last executing test programs: 3.806951681s ago: executing program 3 (id=7096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) fcntl$setsig(r0, 0xa, 0x4) syz_open_dev$vcsn(0x0, 0xd, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e0000150000000000000022000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000400000000000000000000fe8000000000000000000000000000aa0000"], 0xa8}}, 0x24008000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x20000163, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x37, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000002f40)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7efffff0000ff008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000300000000000086dd6000000000383a00fe880000000000000000000000000101ff0200f700000000000000000000000102009078000005dc608cb02b00092f0000000000000000000000000000000001fe8000000000000000000000000000aa2b00040000100000"], 0x0) r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000200)="dc9a", 0x2, r5) 3.517309276s ago: executing program 3 (id=7098): io_uring_setup(0x7de, &(0x7f00000000c0)={0x0, 0xb3cd, 0x0, 0x0, 0x384}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x30, 0xb, 0xfd, 0x1, 0x0, 0x10001, 0x8009, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0xbcac13edb28a96d4, @perf_bp={&(0x7f00000001c0), 0x5}, 0x400, 0x0, 0x7, 0x5, 0xffffffffffff7300, 0x504, 0x9, 0x0, 0x8, 0x0, 0x2}, r0, 0x2, r0, 0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000800)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0x2, 0xb2, 0x1, 0x0, 0x0, 0xb32b, 0x0, 0x20009}) preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x1c0, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2ff}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x20}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x34}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x101}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x1008}, {0x8, 0x15, 0xf987}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000020}, 0x20048040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) migrate_pages(0x0, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.082801328s ago: executing program 0 (id=7115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) read(r0, &(0x7f0000000080)=""/71, 0x47) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050900", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r7 = socket$kcm(0x10, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="2e0000001000810000000000000600cca7480ef410000000e3bd6efb020511000b000a000d000000ba6700001201652f741f76b2fe2b23265506f7a81307f7660c25a92011e029caa57163ea8c914943092abf48cef141b3dfdd3bb4861a29896633738f414a3aa6940cdee00b573bf6f272769d95158fc103ff443944218964727cffe79a45a005a3b3f3d7e08e29c2dd2c41cf4f9071080a3b341d1a946d0e2f8d", 0xa2}, {&(0x7f0000000500)="3ca3290800c694ef9e16ac3a9ef947aa73f569a968a2bd8729ca220716a4b032de44bf7f6c24107d4c76e0ddeac22ff818d32113d0c628faf9cd1cb6307a1ab917b0fe069ad2c0df938a60dd550b73b833186babe2cae38eb7749cad01765e59fed125478c360d6407b12fe2b2703028c5e1a0d3ce376fed2162c478bd8f7f38fee8cef7b04d6f24b8c675766762fdc6f31737ddd8b91e39d13dcf25f08c20d44ebc972b09cde3ecbb8e73d0438436d5f0692b4eac29c1d806f6db8660b911155c5bad602531", 0xc6}], 0x2, 0x0, 0x0, 0xc9e}, 0x0) 1.98601167s ago: executing program 1 (id=7118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3b52, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) 1.98452465s ago: executing program 1 (id=7119): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/219, 0xdb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@debug}, {@bh}, {@acl}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") 1.93077551s ago: executing program 2 (id=7120): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000014000000000000000000000000000800000095000000000000003b3669805871f4f544ccffb4debc4953f38744dae7e358167083089c7d81d386f3325508000000008000001d571692e1fe353e71f946484379e5c373d5716924b0c0915aa5b57a8ebb3f44f3c00a69e092fc1a"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f0000001240)="$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") statx(r0, &(0x7f0000000500)='./file1\x00', 0x2000, 0x0, &(0x7f0000000540)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYBLOB='\x00\x00\f\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 1.860485662s ago: executing program 3 (id=7121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) fcntl$setsig(r0, 0xa, 0x4) syz_open_dev$vcsn(0x0, 0xd, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e0000150000000000000022000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000400000000000000000000fe8000000000000000000000000000aa0000"], 0xa8}}, 0x24008000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x20000163, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x37, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000002f40)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7efffff0000ff008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000300000000000086dd6000000000383a00fe880000000000000000000000000101ff0200f700000000000000000000000102009078000005dc608cb02b00092f0000000000000000000000000000000001fe8000000000000000000000000000aa2b00040000100000"], 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000200)="dc9a", 0x2, r5) 1.813186592s ago: executing program 1 (id=7123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x163, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12d, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x9, 0x2f, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [@routing={0x1d, 0x4, 0x2, 0xcd, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @local}]}], "ea40cd3d14a2318b99b0270f0ddd30ebce3ebbc1123b2055f0d0c183bd4eca12a15790fc43be491851233a42df762c55b881cd5d465b340d1f91f846504fa26ff9889a50e1ce812813b8560d3cdb7e384489fc1f34e559cd94f33bf81ec3fcb31422c02491a4df125ef1deeceb6c489338eddb4026e99a190c690800000000000000802e319614dc2100502a04da40c5c69c1c98445368045d8c26779d2b7a7988977deedb5fa1e19a73e1fe7d201a8f0746ed89d6cfae2a28f4607782b7724b35d0178404abe5574d5957dbc6682ffddcc4250550"}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1a) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x0, 0x7, 0xb}]}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r12}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r12, 0x2f, 0x86, 0x0, 0x2, 0x2e, @dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, 0x1, 0x80, 0x40005, 0x9}}) r13 = socket$nl_route(0x10, 0x3, 0x0) dup2(r13, r13) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000406, &(0x7f00000003c0), 0xff, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") 1.688870764s ago: executing program 4 (id=7124): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r3, 0x13, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='ext4_sync_file_enter\x00', r2, 0x0, 0x9}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r5, 0x4, 0x7c00) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) dup3(r6, r5, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x20d01, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r5, r2, 0xa, 0x10, 0x0, @void, @value=r7, @void, @void, r4}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r8, 0xffffffffffffffff, 0xf, 0x2035, r0, @void, @void, @value=r9, @void, r4}, 0x20) 1.687781964s ago: executing program 3 (id=7125): io_uring_setup(0x7de, &(0x7f00000000c0)={0x0, 0xb3cd, 0x0, 0x0, 0x384}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x30, 0xb, 0xfd, 0x1, 0x0, 0x10001, 0x8009, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0xbcac13edb28a96d4, @perf_bp={&(0x7f00000001c0), 