc385b93b34e3e26d6f039c", 0xbf}], 0x1, &(0x7f0000000780)=[@dstopts={{0x30, 0x29, 0x37, {0x89, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0xe, 0x0, [0x2]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x2f, 0x8, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x20, {0x0, 0x6, 0xff, 0x5, [0x1ff, 0x1, 0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r4}}}], 0x108}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0xc, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f3c706fb6fade6ca95512a76f58e7f767f2288f3f068141ed727f25f4ddd15cdd8fdbc844db9ddee16bf1022879a5903c6290ce3180e454a3e92da8cfc885446cf7b0fcad73da40ed6a7e597dda2a37e2e12c65d1daa94ab0d21559b5a84fa5fbca00f13b0981944e88d5bed9953320e2dd73bd1025406e35eaad8f7add4a901d77e58f1eb4c74a16a7b67c2178ef1f01b994b0652df5c3bc89a37d33ca16404cd4ceb9b6c68aad75139196515cddc1918370ba829e65f26175f4f21473c250718a", 0xc2}, {&(0x7f0000000980)="292d080d9fead7477abe70b60a77c354c8f760a42e5f169afd6daa31e0718fb0726c59f7b99468212cd90b9c1e8ea7520b776374c7a0ca4742a262d3a60371343a599d75835496e6e9a74920c029aeab70ff97d824cf10b13686e38df416724b6ad1ed682ae3a2625a6020414c6b80200413cdcc4898e1767ca58ec2572d60aa18e8e2679748008d16247feafb2655c7bf6c0d7ea483e4506151b285bc3090cc5ec1845072a0408fa2dd2951c131a9c327bc0a45b4e40393985addf2ee2320c5257dbe0a66969bedf9404238040c31b0669548af074ace0c753921245fb678a95c5372c89370aa7585968a88e379d21c1e2bdec8", 0xf4}, {&(0x7f0000000d80)="9db9aa4c46fa4fae5be43e6113ca39727c79f606e37ebfed4a819924018c175dc446ff94246b7463052d6f034d7dbbce1ef816a4b866b9c9c63a89ccd7295d21e00687327fc661e53c7cd5ffc36eb7cc1f4392b37db28830afd2fb583f217372246342fe0fee6139ca3bfef8d809df5ee790e89034b03de42380707002cbc3cc164de0d2d17e9a14ae26fe488fc574b270ec823413802a7f862c7b0f1076677036e6d9a4bc5a6add4fa52b1663904bf23c3758b9a4ae4b70974e9faff6d098951d61ffbab9", 0xc5}], 0x3, &(0x7f00000005c0)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@jumbo, @jumbo={0xc2, 0x4, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0xc}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x70}}], 0x2, 0x0) 5.592827475s ago: executing program 3 (id=1240): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 4.548755487s ago: executing program 3 (id=1246): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000001740)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {}, {@nodots}, {@dots}, {}, {@fat=@showexec}, {@fat=@usefree}, {@fat=@time_offset={'time_offset', 0x3d, 0x111}}, {@nodots}, {@dots}]}, 0x1, 0x1fa, &(0x7f0000001880)="$eJzs3c1qE1EUAOCTmF9x0Z0gCCMudFXUJ6hIBTEgVLLQnaArs2o3qZv2MXwF38sHkK6ykStxJk6cpjEEMqP1+zY9M+ee3ntnyCSbnKTIfb39OQaDVrQP4iBmrdiLdiycBwBwncxSim8p1/RaAIB6bPD+/73mJQEAO/b6zduXT0ejw6MsG0RcnE/H03H+N88/fzE6fJT9tFdWXUyn4xu/8o+z6meHeb4bN4v8k7w+y3OdiF5EjHvx8H6en+eevRplv9f34/3utw8AAAAAAAAAAAAAAAAAAAAAAI24G9nCyv4++/vV/LDI50dL/YEq/Xs6cadTHJbtgdJZHZsCAAAAAAAAAAAAAAAAAACAf8zJ6aeP7yaTD8dl0I+I5TOdFWOuDlrFP66kurFZed1BO7YrHxbb3GLSVnGJdrvB4eqbu0kQnb/l7mwbZDXMNVx7eVOaB9VXQR4s2mJcWd6LiPWzPzjadvGzlNLky73jk9NIaweXz4h+rU8kAAAAAAAAAAAAAAAAAAD4fy196/uSQRMLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAGlL//Pw8un1kbnEXErfjj4MVc3Rg0ulcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACurx8BAAD///2VIWk=") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@private2, 0x18, r3}) socket$inet(0x2, 0x3, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f00000000c0)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 4.389371656s ago: executing program 2 (id=1248): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x700) 4.329764804s ago: executing program 3 (id=1250): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) 3.498615366s ago: executing program 2 (id=1254): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'veth1_virt_wifi\x00', &(0x7f0000001880)=@ethtool_drvinfo={0x3, "cf77c0afdad19b587fb3163e024011a8c867ffbbd8cd3e3237a03531cbcf77fc", "4f3b87144ec87836ca5a6986c2597adc637e621b84dd1bd472ac10aff00eaf57", "d4bbad5c017cccc963f75563444fb3e713481c44c75e485d4e9e4b1f23a75778", "292f27195b40cd19ca2e1666a7cfdaefe4ec7c2febc15604bbe4d2bf1bc8cd5b", "2099d59456781ae5bb534f65a334abcc7e639b8c0cea1082c8c9abe85398e199", "a54ebe28b664c73c41612db5", 0xd, 0x5, 0x9, 0xfffffffe, 0x3}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) unshare(0x4000000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8000, 0x20, 0xba4d, 0x1000}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x9}, 0x8) 3.328196124s ago: executing program 4 (id=1256): r0 = socket$inet(0x2, 0x2, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) unshare(0x6a040000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40c002, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x6}, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 3.327853304s ago: executing program 2 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000080000000000000000000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009582df9fee34bf11"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020207025000000000020"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="97fe0d2d1b4a88c43c64795c0b97acb594c78c45d3c0fcf72414e389d6442606f936af957b33a66221d64505fb08e9460072847e485d398b968e8bd8052001580de6bba6c98daff989cf8b0810e8dd6ab830397f9f0387feff818363953d1b1dfa4b990f6308c99f13e67ee743e66e55df6f5898ed085495f8a526a208234822", 0x80}, {&(0x7f0000000200)="1a295f2f19d9d24e4e85761551b4a50de0afd82891e497e92c5f12bc8e1f333915d2f2656b0be935ee865121aec01e9e9b1eaf09e13b26facbb317830a4ee1cea9ce105765977282818abbf164c37b77d7793226392b658381d9d7319e76e2abe999e22d893635dba7d5f1a55b", 0x6d}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x5, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4f3d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x91f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="cd547747518be305d563d22ef9617231a0918a4241a24d8f3b93e6202983d9d3639481b556e322590b6c3365489b56ffd8295cd2619a846ab1466da0b0afefd46f8cb6911340829fb1fd7eaf4e2e7c289f6bdc3d7d6784dea3b26ec1d8025478391d5075b44d", 0x66}, {&(0x7f00000006c0)="b6c9155aca5c266b3bf3c1041252b93a7663ef42441c713b0d462d7b99192a20557b82da6e1fed044d07d6725d940fb6be35ea83600a2a807950e63af3ec25ff8b17f5a929f90b6984e8a7afc6dc67b5f6c31f89d52612895538d2022f94e9161d06d011bd952c6fb7a12b424fa691ed774b29dfeb09f04faaf758a028ccae68a73a69d1a5f38fa90bafbc1f496f4e1e5135a46962aa5929706ccc0a9cb27a7a01b7b137762e1c0ec022f72de9d0c2cd3ca3bed5c1588437f3b1e8698a12c3a8801465b46c1d718c3a7d797fe0a9d717", 0xd0}, {&(0x7f00000007c0)="b759a2ff012922", 0x7}, {&(0x7f0000000800)="9c46c796ec69e28e6ddbc12d030984eca675b9eb64b11f637b782cd228fd0ec88c2423", 0x23}, {&(0x7f0000000840)="959a2604afd974834a6f5243ff6b4fc74e23747edffc7ee9b66a574c0cfcc998ce6f5185a9f2924951ea65293e4cb57c38049a5d3540a997d99da7a28220b15e02267593a1eaf00733800ffb686cef75a7c10382a65c15612f74db873ee8142515f951eef981bab938687bb11dd6f6754ff823ad51b124235565b6c55efd857e2316f24d1110ad571dcf85e7cfddd2092c", 0x91}, {&(0x7f0000000900)="f8cc4a0ac0f235a09fe7757fe9ba0bb8b3cc27322c2000ac26fff582a5aab7b7dce5330bd70f43b783f430d89015071e618edd5205d1a3c4068260e7e8a4ef05bf9f28983f2e5a4974ce7e999effb37f4c9df9bf98dcefdf0d61be8d4bc58ef304f57f4bd149e7544c8f67aab265abae7e2f0329dc3a3c4f3c6dbff7f9654a5dde3491ddf3f4ae5a2437dbda06911f7e1d9bb4e9079b3b79f238394b8e03107670ed0358260240", 0xa7}, {&(0x7f0000000a80)='N15', 0x3}, {&(0x7f0000000ac0)="a02f59ec761c885c2fa7b3540c2ace1e47fe77d034c528542f9395b795faabc889bae63ed7a33d61a4663b493695f4af84468e8902a2d8e6150a0597787476fca6f541bd383578ca62d49e23bca17b6c7356b2651d9c36a6f0e97195f2043d70bca788b3ccde37f00516238cda44a856264fdde7a413534a4df51b6bc31c6e48f292bcc81ddd9a6df2fa9ae38035858714491784a1c0ebf8428000e36a3781e78026449ef2d12a3e42b97f0fe11bd050ee17f656afcadd9a3d12977412c8fb2ad4ef29a9712f385d5a3d344f56c6b8c1bf5cebd889836f5ffb93ddd571f5667fb6786d9ae2100a1c8d9421df7ed5cb", 0xef}], 0x8}}], 0x2, 0x400a090) 3.233253526s ago: executing program 5 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) 3.144420839s ago: executing program 4 (id=1260): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) 3.008237683s ago: executing program 5 (id=1261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x8, 0xdb}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x22000, 0xd) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x6901, 0xb0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0x3, 0x461, &(0x7f0000000e00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) socket$kcm(0x10, 0x2, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r5, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000940)=r3) r6 = syz_pidfd_open(r4, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000100)) process_madvise(r6, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000540)='.', 0x1}], 0x2, 0x18, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0xe0}}, './file1\x00'}) bpf$PROG_LOAD(0x23, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, 0x0, 0x101, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x54}]}, 0x34}, 0x1, 0x0, 0x0, 0x2fe900e4747f48f1}, 0x24000084) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="4100000000000000010006"], 0x44}, 0x1, 0x1000000}, 0x0) fremovexattr(r3, &(0x7f0000000080)=@random={'trusted.', 'ext4\x00'}) 2.456028248s ago: executing program 5 (id=1262): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) 2.381958264s ago: executing program 2 (id=1263): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008004) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x786}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x83}, 0xc824) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, 0x0, 0x0) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x7a}, 0x8) 2.286835565s ago: executing program 5 (id=1264): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) 2.019790235s ago: executing program 4 (id=1266): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.876205297s ago: executing program 6 (id=1268): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 1.875723787s ago: executing program 6 (id=1269): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x59b5, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) io_uring_enter(r3, 0x769f, 0x1fffffc, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r2) ustat(0x801, &(0x7f0000000240)) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) socket$packet(0x11, 0x2, 0x300) capset(0x0, 0x0) r7 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.707913436s ago: executing program 4 (id=1270): r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/stat\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000940)=0x7ffd, 0x4) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r3, 0x0) fallocate(r3, 0x0, 0x9e1f, 0x575) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x4, 0x3c, 0x67, 0x0, 0x3, 0x6, 0x0, @loopback, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0xfff9, 0x0, 0x2, 0x9, 0x5, 0x2, 0xd04, 0x6, 0x3, 0x4e22, 0x4e24}, 0x4, 0x1}, 0x3, 0x1}}}}}}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) getdents64(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x25a, &(0x7f0000000240)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000004c0)) 1.500636626s ago: executing program 2 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) 1.211167591s ago: executing program 5 (id=1272): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519fd6e5e701"], 0x0, 0x3c, 0x0, 0x1}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r7, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7e9}, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 1.126052915s ago: executing program 3 (id=1273): syz_read_part_table(0x5c7, &(0x7f0000000600)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000ff17010028bd8c00fbdbdf250900020073797a32000000000800410072786500140033006970365f76746930"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 484.826293ms ago: executing program 3 (id=1274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b3be80ae0000000000000000001000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0xfffffffffffffece, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000200), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 439.116354ms ago: executing program 4 (id=1275): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 337.206835ms ago: executing program 6 (id=1276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x12000000, 0x0, 0x0) 229.128984ms ago: executing program 5 (id=1277): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = msgget$private(0x0, 0x2e0) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) msgrcv(r3, 0x0, 0x0, 0x3, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xf1, 0x0) msgrcv(r3, &(0x7f00000000c0)={0x0, ""/21}, 0x1d, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0xfffffffffffffdef, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f00000026c0)="fb5584", 0x3}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) 164.949112ms ago: executing program 6 (id=1278): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090300000000000000001d0000000c00018008000100", @ANYRES32], 0x20}}, 0x0) 164.480372ms ago: executing program 2 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000cdab020004000000000000880f000000657000006600000002400000", @ANYRES32=r4], 0x30, 0x2404c800}, 0x2280ebb5ea929ce3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r4, 0x4}, &(0x7f00000000c0)=0x8) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c008fe1b47e010800000000000000000a004024050001000700010017463f50979ecfd572d6c3289deaaec4cdd534b8ec28cecd7a83f02bc2bbf717eaf521877e6a2a8948c808a459069df73f4041fe97ceb78707131bd7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) close(r0) 163.836652ms ago: executing program 4 (id=1280): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) close(r0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x32b4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xdf, &(0x7f0000000200)=""/223, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000003c0)=[{0x0, 0x5, 0x4, 0x4}, {0x0, 0x4, 0xc, 0xc}, {0x1, 0x2, 0x8, 0xb}, {0x0, 0x5, 0xd, 0x7}, {0x1, 0x2, 0x8, 0x1}, {0x5, 0x5, 0xa, 0xc}], 0x10, 0x4000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60081, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x800, 0x0, 0x10ffe, 0x8, 0x1, 0x8000000e, 0x9, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28060080) unshare(0x28020600) getdents64(r2, &(0x7f0000000500)=""/103, 0x67) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000800)={{}, {0x9}, 0x20, 0x0, 0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)="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", 0x10a, 0x0, &(0x7f0000000740)={0x2, 0x3c, {0x0, 0xc, 0x26, "83924ebeaefce271c7ba3aba964105859d6e872d750e3e68d77e61418e6dfd20b17f66d4c6e4", 0x9, "dbf790d826c7dce445"}, 0x45, "4aa3260741fa7ae4387b1807b35735f67b1e3675be8f95716cf8f8193a3fad48bfc18f46c1d7b417c2113fd16f24227ff52aa7b4cd2b02a1e00475aacb836dc2d92dfdc0ea"}, 0x8d}) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4a104100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x8044803) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 163.514682ms ago: executing program 6 (id=1281): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002d80), 0x40002, 0x0) unshare(0x22020400) io_setup(0x1, &(0x7f0000002f00)=0x0) r2 = eventfd(0x6) io_submit(r1, 0x1, &(0x7f0000003200)=[&(0x7f0000002f80)={0x0, 0x0, 0x0, 0x2, 0x3, r0, 0x0, 0x0, 0x9, 0x0, 0x3, r2}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 0s ago: executing program 6 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb8, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x114c}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xcc6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x73}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1940}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8880}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe78, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xa2313b630ad1f80d}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0xc400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2d55) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.463612][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.711495][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.722935][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.736668][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.746501][ T6814] loop4: detected capacity change from 0 to 512 [ 210.762559][ T6814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.781794][ T6814] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.849666][ T6821] syzkaller0: entered promiscuous mode [ 210.900619][ T6821] syzkaller0: entered allmulticast mode [ 210.925348][ T6827] syzkaller0: entered promiscuous mode [ 210.988841][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.060570][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 212.166909][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 212.166923][ T28] audit: type=1326 audit(1772728356.327:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e5caec799 code=0x0 [ 212.268232][ T6847] loop1: detected capacity change from 0 to 128 [ 212.641623][ T6849] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 212.661957][ T6849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.676081][ T6849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1020'. [ 212.685420][ T6849] bond7: entered promiscuous mode [ 212.690990][ T6849] bond7: entered allmulticast mode [ 212.698703][ T6849] bond6: (slave dummy0): Releasing active interface [ 212.709048][ T6849] bond7: (slave dummy0): making interface the new active one [ 212.716618][ T6849] dummy0: entered promiscuous mode [ 212.721933][ T6849] dummy0: entered allmulticast mode [ 212.727723][ T6849] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 212.927090][ T28] audit: type=1400 audit(1772728357.087:737): avc: denied { create } for pid=6858 comm="syz.5.