last executing test programs: 1.98815354s ago: executing program 0 (id=1): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x1000000}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 1.912994162s ago: executing program 0 (id=6): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unshare(0x22020400) r2 = syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) close(0xffffffffffffffff) syz_open_dev$sg(0x0, 0x2, 0x448203) mkdirat(r1, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x1122002, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x89f2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r6, &(0x7f00000000c0)='0\x00', 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x0, 0xb, 0x9, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x1, 0x1000, 0x7fffffff}}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000000c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4c004) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000540)={@multicast2, @remote}, &(0x7f0000000580)=0xc) 1.883659313s ago: executing program 2 (id=3): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x5) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x102) (rerun: 64) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x410003, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0xdd) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000400)={0x4dd, 0x0, 'client1\x00', 0x0, "7293dedf728a00", "51e988beaa8a92847517c664eeee7f591c9f7bcfbb4d29b97a10a61814c20bc8", 0x2, 0x4f6}) (async) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x2000004, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) pipe(&(0x7f0000004600)={0xffffffffffffffff}) fremovexattr(r7, &(0x7f0000007d00)=@known='security.apparmor\x00') (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000000)={0x3fe, "270e36"}, 0x6) 1.553565161s ago: executing program 3 (id=4): unshare(0x64000600) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) pread64(r0, 0x0, 0x0, 0x2) unshare(0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4004, @multicast, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x6, 0x20002200}, [@RTA_TABLE={0x8, 0xf, 0x7fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$inet_udp(0x2, 0x2, 0x0) eventfd(0x2) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) 1.442657823s ago: executing program 1 (id=2): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, 0x0, 0x7) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000080)={@private=0xa010101, @local, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x14) 1.286816418s ago: executing program 3 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8000, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0xb2}}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) lseek(r2, 0x0, 0x4) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000580)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x24a041, 0x71) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.139934021s ago: executing program 3 (id=8): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x6}, 0x4408, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd8161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0xfe, 0x7f, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0xa, 0x0, 0x0, 0x80000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) 1.115103392s ago: executing program 1 (id=9): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 1.064031993s ago: executing program 4 (id=5): r0 = geteuid() socket$netlink(0x10, 0x3, 0x1) (async) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) close_range(r1, r2, 0x2) setfsuid(r0) (async) setfsuid(r0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}]}, {0x0, [0x61, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESHEX=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000006b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x2c, 0x2c, 0x20, 0x80000, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0xfff1, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff80}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000090}, 0x28000000) 827.395639ms ago: executing program 0 (id=10): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getgid() r2 = getgid() r3 = getgid() setresgid(r1, r2, r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 826.978829ms ago: executing program 2 (id=11): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r3, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) shutdown(r1, 0x1) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) 825.114569ms ago: executing program 0 (id=12): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @initdev}, &(0x7f00000000c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r4, 0x25, 0x1, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0xd], &(0x7f0000000280)=[0x4, 0x1, 0x4], 0x2, 0x1, 0x0, r0}}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0xfeffffffffffffff, 0x3fc}, 0x0, r5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000040)='syzkaller\x00', 0x6}, 0x94) 810.13228ms ago: executing program 3 (id=13): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x82403, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@bridge_dellink={0x2c, 0x11, 0x7, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r2, 0x2040, 0x64010}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c010}, 0x0) sendmsg$inet(r1, 0x0, 0x4801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x3c, r4, 0xf, 0x70bd2d, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000) io_setup(0x8, &(0x7f0000000600)=0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c2"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) io_submit(r5, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x8}}, 0x20) 576.993235ms ago: executing program 4 (id=14): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaeaaaaaaaaaaaa86dd606410a600080001fe8000000000000000000000000000120000000000000000000000000000000132"], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x18, 0x1000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="7472616e733d66642c36abcf86829c747e4f6d8fde7266646e6f3d9d750660c5ddf6edc4423f44c63616ea5951b81ba899dcff9cafc40e9329330eb7c35d57b65ef437052b095aa87f0929dc9e8ff9ce0abb0555c915b46523f99dd7e5320ba8161d284cdf0adfb8bab27373aebc21c112e71a4eed051900000000000000e20b8724f627703d3e300458028d4e56c2a3e8b8ef655c7590a8b9ba65bcb1bd24d239ccbc574e9f8299", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x44001, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0xdc, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1}, 0x1c) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) fcntl$setstatus(r7, 0x4, 0x46800) splice(r5, 0x0, r8, 0x0, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 571.848516ms ago: executing program 0 (id=15): mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB=',de,context=\"']) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) fallocate(r0, 0x10, 0x6, 0x10001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000480)={{r1, 0x1, 0x3, 0x21ad, 0x4c4, 0x100000000, 0x7, 0x8, 0x0, 0x21cfb074, 0x9, 0x3, 0x1000, 0x10001, 0x400000000000000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 525.957127ms ago: executing program 0 (id=16): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) socket(0x10, 0x803, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x28f2, 0x100, 0x1, 0x107, 0x0, r0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) timer_create(0x0, &(0x7f0000000340)={0x0, 0x26, 0x0, @thr={&(0x7f0000000180)="e6691eb1f6b06987dea8455bb7c6b5d1027de757cb152065eabdc6812e5bfab71ef1eeacab1fccd5380d7bba9e6188112e3c1de3ad50b1cad8e0553245ad104ff0762e5be4bbea03c971c0c57b6f21b7", &(0x7f0000000240)="5aa785a2e816638b46954c360eaa5a5e053cc57f5430309e45bb7bef4b6e282aa351e8f8edf61daded7fd5da9cd7719ac42112657f2f9fa65972dfd153279a4466655cfe26a5a6b0e9b091c17a25467a2ba04f7c6cf05272438785da3e9616edf5aef4539cbe30a3b777d7ae477e13a794e3f3ff8133a5c98b7e6b534ad30a365f5e76721232ad9a9eab3e893c014beca706491b97a8deede4f19b3840fcd6d79868961f8bb6f657cd24f154c0397f079a3d380177d7e7fd3e6bfc81619fd614"}}, &(0x7f0000000380)=0x0) timer_settime(r2, 0x1, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d10, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xdc3c, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x1, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x402, 0x0, 0xbdc}, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) 525.212537ms ago: executing program 2 (id=17): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x5, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x288}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x8}, 0x0, 0xf, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r5, 0x8f5, 0xb) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x704d, 0x400, 0x0, 0x212, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/uprobe_events\x00', 0x32000, 0x101) write(r7, &(0x7f0000000300)='p:t_st/event1 ./file0:0x0 arg2=%bx', 0x22) 353.663121ms ago: executing program 2 (id=18): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x13, 0x2}}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0x1, 0x4) 314.202002ms ago: executing program 2 (id=19): r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0x20000400) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000280)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a601, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r5 = timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r6, 0x0) perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0x9, 0x2, 0x8, 0x7, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x8}, 0x28b6, 0x8, 0x9, 0x6, 0xffffffffffff443b, 0x145d, 0x1, 0x0, 0x9, 0x0, 0x102}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x9) syz_open_dev$rtc(&(0x7f0000000040), 0x6, 0xa0000) close_range(r0, r2, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f00000001c0)={0x80}) 202.679545ms ago: executing program 1 (id=20): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000600098946539dc376bb9c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x8, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x4, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdc3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_create(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x140, 0x12, 0x60a, 0x0, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x4000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x4400, &(0x7f0000000840)="fb22190ebafee16bb96a655c77aa9d049095b0ac1389c47135a933d3cf69564f56dfb3c4828040a9ecc3d1854913df0b22ed88bcc672b4f22aef1c7edeeeded10887e22dc17e65d87cd8450d91a15f7515b2adb2107a65fd319ecd596e4053610a837aa1b23145fad603a67856d147fd6b82e1d13077752cf031b96945bdeb58c83d161c8f4be3361df0936f851f0653f02fd7f5318570c39bfa7fcd7d2a8155d53e8b75def63c43a91d5756a0e41d97e004299a942a866a0918461fc268e6083e73dcb772f7d9ef5ba847840525b1103e528108e3b7a496d48cefcea9ba6df7fb50bae079869505dd51188d8b2c27402c92ce7824bb", 0xf6, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getpgid(r5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000040), 0x1, 0x4e6, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pr25bi6K1IJtsZW0aHeTxrZBpFYQfSqo9T3GZBNCNtmQ3dQmFE3xVRBEVPDJJ18EP4Ag/QgiFPRdtCiirT74oB3Z3dm2SXeTlKRZ3fx+cDrnzJmZ/znT7OzMzmEmgBPrQkTcjoihiLgSEcV8fpqnmWZhu73cs6cP5popiSy7+7ckknxeZ1vN8nBEvNdeJUYi4mtfjvhm8nrc+ubW8my1WlnPy+XGylq5vrl1dWlldrGyWFmdmpq8MX1z+vr0RJY7VD/PRsStLz750fd//qVbv/70t/4w85fL324263Mfbbc7IuYOFaCH9rYLrX3R0dxH628jWB8M5f0p9LshAAAcSPP87WJEfKJ1/l+ModbZHAAAADBIss+Pxr+TiAwAAAAYWGlEjEaSlvLxvqORpqVSewzvR+J0Wq3VG59aqG2szjfrIsaikC4sVSsT+VjhsSgkzfJkK/+yfG1XeSoiPoiIHxZPtcqluVp1vt8/fgAAAMAJ8d75ndf//yymrTwAAAAwYMZ6FgAAAIBB4ZIfAAAABp/rfwAAABhoX7lzp5myznu85+9tbizX7l2dr9SXSysbc6W52vpaabFWW2w9s2+lx2a+18lUa7W1z8Tqxv1yo1JvlOubWzMrtY3VxszSjldgAwAAAMfog/OPfp9ExPZnT7VS5M8BBNjhT/1uAHCUhvrdAKBvhvvdAKBvCvsuMfwGywL/j5J96nsO3vnN0bcFAAB4O8Y/9vr9/3fyOtf7MNiM9QGAk8f9fzi5CkYAwol3qT15t1f94e//Z9kbNwoAADhSo62UpKX8XuBopGmpFPF+67UAhWRhqVqZiIgPRcTvioV3m+XJ1prJvmOGAQAAAAAAAAAAAAAAAAAAAAAAAIC2LEsiAwAAAAZaRPrnpPU0/4jx4qXR3b8PvJP8qxhP8sJP7/74/myjsT7ZnP/3Yqs+Iho/yedfy7wSAAAAAP4HtK/T8+lkv1sDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKB59vTBXCcdZ9y/fiEixrrFH46R1nQkChFx+h9JDL+yXhIRQ0cQf/thRJx5NX72IsLzLMvG8lZ0i3/qrcTv9D9p7pbYFX+ks156BLHhpHvUPP7c7vb5S+NCa9r98z+cp8PqffxLXxz/hnocf94/YIyzj39Z7hn/YcTZ4e7Hn078pEf8iweM/42vb231qst+FjHe9fsn2RGr3FhZK9c3t64urcwuVhYrq1NTkzemb05fn54oLyxVK/m/XWP84OO/er5X/0/3iD+2T/8vHbD//3l8/+mH29lCt/iXL3b//j3TI36af/d9Ms8368c7+e12/lXnfvHbc3v1f75H//f7/798wP5f+ep3/3jARQGAY1Df3FqerVYr63tkRg6wjIzMYTLZd9p/j4fbziFXfy2T9Xu39DHT7yMTAABw1F6e9Pe7JQAAAAAAAAAAAAAAAAAAAHByHcfjxHbH3O5PVwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9vTfAAAA//9Cvd78") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) mmap$IORING_OFF_SQES(0x0, 0x3, 0xa, 0x12, r8, 0x10000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x80002000}) 201.706945ms ago: executing program 2 (id=21): prctl$PR_CAPBSET_READ(0x17, 0x18) prctl$PR_CAPBSET_READ(0x17, 0x9) (async) prctl$PR_CAPBSET_READ(0x17, 0xb) (async) syz_clone(0x40288080, &(0x7f0000000000)="44ea9935f80f461cab97e3d76f82e4aab51d85f164dcf3ae52e692bd11bb5d0c0d23a838832ce3c7227a2f261c5a237022864bdba7e4d975ca0ecf7fea9c1ff82f32aa6226e20acbe3645e97c4325a92132ec1562735e5ee6ed7818b4de77f2a059d5ee7b9340fb333af263913d21dfffca1fe3fde5b35f87036d332f7ed66aa3f84ecc77e8d659c9137dc897b0d866b99577d68e4d5b0eda1457f68dc86a7a84877d8383cefde3b68a52aba37f800283696014a4edef207147c6047f78f6994b47bc3cd867436892e7a9a0cc525", 0xce, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) syz_clone(0x1000, &(0x7f00000001c0)="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", 0xfc, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)='\')l)') (async) r0 = syz_clone(0x10110000, &(0x7f0000000380)="f2a7be62b8b633cd79be77ea50b30b6d104e2e1bf28f7820510c6d6e44a3c4a21ffb729e778b7b25b62c9eff402ce456395a3fd84e737c472c3a1b391650671bc562255828f139369b5df0a33eb84c4e4075b3fc18c358b98765412526e67d32100930b466977fdb4a91d4a4b6d2a284b27ab09d19aea112bb3e80215d7c77842101485b9e277c51e1df66e3bee8361aeae4dd5580b12f72d85090c40e8405052a13d3c400fe403bb86538e36168997557ec4ca183522587c3134997bf808efe1d41006754a74313a7daea4ab62d5c9f71383328098ccf9a2e8cb1a260af3334d844b1577fad769802bc", 0xea, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="18ab2a21298a27ed81a7a95ba59150feb687eaad8e23cee11f74") (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x26, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, [@jmp={0x5, 0x1, 0x2, 0x8, 0x0, 0xfffffffffffffff8, 0x10}, @call={0x85, 0x0, 0x0, 0x3e}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0xef, 0xe, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x36, &(0x7f00000006c0)=""/54, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x2, 0x2, 0x0, 0xb}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0x9, 0xa}, {0x3, 0x4, 0x0, 0x8}, {0x3, 0x1, 0x4, 0xc}, {0x4, 0x2, 0x0, 0x9}, {0x3, 0x3, 0x1, 0x5}, {0x0, 0x3, 0x9, 0xc}, {0x5, 0x3, 0xe, 0x7}], 0x10, 0x7}, 0x94) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000880), 0x8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x6, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r1, r2, 0xd, 0x0, @val=@tracing={r3, 0x8}}, 0x20) (async) prlimit64(r0, 0x0, &(0x7f0000000940)={0x401, 0x5}, &(0x7f0000000980)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a80)={'erspan0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x10001, 0x80, {{0x1e, 0x4, 0x0, 0x26, 0x78, 0x68, 0x0, 0x5, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x5f, 0x3, [{0x2, 0x5, "419e5f"}, {0x1, 0x9, "83e600d6039734"}, {0x6, 0x6, "7e449fb1"}, {0x6, 0x11, "a2a84c76bc96cc723a764fda25e319"}, {0x1, 0xb, "c0abed1b9bc5e0a597"}, {0x1, 0xa, "bf77fe786c49ebe9"}, {0x5, 0x12, "35418e22be5a886680c2fae6866aca28"}, {0x6, 0x3, "91"}, {0x1, 0xa, "dcbca8f20d089b5e"}]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000ac0)={@private=0xa010100, @remote, r4}, 0xc) (async) fcntl$getown(r1, 0x9) (async) prctl$PR_CAPBSET_READ(0x17, 0x22) (async) prctl$PR_CAPBSET_READ(0x17, 0x22) (async) prctl$PR_CAPBSET_READ(0x17, 0x1e) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) syz_clone(0x61002500, &(0x7f0000000b00)="8d9c3bcc8013d1d2f338fd0873f1b5bf90a1c7c39c7df8e90b2071309e28498816d2129b45f4b798358682992bc2fae50dc78ab5ac5ea495d23080adc3ba7e446ee5440f0569818a61142633", 0x4c, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) (async) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x100000000, 0x100000000}, &(0x7f0000000c80)) syz_clone(0x8000, &(0x7f0000000cc0)="c477e28c25dc384a65a73c79665ef2a99317926ec540f58d7e2f24b2f0f39a8262d26879d8f1086c1334062f3863ed7870a3001c80ee38de5773e12e83832d5c6504108ae54f755d6392b674a605e04e0ed801386d950bc8d7e801e9f65098ccade1bf611a858a11b00d85de92f95a25f0f73c0ab2c8f534a0e88a37e09913dd8b71420c33925e3c7b5613ff0e615a96c84dc78f2eb636b58764c24ea39f30e0e942fc0f54038ab801cfbcc7a9af4f2d75b4be8310732ff9b6e1c4a4f2f06f6d8387963c907bf64d", 0xc8, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)="e98f791939872cd813acadd39c299c395b834d64699a023af74c4fe027eea71e019a0e0296c61a72737de76b6536c72edd56d045e6df4a895fb847bad29167b959a9f8e2f8412b8951b6dbf3b11ef90f33d02d1fe2f1b751df9b4b08700091d2b19f879efe98481e6f17e8cafc637914f8daebf0ddeceb05511199d868bc8163c512501bbf8c760aa74a5be3ce5ddef7f04548070f919215310688244b90dda59e43a5d54940242eb628") (async) write$P9_RREADDIR(r2, &(0x7f0000000f00)={0x141, 0x29, 0x1, {0xf3, [{{0x8, 0x4, 0x6}, 0x2, 0x6, 0x7, './file0'}, {{0x0, 0x1, 0x5}, 0x100000001, 0x4, 0x7, './file0'}, {{0x20, 0x2, 0x8}, 0x7, 0x9, 0x7, './file0'}, {{0x8, 0x4, 0x7}, 0x7810, 0x1, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x6, 0x84, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x9a22, 0x69, 0x7, './file0'}, {{0x40, 0x2}, 0x5, 0xb, 0x7, './file0'}, {{0x20, 0x1, 0x5}, 0x8340, 0x4, 0x7, './file0'}, {{0x0, 0x2, 0x3}, 0x8, 0x67, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0xb, 0x6, 0x7, './file0'}]}}, 0x141) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/vmstat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d0, 0x2d0, 0x2d0, 0x1e8, 0x108, 0x108, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, &(0x7f00000010c0), {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@loopback, [0xff000000, 0xffffff00, 0xffffffff, 0xff], 0x4e24, 0x2f, 0x4, 0x4e24, 0x8, 0x2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x2, 0x1}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@socket0={{0x20}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x19, 0x9}}}, {{@ip={@remote, @multicast2, 0x0, 0xff000000, 'ip_vti0\x00', 'dummy0\x00', {0xff}, {}, 0x33, 0x1, 0x25}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x0, 0x100fffeff, 'syzkaller1\x00', 'wg2\x00', {}, {0xff}, 0x33}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x80000001, @local, 0x4e23}}}, {{@ip={@private=0xa010100, @local, 0xffffff00, 0xff000000, 'dvmrp0\x00', 'vlan0\x00', {}, {}, 0x2e, 0x4, 0x4c}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x500, 0x741}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x48, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) (async) prctl$PR_CAPBSET_READ(0x17, 0xe) (async) io_uring_setup(0x1b81, &(0x7f0000001680)={0x0, 0xc732, 0x400, 0x3, 0x2fc, 0x0, r2}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001700)={r2, r4, 0x25, 0xf, @val=@tracing={r3, 0x3}}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', r4, r5, 0x1, 0x3, 0x3}, 0x50) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000017c0), 0x62100, 0x0) 0s ago: executing program 3 (id=22): r0 = syz_clone(0x80400, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000380)="5f8896025a30695d827a6317f5cb536f4d400035b797d3245f5555d7550b9efd9265a7") (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000005, 0x6}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0xc555}}, {@oldalloc}]}, 0x3, 0x577, &(0x7f0000000640)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[], 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) r5 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES8=r5, @ANYRES64, @ANYRESOCT=r7, @ANYBLOB="5d50740a3da029bbae0d855e304335efca32a992f4e2b90018e2d4c764c2bc45402559933e67b2dec2442fd6b77c6d238696d06d9f02cf60e4d84d4149ab2eee4062608dec82737f11281d9f1f", @ANYRES64=r0, @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, r9}, 