0x5}, 0x400, 0x0, 0x7, 0x5, 0xffffffffffff7300, 0x504, 0x9, 0x0, 0x8, 0x0, 0x2}, r0, 0x2, r0, 0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000800)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0x2, 0xb2, 0x1, 0x0, 0x0, 0xb32b, 0x0, 0x20009}) preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x1c0, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2ff}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x20}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x34}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x101}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x1008}, {0x8, 0x15, 0xf987}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000020}, 0x20048040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) migrate_pages(0x0, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.685376434s ago: executing program 2 (id=7126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00"/11], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2, 0x0, 0x7}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x5608, 0x3) 1.683844834s ago: executing program 0 (id=7127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) 1.640454285s ago: executing program 0 (id=7128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.633388935s ago: executing program 2 (id=7129): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r4, r4, 0x0, 0x40000f63c) sendmsg$key(r0, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x4000) 1.575128306s ago: executing program 0 (id=7130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x41, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xaa62e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x64000600) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x3, 0x5, {r8, r9/1000+60000}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "48831353cca337fa"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6t\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) socket(0x1, 0x803, 0x0) 1.561207276s ago: executing program 2 (id=7131): io_uring_setup(0x7de, &(0x7f00000000c0)={0x0, 0xb3cd, 0x0, 0x0, 0x384}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x30, 0xb, 0xfd, 0x1, 0x0, 0x10001, 0x8009, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0xbcac13edb28a96d4, @perf_bp={&(0x7f00000001c0), 0x5}, 0x400, 0x0, 0x7, 0x5, 0xffffffffffff7300, 0x504, 0x9, 0x0, 0x8, 0x0, 0x2}, r0, 0x2, r0, 0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000800)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0x2, 0xb2, 0x1, 0x0, 0x0, 0xb32b, 0x0, 0x20009}) preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x1c0, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2ff}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x20}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x34}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x101}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x1008}, {0x8, 0x15, 0xf987}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000020}, 0x20048040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) migrate_pages(0x0, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.451104208s ago: executing program 1 (id=7132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0xbe02, 0x1000, 0x8003, 0x1c2}, 0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) 1.218096582s ago: executing program 1 (id=7133): r0 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) pipe2$9p(&(0x7f0000000000), 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00'], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') unshare(0x6060600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xf0588357b60851c) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x48940, 0x0) 696.94124ms ago: executing program 4 (id=7134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c0, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBn8meSO4uksBLBAS2sjttrbbLIHoiplBRqoYt3B5IE4Q4WPMVgZWtj6ScQBDu/hI3gBxD8AHZecfDKJDMkucufDVxu1fv9iuyz877P+z7vzGR3YZk3n7w6Hd8p4t43X/0R3W4WjUEM4lEW/WhELaWUYmnwXQAA/2WPUoq/0sIlUwblSxbR7R63NADgSA7+/f/z0UsCAI7s/Q8+fPd0ODx7ryi6cXv67cUoi4jy66L99F58FpO4GzejF48X/wuo/1ooX2+nlGatotSPN6azi1GZOf3412r803qik+hFfx6t578zPDspFlbyZ2Ud16v5B+X8t6IXL6/PH1X+rQ35McrjzddX6r8Rvfjt0/g8JnFnnrqc/+uTong7ff/3lx+V5ZX52exi1Jn3W0rN53dVAAAAAAAAAAAAAAAAAAAAAAD4v7tR7Z3Tifn+PeWhav+d5uPym3YUtf76/jyL/Kwe6In9gWYpfkip04oYnt0siiJVHZf5rXilFa2rWTUAAAAAAAAAAAAAAAAAAAD8uzz44uH4fDK5e39D8Pv1iC1NW4J6N4D6sf49Wc1tTYOVI6/Fw/F5Z/uAK02NKtwxaTTrPlnEzuVEq12P3D/oJBweXNtW848/HTpgd3+f9q7z82yC+u4an2exsU8n6iPd+pr+stonj0vOlW9rSvtvv5Ug39jUO3jt+UvzYLajT2S7Cnvrz8WZq45kT64in5/Vjentld04Nt8bm6/FtnfKU7L52zp/dj98AAAAAAAAAAAAAAAAAACANcuHfp9qurYntZE6RysLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6r5ef/HxDMquRLdM7j/oMrXiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgH8CAAD//4cGVUU=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 687.8373ms ago: executing program 3 (id=7135): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0, 0x0, 0x7}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5608, 0x3) 607.780771ms ago: executing program 4 (id=7136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) fcntl$setsig(r0, 0xa, 0x4) syz_open_dev$vcsn(0x0, 0xd, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e0000150000000000000022000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000400000000000000000000fe8000000000000000000000000000aa0000"], 0xa8}}, 0x24008000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x20000163, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x37, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000002f40)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7efffff0000ff008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000300000000000086dd6000000000383a00fe880000000000000000000000000101ff0200f700000000000000000000000102009078000005dc608cb02b00092f0000000000000000000000000000000001fe8000000000000000000000000000aa2b00040000100000"], 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000200)="dc9a", 0x2, r5) 606.376871ms ago: executing program 0 (id=7137): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000014000000000000000000000000000800000095000000000000003b3669805871f4f544ccffb4debc4953f38744dae7e358167083089c7d81d386f3325508000000008000001d571692e1fe353e71f946484379e5c373d5716924b0c0915aa5b57a8ebb3f44f3c00a69e092fc1a"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f0000001240)="$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") statx(r0, &(0x7f0000000500)='./file1\x00', 0x2000, 0x0, &(0x7f0000000540)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYBLOB='\x00\x00\f\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 518.666342ms ago: executing program 3 (id=7138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) read(r0, &(0x7f0000000080)=""/71, 0x47) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050900", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r7 = socket$kcm(0x10, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="2e0000001000810000000000000600cca7480ef410000000e3bd6efb020511000b000a000d000000ba6700001201652f741f76b2fe2b23265506f7a81307f7660c25a92011e029caa57163ea8c914943092abf48cef141b3dfdd3bb4861a29896633738f414a3aa6940cdee00b573bf6f272769d95158fc103ff443944218964727cffe79a45a005a3b3f3d7e08e29c2dd2c41cf4f9071080a3b341d1a946d0e2f8d", 