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.970836][ T28] audit: type=1400 audit(1772728357.107:738): avc: denied { connect } for pid=6858 comm="syz.5.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.970863][ T28] audit: type=1400 audit(1772728357.117:739): avc: denied { read write } for pid=6858 comm="syz.5.1023" dev="sockfs" ino=14961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.029936][ T6861] 9p: Bad value for 'wfdno' [ 213.176819][ T6863] loop2: detected capacity change from 0 to 512 [ 213.212613][ T28] audit: type=1326 audit(1772728357.377:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6f9ac799 code=0x7ffc0000 [ 213.245740][ T28] audit: type=1326 audit(1772728357.377:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b6f9ac799 code=0x7ffc0000 [ 213.269526][ T28] audit: type=1326 audit(1772728357.377:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6f9ac799 code=0x7ffc0000 [ 213.293371][ T6863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.309961][ T6863] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.330041][ T28] audit: type=1326 audit(1772728357.377:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6f9ac799 code=0x7ffc0000 [ 213.353490][ T28] audit: type=1326 audit(1772728357.397:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f9b6f9ac799 code=0x7ffc0000 [ 213.376981][ T28] audit: type=1326 audit(1772728357.397:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6f9ac799 code=0x7ffc0000 [ 213.430576][ T6874] loop5: detected capacity change from 0 to 512 [ 213.468999][ T6874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.500241][ T6874] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.528970][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.175411][ T6894] xt_hashlimit: size too large, truncated to 1048576 [ 214.415064][ T6901] loop1: detected capacity change from 0 to 136 [ 214.476153][ T6901] Attempt to read inode for relocated directory [ 214.501154][ T6755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.594484][ T6903] syzkaller0: entered promiscuous mode [ 214.600430][ T6903] syzkaller0: entered allmulticast mode [ 214.683603][ T6912] loop3: detected capacity change from 0 to 256 [ 214.710931][ T6912] msdos: Bad value for 'gid' [ 214.715709][ T6912] msdos: Bad value for 'gid' [ 214.766539][ T6915] netlink: 'syz.2.1039': attribute type 1 has an invalid length. [ 214.830831][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1039'. [ 214.887863][ T6915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.980054][ T6917] bond2: entered promiscuous mode [ 214.985118][ T6917] bond2: entered allmulticast mode [ 214.997130][ T6923] bond2: (slave dummy0): making interface the new active one [ 215.014706][ T6923] dummy0: entered promiscuous mode [ 215.024899][ T6923] dummy0: entered allmulticast mode [ 215.033992][ T6923] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 215.116624][ T6900] syz.1.1033 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 215.130886][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: syz.1.1033 Not tainted syzkaller #0 PREEMPT(full) [ 215.130912][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.130959][ T6900] Call Trace: [ 215.130966][ T6900] [ 215.130975][ T6900] __dump_stack+0x1d/0x30 [ 215.131049][ T6900] dump_stack_lvl+0x95/0xd0 [ 215.131067][ T6900] dump_stack+0x15/0x1b [ 215.131084][ T6900] dump_header+0x80/0x240 [ 215.131155][ T6900] oom_kill_process+0x295/0x350 [ 215.131179][ T6900] out_of_memory+0x97d/0xb80 [ 215.131259][ T6900] try_charge_memcg+0x62e/0xa10 [ 215.131299][ T6900] obj_cgroup_charge_pages+0x23/0xc0 [ 215.131336][ T6900] __memcg_kmem_charge_page+0x9e/0x170 [ 215.131403][ T6900] __alloc_frozen_pages_noprof+0x18a/0x360 [ 215.131502][ T6900] alloc_pages_mpol+0xb3/0x260 [ 215.131529][ T6900] alloc_pages_noprof+0x8f/0x130 [ 215.131556][ T6900] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 215.131607][ T6900] __kvmalloc_node_noprof+0x3d4/0x650 [ 215.131632][ T6900] ? futex_hash_allocate+0x190/0x9d0 [ 215.131706][ T6900] ? futex_hash_allocate+0x190/0x9d0 [ 215.131728][ T6900] futex_hash_allocate+0x190/0x9d0 [ 215.131752][ T6900] ? cap_task_prctl+0x13f/0x6e0 [ 215.131804][ T6900] futex_hash_prctl+0xd8/0xf0 [ 215.131827][ T6900] __se_sys_prctl+0xa3d/0x13f0 [ 215.131849][ T6900] __x64_sys_prctl+0x67/0x80 [ 215.131867][ T6900] x64_sys_call+0x2533/0x3020 [ 215.131918][ T6900] do_syscall_64+0x12c/0x370 [ 215.131940][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.131963][ T6900] RIP: 0033:0x7f3e5caec799 [ 215.131980][ T6900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.132008][ T6900] RSP: 002b:00007f3e5b547028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 215.132038][ T6900] RAX: ffffffffffffffda RBX: 00007f3e5cd65fa0 RCX: 00007f3e5caec799 [ 215.132051][ T6900] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 215.132086][ T6900] RBP: 00007f3e5cb82bd9 R08: 0000000000000000 R09: 0000000000000000 [ 215.132098][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.132109][ T6900] R13: 00007f3e5cd66038 R14: 00007f3e5cd65fa0 R15: 00007ffc67a65e78 [ 215.132179][ T6900] [ 215.132185][ T6900] memory: usage 307200kB, limit 307200kB, failcnt 5211 [ 215.370010][ T6928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1042'. [ 215.394949][ T6900] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 215.403382][ T6900] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 215.411033][ T6900] Memory cgroup stats for /syz1: [ 215.411287][ T6900] cache 0 [ 215.419239][ T6900] rss 4096 [ 215.422286][ T6900] shmem 0 [ 215.425217][ T6900] mapped_file 0 [ 215.449987][ T6900] dirty 0 [ 215.452944][ T6900] writeback 0 [ 215.456461][ T6900] workingset_refault_anon 920 [ 215.461285][ T6900] workingset_refault_file 8512 [ 215.466050][ T6900] swap 262144 [ 215.469387][ T6900] swapcached 2228224 [ 215.473594][ T6900] pgpgin 135369 [ 215.497685][ T6900] pgpgout 135367 [ 215.504647][ T6900] pgfault 161349 [ 215.515556][ T6900] pgmajfault 643 [ 215.519116][ T6900] inactive_anon 8192 [ 215.523410][ T6900] active_anon 0 [ 215.526955][ T6900] inactive_file 0 [ 215.535719][ T6900] active_file 0 [ 215.539286][ T6900] unevictable 0 [ 215.542800][ T6900] hierarchical_memory_limit 314572800 [ 215.548203][ T6900] hierarchical_memsw_limit 9223372036854771712 [ 215.554552][ T6900] total_cache 0 [ 215.558000][ T6900] total_rss 4096 [ 215.564655][ T6934] loop3: detected capacity change from 0 to 1024 [ 215.584605][ T6934] EXT4-fs: inline encryption not supported [ 215.606017][ T6934] EXT4-fs: Ignoring removed nobh option [ 215.616045][ T6900] total_shmem 0 [ 215.619552][ T6900] total_mapped_file 0 [ 215.633763][ T6900] total_dirty 0 [ 215.640086][ T6900] total_writeback 0 [ 215.649910][ T6900] total_workingset_refault_anon 920 [ 215.659958][ T6900] total_workingset_refault_file 8512 [ 215.669828][ T6900] total_swap 262144 [ 215.673630][ T6900] total_swapcached 2228224 [ 215.688400][ T6900] total_pgpgin 135369 [ 215.698259][ T6900] total_pgpgout 135367 [ 215.708353][ T6900] total_pgfault 161349 [ 215.715435][ T6934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 215.723595][ T6900] total_pgmajfault 643 [ 215.727649][ T6900] total_inactive_anon 8192 [ 215.732324][ T6900] total_active_anon 0 [ 215.736474][ T6900] total_inactive_file 0 [ 215.740766][ T6900] total_active_file 0 [ 215.744731][ T6900] total_unevictable 0 [ 215.748800][ T6900] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1033,pid=6899,uid=0 [ 215.763835][ T6900] Memory cgroup out of memory: Killed process 6899 (syz.1.1033) total-vm:96208kB, anon-rss:1228kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 215.915141][ T6934] System zones: 0-1, 3-12 [ 215.920166][ T6934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.513989][ T6942] syz.1.1047 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 216.532768][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.1.1047 Not tainted syzkaller #0 PREEMPT(full) [ 216.532849][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.532860][ T6942] Call Trace: [ 216.532865][ T6942] [ 216.532872][ T6942] __dump_stack+0x1d/0x30 [ 216.532895][ T6942] dump_stack_lvl+0x95/0xd0 [ 216.532914][ T6942] dump_stack+0x15/0x1b [ 216.532937][ T6942] dump_header+0x80/0x240 [ 216.532957][ T6942] oom_kill_process+0x295/0x350 [ 216.532980][ T6942] out_of_memory+0x97d/0xb80 [ 216.533004][ T6942] try_charge_memcg+0x62e/0xa10 [ 216.533107][ T6942] obj_cgroup_charge_pages+0x23/0xc0 [ 216.533134][ T6942] __memcg_kmem_charge_page+0x9e/0x170 [ 216.533193][ T6942] __alloc_frozen_pages_noprof+0x18a/0x360 [ 216.533286][ T6942] alloc_pages_mpol+0xb3/0x260 [ 216.533311][ T6942] alloc_pages_noprof+0x8f/0x130 [ 216.533333][ T6942] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 216.533474][ T6942] __kvmalloc_node_noprof+0x3d4/0x650 [ 216.533499][ T6942] ? futex_hash_allocate+0x190/0x9d0 [ 216.533593][ T6942] ? futex_hash_allocate+0x190/0x9d0 [ 216.533621][ T6942] futex_hash_allocate+0x190/0x9d0 [ 216.533698][ T6942] ? cap_task_prctl+0x13f/0x6e0 [ 216.533753][ T6942] futex_hash_prctl+0xd8/0xf0 [ 216.533779][ T6942] __se_sys_prctl+0xa3d/0x13f0 [ 216.533804][ T6942] __x64_sys_prctl+0x67/0x80 [ 216.533842][ T6942] x64_sys_call+0x2533/0x3020 [ 216.533896][ T6942] do_syscall_64+0x12c/0x370 [ 216.533992][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.534010][ T6942] RIP: 0033:0x7f3e5caec799 [ 216.534087][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.534104][ T6942] RSP: 002b:00007f3e5b547028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 216.534123][ T6942] RAX: ffffffffffffffda RBX: 00007f3e5cd65fa0 RCX: 00007f3e5caec799 [ 216.534212][ T6942] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 216.534226][ T6942] RBP: 00007f3e5cb82bd9 R08: 0000000000000000 R09: 0000000000000000 [ 216.534239][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.534250][ T6942] R13: 00007f3e5cd66038 R14: 00007f3e5cd65fa0 R15: 00007ffc67a65e78 [ 216.534266][ T6942] [ 216.534361][ T6942] memory: usage 307200kB, limit 307200kB, failcnt 5354 [ 216.870041][ T6942] memory+swap: usage 50008kB, limit 9007199254740988kB, failcnt 0 [ 216.877868][ T6942] kmem: usage 49648kB, limit 9007199254740988kB, failcnt 0 [ 216.885091][ T6942] Memory cgroup stats for /syz1: [ 216.885247][ T6942] cache 20480 [ 216.900073][ T6942] rss 28672 [ 216.907160][ T6942] shmem 0 [ 216.910444][ T6942] mapped_file 0 [ 216.914178][ T6942] dirty 0 [ 216.917290][ T6942] writeback 0 [ 216.971479][ T6942] workingset_refault_anon 955 [ 216.984341][ T6942] workingset_refault_file 9152 [ 216.999587][ T6942] swap 81920 [ 217.024106][ T6942] swapcached 2260992 [ 217.028011][ T6942] pgpgin 136059 [ 217.049863][ T6942] pgpgout 136047 [ 217.055944][ T6942] pgfault 161432 [ 217.074744][ T6942] pgmajfault 664 [ 217.085885][ T6942] inactive_anon 12288 [ 217.094930][ T6942] active_anon 16384 [ 217.111960][ T6942] inactive_file 0 [ 217.118961][ T6942] active_file 0 [ 217.144991][ T6942] unevictable 0 [ 217.155066][ T6942] hierarchical_memory_limit 314572800 [ 217.185606][ T6960] loop2: detected capacity change from 0 to 1024 [ 217.192187][ T6942] hierarchical_memsw_limit 9223372036854771712 [ 217.198332][ T6942] total_cache 20480 [ 217.226669][ T6942] total_rss 28672 [ 217.233755][ T6942] total_shmem 0 [ 217.240290][ T6960] EXT4-fs: inline encryption not supported [ 217.246196][ T6960] EXT4-fs: Ignoring removed nobh option [ 217.260221][ T6942] total_mapped_file 0 [ 217.264512][ T6942] total_dirty 0 [ 217.267967][ T6942] total_writeback 0 [ 217.303991][ T6942] total_workingset_refault_anon 955 [ 217.305281][ T6960] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 217.309212][ T6942] total_workingset_refault_file 9152 [ 217.309223][ T6942] total_swap 81920 [ 217.326388][ T6960] System zones: 0-1, 3-12 [ 217.336913][ T6960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.349857][ T6942] total_swapcached 2260992 [ 217.354327][ T6942] total_pgpgin 136059 [ 217.358295][ T6942] total_pgpgout 136047 [ 217.362794][ T6942] total_pgfault 161432 [ 217.366855][ T6942] total_pgmajfault 664 [ 217.373195][ T6942] total_inactive_anon 12288 [ 217.377701][ T6942] total_active_anon 16384 [ 217.382267][ T6942] total_inactive_file 0 [ 217.386501][ T6942] total_active_file 0 [ 217.390657][ T6942] total_unevictable 0 [ 217.394624][ T6942] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1047,pid=6941,uid=0 [ 217.409519][ T6942] Memory cgroup out of memory: Killed process 6942 (syz.1.1047) total-vm:94028kB, anon-rss:1336kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 217.581218][ T6966] loop1: detected capacity change from 0 to 136 [ 217.589117][ T6966] Attempt to read inode for relocated directory [ 217.634175][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.686095][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 217.738196][ T6970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6970 comm=syz.3.1054 [ 217.817308][ T6972] FAULT_INJECTION: forcing a failure. [ 217.817308][ T6972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.899925][ T6972] CPU: 0 UID: 0 PID: 6972 Comm: syz.3.1055 Not tainted syzkaller #0 PREEMPT(full) [ 217.899954][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.899966][ T6972] Call Trace: [ 217.899973][ T6972] [ 217.899982][ T6972] __dump_stack+0x1d/0x30 [ 217.900003][ T6972] dump_stack_lvl+0x95/0xd0 [ 217.900025][ T6972] dump_stack+0x15/0x1b [ 217.900092][ T6972] should_fail_ex+0x263/0x280 [ 217.900111][ T6972] should_fail+0xb/0x20 [ 217.900127][ T6972] should_fail_usercopy+0x1a/0x20 [ 217.900147][ T6972] _copy_to_user+0x20/0xa0 [ 217.900210][ T6972] simple_read_from_buffer+0xb5/0x130 [ 217.900233][ T6972] proc_fail_nth_read+0x10e/0x150 [ 217.900256][ T6972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.900277][ T6972] vfs_read+0x1ab/0x7f0 [ 217.900365][ T6972] ? __rcu_read_unlock+0x4e/0x70 [ 217.900387][ T6972] ? __fget_files+0x184/0x1c0 [ 217.900406][ T6972] ? mutex_lock+0x57/0x90 [ 217.900549][ T6972] ksys_read+0xdc/0x1a0 [ 217.900577][ T6972] __x64_sys_read+0x40/0x50 [ 217.900600][ T6972] x64_sys_call+0x2886/0x3020 [ 217.900692][ T6972] do_syscall_64+0x12c/0x370 [ 217.900712][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.900732][ T6972] RIP: 0033:0x7f4ba16ecfce [ 217.900746][ T6972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.900760][ T6972] RSP: 002b:00007f4ba0186fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.900784][ T6972] RAX: ffffffffffffffda RBX: 00007f4ba01876c0 RCX: 00007f4ba16ecfce [ 217.900796][ T6972] RDX: 000000000000000f RSI: 00007f4ba01870a0 RDI: 0000000000000003 [ 217.900808][ T6972] RBP: 00007f4ba0187090 R08: 0000000000000000 R09: 0000000000000000 [ 217.900821][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.900835][ T6972] R13: 00007f4ba19a6038 R14: 00007f4ba19a5fa0 R15: 00007ffe37ddadb8 [ 217.900904][ T6972] [ 218.553794][ T6978] loop3: detected capacity change from 0 to 512 [ 218.629148][ T6978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.652855][ T6978] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.727412][ T6983] loop1: detected capacity change from 0 to 512 [ 218.851141][ T6983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.866172][ T6983] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.292478][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.321593][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.338766][ T6987] loop4: detected capacity change from 0 to 512 [ 219.455698][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 219.455711][ T28] audit: type=1400 audit(1772728363.617:785): avc: denied { create } for pid=6989 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 219.498427][ T6987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.513229][ T28] audit: type=1400 audit(1772728363.647:786): avc: denied { ioctl } for pid=6989 comm="syz.2.1060" path="socket:[15857]" dev="sockfs" ino=15857 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 219.538211][ T28] audit: type=1400 audit(1772728363.647:787): avc: denied { write } for pid=6989 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 219.547941][ T6987] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.610906][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.775203][ T7003] loop1: detected capacity change from 0 to 136 [ 219.792258][ T7003] Attempt to read inode for relocated directory [ 220.142521][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.255674][ T7007] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 220.281758][ T28] audit: type=1326 audit(1772728364.447:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 220.295570][ T7000] syz.1.1063 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 220.316097][ T28] audit: type=1326 audit(1772728364.447:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 220.346718][ T28] audit: type=1326 audit(1772728364.447:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 220.355558][ T7000] CPU: 1 UID: 0 PID: 7000 Comm: syz.1.1063 Not tainted syzkaller #0 PREEMPT(full) [ 220.355585][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.355631][ T7000] Call Trace: [ 220.355638][ T7000] [ 220.355645][ T7000] __dump_stack+0x1d/0x30 [ 220.355670][ T7000] dump_stack_lvl+0x95/0xd0 [ 220.355691][ T7000] dump_stack+0x15/0x1b [ 220.355775][ T7000] dump_header+0x80/0x240 [ 220.355796][ T7000] oom_kill_process+0x295/0x350 [ 220.355823][ T7000] out_of_memory+0x97d/0xb80 [ 220.355844][ T7000] try_charge_memcg+0x62e/0xa10 [ 220.355956][ T7000] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 220.356030][ T7000] __swap_cache_prepare_and_add+0x386/0x530 [ 220.356062][ T7000] swap_cache_alloc_folio+0xa2/0x120 [ 220.356113][ T7000] swap_cluster_readahead+0x26e/0x3d0 [ 220.356143][ T7000] swapin_readahead+0xde/0x840 [ 220.356224][ T7000] ? _raw_spin_unlock+0x9/0x30 [ 220.356245][ T7000] ? swap_put_entries_cluster+0x385/0x3a0 [ 220.356342][ T7000] ? swap_put_entries_cluster+0x71/0x3a0 [ 220.356367][ T7000] ? __rcu_read_unlock+0x4e/0x70 [ 220.356387][ T7000] ? swap_cache_get_folio+0x26f/0x280 [ 220.356416][ T7000] do_swap_page+0x309/0x2210 [ 220.356443][ T7000] ? __rcu_read_lock+0x36/0x50 [ 220.356462][ T7000] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 220.356552][ T7000] handle_mm_fault+0xb40/0x3020 [ 220.356580][ T7000] ? vma_start_read+0x1c7/0x2c0 [ 220.356605][ T7000] do_user_addr_fault+0x62f/0x1050 [ 220.356633][ T7000] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 220.356738][ T7000] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 220.356760][ T7000] ? trace_page_fault_user+0x1f/0xe0 [ 220.356787][ T7000] exc_page_fault+0x62/0xa0 [ 220.356843][ T7000] asm_exc_page_fault+0x26/0x30 [ 220.356862][ T7000] RIP: 0033:0x7f3e5caa78f8 [ 220.356878][ T7000] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 220.356894][ T7000] RSP: 002b:00007ffc67a65f60 EFLAGS: 00010246 [ 220.356910][ T7000] RAX: 0000000000000000 RBX: 00005555792e5500 RCX: 00007f3e5caacfce [ 220.356952][ T7000] RDX: 00007ffc67a65fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.356964][ T7000] RBP: 00007f3e5cd67da0 R08: 0000000000000000 R09: 0000000000000000 [ 220.356977][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000035d37 [ 220.356989][ T7000] R13: 00007f3e5cd6618c R14: 0000000000035b04 R15: 00007f3e5cd66180 [ 220.357066][ T7000] [ 220.357073][ T7000] memory: usage 307200kB, limit 307200kB, failcnt 5854 [ 220.370589][ T28] audit: type=1326 audit(1772728364.447:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 220.485856][ T7000] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 220.652100][ T7000] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 220.658492][ T7007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.662447][ T7000] Memory cgroup stats for /syz1: [ 220.667321][ T28] audit: type=1326 audit(1772728364.447:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 220.696510][ T28] audit: type=1326 audit(1772728364.477:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 220.696546][ T7000] cache 0 [ 220.696554][ T7000] rss 0 [ 220.696561][ T7000] shmem 0 [ 220.735201][ T28] audit: type=1326 audit(1772728364.477:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 220.753588][ T7020] loop4: detected capacity change from 0 to 512 [ 220.758837][ T7000] mapped_file 0 [ 220.768386][ T7000] dirty 0 [ 220.771627][ T7000] writeback 0 [ 220.774984][ T7000] workingset_refault_anon 1063 [ 220.779816][ T7000] workingset_refault_file 9783 [ 220.799949][ T7000] swap 278528 [ 220.801271][ T7020] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1069: invalid indirect mapped block 256 (level 2) [ 220.806581][ T7000] swapcached 2564096 [ 220.840183][ T7020] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.840550][ T7020] EXT4-fs (loop4): 2 truncates cleaned up [ 220.855424][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 220.855444][ C0] EXT4-fs (loop4): initial error at time 1772728365: ext4_free_branches:1023: inode 11 [ 220.855478][ C0] EXT4-fs (loop4): last error at time 1772728365: ext4_free_branches:1023: inode 11 [ 220.884340][ T7000] pgpgin 137082 [ 220.893164][ T7000] pgpgout 137082 [ 220.901265][ T7000] pgfault 162065 [ 220.905259][ T7020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.919845][ T7000] pgmajfault 743 [ 220.927996][ T7000] inactive_anon 0 [ 220.936263][ T7000] active_anon 0 [ 220.943304][ T7000] inactive_file 0 [ 220.951474][ T7000] active_file 0 [ 220.958306][ T7000] unevictable 0 [ 220.966318][ T7000] hierarchical_memory_limit 314572800 [ 220.977251][ T7000] hierarchical_memsw_limit 9223372036854771712 [ 221.003582][ T7000] total_cache 0 [ 221.011040][ T7000] total_rss 0 [ 221.018834][ T7000] total_shmem 0 [ 221.025737][ T7000] total_mapped_file 0 [ 221.034401][ T7000] total_dirty 0 [ 221.041248][ T7000] total_writeback 0 [ 221.049585][ T7000] total_workingset_refault_anon 1063 [ 221.055941][ T7013] bond2: (slave dummy0): Releasing active interface [ 221.062687][ T7013] dummy0: left promiscuous mode [ 221.072422][ T7013] dummy0: left allmulticast mode [ 221.078645][ T7000] total_workingset_refault_file 9783 [ 221.098073][ T7000] total_swap 278528 [ 221.109248][ T7000] total_swapcached 2564096 [ 221.119749][ T7000] total_pgpgin 137082 [ 221.123745][ T7000] total_pgpgout 137082 [ 221.136713][ T7000] total_pgfault 162065 [ 221.145480][ T7000] total_pgmajfault 743 [ 221.149558][ T7000] total_inactive_anon 0 [ 221.161899][ T7000] total_active_anon 0 [ 221.165926][ T7000] total_inactive_file 0 [ 221.170480][ T7000] total_active_file 0 [ 221.174520][ T7000] total_unevictable 0 [ 221.178477][ T7013] bond3: (slave dummy0): making interface the new active one [ 221.178638][ T7000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1063,pid=7000,uid=0 [ 221.187212][ T7013] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 221.200969][ T7000] Memory cgroup out of memory: Killed process 7000 (syz.1.1063) total-vm:94292kB, anon-rss:1224kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 221.258222][ T7025] syzkaller1: entered promiscuous mode [ 221.263846][ T7025] syzkaller1: entered allmulticast mode [ 221.563450][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.757036][ T7048] xt_hashlimit: size too large, truncated to 1048576 [ 222.518600][ T7061] loop5: detected capacity change from 0 to 512 [ 222.559436][ T7066] loop2: detected capacity change from 0 to 256 [ 222.567541][ T7066] msdos: Bad value for 'gid' [ 222.578894][ T7066] msdos: Bad value for 'gid' [ 222.639370][ T7061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.702361][ T7061] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.835235][ T7074] loop2: detected capacity change from 0 to 136 [ 222.863429][ T7074] Attempt to read inode for relocated directory [ 223.298273][ T7079] loop4: detected capacity change from 0 to 1024 [ 223.349445][ T7079] EXT4-fs: inline encryption not supported [ 223.390838][ T7079] EXT4-fs: Ignoring removed nobh option [ 223.445410][ T7079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 223.450816][ T7085] loop3: detected capacity change from 0 to 136 [ 223.484143][ T7079] System zones: 0-1, 3-12 [ 223.508953][ T7079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.509801][ T7085] Attempt to read inode for relocated directory [ 223.535589][ T7071] syz.2.1080 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 223.580388][ T6755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.594622][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.2.1080 Not tainted syzkaller #0 PREEMPT(full) [ 223.594701][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.594715][ T7071] Call Trace: [ 223.594722][ T7071] [ 223.594730][ T7071] __dump_stack+0x1d/0x30 [ 223.594757][ T7071] dump_stack_lvl+0x95/0xd0 [ 223.594842][ T7071] dump_stack+0x15/0x1b [ 223.594862][ T7071] dump_header+0x80/0x240 [ 223.594882][ T7071] oom_kill_process+0x295/0x350 [ 223.594905][ T7071] out_of_memory+0x97d/0xb80 [ 223.594964][ T7071] try_charge_memcg+0x62e/0xa10 [ 223.595004][ T7071] obj_cgroup_charge_pages+0x23/0xc0 [ 223.595115][ T7071] __memcg_kmem_charge_page+0x9e/0x170 [ 223.595169][ T7071] __alloc_frozen_pages_noprof+0x18a/0x360 [ 223.595198][ T7071] alloc_pages_mpol+0xb3/0x260 [ 223.595222][ T7071] alloc_pages_noprof+0x8f/0x130 [ 223.595244][ T7071] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 223.595333][ T7071] __kvmalloc_node_noprof+0x3d4/0x650 [ 223.595357][ T7071] ? futex_hash_allocate+0x190/0x9d0 [ 223.595383][ T7071] ? futex_hash_allocate+0x190/0x9d0 [ 223.595427][ T7071] futex_hash_allocate+0x190/0x9d0 [ 223.595449][ T7071] ? cap_task_prctl+0x13f/0x6e0 [ 223.595471][ T7071] futex_hash_prctl+0xd8/0xf0 [ 223.595499][ T7071] __se_sys_prctl+0xa3d/0x13f0 [ 223.595528][ T7071] __x64_sys_prctl+0x67/0x80 [ 223.595553][ T7071] x64_sys_call+0x2533/0x3020 [ 223.595620][ T7071] do_syscall_64+0x12c/0x370 [ 223.595644][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.595663][ T7071] RIP: 0033:0x7f6fa79ac799 [ 223.595679][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.595694][ T7071] RSP: 002b:00007f6fa63de028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 223.595831][ T7071] RAX: ffffffffffffffda RBX: 00007f6fa7c26090 RCX: 00007f6fa79ac799 [ 223.595845][ T7071] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 223.595859][ T7071] RBP: 00007f6fa7a42bd9 R08: 0000000000000000 R09: 0000000000000000 [ 223.595931][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.595942][ T7071] R13: 00007f6fa7c26128 R14: 00007f6fa7c26090 R15: 00007fff45076608 [ 223.595959][ T7071] [ 223.596101][ T7071] memory: usage 307200kB, limit 307200kB, failcnt 4583 [ 223.950066][ T7071] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 223.957985][ T7071] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 224.009389][ T7071] Memory cgroup stats for /syz2: [ 224.009817][ T7071] cache 0 [ 224.027905][ T7071] rss 0 [ 224.037031][ T7071] shmem 0 [ 224.043317][ T7071] mapped_file 0 [ 224.050203][ T7071] dirty 0 [ 224.056404][ T7071] writeback 0 [ 224.082269][ T7071] workingset_refault_anon 839 [ 224.097880][ T7071] workingset_refault_file 5989 [ 224.116628][ T7071] swap 274432 [ 224.128829][ T7071] swapcached 1908736 [ 224.161551][ T7071] pgpgin 126787 [ 224.172692][ T7071] pgpgout 126786 [ 224.177826][ T7071] pgfault 165549 [ 224.185493][ T7096] loop5: detected capacity change from 0 to 136 [ 224.194380][ T7071] pgmajfault 507 [ 224.197929][ T7071] inactive_anon 0 [ 224.220000][ T7071] active_anon 4096 [ 224.223741][ T7071] inactive_file 0 [ 224.227368][ T7071] active_file 0 [ 224.264255][ T7071] unevictable 0 [ 224.267730][ T7071] hierarchical_memory_limit 314572800 [ 224.283406][ T7096] Attempt to read inode for relocated directory [ 224.289763][ T7071] hierarchical_memsw_limit 9223372036854771712 [ 224.304450][ T7071] total_cache 0 [ 224.342127][ T7071] total_rss 0 [ 224.349917][ T7071] total_shmem 0 [ 224.353413][ T7071] total_mapped_file 0 [ 224.369507][ T7071] total_dirty 0 [ 224.399760][ T7071] total_writeback 0 [ 224.403586][ T7071] total_workingset_refault_anon 839 [ 224.429100][ T7071] total_workingset_refault_file 5989 [ 224.449279][ T7071] total_swap 274432 [ 224.459342][ T7071] total_swapcached 1908736 [ 224.469420][ T7071] total_pgpgin 126787 [ 224.479668][ T7071] total_pgpgout 126786 [ 224.489795][ T7071] total_pgfault 165549 [ 224.493868][ T7071] total_pgmajfault 507 [ 224.497916][ T7071] total_inactive_anon 0 [ 224.512294][ T7071] total_active_anon 4096 [ 224.522352][ T7071] total_inactive_file 0 [ 224.526505][ T7071] total_active_file 0 [ 224.539770][ T7071] total_unevictable 0 [ 224.547120][ T7071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1080,pid=7069,uid=0 [ 224.579801][ T7071] Memory cgroup out of memory: Killed process 7069 (syz.2.1080) total-vm:100576kB, anon-rss:1228kB, file-rss:26500kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 