0x18) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e22, 0x16cc, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r13, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r13, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r13) (async, rerun: 32) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.019659][ T29] audit: type=1400 audit(1788011693.009:99): avc: denied { noatsecure } for pid=3170 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.019694][ T29] audit: type=1400 audit(1788011693.019:100): avc: denied { write } for pid=3170 comm="sh" path="pipe:[404]" dev="pipefs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.019724][ T29] audit: type=1400 audit(1788011693.019:101): avc: denied { rlimitinh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.019754][ T29] audit: type=1400 audit(1788011693.019:102): avc: denied { siginh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.255953][ T29] audit: type=1400 audit(1788011695.269:103): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.256010][ T29] audit: type=1400 audit(1788011695.269:104): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.112815][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 25.112853][ T29] audit: type=1400 audit(1788011697.129:120): avc: denied { write } for pid=3237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.147425][ T29] audit: type=1400 audit(1788011697.169:121): avc: denied { write } for pid=3248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.239101][ T29] audit: type=1400 audit(1788011697.259:122): avc: denied { write } for pid=3251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.268649][ T29] audit: type=1400 audit(1788011697.289:123): avc: denied { write } for pid=3262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.646495][ T29] audit: type=1400 audit(1788011697.659:124): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.674567][ T29] audit: type=1400 audit(1788011697.689:125): avc: denied { write } for pid=3277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 29.988298][ T29] audit: type=1400 audit(1788011702.009:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.011405][ T29] audit: type=1400 audit(1788011702.029:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.013803][ T3285] cgroup: Unknown subsys name 'net' [ 30.014767][ T29] audit: type=1400 audit(1788011702.029:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.178665][ T3285] cgroup: Unknown subsys name 'cpuset' [ 30.184607][ T3285] cgroup: Unknown subsys name 'rlimit' [ 30.277346][ T29] audit: type=1400 audit(1788011702.289:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.300777][ T29] audit: type=1400 audit(1788011702.289:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.300814][ T29] audit: type=1400 audit(1788011702.289:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.300845][ T29] audit: type=1400 audit(1788011702.289:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.334501][ T29] audit: type=1400 audit(1788011702.339:133): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.380453][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.381006][ T29] audit: type=1400 audit(1788011702.389:134): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 30.381457][ T29] audit: type=1400 audit(1788011702.389:135): avc: denied { write } for pid=3290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.437813][ T29] audit: type=1400 audit(1788011702.439:136): avc: denied { read } for pid=3285 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.437935][ T29] audit: type=1400 audit(1788011702.439:137): avc: denied { open } for pid=3285 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.438527][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.132054][ T29] audit: type=1400 audit(1788011703.149:138): avc: denied { execmem } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.827739][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.827777][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.828952][ T3297] bridge_slave_0: entered allmulticast mode [ 31.830536][ T3297] bridge_slave_0: entered promiscuous mode [ 31.841279][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.841369][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.841540][ T3297] bridge_slave_1: entered allmulticast mode [ 31.842234][ T3297] bridge_slave_1: entered promiscuous mode [ 31.905090][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.928073][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.970017][ T3297] team0: Port device team_slave_0 added [ 31.997951][ T3297] team0: Port device team_slave_1 added [ 32.012198][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.012230][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.012351][ T3301] bridge_slave_0: entered allmulticast mode [ 32.012789][ T3301] bridge_slave_0: entered promiscuous mode [ 32.059710][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.059843][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.060055][ T3301] bridge_slave_1: entered allmulticast mode [ 32.061154][ T3301] bridge_slave_1: entered promiscuous mode [ 32.082984][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.085304][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.108902][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.108956][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.109031][ T3299] bridge_slave_0: entered allmulticast mode [ 32.109477][ T3299] bridge_slave_0: entered promiscuous mode [ 32.110615][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.110638][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.110702][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.120633][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.120710][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.120914][ T3300] bridge_slave_0: entered allmulticast mode [ 32.122420][ T3300] bridge_slave_0: entered promiscuous mode [ 32.130975][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.131005][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.131160][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.133026][ T3301] team0: Port device team_slave_0 added [ 32.134926][ T3301] team0: Port device team_slave_1 added [ 32.135056][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.135128][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.135256][ T3300] bridge_slave_1: entered allmulticast mode [ 32.136072][ T3300] bridge_slave_1: entered promiscuous mode [ 32.148103][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.148186][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.148380][ T3299] bridge_slave_1: entered allmulticast mode [ 32.149771][ T3299] bridge_slave_1: entered promiscuous mode [ 32.215381][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.227302][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.227410][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.227610][ T3296] bridge_slave_0: entered allmulticast mode [ 32.230050][ T3296] bridge_slave_0: entered promiscuous mode [ 32.244644][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.244685][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.244837][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.247271][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.261329][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.261444][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.261522][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.261690][ T3296] bridge_slave_1: entered allmulticast mode [ 32.262916][ T3296] bridge_slave_1: entered promiscuous mode [ 32.281033][ T3297] hsr_slave_0: entered promiscuous mode [ 32.281988][ T3297] hsr_slave_1: entered promiscuous mode [ 32.283348][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.283397][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.283487][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.305952][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.324345][ T3300] team0: Port device team_slave_0 added [ 32.326456][ T3300] team0: Port device team_slave_1 added [ 32.367674][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.380097][ T3299] team0: Port device team_slave_0 added [ 32.382508][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.392379][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.392420][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.392504][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.394425][ T3299] team0: Port device team_slave_1 added [ 32.436652][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.436691][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.436806][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.471742][ T3301] hsr_slave_0: entered promiscuous mode [ 32.472494][ T3301] hsr_slave_1: entered promiscuous mode [ 32.473044][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.473088][ T3301] Cannot create hsr debugfs directory [ 32.484337][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.484373][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.484443][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.486501][ T3296] team0: Port device team_slave_0 added [ 32.489178][ T3296] team0: Port device team_slave_1 added [ 32.515337][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.515377][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.515462][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.567453][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.567501][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.567595][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.568801][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.568837][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.568975][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.600392][ T3300] hsr_slave_0: entered promiscuous mode [ 32.601189][ T3300] hsr_slave_1: entered promiscuous mode [ 