0xa2}, {&(0x7f0000000500)="3ca3290800c694ef9e16ac3a9ef947aa73f569a968a2bd8729ca220716a4b032de44bf7f6c24107d4c76e0ddeac22ff818d32113d0c628faf9cd1cb6307a1ab917b0fe069ad2c0df938a60dd550b73b833186babe2cae38eb7749cad01765e59fed125478c360d6407b12fe2b2703028c5e1a0d3ce376fed2162c478bd8f7f38fee8cef7b04d6f24b8c675766762fdc6f31737ddd8b91e39d13dcf25f08c20d44ebc972b09cde3ecbb8e73d0438436d5f0692b4eac29c1d806f6db8660b911155c5bad602531", 0xc6}], 0x2, 0x0, 0x0, 0xc9e}, 0x0) 518.210152ms ago: executing program 4 (id=7139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) 516.561102ms ago: executing program 2 (id=7140): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000014000000000000000000000000000800000095000000000000003b3669805871f4f544ccffb4debc4953f38744dae7e358167083089c7d81d386f3325508000000008000001d571692e1fe353e71f946484379e5c373d5716924b0c0915aa5b57a8ebb3f44f3c00a69e092fc1a"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f0000001240)="$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") statx(r0, &(0x7f0000000500)='./file1\x00', 0x2000, 0x0, &(0x7f0000000540)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\f\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 461.174563ms ago: executing program 4 (id=7141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 318.047725ms ago: executing program 4 (id=7142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) 83.422709ms ago: executing program 1 (id=7143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x163, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12d, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x9, 0x2f, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [@routing={0x1d, 0x4, 0x2, 0xcd, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @local}]}], "ea40cd3d14a2318b99b0270f0ddd30ebce3ebbc1123b2055f0d0c183bd4eca12a15790fc43be491851233a42df762c55b881cd5d465b340d1f91f846504fa26ff9889a50e1ce812813b8560d3cdb7e384489fc1f34e559cd94f33bf81ec3fcb31422c02491a4df125ef1deeceb6c489338eddb4026e99a190c690800000000000000802e319614dc2100502a04da40c5c69c1c98445368045d8c26779d2b7a7988977deedb5fa1e19a73e1fe7d201a8f0746ed89d6cfae2a28f4607782b7724b35d0178404abe5574d5957dbc6682ffddcc4250550"}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1a) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x0, 0x7, 0xb}]}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r12}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r12, 0x2f, 0x86, 0x0, 0x2, 0x2e, @dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, 0x1, 0x80, 0x40005, 0x9}}) r13 = socket$nl_route(0x10, 0x3, 0x0) dup2(r13, r13) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000406, &(0x7f00000003c0), 0xff, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") 34.51044ms ago: executing program 2 (id=7144): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@debug}, {@bh}, {@acl}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") 0s ago: executing program 0 (id=7145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0xbe02, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) kernel console output (not intermixed with test programs): 515] active_file 0 [ 459.535954][T22551] team_slave_1: entered allmulticast mode [ 459.541603][T22515] unevictable 0 [ 459.541615][T22515] hierarchical_memory_limit 314572800 [ 459.661968][T22561] loop0: detected capacity change from 0 to 164 [ 459.665148][T22515] hierarchical_memsw_limit 9223372036854771712 [ 459.665164][T22515] total_cache 8192 [ 459.665174][T22515] total_rss 0 [ 459.672606][T22561] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 459.678657][T22515] total_shmem 0 [ 459.678668][T22515] total_mapped_file 0 [ 459.678676][T22515] total_dirty 0 [ 459.678685][T22515] total_writeback 0 [ 459.678695][T22515] total_workingset_refault_anon 1151 [ 459.685819][T22561] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 459.686084][T22515] total_workingset_refault_file 12012 [ 459.690657][T22561] Symlink component flag not implemented [ 459.693866][T22515] total_swap 471040 [ 459.697755][T22561] Symlink component flag not implemented [ 459.702891][T22515] total_swapcached 4096 [ 459.702905][T22515] total_pgpgin 943085 [ 459.706544][T22561] Symlink component flag not implemented (7) [ 459.712204][T22515] total_pgpgout 943081 [ 459.712217][T22515] total_pgfault 694394 [ 459.716211][T22561] Symlink component flag not implemented (116) [ 459.719664][T22515] total_pgmajfault 657 [ 459.719676][T22515] total_inactive_anon 4096 [ 459.719686][T22515] total_active_anon 0 [ 459.719694][T22515] total_inactive_file 12288 [ 459.719702][T22515] total_active_file 0 [ 459.719709][T22515] total_unevictable 0 [ 459.719717][T22515] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6630,pid=22515,uid=0 [ 459.880396][T22515] Memory cgroup out of memory: Killed process 22515 (syz.4.6630) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 460.042299][T20930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.234266][T22585] gre0: entered promiscuous mode [ 460.270967][T22587] loop4: detected capacity change from 0 to 256 [ 460.285049][T22587] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 460.305309][T22587] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 460.454875][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6658'. [ 460.974591][T22605] loop1: detected capacity change from 0 to 164 [ 460.982329][T22605] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 460.991280][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 460.991372][ T29] audit: type=1400 audit(1749570785.017:21049): avc: denied { mount } for pid=22604 comm="syz.1.6660" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 460.997801][T22605] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 461.023331][ T29] audit: type=1400 audit(1749570785.045:21050): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30030 daddr=10.128.1.140 dest=50420 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.030871][T22605] Symlink component flag not implemented [ 461.059441][T22605] Symlink component flag not implemented [ 461.066544][T22605] Symlink component flag not implemented (7) [ 461.072665][T22605] Symlink component flag not implemented (116) [ 461.077314][ T29] audit: type=1400 audit(1749570785.092:21051): avc: denied { read write } for pid=20740 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 461.102464][ T29] audit: type=1400 audit(1749570785.092:21052): avc: denied { open } for pid=20740 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 461.126602][ T29] audit: type=1400 audit(1749570785.092:21053): avc: denied { create } for pid=22604 comm="syz.1.6660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 461.147066][ T29] audit: type=1400 audit(1749570785.092:21054): avc: denied { map_create } for pid=22604 comm="syz.1.6660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 461.157609][T22610] loop0: detected capacity change from 0 to 512 [ 461.166409][ T29] audit: type=1400 audit(1749570785.092:21055): avc: denied { perfmon } for pid=22604 comm="syz.1.6660" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 461.193924][ T29] audit: type=1400 audit(1749570785.092:21056): avc: denied { map_read map_write } for pid=22604 comm="syz.1.6660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 461.214077][ T29] audit: type=1400 audit(1749570785.120:21057): avc: denied { prog_load } for pid=22604 comm="syz.1.6660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 461.230344][T22610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.233354][ T29] audit: type=1400 audit(1749570785.120:21058): avc: denied { bpf } for pid=22604 comm="syz.1.6660" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 