224.942877][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.965401][ T7098] loop3: detected capacity change from 0 to 1024 [ 224.989645][ T7098] EXT4-fs: inline encryption not supported [ 225.040328][ T7098] EXT4-fs: Ignoring removed nobh option [ 225.107746][ T7098] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 225.229788][ T7098] System zones: 0-1, 3-12 [ 225.252510][ T7098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.499635][ T7113] loop2: detected capacity change from 0 to 256 [ 225.568029][ T7113] msdos: Bad value for 'gid' [ 225.615906][ T7113] msdos: Bad value for 'gid' [ 226.021661][ T7122] IPv6: sit2: Disabled Multicast RS [ 226.027964][ T7122] sit2: entered allmulticast mode [ 226.532657][ T7131] syzkaller0: entered promiscuous mode [ 226.538358][ T7131] syzkaller0: entered allmulticast mode [ 226.767917][ T7140] loop2: detected capacity change from 0 to 136 [ 226.838574][ T7140] Attempt to read inode for relocated directory [ 226.941624][ T7143] loop1: detected capacity change from 0 to 136 [ 227.111744][ T7143] Attempt to read inode for relocated directory [ 227.462428][ T7148] Attempt to read inode for relocated directory [ 227.623026][ T7147] syz.5.1098 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 227.639789][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.5.1098 Not tainted syzkaller #0 PREEMPT(full) [ 227.639839][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.639850][ T7147] Call Trace: [ 227.639857][ T7147] [ 227.639884][ T7147] __dump_stack+0x1d/0x30 [ 227.639910][ T7147] dump_stack_lvl+0x95/0xd0 [ 227.639979][ T7147] dump_stack+0x15/0x1b [ 227.640013][ T7147] dump_header+0x80/0x240 [ 227.640035][ T7147] oom_kill_process+0x295/0x350 [ 227.640055][ T7147] out_of_memory+0x97d/0xb80 [ 227.640074][ T7147] try_charge_memcg+0x62e/0xa10 [ 227.640181][ T7147] obj_cgroup_charge_pages+0x23/0xc0 [ 227.640203][ T7147] __memcg_kmem_charge_page+0x9e/0x170 [ 227.640229][ T7147] __alloc_frozen_pages_noprof+0x18a/0x360 [ 227.640402][ T7147] alloc_pages_mpol+0xb3/0x260 [ 227.640430][ T7147] alloc_pages_noprof+0x8f/0x130 [ 227.640453][ T7147] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 227.640490][ T7147] __kvmalloc_node_noprof+0x3d4/0x650 [ 227.640584][ T7147] ? futex_hash_allocate+0x190/0x9d0 [ 227.640606][ T7147] ? futex_hash_allocate+0x190/0x9d0 [ 227.640684][ T7147] futex_hash_allocate+0x190/0x9d0 [ 227.640710][ T7147] ? cap_task_prctl+0x13f/0x6e0 [ 227.640793][ T7147] futex_hash_prctl+0xd8/0xf0 [ 227.640815][ T7147] __se_sys_prctl+0xa3d/0x13f0 [ 227.640902][ T7147] __x64_sys_prctl+0x67/0x80 [ 227.640928][ T7147] x64_sys_call+0x2533/0x3020 [ 227.640949][ T7147] do_syscall_64+0x12c/0x370 [ 227.641045][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.641124][ T7147] RIP: 0033:0x7f9b6f9ac799 [ 227.641164][ T7147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.641183][ T7147] RSP: 002b:00007f9b6e3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 227.641275][ T7147] RAX: ffffffffffffffda RBX: 00007f9b6fc26090 RCX: 00007f9b6f9ac799 [ 227.641309][ T7147] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 227.641373][ T7147] RBP: 00007f9b6fa42bd9 R08: 0000000000000000 R09: 0000000000000000 [ 227.641384][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.641395][ T7147] R13: 00007f9b6fc26128 R14: 00007f9b6fc26090 R15: 00007fff8d10c218 [ 227.641428][ T7147] [ 227.641438][ T7147] memory: usage 307180kB, limit 307200kB, failcnt 188 [ 227.951638][ T7147] memory+swap: usage 76748kB, limit 9007199254740988kB, failcnt 0 [ 227.980507][ T7147] kmem: usage 40904kB, limit 9007199254740988kB, failcnt 0 [ 227.987718][ T7147] Memory cgroup stats for /syz5: [ 227.987993][ T7147] cache 4096 [ 228.009771][ T7147] rss 32768 [ 228.012998][ T7147] shmem 0 [ 228.015926][ T7147] mapped_file 0 [ 228.019417][ T7147] dirty 0 [ 228.035551][ T7147] writeback 0 [ 228.038910][ T7147] workingset_refault_anon 32 [ 228.057162][ T7147] workingset_refault_file 0 [ 228.063119][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.073069][ T7147] swap 184320 [ 228.076468][ T7147] swapcached 352256 [ 228.080437][ T7147] pgpgin 10708 [ 228.083881][ T7147] pgpgout 10686 [ 228.087337][ T7147] pgfault 13079 [ 228.099232][ T7147] pgmajfault 17 [ 228.129144][ T7147] inactive_anon 53248 [ 228.134674][ T7147] active_anon 32768 [ 228.138721][ T7147] inactive_file 4096 [ 228.164401][ T7147] active_file 0 [ 228.167906][ T7147] unevictable 0 [ 228.196698][ T7147] hierarchical_memory_limit 314572800 [ 228.216952][ T7147] hierarchical_memsw_limit 9223372036854771712 [ 228.237304][ T7147] total_cache 4096 [ 228.247418][ T7147] total_rss 32768 [ 228.267647][ T7147] total_shmem 0 [ 228.271152][ T7147] total_mapped_file 0 [ 228.275122][ T7147] total_dirty 0 [ 228.291919][ T7164] set_capacity_and_notify: 1 callbacks suppressed [ 228.291933][ T7164] loop3: detected capacity change from 0 to 512 [ 228.314625][ T7147] total_writeback 0 [ 228.339828][ T7147] total_workingset_refault_anon 32 [ 228.345485][ T7147] total_workingset_refault_file 0 [ 228.351617][ T7164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.364114][ T7164] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.375594][ T7164] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 97 vs 96 free clusters [ 228.389876][ T7164] __quota_error: 22 callbacks suppressed [ 228.389927][ T7164] Quota error (device loop3): write_blk: dquota write failed [ 228.402924][ T7164] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 228.411963][ T7164] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 228.421827][ T7164] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1102: Failed to acquire dquot type 1 [ 228.434479][ T7147] total_swap 184320 [ 228.443741][ T7147] total_swapcached 352256 [ 228.468342][ T7147] total_pgpgin 10708 [ 228.481075][ T7147] total_pgpgout 10686 [ 228.489816][ T7147] total_pgfault 13079 [ 228.493911][ T7147] total_pgmajfault 17 [ 228.498195][ T7147] total_inactive_anon 53248 [ 228.507093][ T7147] total_active_anon 32768 [ 228.517092][ T7147] total_inactive_file 4096 [ 228.527059][ T7147] total_active_file 0 [ 228.536245][ T7147] total_unevictable 0 [ 228.544354][ T7147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1098,pid=7145,uid=0 [ 228.569934][ T7147] Memory cgroup out of memory: Killed process 7147 (syz.5.1098) total-vm:94292kB, anon-rss:1340kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 228.698478][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.147313][ T7138] syz.1.1097 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 229.162763][ T7138] CPU: 1 UID: 0 PID: 7138 Comm: syz.1.1097 Not tainted syzkaller #0 PREEMPT(full) [ 229.162790][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.162803][ T7138] Call Trace: [ 229.162810][ T7138] [ 229.162817][ T7138] __dump_stack+0x1d/0x30 [ 229.162845][ T7138] dump_stack_lvl+0x95/0xd0 [ 229.162874][ T7138] dump_stack+0x15/0x1b [ 229.162895][ T7138] dump_header+0x80/0x240 [ 229.162916][ T7138] oom_kill_process+0x295/0x350 [ 229.162935][ T7138] out_of_memory+0x97d/0xb80 [ 229.163019][ T7138] try_charge_memcg+0x62e/0xa10 [ 229.163052][ T7138] obj_cgroup_charge_pages+0x23/0xc0 [ 229.163081][ T7138] __memcg_kmem_charge_page+0x9e/0x170 [ 229.163109][ T7138] __alloc_frozen_pages_noprof+0x18a/0x360 [ 229.163192][ T7138] alloc_pages_mpol+0xb3/0x260 [ 229.163216][ T7138] alloc_pages_noprof+0x8f/0x130 [ 229.163277][ T7138] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 229.163314][ T7138] __kvmalloc_node_noprof+0x3d4/0x650 [ 229.163336][ T7138] ? futex_hash_allocate+0x190/0x9d0 [ 229.163389][ T7138] ? futex_hash_allocate+0x190/0x9d0 [ 229.163482][ T7138] futex_hash_allocate+0x190/0x9d0 [ 229.163509][ T7138] ? cap_task_prctl+0x13f/0x6e0 [ 229.163554][ T7138] futex_hash_prctl+0xd8/0xf0 [ 229.163579][ T7138] __se_sys_prctl+0xa3d/0x13f0 [ 229.163614][ T7138] __x64_sys_prctl+0x67/0x80 [ 229.163686][ T7138] x64_sys_call+0x2533/0x3020 [ 229.163712][ T7138] do_syscall_64+0x12c/0x370 [ 229.163788][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.163805][ T7138] RIP: 0033:0x7f3e5caec799 [ 229.163819][ T7138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.163834][ T7138] RSP: 002b:00007f3e5b547028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 229.163853][ T7138] RAX: ffffffffffffffda RBX: 00007f3e5cd65fa0 RCX: 00007f3e5caec799 [ 229.163882][ T7138] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 229.163896][ T7138] RBP: 00007f3e5cb82bd9 R08: 0000000000000000 R09: 0000000000000000 [ 229.163913][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.163926][ T7138] R13: 00007f3e5cd66038 R14: 00007f3e5cd65fa0 R15: 00007ffc67a65e78 [ 229.163947][ T7138] [ 229.164018][ T7138] memory: usage 307200kB, limit 307200kB, failcnt 6119 [ 229.391547][ T7138] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 229.399542][ T7138] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 229.406992][ T7138] Memory cgroup stats for /syz1: [ 229.407276][ T7138] cache 0 [ 229.415903][ T7138] rss 0 [ 229.418779][ T7138] shmem 0 [ 229.459703][ T7138] mapped_file 0 [ 229.467017][ T7138] dirty 0 [ 229.473412][ T7138] writeback 0 [ 229.512136][ T7138] workingset_refault_anon 1133 [ 229.519182][ T7138] workingset_refault_file 10043 [ 229.526340][ T7138] swap 278528 [ 229.531949][ T7138] swapcached 2740224 [ 229.538088][ T7138] pgpgin 144526 [ 229.543773][ T7138] pgpgout 144526 [ 229.548506][ T7138] pgfault 170704 [ 229.554376][ T7138] pgmajfault 774 [ 229.566374][ T7138] inactive_anon 0 [ 229.572296][ T7138] active_anon 0 [ 229.576882][ T7138] inactive_file 0 [ 229.582821][ T7138] active_file 0 [ 229.597770][ T7138] unevictable 0 [ 229.603505][ T7138] hierarchical_memory_limit 314572800 [ 229.613395][ T7138] hierarchical_memsw_limit 9223372036854771712 [ 229.625024][ T7138] total_cache 0 [ 229.633818][ T7138] total_rss 0 [ 229.639729][ T7138] total_shmem 0 [ 229.647346][ T7138] total_mapped_file 0 [ 229.654723][ T7138] total_dirty 0 [ 229.661532][ T7138] total_writeback 0 [ 229.669900][ T7138] total_workingset_refault_anon 1133 [ 229.679611][ T7138] total_workingset_refault_file 10043 [ 229.699758][ T7138] total_swap 278528 [ 229.703576][ T7138] total_swapcached 2740224 [ 229.708050][ T7138] total_pgpgin 144526 [ 229.739764][ T7138] total_pgpgout 144526 [ 229.743849][ T7138] total_pgfault 170704 [ 229.747938][ T7138] total_pgmajfault 774 [ 229.759792][ T7138] total_inactive_anon 0 [ 229.763966][ T7138] total_active_anon 0 [ 229.767942][ T7138] total_inactive_file 0 [ 229.779783][ T7138] total_active_file 0 [ 229.783787][ T7138] total_unevictable 0 [ 229.787768][ T7138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1097,pid=7136,uid=0 [ 229.827324][ T7138] Memory cgroup out of memory: Killed process 7136 (syz.1.1097) total-vm:96340kB, anon-rss:1224kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 230.156936][ T7196] IPv6: sit1: Disabled Multicast RS [ 230.163204][ T7196] sit1: entered allmulticast mode [ 230.847057][ T7193] syzkaller0: entered promiscuous mode [ 230.871758][ T7193] syzkaller0: entered allmulticast mode [ 232.217169][ T7216] xt_hashlimit: size too large, truncated to 1048576 [ 232.233720][ T7220] loop3: detected capacity change from 0 to 136 [ 232.266712][ T7220] Attempt to read inode for relocated directory [ 232.429548][ T7226] tipc: Started in network mode [ 232.434510][ T7226] tipc: Node identity 4e8677c80045, cluster identity 4711 [ 232.441775][ T7226] tipc: Enabled bearer , priority 0 [ 232.525182][ T7231] loop4: detected capacity change from 0 to 136 [ 232.537414][ T7231] Attempt to read inode for relocated directory [ 232.686621][ T7225] tipc: Disabling bearer [ 232.729276][ T7233] loop2: detected capacity change from 0 to 128 [ 232.802378][ T7227] syz.4.1121 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 232.820419][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.4.1121 Not tainted syzkaller #0 PREEMPT(full) [ 232.820460][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.820473][ T7227] Call Trace: [ 232.820479][ T7227] [ 232.820487][ T7227] __dump_stack+0x1d/0x30 [ 232.820517][ T7227] dump_stack_lvl+0x95/0xd0 [ 232.820537][ T7227] dump_stack+0x15/0x1b [ 232.820575][ T7227] dump_header+0x80/0x240 [ 232.820598][ T7227] oom_kill_process+0x295/0x350 [ 232.820620][ T7227] out_of_memory+0x97d/0xb80 [ 232.820643][ T7227] try_charge_memcg+0x62e/0xa10 [ 232.820750][ T7227] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 232.820777][ T7227] __swap_cache_prepare_and_add+0x386/0x530 [ 232.820810][ T7227] swap_cache_alloc_folio+0xa2/0x120 [ 232.820922][ T7227] swap_cluster_readahead+0x36b/0x3d0 [ 232.820954][ T7227] swapin_readahead+0xde/0x840 [ 232.820983][ T7227] ? _raw_spin_unlock+0x9/0x30 [ 232.821047][ T7227] ? swap_put_entries_cluster+0x385/0x3a0 [ 232.821139][ T7227] ? swap_put_entries_cluster+0x71/0x3a0 [ 232.821163][ T7227] ? __rcu_read_unlock+0x4e/0x70 [ 232.821236][ T7227] ? swap_cache_get_folio+0x26f/0x280 [ 232.821262][ T7227] do_swap_page+0x309/0x2210 [ 232.821306][ T7227] ? css_rstat_updated+0xbb/0x280 [ 232.821389][ T7227] ? __rcu_read_lock+0x36/0x50 [ 232.821406][ T7227] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 232.821440][ T7227] handle_mm_fault+0xb40/0x3020 [ 232.821619][ T7227] ? vma_start_read+0x1c7/0x2c0 [ 232.821646][ T7227] do_user_addr_fault+0x62f/0x1050 [ 232.821676][ T7227] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 232.821774][ T7227] ? trace_page_fault_user+0x1f/0xe0 [ 232.821804][ T7227] exc_page_fault+0x62/0xa0 [ 232.821831][ T7227] asm_exc_page_fault+0x26/0x30 [ 232.821851][ T7227] RIP: 0033:0x7fd29a15cfa0 [ 232.821866][ T7227] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 232.821891][ T7227] RSP: 002b:00007ffe72b875e8 EFLAGS: 00010246 [ 232.821909][ T7227] RAX: 0000000000000000 RBX: 000055556a4e2500 RCX: 0000000000000000 [ 232.821923][ T7227] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 000055556a4e2808 [ 232.821937][ T7227] RBP: 00007fd29a417da0 R08: 00007ffe72b87640 R09: 0000000000000000 [ 232.821951][ T7227] R10: 0000000000000000 R11: 000055556a4e2808 R12: 0000000000038f0f [ 232.821964][ T7227] R13: 00007fd29a41618c R14: 0000000000038c8a R15: 00007ffe72b87770 [ 232.822000][ T7227] [ 232.822035][ T7227] memory: usage 307200kB, limit 307200kB, failcnt 2226 [ 232.830061][ T7233] EXT4-fs: Ignoring removed nobh option [ 232.859516][ T7227] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 233.082554][ T7227] kmem: usage 105488kB, limit 9007199254740988kB, failcnt 0 [ 233.083587][ T7233] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.090250][ T7227] Memory cgroup stats for /syz4: [ 233.102311][ T7227] cache 24576 [ 233.111309][ T7227] rss 0 [ 233.114061][ T7227] shmem 0 [ 233.116986][ T7227] mapped_file 0 [ 233.120461][ T7227] dirty 0 [ 233.125074][ T7227] writeback 0 [ 233.128948][ T7233] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.139926][ T7227] workingset_refault_anon 548 [ 233.145913][ T7227] workingset_refault_file 5189 [ 233.177836][ T7227] swap 274432 [ 233.183014][ T28] audit: type=1400 audit(1772728377.347:817): avc: denied { write } for pid=7232 comm="syz.2.1122" path="/243/mnt/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.187161][ T7241] loop1: detected capacity change from 0 to 1024 [ 233.223750][ T7227] swapcached 1200128 [ 233.229636][ T7227] pgpgin 139642 [ 233.239800][ T7227] pgpgout 139636 [ 233.243563][ T7227] pgfault 176933 [ 233.247101][ T7227] pgmajfault 396 [ 233.261779][ T7227] inactive_anon 0 [ 233.266240][ T7241] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 233.277860][ T7227] active_anon 0 [ 