32.602030][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.602071][ T3300] Cannot create hsr debugfs directory [ 32.633810][ T3299] hsr_slave_0: entered promiscuous mode [ 32.636114][ T3299] hsr_slave_1: entered promiscuous mode [ 32.636742][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 32.636786][ T3299] Cannot create hsr debugfs directory [ 32.667657][ T3296] hsr_slave_0: entered promiscuous mode [ 32.668570][ T3296] hsr_slave_1: entered promiscuous mode [ 32.669503][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.669538][ T3296] Cannot create hsr debugfs directory [ 33.053642][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.062628][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.070443][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.079027][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.088553][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.097185][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.104840][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.113487][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.124021][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.132656][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.141906][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.146228][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.157848][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.166283][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.175066][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.183512][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.192089][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.197197][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.207291][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.215826][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.222037][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.227099][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.229426][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.234122][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.281607][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.284468][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.291427][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.302025][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.304838][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.315326][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.329505][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.338564][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.371767][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.380518][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.387411][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.396001][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.405393][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.406581][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.415607][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.416867][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.423263][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.451856][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.469018][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.476649][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.476687][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.487132][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.493742][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.493837][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.501767][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.501860][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.529570][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.529616][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.541189][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.566241][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.589754][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.589793][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.621457][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.621521][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.654000][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.661771][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.678516][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.696246][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.696320][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.712630][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.721408][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.721444][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.742843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.742885][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.779519][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.779560][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.886065][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.001097][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.033904][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.071324][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.077243][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.086688][ T3300] veth0_vlan: entered promiscuous mode [ 34.103115][ T3300] veth1_vlan: entered promiscuous mode [ 34.137171][ T3300] veth0_macvtap: entered promiscuous mode [ 34.147680][ T3300] veth1_macvtap: entered promiscuous mode [ 34.172238][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.186230][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.198417][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.198517][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.198823][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.199047][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.260596][ T3297] veth0_vlan: entered promiscuous mode [ 34.268479][ T3297] veth1_vlan: entered promiscuous mode [ 34.294064][ T3301] veth0_vlan: entered promiscuous mode [ 34.300377][ T3490] modprobe (3490) used greatest stack depth: 11248 bytes left [ 34.316769][ T3297] veth0_macvtap: entered promiscuous mode [ 34.324424][ T3301] veth1_vlan: entered promiscuous mode [ 34.337174][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.337885][ T3297] veth1_macvtap: entered promiscuous mode [ 34.350314][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.352512][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.409740][ T3296] veth0_vlan: entered promiscuous mode [ 34.426894][ T3296] veth1_vlan: entered promiscuous mode [ 34.431799][ T3301] veth0_macvtap: entered promiscuous mode [ 34.442234][ T3301] veth1_macvtap: entered promiscuous mode [ 34.469119][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.469840][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.469995][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.470103][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.478276][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.482448][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.534039][ T3296] veth0_macvtap: entered promiscuous mode [ 34.554755][ T3296] veth1_macvtap: entered promiscuous mode [ 34.580008][ T3503] loop0: detected capacity change from 0 to 512 [ 34.599126][ T3503] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.6: inode has both inline data and extents flags [ 34.599173][ T3503] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.612210][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 34.612233][ C1] EXT4-fs (loop0): initial error at time 1788011706: ext4_orphan_get:1403: inode 15 [ 34.612264][ C1] EXT4-fs (loop0): last error at time 1788011706: ext4_orphan_get:1403: inode 15 [ 34.612744][ T3503] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.6: couldn't read orphan inode 15 (err -117) [ 34.612767][ T3503] loop0: lost filesystem error report for type 5 error -117 [ 34.622968][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.665353][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.679125][ T3503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.681146][ T357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.681309][ T357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.681415][ T357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.681582][ T357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.738119][ T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.739267][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.754263][ T3503] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 34.754424][ T3503] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.754534][ T3503] vhci_hcd vhci_hcd.0: Device attached [ 34.775393][ T3503] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 34.775446][ T3503] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.775542][ T3503] vhci_hcd vhci_hcd.0: Device attached [ 34.798277][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.798980][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.849344][ T3299] veth0_vlan: entered promiscuous mode [ 34.858434][ T3299] veth1_vlan: entered promiscuous mode [ 34.923943][ T3299] veth0_macvtap: entered promiscuous mode [ 34.931708][ T3299] veth1_macvtap: entered promiscuous mode [ 34.954429][ T3532] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.973241][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.985458][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.987861][ T3537] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 35.008014][ T3399] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 35.030493][ T3532] syz.3.4 (3532) used greatest stack depth: 11168 bytes left [ 35.049948][ T3542] loop3: detected capacity change from 0 to 512 [ 35.063502][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.063622][ T3542] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.093181][ T3542] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #12: comm syz.3.7: directory missing '.' [ 35.151303][ T3542] tipc: Started in network mode [ 35.151344][ T3542] tipc: Node identity e0000002, cluster