461.247980][T22610] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.398028][T22622] netlink: 'syz.0.6662': attribute type 1 has an invalid length. [ 461.415559][T22623] serio: Serial port ptm0 [ 461.881557][T22610] syz.0.6662 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 461.896052][T22610] CPU: 1 UID: 0 PID: 22610 Comm: syz.0.6662 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 461.896091][T22610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.896113][T22610] Call Trace: [ 461.896202][T22610] [ 461.896218][T22610] __dump_stack+0x1d/0x30 [ 461.896253][T22610] dump_stack_lvl+0xe8/0x140 [ 461.896276][T22610] dump_stack+0x15/0x1b [ 461.896300][T22610] dump_header+0x81/0x220 [ 461.896407][T22610] oom_kill_process+0x334/0x3f0 [ 461.896458][T22610] out_of_memory+0x979/0xb80 [ 461.896498][T22610] try_charge_memcg+0x5e6/0x9e0 [ 461.896534][T22610] obj_cgroup_charge_pages+0xa6/0x150 [ 461.896579][T22610] __memcg_kmem_charge_page+0x9f/0x170 [ 461.896625][T22610] __alloc_frozen_pages_noprof+0x188/0x360 [ 461.896725][T22610] alloc_pages_mpol+0xb3/0x250 [ 461.896816][T22610] alloc_pages_noprof+0x90/0x130 [ 461.896859][T22610] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 461.896927][T22610] __kvmalloc_node_noprof+0x30f/0x4e0 [ 461.897031][T22610] ? ip_set_alloc+0x1f/0x30 [ 461.897079][T22610] ? ip_set_alloc+0x1f/0x30 [ 461.897119][T22610] ? __kmalloc_cache_noprof+0x189/0x320 [ 461.897217][T22610] ip_set_alloc+0x1f/0x30 [ 461.897264][T22610] hash_netiface_create+0x282/0x740 [ 461.897308][T22610] ? __pfx_hash_netiface_create+0x10/0x10 [ 461.897366][T22610] ip_set_create+0x3cc/0x960 [ 461.897397][T22610] ? __nla_parse+0x40/0x60 [ 461.897481][T22610] nfnetlink_rcv_msg+0x4c3/0x590 [ 461.897539][T22610] ? selinux_capable+0x1f9/0x270 [ 461.897605][T22610] netlink_rcv_skb+0x120/0x220 [ 461.897647][T22610] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 461.897693][T22610] nfnetlink_rcv+0x16b/0x1690 [ 461.897788][T22610] ? __kfree_skb+0x109/0x150 [ 461.897815][T22610] ? nlmon_xmit+0x4f/0x60 [ 461.897864][T22610] ? consume_skb+0x49/0x150 [ 461.897934][T22610] ? nlmon_xmit+0x4f/0x60 [ 461.897961][T22610] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 461.898187][T22610] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 461.898222][T22610] ? __dev_queue_xmit+0x182/0x1fb0 [ 461.898291][T22610] ? ref_tracker_free+0x37d/0x3e0 [ 461.898353][T22610] ? __netlink_deliver_tap+0x4dc/0x500 [ 461.898388][T22610] netlink_unicast+0x5a1/0x670 [ 461.898441][T22610] netlink_sendmsg+0x58b/0x6b0 [ 461.898516][T22610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.898562][T22610] __sock_sendmsg+0x142/0x180 [ 461.898604][T22610] ____sys_sendmsg+0x31e/0x4e0 [ 461.898714][T22610] ___sys_sendmsg+0x17b/0x1d0 [ 461.898743][T22610] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 461.898806][T22610] __x64_sys_sendmsg+0xd4/0x160 [ 461.898838][T22610] x64_sys_call+0x2999/0x2fb0 [ 461.898917][T22610] do_syscall_64+0xd2/0x200 [ 461.898942][T22610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 461.898978][T22610] ? clear_bhb_loop+0x40/0x90 [ 461.899267][T22610] ? clear_bhb_loop+0x40/0x90 [ 461.899302][T22610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.899329][T22610] RIP: 0033:0x7f5b8b5de929 [ 461.899371][T22610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.899457][T22610] RSP: 002b:00007f5b89c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.899488][T22610] RAX: ffffffffffffffda RBX: 00007f5b8b805fa0 RCX: 00007f5b8b5de929 [ 461.899503][T22610] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 000000000000000b [ 461.899577][T22610] RBP: 00007f5b8b660b39 R08: 0000000000000000 R09: 0000000000000000 [ 461.899594][T22610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.899611][T22610] R13: 0000000000000000 R14: 00007f5b8b805fa0 R15: 00007ffd594e7ed8 [ 461.899636][T22610] [ 461.899698][T22610] memory: usage 307200kB, limit 307200kB, failcnt 2257 [ 462.260508][T22610] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 462.268632][T22610] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 462.276033][T22610] Memory cgroup stats for /syz0: [ 462.276436][T22610] cache 24576 [ 462.284819][T22610] rss 0 [ 462.287638][T22610] shmem 0 [ 462.290642][T22610] mapped_file 0 [ 462.294103][T22610] dirty 0 [ 462.297056][T22610] writeback 0 [ 462.300393][T22610] workingset_refault_anon 1682 [ 462.305215][T22610] workingset_refault_file 15943 [ 462.310117][T22610] swap 479232 [ 462.313459][T22610] swapcached 0 [ 462.316851][T22610] pgpgin 1025116 [ 462.320510][T22610] pgpgout 1025110 [ 462.324168][T22610] pgfault 658193 [ 462.327734][T22610] pgmajfault 601 [ 462.331448][T22610] inactive_anon 0 [ 462.335109][T22610] active_anon 0 [ 462.338599][T22610] inactive_file 24576 [ 462.342695][T22610] active_file 0 [ 462.346209][T22610] unevictable 0 [ 462.349034][T22642] loop1: detected capacity change from 0 to 256 [ 462.349716][T22610] hierarchical_memory_limit 314572800 [ 462.359902][T22642] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.361396][T22610] hierarchical_memsw_limit 9223372036854771712 [ 462.361411][T22610] total_cache 24576 [ 462.379844][T22642] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.383232][T22610] total_rss 0 [ 462.383244][T22610] total_shmem 0 [ 462.383254][T22610] total_mapped_file 0 [ 462.383265][T22610] total_dirty 0 [ 462.383272][T22610] total_writeback 0 [ 462.383279][T22610] total_workingset_refault_anon 1682 [ 462.383288][T22610] total_workingset_refault_file 15943 [ 462.383297][T22610] total_swap 479232 [ 462.383304][T22610] total_swapcached 0 [ 462.383312][T22610] total_pgpgin 1025116 [ 462.383320][T22610] total_pgpgout 1025110 [ 462.383327][T22610] total_pgfault 658193 [ 462.383369][T22610] total_pgmajfault 601 [ 462.383377][T22610] total_inactive_anon 0 [ 462.383385][T22610] total_active_anon 0 [ 462.455106][T22610] total_inactive_file 24576 [ 462.459792][T22610] total_active_file 0 [ 462.463789][T22610] total_unevictable 0 [ 462.467844][T22610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6662,pid=22609,uid=0 [ 462.482763][T22610] Memory cgroup out of memory: Killed process 22609 (syz.0.6662) total-vm:93752kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 462.617810][T22645] netlink: 'syz.1.6675': attribute type 10 has an invalid length. [ 462.626494][T22645] team0: left allmulticast mode [ 462.642179][T22645] team_slave_0: left allmulticast mode [ 462.647756][T22645] team_slave_1: left allmulticast mode [ 462.653337][T22645] team0: left promiscuous mode [ 462.672971][T22645] team_slave_0: left promiscuous mode [ 462.673010][T22653] netlink: 'syz.1.6675': attribute type 10 has an invalid length. [ 462.686496][T22645] team_slave_1: left promiscuous mode [ 462.692211][T22645] bridge0: port 3(team0) entered disabled state [ 462.737493][T22653] team0: entered promiscuous mode [ 462.748136][T22653] team_slave_0: entered promiscuous mode [ 462.754017][T22653] team_slave_1: entered promiscuous mode [ 462.762224][T22653] bridge0: port 3(team0) entered blocking state [ 462.768601][T22653] bridge0: port 3(team0) entered disabled state [ 462.775443][T22653] team0: entered allmulticast mode [ 462.781175][T22653] team_slave_0: entered allmulticast mode [ 462.786994][T22653] team_slave_1: entered allmulticast mode [ 462.795361][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.872182][T22661] gre0: entered promiscuous mode [ 462.895642][T22671] loop3: detected capacity change from 0 to 164 [ 462.903611][T22671] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 