233.286114][ T7227] inactive_file 0 [ 233.287335][ T28] audit: type=1400 audit(1772728377.437:818): avc: denied { append } for pid=7232 comm="syz.2.1122" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 233.293226][ T7241] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 233.323013][ T7227] active_file 4096 [ 233.339871][ T7241] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: comm syz.1.1124: inode #4294967295: comm syz.1.1124: iget: illegal inode # [ 233.353462][ T7227] unevictable 0 [ 233.358622][ T7241] loop1: lost filesystem error report for type 5 error -117 [ 233.358932][ T7227] hierarchical_memory_limit 314572800 [ 233.359775][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 233.378298][ C1] EXT4-fs (loop1): initial error at time 1772728377: ext4_get_journal_inode:5863 [ 233.379896][ T7227] hierarchical_memsw_limit 9223372036854771712 [ 233.387481][ C1] EXT4-fs (loop1): last error at time 1772728377: ext4_get_journal_inode:5863 [ 233.404425][ T7241] EXT4-fs (loop1): no journal found [ 233.414456][ T7241] EXT4-fs (loop1): can't get journal size [ 233.419749][ T7227] total_cache 24576 [ 233.424028][ T7227] total_rss 0 [ 233.429054][ T7227] total_shmem 0 [ 233.431164][ T7241] EXT4-fs (loop1): failed to initialize system zone (-22) [ 233.439956][ T7241] EXT4-fs (loop1): mount failed [ 233.443460][ T7227] total_mapped_file 0 [ 233.462310][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.465366][ T7227] total_dirty 0 [ 233.489340][ T7227] total_writeback 0 [ 233.497494][ T7227] total_workingset_refault_anon 548 [ 233.506964][ T7227] total_workingset_refault_file 5189 [ 233.512663][ T7227] total_swap 274432 [ 233.521348][ T7227] total_swapcached 1200128 [ 233.525845][ T7227] total_pgpgin 139642 [ 233.533765][ T7250] syzkaller0: entered promiscuous mode [ 233.548580][ T7227] total_pgpgout 139636 [ 233.553058][ T7250] syzkaller0: entered allmulticast mode [ 233.558770][ T7227] total_pgfault 176933 [ 233.563173][ T7227] total_pgmajfault 396 [ 233.568065][ T7227] total_inactive_anon 0 [ 233.572874][ T7259] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 233.583942][ T7227] total_active_anon 0 [ 233.588073][ T7227] total_inactive_file 0 [ 233.600771][ T7227] total_active_file 4096 [ 233.605960][ T7227] total_unevictable 0 [ 233.606068][ T7259] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 233.618208][ T7227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1121,pid=7227,uid=0 [ 233.633254][ T7259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1130'. [ 233.643802][ T7227] Memory cgroup out of memory: Killed process 7227 (syz.4.1121) total-vm:96340kB, anon-rss:1244kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 233.683449][ T7264] xt_hashlimit: size too large, truncated to 1048576 [ 233.747274][ T7270] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 233.761495][ T7270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.781144][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1132'. [ 233.916474][ T7280] loop4: detected capacity change from 0 to 136 [ 233.953976][ T7280] Attempt to read inode for relocated directory [ 234.006019][ T7279] loop3: detected capacity change from 0 to 512 [ 234.050317][ T7282] tipc: Enabled bearer , priority 0 [ 234.075974][ T7281] tipc: Disabling bearer [ 234.114879][ T7286] loop5: detected capacity change from 0 to 512 [ 234.157006][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.184054][ T7288] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 234.215180][ T7279] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.217855][ T7286] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 234.244217][ T7286] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 234.248593][ T7288] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.284122][ T7288] bond5: (slave dummy0): Releasing active interface [ 234.293382][ T7286] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1136: Corrupt directory, running e2fsck is recommended [ 234.309343][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.335178][ T7288] bond6: (slave dummy0): making interface the new active one [ 234.344343][ T7286] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 234.354819][ T7292] loop3: detected capacity change from 0 to 512 [ 234.362662][ T7286] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1136: corrupted in-inode xattr: invalid ea_ino [ 234.377170][ T7288] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 234.390943][ T7292] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 234.439956][ T7292] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 234.450268][ T7286] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.459733][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 234.475319][ C1] EXT4-fs (loop5): initial error at time 1772728378: ext4_iget_extra_inode:5025: inode 15 [ 234.485313][ C1] EXT4-fs (loop5): last error at time 1772728378: ext4_iget_extra_inode:5025: inode 15 [ 234.495792][ T7286] EXT4-fs (loop5): Remounting filesystem read-only [ 234.495881][ T7292] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1138: Corrupt directory, running e2fsck is recommended [ 234.505812][ T7286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.521728][ T7292] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 234.539892][ T7292] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1138: corrupted in-inode xattr: invalid ea_ino [ 234.560580][ T7292] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.560781][ T7292] EXT4-fs (loop3): Remounting filesystem read-only [ 234.560817][ T7286] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 234.569942][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 234.569964][ C0] EXT4-fs (loop3): initial error at time 1772728378: ext4_iget_extra_inode:5025 [ 234.587958][ T7286] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 234.594309][ C0] : inode 15 [ 234.616598][ C0] EXT4-fs (loop3): last error at time 1772728378: ext4_iget_extra_inode:5025: inode 15 [ 234.632748][ T7292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.641250][ T7286] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1136: Corrupt directory, running e2fsck is recommended [ 234.679347][ T7274] syz.4.1133 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 234.694710][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.4.1133 Not tainted syzkaller #0 PREEMPT(full) [ 234.694739][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.694751][ T7274] Call Trace: [ 234.694759][ T7274] [ 234.694811][ T7274] __dump_stack+0x1d/0x30 [ 234.694835][ T7274] dump_stack_lvl+0x95/0xd0 [ 234.694868][ T7274] dump_stack+0x15/0x1b [ 234.694888][ T7274] dump_header+0x80/0x240 [ 234.694932][ T7274] oom_kill_process+0x295/0x350 [ 234.694950][ T7274] out_of_memory+0x97d/0xb80 [ 234.695023][ T7274] try_charge_memcg+0x62e/0xa10 [ 234.695053][ T7274] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 234.695082][ T7274] __swap_cache_prepare_and_add+0x386/0x530 [ 234.695116][ T7274] swap_cache_alloc_folio+0xa2/0x120 [ 234.695208][ T7274] swap_cluster_readahead+0x26e/0x3d0 [ 234.695239][ T7274] swapin_readahead+0xde/0x840 [ 234.695314][ T7274] ? _raw_spin_unlock+0x9/0x30 [ 234.695335][ T7274] ? swap_put_entries_cluster+0x385/0x3a0 [ 234.695361][ T7274] ? swap_put_entries_cluster+0x71/0x3a0 [ 234.695464][ T7274] ? __rcu_read_unlock+0x4e/0x70 [ 234.695485][ T7274] ? swap_cache_get_folio+0x26f/0x280 [ 234.695512][ T7274] do_swap_page+0x309/0x2210 [ 234.695540][ T7274] ? css_rstat_updated+0xbb/0x280 [ 234.695621][ T7274] ? __rcu_read_lock+0x36/0x50 [ 234.695638][ T7274] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 234.695663][ T7274] handle_mm_fault+0xb40/0x3020 [ 234.695763][ T7274] ? vma_start_read+0x1c7/0x2c0 [ 234.695791][ T7274] do_user_addr_fault+0x62f/0x1050 [ 234.695845][ T7274] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 234.695893][ T7274] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 234.695915][ T7274] ? trace_page_fault_user+0x1f/0xe0 [ 234.695976][ T7274] exc_page_fault+0x62/0xa0 [ 234.696041][ T7274] asm_exc_page_fault+0x26/0x30 [ 234.696062][ T7274] RIP: 0033:0x7fd29a1578f8 [ 234.696077][ T7274] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 234.696091][ T7274] RSP: 002b:00007ffe72b875f0 EFLAGS: 00010246 [ 234.696170][ T7274] RAX: 0000000000000000 RBX: 000055556a4e2500 RCX: 00007fd29a15cfce [ 234.696182][ T7274] RDX: 00007ffe72b87640 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.696192][ T7274] RBP: 00007fd29a417da0 R08: 0000000000000000 R09: 0000000000000000 [ 234.696203][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003947c [ 234.696214][ T7274] R13: 00007fd29a41618c R14: 0000000000039258 R15: 00007fd29a416180 [ 234.696231][ T7274] [ 234.696239][ T7274] memory: usage 307200kB, limit 307200kB, failcnt 2699 [ 234.727146][ T7303] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 234.735217][ T7303] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 234.771230][ T7292] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 234.777003][ T7274] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 234.786034][ T7292] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 234.814160][ T7303] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1136: Corrupt directory, running e2fsck is recommended [ 234.817880][ T7292] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1138: Corrupt directory, running e2fsck is recommended [ 234.847206][ T7274] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 234.907538][ T7292] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 235.045842][ T7274] Memory cgroup stats for /syz4: [ 235.046046][ T7274] cache 4096 [ 235.054484][ T7274] rss 4096 [ 235.057218][ T7312] loop2: detected capacity change from 0 to 136 [ 235.057504][ T7274] shmem 0 [ 235.057512][ T7274] mapped_file 4096 [ 235.070961][ T7274] dirty 0 [ 235.074105][ T7274] writeback 0 [ 235.074483][ T6755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.077420][ T7274] workingset_refault_anon 641 [ 235.094160][ T7292] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 235.114015][ T7274] workingset_refault_file 5882 [ 235.118912][ T7274] swap 266240 [ 235.122486][ T7274] swapcached 1376256 [ 235.126385][ T7274] pgpgin 140532 [ 235.130576][ T7292] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1138: Corrupt directory, running e2fsck is recommended [ 235.143702][ T7312] Attempt to read inode for relocated directory [ 235.151605][ T7274] pgpgout 140529 [ 235.155197][ T7274] pgfault 177242 [ 235.158743][ T7274] pgmajfault 456 [ 235.163920][ T7274] inactive_anon 0 [ 235.168083][ T28] audit: type=1400 audit(1772728379.327:819): avc: denied { connect } for pid=7313 comm="syz.5.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.188350][ T7274] active_anon 4096 [ 235.192730][ T7274] inactive_file 0 [ 235.196607][ T7274] active_file 4096 [ 235.200687][ T7314] loop5: detected capacity change from 0 to 512 [ 235.202433][ T7274] unevictable 0 [ 235.211037][ T7274] hierarchical_memory_limit 314572800 [ 235.216413][ T7274] hierarchical_memsw_limit 9223372036854771712 [ 235.222888][ T7274] total_cache 4096 [ 235.224177][ T7314] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1143: bg 0: block 104: invalid block bitmap [ 235.226613][ T7274] total_rss 4096 [ 235.226623][ T7274] total_shmem 0 [ 235.226630][ T7274] total_mapped_file 4096 [ 235.226638][ T7274] total_dirty 0 [ 235.239737][ T7309] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 235.243247][ T7274] total_writeback 0 [ 235.259508][ T7314] loop5: lost filesystem error report for type 5 error -117 [ 235.268546][ T7274] total_workingset_refault_anon 641 [ 235.271427][ T7309] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 235.276865][ T7274] total_workingset_refault_file 5882 [ 235.297247][ T7274] total_swap 266240 [ 235.301349][ T7274] total_swapcached 1376256 [ 235.305954][ T7274] total_pgpgin 140532 [ 235.307712][ T7314] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 235.309948][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 235.309964][ C0] EXT4-fs (loop5): initial error at time 1772728379: ext4_validate_block_bitmap:432 [ 235.309985][ C0] EXT4-fs (loop5): last error at time 1772728379: ext4_validate_block_bitmap:432 [ 235.310069][ T7274] total_pgpgout 140529 [ 235.347711][ T7274] total_pgfault 177242 [ 235.351870][ T7274] total_pgmajfault 456 [ 235.355921][ T7274] total_inactive_anon 0 [ 235.360110][ T7274] total_active_anon 4096 [ 235.361130][ T7314] loop5: lost filesystem error report for type 5 error -117 [ 235.364364][ T7274] total_inactive_file 0 [ 235.364375][ T7274] total_active_file 4096 [ 235.364383][ T7274] total_unevictable 0 [ 235.384195][ T7274] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1133,pid=7274,uid=0 [ 235.398857][ T7274] Memory cgroup out of memory: Killed process 7274 (syz.4.1133) total-vm:94292kB, anon-rss:1224kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 235.419813][ T7309] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1138: Corrupt directory, running e2fsck is recommended [ 235.454625][ T7317] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 235.464217][ T7314] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1143: invalid indirect mapped block 1 (level 1) [ 235.492662][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1144'. [ 235.508066][ T7317] bond6: (slave dummy0): Releasing active interface [ 235.514782][ T7314] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 235.515011][ T7314] EXT4-fs (loop5): 1 truncate cleaned up [ 235.583175][ T7314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.610407][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.738753][ T7323] xt_hashlimit: size too large, truncated to 1048576 [ 235.760431][ T6755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.935049][ T7326] loop1: detected capacity change from 0 to 512 [ 235.973382][ T7331] loop4: detected capacity change from 0 to 512 [ 236.058640][ T7338] loop5: detected capacity change from 0 to 136 [ 236.087657][ T7335] loop2: detected capacity change from 0 to 512 [ 236.101244][ T7326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.132569][ T7326] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.144565][ T7338] Attempt to read inode for relocated directory [ 236.169122][ T7331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.246130][ T7331] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.265397][ T7335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.300056][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.310868][ T7332] syz.5.1149 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 236.335702][ T7335] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.385399][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.5.1149 Not tainted syzkaller #0 PREEMPT(full) [ 236.385426][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.385439][ T7332] Call Trace: [ 236.385446][ T7332] [ 236.385453][ T7332] __dump_stack+0x1d/0x30 [ 236.385482][ T7332] dump_stack_lvl+0x95/0xd0 [ 236.385536][ T7332] dump_stack+0x15/0x1b [ 236.385553][ T7332] dump_header+0x80/0x240 [ 236.385590][ T7332] oom_kill_process+0x295/0x350 [ 236.385628][ T7332] out_of_memory+0x97d/0xb80 [ 236.385651][ T7332] try_charge_memcg+0x62e/0xa10 [ 236.385684][ T7332] obj_cgroup_charge_pages+0x23/0xc0 [ 236.385772][ T7332] __memcg_kmem_charge_page+0x9e/0x170 [ 236.385799][ T7332] __alloc_frozen_pages_noprof+0x18a/0x360 [ 236.385871][ T7332] alloc_pages_mpol+0xb3/0x260 [ 236.385897][ T7332] alloc_pages_noprof+0x8f/0x130 [ 236.385947][ T7332] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 236.385982][ T7332] __kvmalloc_node_noprof+0x3d4/0x650 [ 236.386085][ T7332] ? futex_hash_allocate+0x190/0x9d0 [ 236.386113][ T7332] ? futex_hash_allocate+0x190/0x9d0 [ 236.386277][ T7332] futex_hash_allocate+0x190/0x9d0 [ 236.386305][ T7332] ? cap_task_prctl+0x13f/0x6e0 [ 236.386327][ T7332] futex_hash_prctl+0xd8/0xf0 [ 236.386352][ T7332] __se_sys_prctl+0xa3d/0x13f0 [ 236.386395][ T7332] __x64_sys_prctl+0x67/0x80 [ 236.386415][ T7332] x64_sys_call+0x2533/0x3020 [ 236.386499][ T7332] do_syscall_64+0x12c/0x370 [ 236.386521][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.386541][ T7332] RIP: 0033:0x7f9b6f9ac799 [ 236.386559][ T7332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.386575][ T7332] RSP: 002b:00007f9b6e3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 236.386655][ T7332] RAX: ffffffffffffffda RBX: 00007f9b6fc26090 RCX: 00007f9b6f9ac799 [ 236.386670][ T7332] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 236.386684][ T7332] RBP: 00007f9b6fa42bd9 R08: 0000000000000000 R09: 0000000000000000 [ 236.386697][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.386784][ T7332] R13: 00007f9b6fc26128 R14: 00007f9b6fc26090 R15: 00007fff8d10c218 [ 236.386861][ T7332] [ 236.386868][ T7332] memory: usage 307200kB, limit 307200kB, failcnt 373 [ 236.660008][ T7332] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 236.689766][ T7332] kmem: usage 295600kB, limit 9007199254740988kB, failcnt 0 [ 236.697079][ T7332] Memory cgroup stats for /syz5: [ 236.697310][ T7332] cache 0 [ 236.729962][ T7332] rss 4096 [ 236.733122][ T7332] shmem 0 [ 236.736123][ T7332] mapped_file 0 [ 236.739576][ T7332] dirty 0 [ 236.746378][ T7360] Attempt to read inode for relocated directory [ 236.772471][ T7332] writeback 0 [ 236.779777][ T7332] workingset_refault_anon 121 [ 236.784461][ T7332] workingset_refault_file 0 [ 236.829640][ T7332] swap 266240 [ 236.839800][ T7332] swapcached 409600 [ 236.843644][ T7332] pgpgin 19965 [ 236.847012][ T7332] pgpgout 19962 [ 236.875202][ T7332] pgfault 22992 [ 236.878720][ T7332] pgmajfault 48 [ 236.921211][ T7332] inactive_anon 4096 [ 236.937294][ T7332] active_anon 8192 [ 236.961734][ T7332] inactive_file 0 [ 236.975543][ T7332] active_file 0 [ 236.988800][ T7332] unevictable 0 [ 237.003823][ T7332] hierarchical_memory_limit 314572800 [ 237.019038][ T7332] hierarchical_memsw_limit 9223372036854771712 [ 237.037514][ T7332] total_cache 0 [ 237.056959][ T7332] total_rss 4096 [ 237.067130][ T7332] total_shmem 0 [ 237.082757][ T7332] total_mapped_file 0 [ 237.110416][ T7332] total_dirty 0 [ 237.113925][ T7332] total_writeback 0 [ 237.117747][ T7332] total_workingset_refault_anon 121 [ 237.148185][ T7332] total_workingset_refault_file 0 [ 237.158599][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.168552][ T7332] total_swap 266240 [ 237.178445][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.187650][ T7332] total_swapcached 409600 [ 237.197817][ T7332] total_pgpgin 19965 [ 237.208085][ T7332] total_pgpgout 19962 [ 237.218541][ T7332] total_pgfault 22992 [ 237.223058][ T7332] total_pgmajfault 48 [ 237.227055][ T7332] total_inactive_anon 4096 [ 237.246941][ T7332] total_active_anon 8192 [ 237.259870][ T7332] total_inactive_file 0 [ 237.264070][ T7332] total_active_file 0 [ 237.278338][ T7332] total_unevictable 0 [ 237.283196][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 237.299844][ T7332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1149,pid=7328,uid=0 [ 237.333902][ T7332] Memory cgroup out of memory: Killed process 7328 (syz.5.1149) total-vm:100576kB, anon-rss:1228kB, file-rss:26408kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 237.525859][ T7376] xt_hashlimit: size too large, truncated to 1048576 [ 237.975936][ T7380] syzkaller0: entered promiscuous mode [ 237.981492][ T7380] syzkaller0: entered allmulticast mode [ 238.197051][ T7391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.214678][ T7391] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.230919][ T28] audit: type=1326 audit(1772728382.397:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.231061][ T28] audit: type=1326 audit(1772728382.397:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.231227][ T28] audit: type=1326 audit(1772728382.397:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.231448][ T28] audit: type=1326 audit(1772728382.397:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.231577][ T28] audit: type=1326 audit(1772728382.397:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.231757][ T28] audit: type=1326 audit(1772728382.397:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.232880][ T28] audit: type=1326 audit(1772728382.397:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.232987][ T28] audit: type=1326 audit(1772728382.397:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.233101][ T28] audit: type=1326 audit(1772728382.397:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x7ffc0000 [ 238.286530][ T7385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.471828][ T7385] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.534841][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.584003][ T7407] syzkaller0: entered promiscuous mode [ 238.599686][ T7407] syzkaller0: entered allmulticast mode [ 238.612167][ T7409] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 238.627445][ T7409] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 238.645431][ T7409] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1171: Corrupt directory, running e2fsck is recommended [ 238.661385][ T7414] syzkaller0: entered promiscuous mode [ 238.666888][ T7414] syzkaller0: entered allmulticast mode [ 238.696195][ T7409] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 238.713800][ T7409] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1171: corrupted in-inode xattr: invalid ea_ino [ 238.727436][ T7409] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.729739][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 238.745322][ C1] EXT4-fs (loop1): initial error at time 1772728382: ext4_iget_extra_inode:5025: inode 15 [ 238.755235][ C1] EXT4-fs (loop1): last error at time 1772728382: ext4_iget_extra_inode:5025: inode 15 [ 238.757915][ T7409] EXT4-fs (loop1): Remounting filesystem read-only [ 238.778539][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.788507][ T7409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.810752][ T7409] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 238.824933][ T7409] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 238.838292][ T7409] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1171: Corrupt directory, running e2fsck is recommended [ 238.851687][ T7409] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 238.863984][ T7409] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 238.874284][ T7409] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1171: Corrupt directory, running e2fsck is recommended [ 238.897125][ T7420] capability: warning: `syz.2.1175' uses 32-bit capabilities (legacy support in use) [ 238.923033][ T7420] program syz.2.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.958266][ T7424] set_capacity_and_notify: 4 callbacks suppressed [ 238.958283][ T7424] loop3: detected capacity change from 0 to 136 [ 238.995385][ T7429] xt_hashlimit: size too large, truncated to 1048576 [ 239.032347][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.082897][ T7423] syzkaller0: entered promiscuous mode [ 239.088445][ T7423] syzkaller0: entered allmulticast mode [ 239.124092][ T7424] Attempt to read inode for relocated directory [ 239.742326][ T7442] loop5: detected capacity change from 0 to 512 [ 239.786553][ T7444] loop4: detected capacity change from 0 to 512 [ 239.925874][ T7442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.977344][ T7442] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.010535][ T7451] loop1: detected capacity change from 0 to 128 [ 240.081913][ T7451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1182'. [ 240.106196][ T7444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.164230][ T7444] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.215734][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 240.215749][ T28] audit: type=1400 audit(1772728384.377:852): avc: denied { read write } for pid=7454 comm="syz.1.1183" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.263568][ T28] audit: type=1400 audit(1772728384.417:853): avc: denied { open } for pid=7454 comm="syz.1.1183" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.306692][ T7458] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 240.307503][ T7458] ªªªªªª: renamed from bond_slave_1 (while UP) [ 240.311871][ T7418] syz.3.1174 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 240.419445][ T28] audit: type=1400 audit(1772728384.417:854): avc: denied { ioctl } for pid=7454 comm="syz.1.1183" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.489907][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.3.1174 Not tainted syzkaller #0 PREEMPT(full) [ 240.489944][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.490015][ T7418] Call Trace: [ 240.490021][ T7418] [ 240.490027][ T7418] __dump_stack+0x1d/0x30 [ 240.490051][ T7418] dump_stack_lvl+0x95/0xd0 [ 240.490073][ T7418] dump_stack+0x15/0x1b [ 240.490095][ T7418] dump_header+0x80/0x240 [ 240.490191][ T7418] oom_kill_process+0x295/0x350 [ 240.490235][ T7418] out_of_memory+0x97d/0xb80 [ 240.490256][ T7418] try_charge_memcg+0x62e/0xa10 [ 240.490292][ T7418] obj_cgroup_charge_pages+0x23/0xc0 [ 240.490324][ T7418] __memcg_kmem_charge_page+0x9e/0x170 [ 240.490349][ T7418] __alloc_frozen_pages_noprof+0x18a/0x360 [ 240.490374][ T7418] alloc_pages_mpol+0xb3/0x260 [ 240.490468][ T7418] alloc_pages_noprof+0x8f/0x130 [ 240.490490][ T7418] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 240.490556][ T7418] __kvmalloc_node_noprof+0x3d4/0x650 [ 240.490581][ T7418] ? futex_hash_allocate+0x190/0x9d0 [ 240.490697][ T7418] ? futex_hash_allocate+0x190/0x9d0 [ 240.490799][ T7418] futex_hash_allocate+0x190/0x9d0 [ 240.490825][ T7418] ? cap_task_prctl+0x13f/0x6e0 [ 240.490849][ T7418] futex_hash_prctl+0xd8/0xf0 [ 240.490883][ T7418] __se_sys_prctl+0xa3d/0x13f0 [ 240.490906][ T7418] __x64_sys_prctl+0x67/0x80 [ 240.490932][ T7418] x64_sys_call+0x2533/0x3020 [ 240.490978][ T7418] do_syscall_64+0x12c/0x370 [ 240.490997][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.491015][ T7418] RIP: 0033:0x7f4ba172c799 [ 240.491030][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.491047][ T7418] RSP: 002b:00007f4ba0166028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 240.491120][ T7418] RAX: ffffffffffffffda RBX: 00007f4ba19a6090 RCX: 00007f4ba172c799 [ 240.491169][ T7418] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 240.491199][ T7418] RBP: 00007f4ba17c2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 240.491211][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.491222][ T7418] R13: 00007f4ba19a6128 R14: 00007f4ba19a6090 R15: 00007ffe37ddadb8 [ 240.491240][ T7418] [ 240.491246][ T7418] memory: usage 307200kB, limit 307200kB, failcnt 2115 [ 240.719194][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.734747][ T7418] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0 [ 240.746447][ T7418] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 240.764679][ T7418] Memory cgroup stats for /syz3: [ 240.764852][ T7418] cache 0 [ 240.773478][ T7418] rss 4096 [ 240.773653][ T6755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.786769][ T7418] shmem 0 [ 240.793081][ T7418] mapped_file 0 [ 240.794816][ T7460] loop1: detected capacity change from 0 to 512 [ 240.803685][ T7418] dirty 0 [ 240.803694][ T7418] writeback 0 [ 240.803702][ T7418] workingset_refault_anon 649 [ 240.803710][ T7418] workingset_refault_file 6317 [ 240.803719][ T7418] swap 286720 [ 240.803726][ T7418] swapcached 1589248 [ 240.803807][ T7418] pgpgin 157686 [ 240.803814][ T7418] pgpgout 157669 [ 240.803822][ T7418] pgfault 193773 [ 240.803830][ T7418] pgmajfault 486 [ 240.803837][ T7418] inactive_anon 0 [ 240.803845][ T7418] active_anon 65536 [ 240.803852][ T7418] inactive_file 0 [ 240.803860][ T7418] active_file 0 [ 240.803867][ T7418] unevictable 0 [ 240.803945][ T7418] hierarchical_memory_limit 314572800 [ 240.803953][ T7418] hierarchical_memsw_limit 9223372036854771712 [ 240.803962][ T7418] total_cache 0 [ 240.875560][ T7418] total_rss 4096 [ 240.879119][ T7418] total_shmem 0 [ 240.882908][ T7418] total_mapped_file 0 [ 240.912101][ T7418] total_dirty 0 [ 240.915613][ T7418] total_writeback 0 [ 240.919406][ T7418] total_workingset_refault_anon 649 [ 240.924980][ T7418] total_workingset_refault_file 6317 [ 240.930745][ T7418] total_swap 286720 [ 240.934552][ T7418] total_swapcached 1589248 [ 240.935359][ T7460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.938955][ T7418] total_pgpgin 157686 [ 240.938965][ T7418] total_pgpgout 157669 [ 240.938972][ T7418] total_pgfault 193773 [ 240.938978][ T7418] total_pgmajfault 486 [ 240.938987][ T7418] total_inactive_anon 0 [ 240.939019][ T7418] total_active_anon 65536 [ 240.939028][ T7418] total_inactive_file 0 [ 240.939036][ T7418] total_active_file 0 [ 240.939044][ T7418] total_unevictable 0 [ 240.939053][ T7418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1174,pid=7416,uid=0 [ 240.939195][ T7418] Memory cgroup out of memory: Killed process 7416 (syz.3.1174) total-vm:98528kB, anon-rss:1224kB, file-rss:26500kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 241.061641][ T7466] loop5: detected capacity change from 0 to 128 [ 241.080387][ T7460] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.169145][ T7471] xt_hashlimit: size too large, truncated to 1048576 [ 241.288033][ T7477] loop3: detected capacity change from 0 to 136 [ 241.325329][ T7477] Attempt to read inode for relocated directory [ 241.616495][ T28] audit: type=1400 audit(1772728385.777:855): avc: denied { kexec_image_load } for pid=7488 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 241.667548][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.678363][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 241.706260][ T7490] bond4: entered promiscuous mode [ 241.779402][ T7494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1195'. [ 241.825009][ T28] audit: type=1400 audit(1772728385.987:856): avc: denied { map } for pid=7495 comm="syz.1.1196" path="socket:[17656]" dev="sockfs" ino=17656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.848518][ T28] audit: type=1400 audit(1772728385.987:857): avc: denied { read } for pid=7495 comm="syz.1.1196" path="socket:[17656]" dev="sockfs" ino=17656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.883061][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 241.941633][ T7490] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 241.953278][ T28] audit: type=1400 audit(1772728386.107:858): avc: denied { relabelfrom } for pid=7488 comm="syz.4.1194" name="PACKET" dev="sockfs" ino=17638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.989063][ T7490] loop4: detected capacity change from 0 to 512 [ 242.000090][ T28] audit: type=1400 audit(1772728386.107:859): avc: denied { mac_admin } for pid=7488 comm="syz.4.1194" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.030577][ T7499] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 242.070129][ T7499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1197'. [ 242.100415][ T7499] bond3: (slave dummy0): Releasing active interface [ 242.271243][ T28] audit: type=1400 audit(1772728386.147:860): avc: denied { relabelto } for pid=7488 comm="syz.4.1194" name="PACKET" dev="sockfs" ino=17638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:cgroup_t:s0" [ 242.365043][ T28] audit: type=1400 audit(1772728386.247:861): avc: denied { unmount } for pid=7495 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.600213][ T7510] 9p: Bad value for 'wfdno' [ 242.604925][ T7510] program syz.3.