identity 4711 [ 35.151362][ T3542] tipc: Enabling of bearer rejected, failed to enable media [ 35.188222][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.188276][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.188374][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.188515][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.235232][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.283965][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 35.283989][ T29] audit: type=1400 audit(1788011707.299:185): avc: denied { prog_run } for pid=3559 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.318251][ T29] audit: type=1400 audit(1788011707.329:186): avc: denied { cpu } for pid=3559 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.335229][ T29] audit: type=1400 audit(1788011707.339:187): avc: denied { write } for pid=3557 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.370066][ T29] audit: type=1400 audit(1788011707.389:188): avc: denied { setattr } for pid=3559 comm="syz.3.8" name="tty2" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 35.394613][ T3522] vhci_hcd: connection closed [ 35.394797][ T3520] vhci_hcd: connection reset by peer [ 35.395600][ T71] vhci_hcd vhci_hcd.0: stop threads [ 35.395644][ T71] vhci_hcd vhci_hcd.0: release socket [ 35.395706][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 35.406554][ T71] vhci_hcd vhci_hcd.0: stop threads [ 35.406618][ T71] vhci_hcd vhci_hcd.0: release socket [ 35.406789][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 35.422487][ T3570] 9p: Bad value for 'wfdno' [ 35.422617][ T29] audit: type=1400 audit(1788011707.439:189): avc: denied { mounton } for pid=3557 comm="syz.1.9" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.467182][ T29] audit: type=1400 audit(1788011707.489:190): avc: denied { create } for pid=3563 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.503532][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.575689][ T29] audit: type=1400 audit(1788011707.589:191): avc: denied { create } for pid=3577 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.624610][ T3566] Zero length message leads to an empty skb [ 35.647643][ T29] audit: type=1400 audit(1788011707.659:192): avc: denied { create } for pid=3577 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.662104][ T29] audit: type=1400 audit(1788011707.659:193): avc: denied { shutdown } for pid=3577 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.809863][ T3586] SELinux: security_context_str_to_sid () failed with errno=-22 [ 35.880119][ T29] audit: type=1400 audit(1788011707.899:194): avc: denied { allowed } for pid=3589 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.032164][ T3588] loop4: detected capacity change from 0 to 256 [ 36.075820][ T3590] mmap: syz.0.16 (3590) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.213337][ T3598] ip6t_srh: unknown srh invflags 4000 [ 36.248925][ T3584] syz.3.13 (3584) used greatest stack depth: 11056 bytes left [ 36.260572][ T3598] SELinux: invalid class [ 36.260983][ T3598] SELinux: failed to load policy [ 36.359825][ T3611] loop1: detected capacity change from 0 to 512 [ 36.370958][ T3611] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.371002][ T3611] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 36.422795][ T3608] 9pnet_fd: Insufficient options for proto=fd [ 36.514164][ T3615] ================================================================== [ 36.514197][ T3615] BUG: KCSAN: data-race in copy_mm / rwsem_down_write_slowpath [ 36.514228][ T3615] [ 36.514234][ T3615] write to 0xffff8881045adce8 of 8 bytes by task 3621 on cpu 1: [ 36.514253][ T3615] rwsem_down_write_slowpath+0x661/0xab0 [ 36.514277][ T3615] down_write_killable+0xaf/0xd0 [ 36.514300][ T3615] vm_mmap_pgoff+0xec/0x2d0 [ 36.514320][ T3615] ksys_mmap_pgoff+0xc1/0x310 [ 36.514349][ T3615] x64_sys_call+0x23b3/0x2550 [ 36.514374][ T3615] do_syscall_64+0x112/0x360 [ 36.514399][ T3615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.514420][ T3615] [ 36.514425][ T3615] read to 0xffff8881045adb00 of 1728 bytes by task 3615 on cpu 0: [ 36.514440][ T3615] copy_mm+0xd6/0x340 [ 36.514468][ T3615] copy_process+0x10ad/0x2340 [ 36.514488][ T3615] kernel_clone+0x1c0/0x5f0 [ 36.514511][ T3615] __x64_sys_clone+0x143/0x180 [ 36.514535][ T3615] x64_sys_call+0x2479/0x2550 [ 36.514560][ T3615] do_syscall_64+0x112/0x360 [ 36.514585][ T3615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.514605][ T3615] [ 36.514609][ T3615] Reported by Kernel Concurrency Sanitizer on: [ 36.514635][ T3615] CPU: 0 UID: 0 PID: 3615 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.514659][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.514672][ T3615] ================================================================== [ 36.831934][ T3621] loop3: detected capacity change from 0 to 1024 [ 37.284820][ T3618] syz.3.22 (3618) used greatest stack depth: 9152 bytes left [ 40.088501][ T3399] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 40.964594][ T3640] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 40.964713][ T3640] CPU: 1 UID: 0 PID: 3640 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.964735][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.964755][ T3640] Call Trace: [ 40.964763][ T3640] [ 40.964773][ T3640] __dump_stack+0x1d/0x30 [ 40.964802][ T3640] dump_stack_lvl+0x95/0xd0 [ 40.964845][ T3640] dump_stack+0x15/0x1b [ 40.964863][ T3640] dump_header+0x80/0x240 [ 40.964966][ T3640] oom_kill_process+0x294/0x420 [ 40.965016][ T3640] out_of_memory+0x981/0xbc0 [ 40.965066][ T3640] try_charge_memcg+0x6ba/0xae0 [ 40.965121][ T3640] charge_memcg+0x16f/0x220 [ 40.965153][ T3640] __mem_cgroup_charge+0x28/0xb0 [ 40.965220][ T3640] shmem_get_folio_gfp+0x49f/0xd90 [ 40.965272][ T3640] shmem_write_begin+0xfc/0x1f0 [ 40.965299][ T3640] generic_perform_write+0x186/0x490 [ 40.965392][ T3640] ? __mark_inode_dirty+0x1f5/0x700 [ 40.965469][ T3640] shmem_file_write_iter+0xc5/0xf0 [ 40.965501][ T3640] __kernel_write_iter+0x30f/0x590 [ 40.965525][ T3640] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 40.965624][ T3640] dump_user_range+0xa73/0xd00 [ 40.965656][ T3640] elf_core_dump+0x21c0/0x2340 [ 40.965763][ T3640] ? 0xffffffffff600000 [ 40.965836][ T3640] coredump_write+0xafb/0xdd0 [ 40.965870][ T3640] vfs_coredump+0x2750/0x3270 [ 40.965941][ T3640] ? proc_coredump_connector+0x160/0x2c0 [ 40.966015][ T3640] ? kmem_cache_free+0x106/0x3b0 [ 40.966044][ T3640] get_signal+0xd33/0xf10 [ 40.966159][ T3640] arch_do_signal_or_restart+0x96/0x480 [ 40.966196][ T3640] irqentry_exit+0x14d/0x610 [ 40.966299][ T3640] asm_exc_page_fault+0x26/0x30 [ 40.966324][ T3640] RIP: 0033:0x0 [ 40.966340][ T3640] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 40.966353][ T3640] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 40.966372][ T3640] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 40.966410][ T3640] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 40.966425][ T3640] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 40.966438][ T3640] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.966449][ T3640] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 40.966472][ T3640] [ 41.047050][ T3640] memory: usage 307200kB, limit 307200kB, failcnt 18479 [ 41.047098][ T3640] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 41.047161][ T3640] kmem: usage 4824kB, limit 9007199254740988kB, failcnt 0 [ 41.047185][ T3640] Memory cgroup stats for /syz3: [ 41.047727][ T3640] cache 309551104 [ 41.047754][ T3640] rss 77824 [ 41.047813][ T3640] shmem 309551104 [ 41.047827][ T3640] mapped_file 0 [ 41.047846][ T3640] dirty 0 [ 41.047872][ T3640] writeback 0 [ 41.049248][ T3640] workingset_refault_anon 55 [ 41.049277][ T3640] workingset_refault_file 1128 [ 41.049304][ T3640] swap 127987712 [ 41.049323][ T3640] swapcached 128221184 [ 41.049331][ T3640] pgpgin 111212 [ 41.049350][ T3640] pgpgout 35619 [ 41.049452][ T3640] pgfault 7653 [ 41.049472][ T3640] pgmajfault 39 [ 41.049492][ T3640] inactive_anon 174272512 [ 41.049512][ T3640] active_anon 135356416 [ 41.049531][ T3640] inactive_file 0 [ 41.049550][ T3640] active_file 0 [ 41.049569][ T3640] unevictable 0 [ 41.049582][ T3640] hierarchical_memory_limit 314572800 [ 41.049612][ T3640] hierarchical_memsw_limit 9223372036854771712 [ 41.049647][ T3640] total_cache 309551104 [ 41.049654][ T3640] total_rss 77824 [ 41.049660][ T3640] total_shmem 309551104 [ 41.049680][ T3640] total_mapped_file 0 [ 41.049762][ T3640] total_dirty 0 [ 41.049825][ T3640] total_writeback 0 [ 41.049839][ T3640] total_workingset_refault_anon 55 [ 41.049866][ T3640] total_workingset_refault_file 1128 [ 41.049888][ T3640] total_swap 127987712 [ 41.049957][ T3640] total_swapcached 128221184 [ 41.049978][ T3640] total_pgpgin 111212 [ 41.050003][ T3640] total_pgpgout 35619 [ 41.050025][ T3640] total_pgfault 7653 [ 41.050045][ T3640] total_pgmajfault 39 [ 41.050070][ T3640] total_inactive_anon 174272512 [ 41.050143][ T3640] total_active_anon 135356416 [ 41.050169][ T3640] total_inactive_file 0 [ 41.050190][ T3640] total_active_file 0 [ 41.050210][ T3640] total_unevictable 0 [ 41.050230][ T3640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3624,uid=0 [ 41.050381][ T3640] Memory cgroup out of memory: Killed process 3624 (syz.3.22) total-vm:91140kB, anon-rss:1260kB, file-rss:44036kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 41.245882][ T3640] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.245959][ T3640] CPU: 0 UID: 0 PID: 3640 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.246064][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.246095][ T3640] Call Trace: [ 41.246115][ T3640] [ 41.246200][ T3640] __dump_stack+0x1d/0x30 [ 41.246274][ T3640] dump_stack_lvl+0x95/0xd0 [ 41.246346][ T3640] dump_stack+0x15/0x1b [ 41.246402][ T3640] dump_header+0x80/0x240 [ 41.246463][ T3640] oom_kill_process+0x294/0x420 [ 41.246527][ T3640] out_of_memory+0x981/0xbc0 [ 41.246601][ T3640] try_charge_memcg+0x6ba/0xae0 [ 41.246786][ T3640] charge_memcg+0x16f/0x220 [ 41.246861][ T3640] __mem_cgroup_charge+0x28/0xb0 [ 41.246940][ T3640] shmem_get_folio_gfp+0x49f/0xd90 [ 41.247092][ T3640] shmem_write_begin+0xfc/0x1f0 [ 41.247130][ T3640] generic_perform_write+0x186/0x490 [ 41.247161][ T3640] ? __mark_inode_dirty+0x1f5/0x700 [ 41.247215][ T3640] shmem_file_write_iter+0xc5/0xf0 [ 41.247345][ T3640] __kernel_write_iter+0x30f/0x590 [ 41.247454][ T3640] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 41.247566][ T3640] dump_user_range+0xa73/0xd00 [ 41.247746][ T3640] elf_core_dump+0x21c0/0x2340 [ 41.247868][ T3640] ? 