462.913478][T22671] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 462.925689][T22671] Symlink component flag not implemented [ 462.931547][T22671] Symlink component flag not implemented [ 462.937873][T22671] Symlink component flag not implemented (7) [ 462.943963][T22671] Symlink component flag not implemented (116) [ 463.006472][T22683] loop3: detected capacity change from 0 to 256 [ 463.013617][T22683] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.026368][T22683] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 463.060760][T22685] usb usb8: usbfs: process 22685 (syz.3.6691) did not claim interface 0 before use [ 463.126988][T22692] loop4: detected capacity change from 0 to 2048 [ 463.154322][T22694] __nla_validate_parse: 4 callbacks suppressed [ 463.154341][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6691'. [ 463.175854][T22692] loop4: p1 < > p4 [ 463.181164][T22692] loop4: p4 size 8388608 extends beyond EOD, truncated [ 463.214148][T22698] loop4: detected capacity change from 0 to 512 [ 463.230444][T22698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.243601][T22698] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.315761][T22702] netlink: 'syz.4.6695': attribute type 1 has an invalid length. [ 463.323684][T22702] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6695'. [ 463.733752][T22709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6698'. [ 463.749532][T22708] netlink: 'syz.2.6698': attribute type 10 has an invalid length. [ 463.758660][T22708] team0: left allmulticast mode [ 463.763787][T22708] team_slave_0: left allmulticast mode [ 463.769328][T22708] team_slave_1: left allmulticast mode [ 463.774847][T22708] team0: left promiscuous mode [ 463.796426][T22708] team_slave_0: left promiscuous mode [ 463.801976][T22708] team_slave_1: left promiscuous mode [ 463.807742][T22708] bridge0: port 3(team0) entered disabled state [ 463.815479][T22709] netlink: 'syz.2.6698': attribute type 10 has an invalid length. [ 463.823451][T22709] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6698'. [ 463.833665][T22709] team0: entered promiscuous mode [ 463.841543][T22709] team_slave_0: entered promiscuous mode [ 463.847595][T22709] team_slave_1: entered promiscuous mode [ 463.854496][T22697] syz.4.6695 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 463.865559][T22697] CPU: 0 UID: 0 PID: 22697 Comm: syz.4.6695 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 463.865595][T22697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.865661][T22697] Call Trace: [ 463.865671][T22697] [ 463.865682][T22697] __dump_stack+0x1d/0x30 [ 463.865740][T22697] dump_stack_lvl+0xe8/0x140 [ 463.865776][T22697] dump_stack+0x15/0x1b [ 463.865798][T22697] dump_header+0x81/0x220 [ 463.865841][T22697] oom_kill_process+0x334/0x3f0 [ 463.865873][T22697] out_of_memory+0x979/0xb80 [ 463.865976][T22697] try_charge_memcg+0x5e6/0x9e0 [ 463.866010][T22697] charge_memcg+0x51/0xc0 [ 463.866107][T22697] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 463.866222][T22697] __read_swap_cache_async+0x1df/0x350 [ 463.866267][T22697] swap_cluster_readahead+0x277/0x3e0 [ 463.866372][T22697] swapin_readahead+0xde/0x6f0 [ 463.866458][T22697] ? __filemap_get_folio+0x49f/0x650 [ 463.866533][T22697] ? __rcu_read_unlock+0x34/0x70 [ 463.866565][T22697] ? swap_cache_get_folio+0x77/0x200 [ 463.866613][T22697] do_swap_page+0x301/0x2430 [ 463.866633][T22697] ? css_rstat_updated+0xcd/0x5b0 [ 463.866677][T22697] ? __pfx_default_wake_function+0x10/0x10 [ 463.866727][T22697] handle_mm_fault+0x9a5/0x2be0 [ 463.866764][T22697] ? mas_walk+0xf2/0x120 [ 463.866791][T22697] do_user_addr_fault+0x636/0x1090 [ 463.866908][T22697] exc_page_fault+0x62/0xa0 [ 463.866945][T22697] asm_exc_page_fault+0x26/0x30 [ 463.866970][T22697] RIP: 0033:0x7efe21d5538c [ 463.866990][T22697] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 463.867011][T22697] RSP: 002b:00007ffd1e59a010 EFLAGS: 00010287 [ 463.867071][T22697] RAX: 0000000000000000 RBX: 00007efe220a7040 RCX: 0000000000000000 [ 463.867142][T22697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557d4a5808 [ 463.867154][T22697] RBP: 00007efe220a7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 463.867167][T22697] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000006f985 [ 463.867181][T22697] R13: 00007efe220a6080 R14: ffffffffffffffff R15: 00007ffd1e59a120 [ 463.867205][T22697] [ 463.867213][T22697] memory: usage 307200kB, limit 307200kB, failcnt 1904 [ 463.903171][T22709] bridge0: port 3(team0) entered blocking state [ 463.905215][T22697] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 463.909390][T22709] bridge0: port 3(team0) entered disabled state [ 463.913693][T22697] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 463.913758][T22697] Memory cgroup stats for [ 463.928041][T22709] team0: entered allmulticast mode [ 463.928075][T22709] team_slave_0: entered allmulticast mode [ 463.928095][T22709] team_slave_1: entered allmulticast mode [ 463.932417][T22697] /syz4: [ 463.934520][T22697] cache 32768 [ 464.068754][T22718] loop3: detected capacity change from 0 to 164 [ 464.071323][T22697] rss 0 [ 464.071334][T22697] shmem 0 [ 464.071343][T22697] mapped_file 0 [ 464.096156][T22718] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 464.103659][T22697] dirty 0 [ 464.103672][T22697] writeback 0 [ 464.103682][T22697] workingset_refault_anon 1221 [ 464.103691][T22697] workingset_refault_file 12206 [ 464.103699][T22697] swap 475136 [ 464.103706][T22697] swapcached 0 [ 464.103713][T22697] pgpgin 950061 [ 464.103720][T22697] pgpgout 950052 [ 464.103727][T22697] pgfault 702163 [ 464.103746][T22697] pgmajfault 706 [ 464.122873][T22718] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 464.126912][T22697] inactive_anon 0 [ 464.126925][T22697] active_anon 0 [ 464.126936][T22697] inactive_file 0 [ 464.133482][T22718] Symlink component flag not implemented [ 464.138496][T22697] active_file 36864 [ 464.138580][T22697] unevictable 0 [ 464.141434][T22718] Symlink component flag not implemented [ 464.141938][T22718] Symlink component flag not implemented (7) [ 464.144719][T22697] hierarchical_memory_limit 314572800 [ 464.144733][T22697] hierarchical_memsw_limit 9223372036854771712 [ 464.151022][T22718] Symlink component flag not implemented (116) [ 464.153776][T22697] total_cache 32768 [ 464.270827][T22697] total_rss 0 [ 464.270840][T22697] total_shmem 0 [ 464.270849][T22697] total_mapped_file 0 [ 464.270892][T22697] total_dirty 0 [ 464.270900][T22697] total_writeback 0 [ 464.270908][T22697] total_workingset_refault_anon 1221 [ 464.270951][T22697] total_workingset_refault_file 12206 [ 464.270963][T22697] total_swap 475136 [ 464.270972][T22697] total_swapcached 0 [ 464.270982][T22697] total_pgpgin 950061 [ 464.270991][T22697] total_pgpgout 950052 [ 464.271046][T22697] total_pgfault 702163 [ 464.271055][T22697] total_pgmajfault 706 [ 464.271064][T22697] total_inactive_anon 0 [ 464.271072][T22697] total_active_anon 0 [ 464.271079][T22697] total_inactive_file 0 [ 464.271087][T22697] total_active_file 36864 [ 464.271156][T22697] total_unevictable 0 [ 464.271167][T22697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6695,pid=22697,uid=0 [ 464.271287][T22697] Memory cgroup out of memory: Killed process 22697 (syz.4.6695) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 464.349458][T22721] loop2: detected capacity change from 0 to 256 [ 464.350187][T22721] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 