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.640860][ T7513] loop5: detected capacity change from 0 to 136 [ 242.714822][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.757980][ T7513] Attempt to read inode for relocated directory [ 243.165521][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 243.378713][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.410758][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.438324][ T7514] bridge_slave_0: entered allmulticast mode [ 243.491775][ T7514] bridge_slave_0: entered promiscuous mode [ 243.508720][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.531097][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.570432][ T7514] bridge_slave_1: entered allmulticast mode [ 243.576894][ T7514] bridge_slave_1: entered promiscuous mode [ 243.653283][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.687932][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.701226][ T7539] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 243.708423][ T7489] kexec: Could not allocate control_code_buffer [ 243.723999][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.743951][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1208'. [ 243.760257][ T7539] bond7: (slave dummy0): Releasing active interface [ 243.766935][ T7539] dummy0: left promiscuous mode [ 243.772494][ T7539] dummy0: left allmulticast mode [ 243.787681][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.834140][ T7514] team0: Port device team_slave_0 added [ 243.846745][ T7514] team0: Port device team_slave_1 added [ 243.872201][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.904820][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.912166][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.940730][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.952213][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.959206][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.991827][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.055575][ T7514] hsr_slave_0: entered promiscuous mode [ 244.061905][ T7514] hsr_slave_1: entered promiscuous mode [ 244.067930][ T7514] debugfs: 'hsr0' already exists in 'hsr' [ 244.074132][ T7514] Cannot create hsr debugfs directory [ 244.086289][ T40] bridge_slave_1: left allmulticast mode [ 244.092115][ T40] bridge_slave_1: left promiscuous mode [ 244.097879][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.105693][ T40] bridge_slave_0: left allmulticast mode [ 244.111517][ T40] bridge_slave_0: left promiscuous mode [ 244.117220][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.144695][ T7570] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 246.470126][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 246.501557][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 246.928643][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 246.948053][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 246.960302][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'. [ 246.969509][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 247.077845][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'. [ 247.089262][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.109419][ T40] bond0 (unregistering): (slave ªªªªªª): Releasing backup interface [ 247.118621][ T40] bond0 (unregistering): Released all slaves [ 247.238566][ T40] bond1 (unregistering): Released all slaves [ 247.247557][ T40] bond2 (unregistering): Released all slaves [ 247.256490][ T40] bond3 (unregistering): Released all slaves [ 247.264924][ T40] bond4 (unregistering): Released all slaves [ 247.273917][ T40] bond5 (unregistering): Released all slaves [ 247.290309][ T40] bond6 (unregistering): Released all slaves [ 247.522290][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 247.522304][ T28] audit: type=1400 audit(1772728391.687:863): avc: denied { read open } for pid=7592 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.554700][ T40] tipc: Left network mode [ 247.557896][ T28] audit: type=1400 audit(1772728391.717:864): avc: denied { getattr } for pid=7592 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.604896][ T28] audit: type=1326 audit(1772728391.767:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 247.636604][ T7601] loop3: detected capacity change from 0 to 512 [ 247.643973][ T7601] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.651323][ T7591] tipc: Enabled bearer , priority 0 [ 247.676248][ T7591] syzkaller0: entered promiscuous mode [ 247.698975][ T28] audit: type=1326 audit(1772728391.767:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 247.698989][ T7601] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 247.731917][ T7601] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1227: attempt to clear invalid blocks 2 len 1 [ 247.747301][ T7591] syzkaller0: entered allmulticast mode [ 247.753724][ T7591] tipc: Resetting bearer [ 247.761704][ T28] audit: type=1326 audit(1772728391.787:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 247.785032][ T7601] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 247.785273][ T7601] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, [ 247.786065][ T28] audit: type=1326 audit(1772728391.797:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 247.794454][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 247.794469][ C1] EXT4-fs (loop3): initial error at time 1772728391: ext4_clear_blocks:876 [ 247.803111][ T28] audit: type=1326 audit(1772728391.797:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 247.825986][ C1] : inode 13 [ 247.825999][ C1] EXT4-fs (loop3): last error at time 1772728391: ext4_clear_blocks:876 [ 247.838926][ T28] audit: type=1326 audit(1772728391.797:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 247.841004][ C1] : inode 13 [ 247.841059][ T7601] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 247.864796][ T28] audit: type=1326 audit(1772728391.797:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 247.934213][ T7601] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1227: invalid indirect mapped block 1819239214 (level 0) [ 247.962004][ T7601] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 247.963899][ T7601] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1227: invalid indirect mapped block 1819239214 (level 1) [ 248.010077][ T7601] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 248.010514][ T7601] EXT4-fs (loop3): 1 truncate cleaned up [ 248.013878][ T40] hsr_slave_0: left promiscuous mode [ 248.027386][ T7601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.052662][ T7601] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 248.062740][ T40] hsr_slave_1: left promiscuous mode [ 248.070295][ T7601] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 248.074432][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.090098][ T7601] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 248.097319][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.110036][ T28] audit: type=1326 audit(1772728391.797:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba172c799 code=0x7ffc0000 [ 248.150611][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.161694][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.825787][ T40] veth1_macvtap: left promiscuous mode [ 248.831445][ T40] veth0_macvtap: left promiscuous mode [ 248.837035][ T40] veth1_vlan: left promiscuous mode [ 248.843996][ T40] veth0_vlan: left promiscuous mode [ 248.853708][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.939228][ T7621] loop3: detected capacity change from 0 to 512 [ 248.957918][ T40] team0 (unregistering): Port device team_slave_1 removed [ 248.984468][ T40] team0 (unregistering): Port device team_slave_0 removed [ 248.992959][ T7627] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 248.996816][ T7621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.015207][ T7621] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.063652][ T7590] tipc: Resetting bearer [ 249.083826][ T7590] tipc: Disabling bearer [ 249.138043][ T7514] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.204975][ T7514] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.229504][ T7639] loop4: detected capacity change from 0 to 1024 [ 249.273078][ T7514] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.316019][ T7639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.331214][ T7514] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 249.359614][ T7639] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1234: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 249.389092][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 249.430577][ T7639] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 249.510494][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.524388][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.555092][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.628091][ T7514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.948218][ T7514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.154990][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'. [ 250.181771][ T1902] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.188846][ T1902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.209502][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.223548][ T1902] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.230617][ T1902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.363203][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.650926][ T7514] veth0_vlan: entered promiscuous mode [ 250.686363][ T7514] veth1_vlan: entered promiscuous mode [ 250.754081][ T7514] veth0_macvtap: entered promiscuous mode [ 250.767560][ T7709] loop3: detected capacity change from 0 to 136 [ 250.785351][ T7514] veth1_macvtap: entered promiscuous mode [ 250.833932][ T7709] Attempt to read inode for relocated directory [ 250.845377][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.888966][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.941049][ T1902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.973320][ T1902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.185234][ T1902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.198362][ T7725] loop5: detected capacity change from 0 to 512 [ 251.214976][ T1902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.246023][ T7725] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 251.321636][ T7725] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 251.381646][ T7732] tipc: Enabled bearer , priority 0 [ 251.397777][ T7725] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1241: Corrupt directory, running e2fsck is recommended [ 251.450999][ T7735] xt_hashlimit: size too large, truncated to 1048576 [ 251.453218][ T7725] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 251.488261][ T7732] syzkaller0: entered promiscuous mode [ 251.488306][ T7725] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1241: corrupted in-inode xattr: invalid ea_ino [ 251.531973][ T7725] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.532169][ T7725] EXT4-fs (loop5): Remounting filesystem read-only [ 251.541407][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 251.541428][ C1] EXT4-fs (loop5): initial error at time 1772728395: ext4_iget_extra_inode:5025: inode 15 [ 251.541453][ C1] EXT4-fs (loop5): last error at time 1772728395: ext4_iget_extra_inode:5025: inode 15 [ 251.566825][ T7732] syzkaller0: entered allmulticast mode [ 251.624459][ T7732] tipc: Resetting bearer [ 251.632024][ T7725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.653339][ T7731] tipc: Resetting bearer [ 251.677734][ T7748] loop3: detected capacity change from 0 to 256 [ 251.686921][ T7731] tipc: Disabling bearer [ 251.690340][ T7748] msdos: Bad value for 'time_offset' [ 251.715592][ T7725] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 251.732720][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 251.741817][ T7739] netlink: 90 bytes leftover after parsing attributes in process `syz.4.1244'. [ 251.752585][ T7725] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 251.764092][ T7751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60704 sclass=netlink_route_socket pid=7751 comm=syz.6.1247 [ 251.777025][ T7739] netlink: 90 bytes leftover after parsing attributes in process `syz.4.1244'. [ 251.796134][ T7725] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1241: Corrupt directory, running e2fsck is recommended [ 251.829573][ T7754] bridge_slave_0: left allmulticast mode [ 251.881729][ T7754] bridge_slave_0: left promiscuous mode [ 251.888288][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.904213][ T6755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.928616][ T7762] loop4: detected capacity change from 0 to 128 [ 251.928731][ T7755] loop2: detected capacity change from 0 to 512 [ 251.949583][ T7754] bridge_slave_1: left allmulticast mode [ 251.955539][ T7754] bridge_slave_1: left promiscuous mode [ 251.962289][ T7762] vfat: Unknown parameter 'ÿÿ' [ 251.967884][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.994629][ T7768] loop5: detected capacity change from 0 to 256 [ 252.053961][ T7768] msdos: Bad value for 'gid' [ 252.068885][ T7768] msdos: Bad value for 'gid' [ 252.173651][ T7754] bond0: (slave bond_slave_0): Releasing backup interface [ 252.190396][ T7754] bond0: (slave bond_slave_1): Releasing backup interface [ 252.200309][ T7755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.216110][ T7755] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.240384][ T7774] loop3: detected capacity change from 0 to 136 [ 252.298762][ T7774] Attempt to read inode for relocated directory [ 252.474615][ T7754] team0: Port device team_slave_0 removed [ 252.484072][ T7754] team0: Port device team_slave_1 removed [ 252.504196][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.544186][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.567009][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.581267][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.605885][ T7754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.661866][ T7751] team0: Mode changed to "loadbalance" [ 252.690118][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.747415][ T7781] xt_hashlimit: size too large, truncated to 1048576 [ 252.801393][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 252.801408][ T28] audit: type=1400 audit(1772728396.967:954): avc: denied { getopt } for pid=7782 comm="syz.2.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 252.891933][ T28] audit: type=1400 audit(1772728397.057:955): avc: denied { create } for pid=7788 comm="syz.6.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.933072][ T28] audit: type=1400 audit(1772728397.077:956): avc: denied { write } for pid=7788 comm="syz.6.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.972975][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1258'. [ 252.976017][ T28] audit: type=1400 audit(1772728397.077:957): avc: denied { read } for pid=7788 comm="syz.6.