0xffffffffff600000 [ 41.247968][ T3640] coredump_write+0xafb/0xdd0 [ 41.248180][ T3640] vfs_coredump+0x2750/0x3270 [ 41.248263][ T3640] ? proc_coredump_connector+0x160/0x2c0 [ 41.248419][ T3640] ? kmem_cache_free+0x106/0x3b0 [ 41.248568][ T3640] get_signal+0xd33/0xf10 [ 41.248685][ T3640] arch_do_signal_or_restart+0x96/0x480 [ 41.248808][ T3640] irqentry_exit+0x14d/0x610 [ 41.248877][ T3640] asm_exc_page_fault+0x26/0x30 [ 41.248943][ T3640] RIP: 0033:0x0 [ 41.248974][ T3640] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 41.249003][ T3640] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 41.249051][ T3640] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 41.249121][ T3640] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 41.249153][ T3640] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 41.249196][ T3640] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 41.249227][ T3640] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 41.249357][ T3640] [ 41.318701][ T3640] memory: usage 307200kB, limit 307200kB, failcnt 18750 [ 41.318819][ T3640] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 41.318855][ T3640] kmem: usage 4824kB, limit 9007199254740988kB, failcnt 0 [ 41.318884][ T3640] Memory cgroup stats for /syz3: [ 41.319355][ T3640] cache 309551104 [ 41.319375][ T3640] rss 77824 [ 41.319393][ T3640] shmem 309551104 [ 41.319417][ T3640] mapped_file 0 [ 41.319435][ T3640] dirty 0 [ 41.319530][ T3640] writeback 0 [ 41.319566][ T3640] workingset_refault_anon 55 [ 41.319603][ T3640] workingset_refault_file 1128 [ 41.319623][ T3640] swap 127987712 [ 41.319642][ T3640] swapcached 128221184 [ 41.319662][ T3640] pgpgin 111212 [ 41.319688][ T3640] pgpgout 35619 [ 41.319714][ T3640] pgfault 7653 [ 41.319740][ T3640] pgmajfault 39 [ 41.319762][ T3640] inactive_anon 174272512 [ 41.319788][ T3640] active_anon 135356416 [ 41.319825][ T3640] inactive_file 0 [ 41.319844][ T3640] active_file 0 [ 41.319864][ T3640] unevictable 0 [ 41.319889][ T3640] hierarchical_memory_limit 314572800 [ 41.319910][ T3640] hierarchical_memsw_limit 9223372036854771712 [ 41.319938][ T3640] total_cache 309551104 [ 41.319965][ T3640] total_rss 77824 [ 41.319985][ T3640] total_shmem 309551104 [ 41.320005][ T3640] total_mapped_file 0 [ 41.320033][ T3640] total_dirty 0 [ 41.327458][ T3640] total_writeback 0 [ 41.327494][ T3640] total_workingset_refault_anon 55 [ 41.327523][ T3640] total_workingset_refault_file 1128 [ 41.327552][ T3640] total_swap 127987712 [ 41.327573][ T3640] total_swapcached 128221184 [ 41.327609][ T3640] total_pgpgin 111212 [ 41.327710][ T3640] total_pgpgout 35619 [ 41.327737][ T3640] total_pgfault 7653 [ 41.327758][ T3640] total_pgmajfault 39 [ 41.327779][ T3640] total_inactive_anon 174272512 [ 41.327808][ T3640] total_active_anon 135356416 [ 41.327858][ T3640] total_inactive_file 0 [ 41.332334][ T3640] total_active_file 0 [ 41.332361][ T3640] total_unevictable 0 [ 41.332464][ T3640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3632,uid=0 [ 41.332676][ T3640] Memory cgroup out of memory: Killed process 3632 (syz.3.22) total-vm:91272kB, anon-rss:1256kB, file-rss:41156kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 41.360985][ T3634] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.361062][ T3634] CPU: 0 UID: 0 PID: 3634 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.361124][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.361162][ T3634] Call Trace: [ 41.361225][ T3634] [ 41.361257][ T3634] __dump_stack+0x1d/0x30 [ 41.361337][ T3634] dump_stack_lvl+0x95/0xd0 [ 41.361397][ T3634] dump_stack+0x15/0x1b [ 41.361461][ T3634] dump_header+0x80/0x240 [ 41.361535][ T3634] oom_kill_process+0x294/0x420 [ 41.361601][ T3634] out_of_memory+0x981/0xbc0 [ 41.361664][ T3634] try_charge_memcg+0x6ba/0xae0 [ 41.361857][ T3634] charge_memcg+0x16f/0x220 [ 41.361933][ T3634] __mem_cgroup_charge+0x28/0xb0 [ 41.362011][ T3634] shmem_get_folio_gfp+0x49f/0xd90 [ 41.362109][ T3634] shmem_write_begin+0xfc/0x1f0 [ 41.362280][ T3634] generic_perform_write+0x186/0x490 [ 41.362358][ T3634] ? __mark_inode_dirty+0x1f5/0x700 [ 41.362446][ T3634] shmem_file_write_iter+0xc5/0xf0 [ 41.362544][ T3634] __kernel_write_iter+0x30f/0x590 [ 41.362706][ T3634] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 41.362811][ T3634] dump_user_range+0xa73/0xd00 [ 41.362939][ T3634] elf_core_dump+0x21c0/0x2340 [ 41.363044][ T3634] ? 0xffffffffff600000 [ 41.363125][ T3634] coredump_write+0xafb/0xdd0 [ 41.363303][ T3634] vfs_coredump+0x2750/0x3270 [ 41.363515][ T3634] ? proc_coredump_connector+0x160/0x2c0 [ 41.363725][ T3634] ? kmem_cache_free+0x106/0x3b0 [ 41.363847][ T3634] get_signal+0xd33/0xf10 [ 41.364021][ T3634] arch_do_signal_or_restart+0x96/0x480 [ 41.364124][ T3634] irqentry_exit+0x14d/0x610 [ 41.364203][ T3634] asm_exc_page_fault+0x26/0x30 [ 41.364263][ T3634] RIP: 0033:0x0 [ 41.364303][ T3634] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 41.364383][ T3634] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 41.364435][ T3634] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 41.364478][ T3634] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 41.364561][ T3634] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 41.364609][ T3634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 41.364646][ T3634] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 41.364702][ T3634] [ 41.411113][ T3634] memory: usage 307200kB, limit 307200kB, failcnt 18821 [ 41.411160][ T3634] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 41.411198][ T3634] kmem: usage 4824kB, limit 9007199254740988kB, failcnt 0 [ 41.411234][ T3634] Memory cgroup stats for /syz3: [ 41.411740][ T3634] cache 309551104 [ 41.411767][ T3634] rss 77824 [ 41.411788][ T3634] shmem 309551104 [ 41.411808][ T3634] mapped_file 0 [ 41.411828][ T3634] dirty 0 [ 41.411848][ T3634] writeback 0 [ 41.411908][ T3634] workingset_refault_anon 55 [ 41.411935][ T3634] workingset_refault_file 1128 [ 41.411956][ T3634] swap 127987712 [ 41.411963][ T3634] swapcached 128221184 [ 41.412060][ T3634] pgpgin 111212 [ 41.412075][ T3634] pgpgout 35619 [ 41.412093][ T3634] pgfault 7653 [ 41.412115][ T3634] pgmajfault 39 [ 41.412136][ T3634] inactive_anon 174272512 [ 41.412181][ T3634] active_anon 135356416 [ 41.412202][ T3634] inactive_file 0 [ 41.412226][ T3634] active_file 0 [ 41.412248][ T3634] unevictable 0 [ 41.412269][ T3634] hierarchical_memory_limit 314572800 [ 41.412368][ T3634] hierarchical_memsw_limit 9223372036854771712 [ 41.412400][ T3634] total_cache 309551104 [ 41.412428][ T3634] total_rss 77824 [ 41.412449][ T3634] total_shmem 309551104 [ 41.412472][ T3634] total_mapped_file 0 [ 41.426838][ T3634] total_dirty 0 [ 41.426858][ T3634] total_writeback 0 [ 41.426885][ T3634] total_workingset_refault_anon 55 [ 41.426987][ T3634] total_workingset_refault_file 1128 [ 41.427004][ T3634] total_swap 127987712 [ 41.427013][ T3634] total_swapcached 128221184 [ 41.427023][ T3634] total_pgpgin 111212 [ 41.427032][ T3634] total_pgpgout 35619 [ 41.427041][ T3634] total_pgfault 7653 [ 41.427126][ T3634] total_pgmajfault 39 [ 41.427168][ T3634] total_inactive_anon 174272512 [ 41.427315][ T3634] total_active_anon 135356416 [ 41.427341][ T3634] total_inactive_file 0 [ 41.427362][ T3634] total_active_file 0 [ 41.427382][ T3634] total_unevictable 0 [ 41.427407][ T3634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3623,uid=0 [ 41.427695][ T3634] Memory cgroup out of memory: Killed process 3623 (syz.3.22) total-vm:91140kB, anon-rss:1260kB, file-rss:40580kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 41.705992][ T3626] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.706104][ T3626] CPU: 0 UID: 0 PID: 3626 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.706168][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.706205][ T3626] Call Trace: [ 41.706224][ T3626] [ 41.706250][ T3626] __dump_stack+0x1d/0x30 [ 41.706316][ T3626] dump_stack_lvl+0x95/0xd0 [ 41.706380][ T3626] dump_stack+0x15/0x1b [ 41.706439][ T3626] dump_header+0x80/0x240 [ 41.706504][ T3626] oom_kill_process+0x294/0x420 [ 41.706554][ T3626] out_of_memory+0x981/0xbc0 [ 41.706637][ T3626] try_charge_memcg+0x6ba/0xae0 [ 41.706731][ T3626] charge_memcg+0x16f/0x220 [ 41.706805][ T3626] __mem_cgroup_charge+0x28/0xb0 [ 41.706920][ T3626] shmem_get_folio_gfp+0x49f/0xd90 [ 41.707010][ T3626] shmem_write_begin+0xfc/0x1f0 [ 41.707155][ T3626] generic_perform_write+0x186/0x490 [ 41.707247][ T3626] shmem_file_write_iter+0xc5/0xf0 [ 41.707488][ T3626] __kernel_write_iter+0x30f/0x590 [ 41.707571][ T3626] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 41.707769][ T3626] dump_user_range+0xa73/0xd00 [ 41.707864][ T3626] elf_core_dump+0x21c0/0x2340 [ 41.707965][ T3626] ? 