464.354930][T22721] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.590156][T20930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.673045][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6709'. [ 464.819977][T22754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6713'. [ 464.833307][T22751] netlink: 'syz.4.6713': attribute type 10 has an invalid length. [ 464.841291][T22751] team0: left allmulticast mode [ 464.846228][T22751] team_slave_0: left allmulticast mode [ 464.851777][T22751] team_slave_1: left allmulticast mode [ 464.857481][T22751] team0: left promiscuous mode [ 464.862366][T22751] team_slave_0: left promiscuous mode [ 464.867984][T22751] team_slave_1: left promiscuous mode [ 464.873570][T22751] bridge0: port 3(team0) entered disabled state [ 464.881017][T22751] netlink: 'syz.4.6713': attribute type 10 has an invalid length. [ 464.888910][T22751] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6713'. [ 464.897810][T22751] team0: entered promiscuous mode [ 464.902922][T22751] team_slave_0: entered promiscuous mode [ 464.908761][T22751] team_slave_1: entered promiscuous mode [ 464.914597][T22751] bridge0: port 3(team0) entered blocking state [ 464.921056][T22751] bridge0: port 3(team0) entered disabled state [ 464.921801][T22756] hub 4-0:1.0: USB hub found [ 464.927550][T22751] team0: entered allmulticast mode [ 464.932376][T22756] hub 4-0:1.0: 8 ports detected [ 464.937173][T22751] team_slave_0: entered allmulticast mode [ 464.948294][T22751] team_slave_1: entered allmulticast mode [ 465.034798][T22758] loop4: detected capacity change from 0 to 164 [ 465.042330][T22758] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 465.051822][T22758] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 465.060461][T22758] Symlink component flag not implemented [ 465.066135][T22758] Symlink component flag not implemented [ 465.072248][T22758] Symlink component flag not implemented (7) [ 465.078272][T22758] Symlink component flag not implemented (116) [ 465.121675][T22761] loop4: detected capacity change from 0 to 256 [ 465.128593][T22761] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 465.141168][T22761] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 465.689939][T22788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6726'. [ 465.701857][T22782] netlink: 'syz.3.6726': attribute type 10 has an invalid length. [ 465.719511][T22782] team0: left allmulticast mode [ 465.724432][T22782] team_slave_0: left allmulticast mode [ 465.730075][T22782] team_slave_1: left allmulticast mode [ 465.735619][T22782] team0: left promiscuous mode [ 465.742167][T22782] team_slave_0: left promiscuous mode [ 465.747918][T22782] team_slave_1: left promiscuous mode [ 465.754536][T22782] bridge0: port 3(team0) entered disabled state [ 465.761841][T22788] netlink: 'syz.3.6726': attribute type 10 has an invalid length. [ 465.769759][T22788] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6726'. [ 465.779650][T22788] team0: entered promiscuous mode [ 465.784881][T22788] team_slave_0: entered promiscuous mode [ 465.790674][T22788] team_slave_1: entered promiscuous mode [ 465.796628][T22788] bridge0: port 3(team0) entered blocking state [ 465.803047][T22788] bridge0: port 3(team0) entered disabled state [ 465.809827][T22788] team0: entered allmulticast mode [ 465.814988][T22788] team_slave_0: entered allmulticast mode [ 465.820898][T22788] team_slave_1: entered allmulticast mode [ 465.861407][T22790] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 466.091140][T22800] loop4: detected capacity change from 0 to 2048 [ 466.091260][T22797] lo speed is unknown, defaulting to 1000 [ 466.140389][T22797] loop3: detected capacity change from 0 to 512 [ 466.147362][T22797] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.153850][T22797] EXT4-fs: Ignoring removed bh option [ 466.159869][T22797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 466.160159][T22800] loop4: p1 < > p4 [ 466.169733][T22797] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 466.183479][T22800] loop4: p4 size 8388608 extends beyond EOD, truncated [ 466.448576][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 466.448693][ T29] audit: type=1400 audit(1749570790.116:21359): avc: denied { recv } for pid=21202 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.1.140 dest=50420 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 466.487562][ T29] audit: type=1400 audit(1749570790.153:21360): avc: denied { read write } for pid=21202 comm="syz-executor" name="loop1" dev="devtmpfs" ino=1434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 466.511349][ T29] audit: type=1400 audit(1749570790.153:21361): avc: denied { open } for pid=21202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 466.534884][ T29] audit: type=1400 audit(1749570790.153:21362): avc: denied { ioctl } for pid=21202 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1434 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 466.566306][ T29] audit: type=1400 audit(1749570790.153:21363): avc: denied { prog_load } for pid=22807 comm="syz.1.6735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 466.585671][ T29] audit: type=1400 audit(1749570790.153:21364): avc: denied { bpf } for pid=22807 comm="syz.1.6735" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 466.606424][ T29] audit: type=1400 audit(1749570790.153:21365): avc: denied { perfmon } for pid=22807 comm="syz.1.6735" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 466.627749][ T29] audit: type=1400 audit(1749570790.247:21366): avc: denied { map_create } for pid=22809 comm="syz.1.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 466.647138][ T29] audit: type=1400 audit(1749570790.247:21367): avc: denied { create } for pid=22809 comm="syz.1.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 466.666774][ T29] audit: type=1400 audit(1749570790.247:21368): avc: denied { write } for pid=22809 comm="syz.1.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 466.843753][T22823] serio: Serial port ptm0 [ 466.877275][T22824] hub 4-0:1.0: USB hub found [ 466.882054][T22824] hub 4-0:1.0: 8 ports detected [ 466.942276][T22831] loop0: detected capacity change from 0 to 512 [ 466.961350][T22831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.974185][T22831] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.044419][T22835] netlink: 'syz.0.6744': attribute type 1 has an invalid length. [ 467.466755][T22831] syz.0.6744 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 467.480927][T22831] CPU: 0 UID: 0 PID: 22831 Comm: syz.0.6744 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 467.480967][T22831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.481000][T22831] Call Trace: [ 467.481007][T22831] [ 467.481016][T22831] __dump_stack+0x1d/0x30 [ 467.481040][T22831] dump_stack_lvl+0xe8/0x140 [ 467.481135][T22831] dump_stack+0x15/0x1b [ 467.481158][T22831] dump_header+0x81/0x220 [ 467.481204][T22831] oom_kill_process+0x334/0x3f0 [ 467.481249][T22831] out_of_memory+0x979/0xb80 [ 467.481324][T22831] try_charge_memcg+0x5e6/0x9e0 [ 467.481378][T22831] obj_cgroup_charge_pages+0xa6/0x150 [ 467.481422][T22831] __memcg_kmem_charge_page+0x9f/0x170 [ 467.481485][T22831] __alloc_frozen_pages_noprof+0x188/0x360 [ 467.481548][T22831] alloc_pages_mpol+0xb3/0x250 [ 467.481598][T22831] alloc_pages_noprof+0x90/0x130 [ 467.481649][T22831] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 467.481701][T22831] __kvmalloc_node_noprof+0x30f/0x4e0 [ 467.481731][T22831] ? ip_set_alloc+0x1f/0x30 [ 