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.021266][ T7794] tipc: Enabled bearer , priority 0 [ 253.029329][ T28] audit: type=1400 audit(1772728397.127:958): avc: denied { map } for pid=7788 comm="syz.6.1258" path="/dev/vcsa1" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 253.071214][ T7794] syzkaller0: entered promiscuous mode [ 253.076708][ T7794] syzkaller0: entered allmulticast mode [ 253.083636][ T7794] tipc: Resetting bearer [ 253.092868][ T7793] tipc: Resetting bearer [ 253.132362][ T7793] tipc: Disabling bearer [ 253.157314][ T3327] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 253.219993][ T3327] CPU: 0 UID: 0 PID: 3327 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 253.220066][ T3327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.220087][ T3327] Call Trace: [ 253.220093][ T3327] [ 253.220101][ T3327] __dump_stack+0x1d/0x30 [ 253.220126][ T3327] dump_stack_lvl+0x95/0xd0 [ 253.220145][ T3327] dump_stack+0x15/0x1b [ 253.220267][ T3327] dump_header+0x80/0x240 [ 253.220288][ T3327] oom_kill_process+0x295/0x350 [ 253.220311][ T3327] out_of_memory+0x97d/0xb80 [ 253.220363][ T3327] try_charge_memcg+0x62e/0xa10 [ 253.220398][ T3327] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 253.220491][ T3327] __swap_cache_prepare_and_add+0x386/0x530 [ 253.220521][ T3327] swap_cache_alloc_folio+0xa2/0x120 [ 253.220577][ T3327] swap_cluster_readahead+0x26e/0x3d0 [ 253.220608][ T3327] swapin_readahead+0xde/0x840 [ 253.220707][ T3327] ? __rcu_read_unlock+0x4e/0x70 [ 253.220729][ T3327] ? __perf_event_task_sched_in+0xa65/0xad0 [ 253.220758][ T3327] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 253.220785][ T3327] ? xfd_validate_state+0x45/0xf0 [ 253.220882][ T3327] ? __rcu_read_unlock+0x4e/0x70 [ 253.220898][ T3327] ? swap_cache_get_folio+0x26f/0x280 [ 253.220961][ T3327] do_swap_page+0x309/0x2210 [ 253.221039][ T3327] ? __schedule+0x93c/0xd40 [ 253.221141][ T3327] ? __rcu_read_lock+0x36/0x50 [ 253.221161][ T3327] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 253.221182][ T3327] handle_mm_fault+0xb40/0x3020 [ 253.221269][ T3327] ? vma_start_read+0x1c7/0x2c0 [ 253.221375][ T3327] do_user_addr_fault+0x62f/0x1050 [ 253.221405][ T3327] ? trace_page_fault_user+0x1f/0xe0 [ 253.221507][ T3327] exc_page_fault+0x62/0xa0 [ 253.221586][ T3327] asm_exc_page_fault+0x26/0x30 [ 253.221612][ T3327] RIP: 0033:0x7f4ba16e7917 [ 253.221628][ T3327] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 253.221642][ T3327] RSP: 002b:00007ffe37ddb0b0 EFLAGS: 00010202 [ 253.221656][ T3327] RAX: 0000000000000000 RBX: 000055557dc34500 RCX: 00007f4ba16e7917 [ 253.221704][ T3327] RDX: 00007ffe37ddb0f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.221714][ T3327] RBP: 00007ffe37ddb15c R08: 0000000000000000 R09: 0000000000000000 [ 253.221724][ T3327] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 253.221734][ T3327] R13: 00000000000927c0 R14: 000000000003db12 R15: 00007ffe37ddb1b0 [ 253.221748][ T3327] [ 253.224034][ T3327] memory: usage 307200kB, limit 307200kB, failcnt 2800 [ 253.473289][ T7801] loop5: detected capacity change from 0 to 512 [ 253.481237][ T7801] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 253.491253][ T3327] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 253.523497][ T3327] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 253.523615][ T7801] EXT4-fs (loop5): 1 truncate cleaned up [ 253.536979][ T7801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.538750][ T3327] Memory cgroup stats for /syz3: [ 253.599954][ T3327] cache 0 [ 253.607879][ T3327] rss 0 [ 253.610835][ T3327] shmem 0 [ 253.613913][ T3327] mapped_file 0 [ 253.617454][ T28] audit: type=1400 audit(1772728397.777:959): avc: denied { map } for pid=7800 comm="syz.5.1261" path="/44/file1/memory.events" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.640951][ T3327] dirty 0 [ 253.644055][ T3327] writeback 0 [ 253.647461][ T3327] workingset_refault_anon 844 [ 253.653221][ T7801] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1261'. [ 253.662647][ T3327] workingset_refault_file 7518 [ 253.670139][ T28] audit: type=1400 audit(1772728397.777:960): avc: denied { execute } for pid=7800 comm="syz.5.1261" path="/44/file1/memory.events" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.699949][ T3327] swap 286720 [ 253.715726][ T3327] swapcached 1953792 [ 253.727098][ T6755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.736510][ T3327] pgpgin 160452 [ 253.747308][ T3327] pgpgout 160435 [ 253.751038][ T3327] pgfault 196309 [ 253.754574][ T3327] pgmajfault 601 [ 253.768311][ T3327] inactive_anon 0 [ 253.783941][ T28] audit: type=1400 audit(1772728397.777:961): avc: denied { ioctl } for pid=7800 comm="syz.5.1261" path="/44/file1/memory.events" dev="loop5" ino=19 ioctlcmd=0x54e0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.809279][ T3327] active_anon 69632 [ 253.823186][ T3327] inactive_file 0 [ 253.826903][ T3327] active_file 0 [ 253.830766][ T3327] unevictable 0 [ 253.839854][ T3327] hierarchical_memory_limit 314572800 [ 253.847457][ T3327] hierarchical_memsw_limit 9223372036854771712 [ 253.854111][ T3327] total_cache 0 [ 253.857631][ T3327] total_rss 0 [ 253.861126][ T3327] total_shmem 0 [ 253.864617][ T3327] total_mapped_file 0 [ 253.868645][ T3327] total_dirty 0 [ 253.872390][ T3327] total_writeback 0 [ 253.876537][ T3327] total_workingset_refault_anon 844 [ 253.882114][ T3327] total_workingset_refault_file 7518 [ 253.887437][ T3327] total_swap 286720 [ 253.891489][ T3327] total_swapcached 1953792 [ 253.896006][ T3327] total_pgpgin 160452 [ 253.922482][ T3327] total_pgpgout 160435 [ 253.949733][ T3327] total_pgfault 196309 [ 253.958290][ T3327] total_pgmajfault 601 [ 253.974484][ T3327] total_inactive_anon 0 [ 253.991361][ T3327] total_active_anon 69632 [ 254.001023][ T3327] total_inactive_file 0 [ 254.005213][ T3327] total_active_file 0 [ 254.009202][ T3327] total_unevictable 0 [ 254.013537][ T3327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1250,pid=7759,uid=0 [ 254.030655][ T3327] Memory cgroup out of memory: Killed process 7759 (syz.3.1250) total-vm:100576kB, anon-rss:1224kB, file-rss:26540kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 254.108128][ T7814] loop5: detected capacity change from 0 to 136 [ 254.155093][ T7814] Attempt to read inode for relocated directory [ 254.158748][ T7816] loop6: detected capacity change from 0 to 256 [ 254.172628][ T7816] msdos: Bad value for 'gid' [ 254.188355][ T7816] msdos: Bad value for 'gid' [ 254.264214][ T28] audit: type=1400 audit(1772728398.427:962): avc: denied { ioctl } for pid=7822 comm="syz.6.1267" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 254.367384][ T7810] syz.5.1264 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 254.403943][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.5.1264 Not tainted syzkaller #0 PREEMPT(full) [ 254.403967][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.403977][ T7810] Call Trace: [ 254.404065][ T7810] [ 254.404074][ T7810] __dump_stack+0x1d/0x30 [ 254.404148][ T7810] dump_stack_lvl+0x95/0xd0 [ 254.404198][ T7810] dump_stack+0x15/0x1b [ 254.404219][ T7810] dump_header+0x80/0x240 [ 254.404244][ T7810] oom_kill_process+0x295/0x350 [ 254.404289][ T7810] out_of_memory+0x97d/0xb80 [ 254.404311][ T7810] try_charge_memcg+0x62e/0xa10 [ 254.404346][ T7810] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 254.404372][ T7810] __swap_cache_prepare_and_add+0x386/0x530 [ 254.404475][ T7810] swap_cache_alloc_folio+0xa2/0x120 [ 254.404500][ T7810] swap_cluster_readahead+0x36b/0x3d0 [ 254.404530][ T7810] swapin_readahead+0xde/0x840 [ 254.404647][ T7810] ? _raw_spin_unlock+0x9/0x30 [ 254.404668][ T7810] ? swap_put_entries_cluster+0x385/0x3a0 [ 254.404697][ T7810] ? swap_put_entries_cluster+0x71/0x3a0 [ 254.404721][ T7810] ? __rcu_read_unlock+0x4e/0x70 [ 254.404738][ T7810] ? swap_cache_get_folio+0x26f/0x280 [ 254.404759][ T7810] do_swap_page+0x309/0x2210 [ 254.404784][ T7810] ? css_rstat_updated+0xbb/0x280 [ 254.404820][ T7810] ? __rcu_read_lock+0x36/0x50 [ 254.404836][ T7810] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 254.404858][ T7810] handle_mm_fault+0xb40/0x3020 [ 254.404897][ T7810] ? vma_start_read+0x1c7/0x2c0 [ 254.404951][ T7810] do_user_addr_fault+0x62f/0x1050 [ 254.405061][ T7810] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 254.405085][ T7810] ? trace_page_fault_user+0x1f/0xe0 [ 254.405110][ T7810] exc_page_fault+0x62/0xa0 [ 254.405155][ T7810] asm_exc_page_fault+0x26/0x30 [ 254.405176][ T7810] RIP: 0033:0x7f9b6f87a17e [ 254.405191][ T7810] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 36 dc 3a 00 85 c0 0f 8e 53 fd ff ff ad 82 fe ff 49 39 c4 73 88 48 8d 1d 11 be 3a 00 83 3d 16 dc 3a [ 254.405233][ T7810] RSP: 002b:00007fff8d10c380 EFLAGS: 00010202 [ 254.405266][ T7810] RAX: 0000000000000002 RBX: 00007f9b6fc27da0 RCX: 0000555578deb808 [ 254.405277][ T7810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.405290][ T7810] RBP: 00007f9b6fc27da0 R08: 0000000000000000 R09: 0000000000000000 [ 254.405303][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003e30f [ 254.405316][ T7810] R13: 00007f9b6fc2618c R14: 000000000003e12e R15: 00007f9b6fc26180 [ 254.405463][ T7810] [ 254.405510][ T7810] memory: usage 307200kB, limit 307200kB, failcnt 620 [ 254.642436][ T28] audit: type=1326 audit(1772728398.687:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.4.1270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd29a19c799 code=0x0 [ 254.659735][ T7810] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 254.717242][ T7810] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 254.724669][ T7810] Memory cgroup stats for /syz5: [ 254.724895][ T7810] cache 0 [ 254.739809][ T7810] rss 0 [ 254.742610][ T7810] shmem 0 [ 254.745590][ T7810] mapped_file 0 [ 254.749058][ T7810] dirty 0 [ 254.752968][ T7810] writeback 0 [ 254.756314][ T7810] workingset_refault_anon 196 [ 254.761052][ T7810] workingset_refault_file 0 [ 254.765609][ T7810] swap 270336 [ 254.768945][ T7810] swapcached 696320 [ 254.775310][ T7810] pgpgin 32550 [ 254.778862][ T7810] pgpgout 32549 [ 254.783640][ T7810] pgfault 39522 [ 254.787246][ T7810] pgmajfault 82 [ 254.790982][ T7810] inactive_anon 0 [ 254.794982][ T7810] active_anon 4096 [ 254.798792][ T7810] inactive_file 0 [ 254.805007][ T7810] active_file 0 [ 254.808515][ T7810] unevictable 0 [ 254.812785][ T7810] hierarchical_memory_limit 314572800 [ 254.818229][ T7810] hierarchical_memsw_limit 9223372036854771712 [ 254.824744][ T7810] total_cache 0 [ 254.828244][ T7810] total_rss 0 [ 254.832063][ T7810] total_shmem 0 [ 254.835730][ T7810] total_mapped_file 0 [ 254.840003][ T7810] total_dirty 0 [ 254.843507][ T7810] total_writeback 0 [ 254.847337][ T7810] total_workingset_refault_anon 196 [ 254.852928][ T7810] total_workingset_refault_file 0 [ 254.857999][ T7810] total_swap 270336 [ 254.862097][ T7810] total_swapcached 696320 [ 254.884699][ T7810] total_pgpgin 32550 [ 254.888706][ T7810] total_pgpgout 32549 [ 254.892965][ T7810] total_pgfault 39522 [ 254.896981][ T7810] total_pgmajfault 82 [ 254.901184][ T7810] total_inactive_anon 0 [ 254.905523][ T7810] total_active_anon 4096 [ 254.912349][ T7810] total_inactive_file 0 [ 254.916657][ T7810] total_active_file 0 [ 254.922864][ T7810] total_unevictable 0 [ 254.926984][ T7810] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1264,pid=7810,uid=0 [ 254.942042][ T7810] Memory cgroup out of memory: Killed process 7810 (syz.5.1264) total-vm:96340kB, anon-rss:1224kB, file-rss:22400kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 255.207497][ T7847] loop3: detected capacity change from 0 to 2048 [ 255.677681][ T7847] Alternate GPT is invalid, using primary GPT. [ 255.684020][ T7847] loop3: p1 p2 p3 [ 255.726945][ T4727] udevd[4727]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 255.730980][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 255.737915][ T4770] udevd[4770]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 255.780376][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 255.792326][ T7773] syz.4.1251 (7773) used greatest stack depth: 7088 bytes left [ 255.797231][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 255.855251][ T7838] tipc: Enabling of bearer rejected, failed to enable media [ 255.930661][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 255.949828][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 255.955008][ T5794] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.972151][ T5794] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.981692][ T5794] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.991231][ T5794] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.167901][ T7876] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1282'. [ 256.185695][ T7876] ================================================================== [ 256.193777][ T7876] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 256.201660][ T7876] [ 256.203971][ T7876] write to 0xffff88810cc57398 of 8 bytes by task 7877 on cpu 0: [ 256.211575][ T7876] cpu_map_kthread_run+0x4fe/0x1680 [ 256.216755][ T7876] kthread+0x22a/0x280 [ 256.220803][ T7876] ret_from_fork+0x150/0x360 [ 256.225388][ T7876] ret_from_fork_asm+0x1a/0x30 [ 256.230142][ T7876] [ 256.232472][ T7876] read to 0xffff88810cc57398 of 8 bytes by task 7876 on cpu 1: [ 256.240010][ T7876] bq_flush_to_queue+0x124/0x360 [ 256.244952][ T7876] __cpu_map_flush+0x47/0xa0 [ 256.249547][ T7876] xdp_do_flush+0xf8/0x160 [ 256.253959][ T7876] bpf_test_run_xdp_live+0xe8a/0x1360 [ 256.259322][ T7876] bpf_prog_test_run_xdp+0x57b/0xa10 [ 256.264597][ T7876] bpf_prog_test_run+0x204/0x340 [ 256.269521][ T7876] __sys_bpf+0x52e/0x7e0 [ 256.273747][ T7876] __x64_sys_bpf+0x41/0x50 [ 256.278153][ T7876] x64_sys_call+0x10cb/0x3020 [ 256.282817][ T7876] do_syscall_64+0x12c/0x370 [ 256.287389][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.293270][ T7876] [ 256.295578][ T7876] value changed: 0xffff888155ff7070 -> 0x0000000000000000 [ 256.302759][ T7876] [ 256.305086][ T7876] Reported by Kernel Concurrency Sanitizer on: [ 256.311234][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.6.1282 Not tainted syzkaller #0 PREEMPT(full) [ 256.320590][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.330630][ T7876] ================================================================== [ 261.956444][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 261.956457][ T28] audit: type=1400 audit(1772728406.117:965): avc: denied { getattr } for pid=7889 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.995263][ T28] audit: type=1400 audit(1772728406.157:966): avc: denied { read } for pid=7891 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.017434][ T28] audit: type=1400 audit(1772728406.157:967): avc: denied { open } for pid=7891 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.067631][ T28] audit: type=1400 audit(1772728406.227:968): avc: denied { create } for pid=7888 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.090760][ T28] audit: type=1400 audit(1772728406.227:969): avc: denied { write } for pid=7888 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=10037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.117360][ T28] audit: type=1400 audit(1772728406.227:970): avc: denied { append } for pid=7888 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=10037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.142371][ T28] audit: type=1400 audit(1772728406.227:971): avc: denied { unlink } for pid=7899 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=10037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1