0xffffffffff600000 [ 41.708116][ T3626] coredump_write+0xafb/0xdd0 [ 41.708296][ T3626] vfs_coredump+0x2750/0x3270 [ 41.708474][ T3626] ? __css_rstat_updated+0xbb/0x280 [ 41.708606][ T3626] ? proc_coredump_connector+0x160/0x2c0 [ 41.708698][ T3626] ? kmem_cache_free+0x106/0x3b0 [ 41.708822][ T3626] get_signal+0xd33/0xf10 [ 41.708950][ T3626] arch_do_signal_or_restart+0x96/0x480 [ 41.709042][ T3626] irqentry_exit+0x14d/0x610 [ 41.709140][ T3626] asm_exc_page_fault+0x26/0x30 [ 41.709192][ T3626] RIP: 0033:0x0 [ 41.709230][ T3626] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 41.709258][ T3626] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 41.709306][ T3626] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 41.709351][ T3626] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 41.709410][ T3626] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 41.709436][ T3626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 41.709486][ T3626] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 41.709577][ T3626] [ 41.787207][ T3626] memory: usage 307200kB, limit 307200kB, failcnt 19158 [ 41.787272][ T3626] memory+swap: usage 432016kB, limit 9007199254740988kB, failcnt 0 [ 41.787331][ T3626] kmem: usage 4624kB, limit 9007199254740988kB, failcnt 0 [ 41.787373][ T3626] Memory cgroup stats for /syz3: [ 41.787781][ T3626] cache 309760000 [ 41.787807][ T3626] rss 73728 [ 41.787876][ T3626] shmem 309760000 [ 41.792674][ T3626] mapped_file 0 [ 41.792696][ T3626] dirty 0 [ 41.792724][ T3626] writeback 0 [ 41.792748][ T3626] workingset_refault_anon 55 [ 41.792770][ T3626] workingset_refault_file 1128 [ 41.792863][ T3626] swap 127811584 [ 41.792883][ T3626] swapcached 128221184 [ 41.792909][ T3626] pgpgin 111266 [ 41.792928][ T3626] pgpgout 35622 [ 41.792954][ T3626] pgfault 7657 [ 41.792980][ T3626] pgmajfault 39 [ 41.793005][ T3626] inactive_anon 174264320 [ 41.793025][ T3626] active_anon 135569408 [ 41.793049][ T3626] inactive_file 0 [ 41.793069][ T3626] active_file 0 [ 41.793093][ T3626] unevictable 0 [ 41.793138][ T3626] hierarchical_memory_limit 314572800 [ 41.805178][ T3626] hierarchical_memsw_limit 9223372036854771712 [ 41.805217][ T3626] total_cache 309760000 [ 41.805239][ T3626] total_rss 73728 [ 41.805268][ T3626] total_shmem 309760000 [ 41.805289][ T3626] total_mapped_file 0 [ 41.805312][ T3626] total_dirty 0 [ 41.805334][ T3626] total_writeback 0 [ 41.805356][ T3626] total_workingset_refault_anon 55 [ 41.805386][ T3626] total_workingset_refault_file 1128 [ 41.805418][ T3626] total_swap 127811584 [ 41.805448][ T3626] total_swapcached 128221184 [ 41.805471][ T3626] total_pgpgin 111266 [ 41.805493][ T3626] total_pgpgout 35622 [ 41.805515][ T3626] total_pgfault 7657 [ 41.805553][ T3626] total_pgmajfault 39 [ 41.805575][ T3626] total_inactive_anon 174264320 [ 41.805598][ T3626] total_active_anon 135569408 [ 41.805627][ T3626] total_inactive_file 0 [ 41.805649][ T3626] total_active_file 0 [ 41.805671][ T3626] total_unevictable 0 [ 41.805700][ T3626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3629,uid=0 [ 41.806008][ T3626] Memory cgroup out of memory: Killed process 3629 (syz.3.22) total-vm:226440kB, anon-rss:1256kB, file-rss:38276kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 43.284853][ T3629] syz.3.22 (3629) used greatest stack depth: 7952 bytes left [ 43.696611][ T3637] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 43.696683][ T3637] CPU: 1 UID: 0 PID: 3637 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.696706][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.696718][ T3637] Call Trace: [ 43.696725][ T3637] [ 43.696733][ T3637] __dump_stack+0x1d/0x30 [ 43.696759][ T3637] dump_stack_lvl+0x95/0xd0 [ 43.696824][ T3637] dump_stack+0x15/0x1b [ 43.696849][ T3637] dump_header+0x80/0x240 [ 43.696877][ T3637] oom_kill_process+0x294/0x420 [ 43.696903][ T3637] out_of_memory+0x981/0xbc0 [ 43.696958][ T3637] try_charge_memcg+0x6ba/0xae0 [ 43.696988][ T3637] charge_memcg+0x16f/0x220 [ 43.697018][ T3637] __mem_cgroup_charge+0x28/0xb0 [ 43.697050][ T3637] shmem_get_folio_gfp+0x49f/0xd90 [ 43.697093][ T3637] shmem_write_begin+0xfc/0x1f0 [ 43.697119][ T3637] generic_perform_write+0x186/0x490 [ 43.697215][ T3637] shmem_file_write_iter+0xc5/0xf0 [ 43.697337][ T3637] __kernel_write_iter+0x30f/0x590 [ 43.697369][ T3637] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 43.697406][ T3637] dump_user_range+0xa73/0xd00 [ 43.697516][ T3637] elf_core_dump+0x21c0/0x2340 [ 43.697548][ T3637] ? 0xffffffffff600000 [ 43.697623][ T3637] coredump_write+0xafb/0xdd0 [ 43.697724][ T3637] vfs_coredump+0x2750/0x3270 [ 43.697768][ T3637] ? proc_coredump_connector+0x160/0x2c0 [ 43.697811][ T3637] ? kmem_cache_free+0x106/0x3b0 [ 43.697838][ T3637] get_signal+0xd33/0xf10 [ 43.697908][ T3637] arch_do_signal_or_restart+0x96/0x480 [ 43.697941][ T3637] irqentry_exit+0x14d/0x610 [ 43.697970][ T3637] asm_exc_page_fault+0x26/0x30 [ 43.698029][ T3637] RIP: 0033:0x0 [ 43.698044][ T3637] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 43.698056][ T3637] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 43.698074][ T3637] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 43.698090][ T3637] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 43.698121][ T3637] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 43.698137][ T3637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 43.698151][ T3637] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 43.698201][ T3637] [ 43.876285][ T3637] memory: usage 307200kB, limit 307200kB, failcnt 25543 [ 43.876338][ T3637] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0 [ 43.876375][ T3637] kmem: usage 4312kB, limit 9007199254740988kB, failcnt 0 [ 43.876413][ T3637] Memory cgroup stats for /syz3: [ 43.876992][ T3637] cache 310128640 [ 43.877013][ T3637] rss 28672 [ 43.877032][ T3637] shmem 310120448 [ 43.877103][ T3637] mapped_file 4096 [ 43.877122][ T3637] dirty 0 [ 43.877141][ T3637] writeback 0 [ 43.877160][ T3637] workingset_refault_anon 55 [ 43.877186][ T3637] workingset_refault_file 1217 [ 43.877213][ T3637] swap 127909888 [ 43.877238][ T3637] swapcached 178397184 [ 43.877265][ T3637] pgpgin 141786 [ 43.877291][ T3637] pgpgout 66064 [ 43.877380][ T3637] pgfault 9555 [ 43.877472][ T3637] pgmajfault 40 [ 43.877500][ T3637] inactive_anon 271925248 [ 43.877514][ T3637] active_anon 38223872 [ 43.877534][ T3637] inactive_file 0 [ 43.877553][ T3637] active_file 4096 [ 43.877572][ T3637] unevictable 0 [ 43.877598][ T3637] hierarchical_memory_limit 314572800 [ 43.877681][ T3637] hierarchical_memsw_limit 9223372036854771712 [ 43.877709][ T3637] total_cache 310128640 [ 43.877734][ T3637] total_rss 28672 [ 43.877754][ T3637] total_shmem 310120448 [ 43.877784][ T3637] total_mapped_file 4096 [ 43.877802][ T3637] total_dirty 0 [ 43.877879][ T3637] total_writeback 0 [ 43.893169][ T3637] total_workingset_refault_anon 55 [ 43.893209][ T3637] total_workingset_refault_file 1217 [ 43.893231][ T3637] total_swap 127909888 [ 43.893259][ T3637] total_swapcached 178397184 [ 43.893280][ T3637] total_pgpgin 141786 [ 43.893307][ T3637] total_pgpgout 66064 [ 43.893327][ T3637] total_pgfault 9555 [ 43.893357][ T3637] total_pgmajfault 40 [ 43.893378][ T3637] total_inactive_anon 271925248 [ 43.893405][ T3637] total_active_anon 38223872 [ 43.893427][ T3637] total_inactive_file 0 [ 43.893454][ T3637] total_active_file 4096 [ 43.893475][ T3637] total_unevictable 0 [ 43.893535][ T3637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3630,uid=0 [ 43.893810][ T3637] Memory cgroup out of memory: Killed process 3630 (syz.3.22) total-vm:226440kB, anon-rss:1252kB, file-rss:44100kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 44.165830][ T3634] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 44.165871][ T3634] CPU: 0 UID: 0 PID: 3634 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.165980][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.165997][ T3634] Call Trace: [ 44.166057][ T3634] [ 44.166066][ T3634] __dump_stack+0x1d/0x30 [ 44.166092][ T3634] dump_stack_lvl+0x95/0xd0 [ 44.166158][ T3634] dump_stack+0x15/0x1b [ 44.166177][ T3634] dump_header+0x80/0x240 [ 44.166199][ T3634] oom_kill_process+0x294/0x420 [ 44.166219][ T3634] out_of_memory+0x981/0xbc0 [ 44.166246][ T3634] try_charge_memcg+0x6ba/0xae0 [ 44.166333][ T3634] charge_memcg+0x16f/0x220 [ 44.166356][ T3634] __mem_cgroup_charge+0x28/0xb0 [ 44.166382][ T3634] shmem_get_folio_gfp+0x49f/0xd90 [ 44.166426][ T3634] shmem_write_begin+0xfc/0x1f0 [ 44.166510][ T3634] generic_perform_write+0x186/0x490 [ 44.166568][ T3634] ? __mark_inode_dirty+0x1f5/0x700 [ 44.166754][ T3634] shmem_file_write_iter+0xc5/0xf0 [ 44.166856][ T3634] __kernel_write_iter+0x30f/0x590 [ 44.166947][ T3634] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 44.167049][ T3634] dump_user_range+0xa73/0xd00 [ 44.167160][ T3634] elf_core_dump+0x21c0/0x2340 [ 44.167277][ T3634] ? 0xffffffffff600000 [ 44.167403][ T3634] coredump_write+0xafb/0xdd0 [ 44.167469][ T3634] vfs_coredump+0x2750/0x3270 [ 44.167533][ T3634] ? proc_coredump_connector+0x160/0x2c0 [ 44.167626][ T3634] ? kmem_cache_free+0x106/0x3b0 [ 44.167809][ T3634] get_signal+0xd33/0xf10 [ 44.167946][ T3634] arch_do_signal_or_restart+0x96/0x480 [ 44.168090][ T3634] irqentry_exit+0x14d/0x610 [ 44.168240][ T3634] asm_exc_page_fault+0x26/0x30 [ 44.168375][ T3634] RIP: 0033:0x0 [ 44.168479][ T3634] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 44.168510][ T3634] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 44.168558][ T3634] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 44.168598][ T3634] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 44.168637][ T3634] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 44.168680][ T3634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 44.168727][ T3634] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 44.168788][ T3634] [ 44.195219][ T3634] memory: usage 307200kB, limit 307200kB, failcnt 25798 [ 44.195265][ T3634] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0 [ 44.195353][ T3634] kmem: usage 4312kB, limit 9007199254740988kB, failcnt 0 [ 44.195390][ T3634] Memory cgroup stats for /syz3: [ 44.195751][ T3634] cache 310128640 [ 44.195759][ T3634] rss 28672 [ 44.195768][ T3634] shmem 310120448 [ 44.195776][ T3634] mapped_file 0 [ 44.195878][ T3634] dirty 0 [ 44.195897][ T3634] writeback 0 [ 44.195922][ T3634] workingset_refault_anon 55 [ 44.195952][ T3634] workingset_refault_file 1217 [ 44.195973][ T3634] swap 127909888 [ 44.195993][ T3634] swapcached 178397184 [ 44.196013][ T3634] pgpgin 141786 [ 44.196032][ T3634] pgpgout 66064 [ 44.196052][ T3634] pgfault 9556 [ 44.196078][ T3634] pgmajfault 40 [ 44.196091][ T3634] inactive_anon 272003072 [ 44.196121][ T3634] active_anon 38146048 [ 44.196141][ T3634] inactive_file 0 [ 44.196160][ T3634] active_file 4096 [ 44.196201][ T3634] unevictable 