467.481799][T22831] ? ip_set_alloc+0x1f/0x30 [ 467.481850][T22831] ? hash_netiface_create+0x21b/0x740 [ 467.481896][T22831] ? __kmalloc_cache_noprof+0x189/0x320 [ 467.481926][T22831] ip_set_alloc+0x1f/0x30 [ 467.481967][T22831] hash_netiface_create+0x282/0x740 [ 467.482029][T22831] ? __pfx_hash_netiface_create+0x10/0x10 [ 467.482111][T22831] ip_set_create+0x3cc/0x960 [ 467.482174][T22831] ? __nla_parse+0x40/0x60 [ 467.482199][T22831] nfnetlink_rcv_msg+0x4c3/0x590 [ 467.482268][T22831] ? selinux_capable+0x1f9/0x270 [ 467.482340][T22831] netlink_rcv_skb+0x120/0x220 [ 467.482476][T22831] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 467.482515][T22831] nfnetlink_rcv+0x16b/0x1690 [ 467.482593][T22831] ? __kfree_skb+0x109/0x150 [ 467.482618][T22831] ? nlmon_xmit+0x4f/0x60 [ 467.482665][T22831] ? consume_skb+0x49/0x150 [ 467.482700][T22831] ? nlmon_xmit+0x4f/0x60 [ 467.482726][T22831] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 467.482757][T22831] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 467.482789][T22831] ? __dev_queue_xmit+0x182/0x1fb0 [ 467.482816][T22831] ? ref_tracker_free+0x37d/0x3e0 [ 467.482858][T22831] ? __netlink_deliver_tap+0x4dc/0x500 [ 467.482890][T22831] netlink_unicast+0x5a1/0x670 [ 467.482986][T22831] netlink_sendmsg+0x58b/0x6b0 [ 467.483015][T22831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.483053][T22831] __sock_sendmsg+0x142/0x180 [ 467.483099][T22831] ____sys_sendmsg+0x31e/0x4e0 [ 467.483129][T22831] ___sys_sendmsg+0x17b/0x1d0 [ 467.483204][T22831] __x64_sys_sendmsg+0xd4/0x160 [ 467.483249][T22831] x64_sys_call+0x2999/0x2fb0 [ 467.483279][T22831] do_syscall_64+0xd2/0x200 [ 467.483302][T22831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 467.483338][T22831] ? clear_bhb_loop+0x40/0x90 [ 467.483409][T22831] ? clear_bhb_loop+0x40/0x90 [ 467.483434][T22831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.483457][T22831] RIP: 0033:0x7f5b8b5de929 [ 467.483474][T22831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.483500][T22831] RSP: 002b:00007f5b89c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.483540][T22831] RAX: ffffffffffffffda RBX: 00007f5b8b805fa0 RCX: 00007f5b8b5de929 [ 467.483558][T22831] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 000000000000000b [ 467.483576][T22831] RBP: 00007f5b8b660b39 R08: 0000000000000000 R09: 0000000000000000 [ 467.483594][T22831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.483611][T22831] R13: 0000000000000000 R14: 00007f5b8b805fa0 R15: 00007ffd594e7ed8 [ 467.483637][T22831] [ 467.835841][T22831] memory: usage 307200kB, limit 307200kB, failcnt 2523 [ 467.842736][T22831] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 467.850804][T22831] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 467.858222][T22831] Memory cgroup stats for /syz0: [ 467.872208][T22831] cache 28672 [ 467.880916][T22831] rss 0 [ 467.883716][T22831] shmem 0 [ 467.886689][T22831] mapped_file 0 [ 467.890292][T22831] dirty 0 [ 467.893287][T22831] writeback 0 [ 467.896685][T22831] workingset_refault_anon 1760 [ 467.901585][T22831] workingset_refault_file 15981 [ 467.906456][T22831] swap 475136 [ 467.909763][T22831] swapcached 4096 [ 467.913454][T22831] pgpgin 1028639 [ 467.917107][T22831] pgpgout 1028631 [ 467.920741][T22831] pgfault 662318 [ 467.924313][T22831] pgmajfault 633 [ 467.927864][T22831] inactive_anon 4096 [ 467.931792][T22831] active_anon 0 [ 467.935326][T22831] inactive_file 16384 [ 467.939515][T22831] active_file 12288 [ 467.943346][T22831] unevictable 0 [ 467.946809][T22831] hierarchical_memory_limit 314572800 [ 467.952181][T22831] hierarchical_memsw_limit 9223372036854771712 [ 467.958424][T22831] total_cache 28672 [ 467.962291][T22831] total_rss 0 [ 467.965659][T22831] total_shmem 0 [ 467.969196][T22831] total_mapped_file 0 [ 467.973188][T22831] total_dirty 0 [ 467.976771][T22831] total_writeback 0 [ 467.980581][T22831] total_workingset_refault_anon 1760 [ 467.985900][T22831] total_workingset_refault_file 15981 [ 467.991323][T22831] total_swap 475136 [ 467.995139][T22831] total_swapcached 4096 [ 467.999340][T22831] total_pgpgin 1028639 [ 468.003408][T22831] total_pgpgout 1028631 [ 468.007591][T22831] total_pgfault 662318 [ 468.011662][T22831] total_pgmajfault 633 [ 468.015846][T22831] total_inactive_anon 4096 [ 468.020366][T22831] total_active_anon 0 [ 468.024353][T22831] total_inactive_file 16384 [ 468.029049][T22831] total_active_file 12288 [ 468.033473][T22831] total_unevictable 0 [ 468.037459][T22831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6744,pid=22830,uid=0 [ 468.052257][T22831] Memory cgroup out of memory: Killed process 22830 (syz.0.6744) total-vm:93752kB, anon-rss:1064kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 468.159843][T22854] loop4: detected capacity change from 0 to 2048 [ 468.200090][T22854] loop4: p1 < > p4 [ 468.206074][T22854] loop4: p4 size 8388608 extends beyond EOD, truncated [ 468.271451][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.300071][T22864] serio: Serial port ptm0 [ 468.824187][T22868] loop1: detected capacity change from 0 to 256 [ 468.831124][T22868] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 468.843450][T22868] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.090387][T22872] lo speed is unknown, defaulting to 1000 [ 469.364853][T22883] __nla_validate_parse: 4 callbacks suppressed [ 469.364871][T22883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6762'. [ 469.666846][T22892] hub 4-0:1.0: USB hub found [ 469.671626][T22892] hub 4-0:1.0: 8 ports detected [ 469.741863][T22894] loop0: detected capacity change from 0 to 2048 [ 469.779294][T22894] loop0: p1 < > p4 [ 469.794099][T22894] loop0: p4 size 8388608 extends beyond EOD, truncated [ 469.936793][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6770'. [ 470.084312][T22909] serio: Serial port ptm0 [ 470.269769][T22911] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 470.546047][T22923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6778'. [ 470.763004][T22928] loop1: detected capacity change from 0 to 256 [ 470.770372][T22928] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 470.797022][T22929] lo speed is unknown, defaulting to 1000 [ 470.907678][T22928] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 471.103097][T22936] loop0: detected capacity change from 0 to 512 [ 471.152394][T22936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.193879][T22936] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.278357][T22946] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 471.291362][T22949] netlink: 'syz.0.6782': attribute type 1 has an invalid length. [ 471.299291][T22949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6782'. [ 471.699913][T22959] hub 4-0:1.0: USB hub found [ 471.710721][T22959] hub 4-0:1.0: 8 ports detected [ 471.916309][T22935] syz.0.6782 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 471.927389][T22935] CPU: 0 UID: 0 PID: 22935 Comm: syz.0.6782 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 471.927419][T22935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.927432][T22935] Call Trace: [ 471.927440][T22935] [ 471.927448][T22935] __dump_stack+0x1d/0x30 [ 471.927519][T22935] dump_stack_lvl+0xe8/0x140 [ 471.927542][T22935] dump_stack+0x15/0x1b [ 471.927564][T22935] dump_header+0x81/0x220 [ 471.927622][T22935] oom_kill_process+0x334/0x3f0 [ 471.927657][T22935] out_of_memory+0x979/0xb80 [ 471.927700][T22935] try_charge_memcg+0x5e6/0x9e0 [ 471.927762][T22935] charge_memcg+0x51/0xc0 [ 