0 [ 44.196220][ T3634] hierarchical_memory_limit 314572800 [ 44.196248][ T3634] hierarchical_memsw_limit 9223372036854771712 [ 44.196276][ T3634] total_cache 310128640 [ 44.196295][ T3634] total_rss 28672 [ 44.196314][ T3634] total_shmem 310120448 [ 44.196334][ T3634] total_mapped_file 0 [ 44.196354][ T3634] total_dirty 0 [ 44.196422][ T3634] total_writeback 0 [ 44.196498][ T3634] total_workingset_refault_anon 55 [ 44.196539][ T3634] total_workingset_refault_file 1217 [ 44.196562][ T3634] total_swap 127909888 [ 44.210976][ T3634] total_swapcached 178397184 [ 44.210990][ T3634] total_pgpgin 141786 [ 44.211000][ T3634] total_pgpgout 66064 [ 44.211011][ T3634] total_pgfault 9556 [ 44.211021][ T3634] total_pgmajfault 40 [ 44.211107][ T3634] total_inactive_anon 272003072 [ 44.211142][ T3634] total_active_anon 38146048 [ 44.211175][ T3634] total_inactive_file 0 [ 44.211205][ T3634] total_active_file 4096 [ 44.211235][ T3634] total_unevictable 0 [ 44.211264][ T3634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3642,uid=0 [ 44.211620][ T3634] Memory cgroup out of memory: Killed process 3642 (syz.3.22) total-vm:91272kB, anon-rss:1252kB, file-rss:44100kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 44.375905][ T3637] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 44.376000][ T3637] CPU: 0 UID: 0 PID: 3637 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.376116][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.376166][ T3637] Call Trace: [ 44.376195][ T3637] [ 44.376224][ T3637] __dump_stack+0x1d/0x30 [ 44.376314][ T3637] dump_stack_lvl+0x95/0xd0 [ 44.376424][ T3637] dump_stack+0x15/0x1b [ 44.376501][ T3637] dump_header+0x80/0x240 [ 44.376580][ T3637] oom_kill_process+0x294/0x420 [ 44.376649][ T3637] out_of_memory+0x981/0xbc0 [ 44.376766][ T3637] try_charge_memcg+0x6ba/0xae0 [ 44.376923][ T3637] charge_memcg+0x16f/0x220 [ 44.377016][ T3637] __mem_cgroup_charge+0x28/0xb0 [ 44.377062][ T3637] shmem_get_folio_gfp+0x49f/0xd90 [ 44.377097][ T3637] shmem_write_begin+0xfc/0x1f0 [ 44.377216][ T3637] generic_perform_write+0x186/0x490 [ 44.377322][ T3637] shmem_file_write_iter+0xc5/0xf0 [ 44.377537][ T3637] __kernel_write_iter+0x30f/0x590 [ 44.377616][ T3637] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 44.377735][ T3637] dump_user_range+0xa73/0xd00 [ 44.377846][ T3637] elf_core_dump+0x21c0/0x2340 [ 44.378000][ T3637] ? 0xffffffffff600000 [ 44.378089][ T3637] coredump_write+0xafb/0xdd0 [ 44.378197][ T3637] vfs_coredump+0x2750/0x3270 [ 44.378395][ T3637] ? proc_coredump_connector+0x160/0x2c0 [ 44.378497][ T3637] ? kmem_cache_free+0x106/0x3b0 [ 44.378594][ T3637] get_signal+0xd33/0xf10 [ 44.378759][ T3637] arch_do_signal_or_restart+0x96/0x480 [ 44.378874][ T3637] irqentry_exit+0x14d/0x610 [ 44.378969][ T3637] asm_exc_page_fault+0x26/0x30 [ 44.379115][ T3637] RIP: 0033:0x0 [ 44.379155][ T3637] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 44.379194][ T3637] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 44.379245][ T3637] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 44.379286][ T3637] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 44.379332][ T3637] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 44.379372][ T3637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 44.379399][ T3637] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 44.379515][ T3637] [ 44.444784][ T3637] memory: usage 307200kB, limit 307200kB, failcnt 25952 [ 44.444835][ T3637] memory+swap: usage 432024kB, limit 9007199254740988kB, failcnt 0 [ 44.444875][ T3637] kmem: usage 4312kB, limit 9007199254740988kB, failcnt 0 [ 44.444933][ T3637] Memory cgroup stats for /syz3: [ 44.445425][ T3637] cache 310128640 [ 44.445457][ T3637] rss 28672 [ 44.445479][ T3637] shmem 310120448 [ 44.445506][ T3637] mapped_file 0 [ 44.445527][ T3637] dirty 0 [ 44.445548][ T3637] writeback 0 [ 44.445569][ T3637] workingset_refault_anon 55 [ 44.445590][ T3637] workingset_refault_file 1217 [ 44.445666][ T3637] swap 127819776 [ 44.445694][ T3637] swapcached 178397184 [ 44.445722][ T3637] pgpgin 141786 [ 44.445749][ T3637] pgpgout 66064 [ 44.445776][ T3637] pgfault 9556 [ 44.445798][ T3637] pgmajfault 40 [ 44.445825][ T3637] inactive_anon 272003072 [ 44.445846][ T3637] active_anon 38146048 [ 44.445883][ T3637] inactive_file 4096 [ 44.445913][ T3637] active_file 4096 [ 44.445934][ T3637] unevictable 0 [ 44.445950][ T3637] hierarchical_memory_limit 314572800 [ 44.445979][ T3637] hierarchical_memsw_limit 9223372036854771712 [ 44.446009][ T3637] total_cache 310128640 [ 44.446030][ T3637] total_rss 28672 [ 44.446050][ T3637] total_shmem 310120448 [ 44.446078][ T3637] total_mapped_file 0 [ 44.446098][ T3637] total_dirty 0 [ 44.446118][ T3637] total_writeback 0 [ 44.446166][ T3637] total_workingset_refault_anon 55 [ 44.462407][ T3637] total_workingset_refault_file 1217 [ 44.462454][ T3637] total_swap 127819776 [ 44.462482][ T3637] total_swapcached 178397184 [ 44.462503][ T3637] total_pgpgin 141786 [ 44.462570][ T3637] total_pgpgout 66064 [ 44.462597][ T3637] total_pgfault 9556 [ 44.462673][ T3637] total_pgmajfault 40 [ 44.462694][ T3637] total_inactive_anon 272003072 [ 44.462721][ T3637] total_active_anon 38146048 [ 44.462742][ T3637] total_inactive_file 4096 [ 44.462764][ T3637] total_active_file 4096 [ 44.462822][ T3637] total_unevictable 0 [ 44.462850][ T3637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3640,uid=0 [ 44.463066][ T3637] Memory cgroup out of memory: Killed process 3640 (syz.3.22) total-vm:91272kB, anon-rss:1252kB, file-rss:44100kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 44.567665][ T3634] syz.3.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 44.567747][ T3634] CPU: 0 UID: 0 PID: 3634 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.567851][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.567958][ T3634] Call Trace: [ 44.567980][ T3634] [ 44.568003][ T3634] __dump_stack+0x1d/0x30 [ 44.568083][ T3634] dump_stack_lvl+0x95/0xd0 [ 44.568194][ T3634] dump_stack+0x15/0x1b [ 44.568256][ T3634] dump_header+0x80/0x240 [ 44.568397][ T3634] oom_kill_process+0x294/0x420 [ 44.568478][ T3634] out_of_memory+0x981/0xbc0 [ 44.568542][ T3634] try_charge_memcg+0x6ba/0xae0 [ 44.568733][ T3634] charge_memcg+0x16f/0x220 [ 44.568948][ T3634] __mem_cgroup_charge+0x28/0xb0 [ 44.569028][ T3634] shmem_get_folio_gfp+0x49f/0xd90 [ 44.569142][ T3634] shmem_write_begin+0xfc/0x1f0 [ 44.569344][ T3634] generic_perform_write+0x186/0x490 [ 44.569428][ T3634] ? __mark_inode_dirty+0x1f5/0x700 [ 44.569516][ T3634] shmem_file_write_iter+0xc5/0xf0 [ 44.569614][ T3634] __kernel_write_iter+0x30f/0x590 [ 44.569688][ T3634] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 44.569885][ T3634] dump_user_range+0xa73/0xd00 [ 44.569983][ T3634] elf_core_dump+0x21c0/0x2340 [ 44.570084][ T3634] ? 0xffffffffff600000 [ 44.570229][ T3634] coredump_write+0xafb/0xdd0 [ 44.570408][ T3634] vfs_coredump+0x2750/0x3270 [ 44.570547][ T3634] ? proc_coredump_connector+0x160/0x2c0 [ 44.570690][ T3634] ? kmem_cache_free+0x106/0x3b0 [ 44.570725][ T3634] get_signal+0xd33/0xf10 [ 44.570942][ T3634] arch_do_signal_or_restart+0x96/0x480 [ 44.571034][ T3634] irqentry_exit+0x14d/0x610 [ 44.571107][ T3634] asm_exc_page_fault+0x26/0x30 [ 44.571207][ T3634] RIP: 0033:0x0 [ 44.571244][ T3634] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 44.571273][ T3634] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 44.571322][ T3634] RAX: 0000000000000000 RBX: 00007f8dc5635fa0 RCX: 00007f8dc53ae159 [ 44.571412][ T3634] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000080400 [ 44.571457][ T3634] RBP: 00007f8dc5445024 R08: 0000200000000380 R09: 0000200000000380 [ 44.571494][ T3634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 44.571532][ T3634] R13: 00007f8dc5636038 R14: 00007f8dc5635fa0 R15: 00007ffe92b94b78 [ 44.571668][ T3634] [ 44.634180][ T3634] memory: usage 307200kB, limit 307200kB, failcnt 26055 [ 44.634232][ T3634] memory+swap: usage 432004kB, limit 9007199254740988kB, failcnt 0 [ 44.634291][ T3634] kmem: usage 4312kB, limit 9007199254740988kB, failcnt 0 [ 44.634323][ T3634] Memory cgroup stats for /syz3: [ 44.634764][ T3634] cache 310128640 [ 44.634853][ T3634] rss 28672 [ 44.634872][ T3634] shmem 310120448 [ 44.634893][ T3634] mapped_file 0 [ 44.634914][ T3634] dirty 0 [ 44.634937][ T3634] writeback 0 [ 44.634957][ T3634] workingset_refault_anon 55 [ 44.634985][ T3634] workingset_refault_file 1217 [ 44.635014][ T3634] swap 127799296 [ 44.635035][ T3634] swapcached 178397184 [ 44.635075][ T3634] pgpgin 141786 [ 44.635101][ T3634] pgpgout 66064 [ 44.635127][ T3634] pgfault 9556 [ 44.635152][ T3634] pgmajfault 40 [ 44.635251][ T3634] inactive_anon 38223872 [ 44.635271][ T3634] active_anon 271925248 [ 44.635292][ T3634] inactive_file 0 [ 44.635311][ T3634] active_file 0 [ 44.635357][ T3634] unevictable 0 [ 44.635375][ T3634] hierarchical_memory_limit 314572800 [ 44.635401][ T3634] hierarchical_memsw_limit 9223372036854771712 [ 44.635448][ T3634] total_cache 310128640 [ 44.635473][ T3634] total_rss 28672 [ 44.635492][ T3634] total_shmem 310120448 [ 44.655226][ T3634] total_mapped_file 0 [ 44.655332][ T3634] total_dirty 0 [ 44.655351][ T3634] total_writeback 0 [ 44.655370][ T3634] total_workingset_refault_anon 55 [ 44.655391][ T3634] total_workingset_refault_file 1217 [ 44.655417][ T3634] total_swap 127799296 [ 44.655443][ T3634] total_swapcached 178397184 [ 44.655463][ T3634] total_pgpgin 141786 [ 44.655483][ T3634] total_pgpgout 66064 [ 44.655508][ T3634] total_pgfault 9556 [ 44.655589][ T3634] total_pgmajfault 40 [ 44.655608][ T3634] total_inactive_anon 38223872 [ 44.655634][ T3634] total_active_anon 271925248 [ 44.655807][ T3634] total_inactive_file 0 [ 44.655827][ T3634] total_active_file 0 [ 44.655847][ T3634] total_unevictable 0 [ 44.655867][ T3634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.22,pid=3638,uid=0 [ 44.656090][ T3634] Memory cgroup out of memory: Killed process 3638 (syz.3.22) total-vm:91272kB, anon-rss:1252kB, file-rss:44100kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000