471.927853][T22935] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 471.927903][T22935] __read_swap_cache_async+0x1df/0x350 [ 471.927984][T22935] swap_cluster_readahead+0x277/0x3e0 [ 471.928024][T22935] swapin_readahead+0xde/0x6f0 [ 471.928107][T22935] ? __filemap_get_folio+0x49f/0x650 [ 471.928153][T22935] ? swap_cache_get_folio+0x77/0x200 [ 471.928245][T22935] do_swap_page+0x301/0x2430 [ 471.928275][T22935] ? css_rstat_updated+0xcd/0x5b0 [ 471.928338][T22935] ? __pfx_default_wake_function+0x10/0x10 [ 471.928365][T22935] handle_mm_fault+0x9a5/0x2be0 [ 471.928388][T22935] ? mas_walk+0xf2/0x120 [ 471.928491][T22935] do_user_addr_fault+0x636/0x1090 [ 471.928673][T22935] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 471.928717][T22935] exc_page_fault+0x62/0xa0 [ 471.928760][T22935] asm_exc_page_fault+0x26/0x30 [ 471.928787][T22935] RIP: 0033:0x7f5b8b4b5368 [ 471.928868][T22935] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 5a 28 35 00 00 0f 8e 09 fe ff ff e8 13 a0 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 [ 471.928893][T22935] RSP: 002b:00007ffd594e8040 EFLAGS: 00010206 [ 471.928979][T22935] RAX: 0000000000071602 RBX: 00007f5b8b807ba0 RCX: 0000000000071480 [ 471.928992][T22935] RDX: 0000000000000182 RSI: 00007ffd594e8020 RDI: 0000000000000001 [ 471.929004][T22935] RBP: 00007f5b8b807ba0 R08: 00000000170705ce R09: 7fffffffffffffff [ 471.929017][T22935] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000071637 [ 471.929141][T22935] R13: 00007f5b8b806080 R14: ffffffffffffffff R15: 00007ffd594e8150 [ 471.929165][T22935] [ 471.929173][T22935] memory: usage 307200kB, limit 307200kB, failcnt 2773 [ 472.070601][T22967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6790'. [ 472.072096][T22935] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 472.135496][T22966] netlink: 'syz.1.6790': attribute type 10 has an invalid length. [ 472.143092][T22935] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 472.143112][T22935] Memory cgroup stats for /syz0: [ 472.146655][T22966] team0: left allmulticast mode [ 472.153972][T22935] cache 28672 [ 472.162191][T22966] team_slave_0: left allmulticast mode [ 472.170155][T22935] rss 4096 [ 472.170167][T22935] shmem 0 [ 472.170175][T22935] mapped_file 0 [ 472.170184][T22935] dirty 0 [ 472.170192][T22935] writeback 4096 [ 472.178143][T22966] team_slave_1: left allmulticast mode [ 472.185386][T22935] workingset_refault_anon 1846 [ 472.190400][T22966] team0: left promiscuous mode [ 472.195258][T22935] workingset_refault_file 16077 [ 472.199043][T22966] team_slave_0: left promiscuous mode [ 472.204037][T22935] swap 458752 [ 472.207277][T22966] team_slave_1: left promiscuous mode [ 472.210055][T22935] swapcached 20480 [ 472.210067][T22935] pgpgin 1029534 [ 472.210075][T22935] pgpgout 1029522 [ 472.210127][T22935] pgfault 663729 [ 472.210134][T22935] pgmajfault 705 [ 472.210141][T22935] inactive_anon 20480 [ 472.210149][T22935] active_anon 0 [ 472.210155][T22935] inactive_file 16384 [ 472.210165][T22935] active_file 12288 [ 472.213811][T22966] bridge0: port 3(team0) entered disabled state [ 472.216595][T22935] unevictable 0 [ 472.216609][T22935] hierarchical_memory_limit 314572800 [ 472.216619][T22935] hierarchical_memsw_limit 9223372036854771712 [ 472.216630][T22935] total_cache 28672 [ 472.216638][T22935] total_rss 4096 [ 472.216646][T22935] total_shmem 0 [ 472.216654][T22935] total_mapped_file 0 [ 472.216663][T22935] total_dirty 0 [ 472.220841][T22968] netlink: 'syz.1.6790': attribute type 10 has an invalid length. [ 472.225738][T22935] total_writeback 4096 [ 472.225750][T22935] total_workingset_refault_anon 1846 [ 472.225763][T22935] total_workingset_refault_file 16077 [ 472.230579][T22968] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6790'. [ 472.235329][T22935] total_swap 458752 [ 472.235342][T22935] total_swapcached 20480 [ 472.235355][T22935] total_pgpgin 1029534 [ 472.372243][T22935] total_pgpgout 1029522 [ 472.376467][T22935] total_pgfault 663729 [ 472.381253][T22935] total_pgmajfault 705 [ 472.385349][T22935] total_inactive_anon 20480 [ 472.389873][T22935] total_active_anon 0 [ 472.393922][T22935] total_inactive_file 16384 [ 472.398489][T22935] total_active_file 12288 [ 472.402882][T22935] total_unevictable 0 [ 472.406918][T22935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6782,pid=22935,uid=0 [ 472.421668][T22935] Memory cgroup out of memory: Killed process 22935 (syz.0.6782) total-vm:93752kB, anon-rss:1016kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 472.448497][T22968] team0: entered promiscuous mode [ 472.469725][T22968] team_slave_0: entered promiscuous mode [ 472.475763][T22968] team_slave_1: entered promiscuous mode [ 472.485317][T22968] bridge0: port 3(team0) entered blocking state [ 472.491705][T22968] bridge0: port 3(team0) entered disabled state [ 472.498882][T22968] team0: entered allmulticast mode [ 472.510500][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 472.510584][ T29] audit: type=1400 audit(1749570795.790:21518): avc: denied { read write } for pid=20930 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.528687][T22968] team_slave_0: entered allmulticast mode [ 472.541557][ T29] audit: type=1400 audit(1749570795.790:21519): avc: denied { open } for pid=20930 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.547288][T22968] team_slave_1: entered allmulticast mode [ 472.604735][ T29] audit: type=1400 audit(1749570795.790:21520): avc: denied { recv } for pid=22937 comm="syz.2.6783" saddr=10.128.0.163 src=30030 daddr=10.128.1.140 dest=50420 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 472.631510][ T29] audit: type=1400 audit(1749570795.846:21521): avc: denied { ioctl } for pid=20930 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.658394][ T29] audit: type=1400 audit(1749570795.874:21522): avc: denied { map_create } for pid=22973 comm="syz.2.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 472.664111][T22976] loop4: detected capacity change from 0 to 164 [ 472.677726][ T29] audit: type=1400 audit(1749570795.874:21523): avc: denied { map_read map_write } for pid=22973 comm="syz.2.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 472.705172][ T29] audit: type=1400 audit(1749570795.874:21524): avc: denied { open } for pid=22971 comm="syz.4.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 472.724616][ T29] audit: type=1400 audit(1749570795.874:21525): avc: denied { perfmon } for pid=22971 comm="syz.4.6792" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 472.745972][ T29] audit: type=1400 audit(1749570795.883:21526): avc: denied { prog_load } for pid=22971 comm="syz.4.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 472.765503][ T29] audit: type=1400 audit(1749570795.883:21527): avc: denied { bpf } for pid=22971 comm="syz.4.6792" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 472.797665][T22976] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 472.811435][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.820766][T22972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 472.844578][T22972] Symlink component flag not implemented [ 472.850429][T22972] Symlink component flag not implemented [ 472.861124][T22972] Symlink component flag not implemented (7) [ 472.867171][T22972] Symlink component flag not implemented (116) [ 473.087313][T22994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6799'. [ 473.113148][T22988] netlink: 'syz.4.6799': attribute type 10 has an invalid length. [ 473.121368][T22988] team0: left allmulticast mode [ 473.126315][T22988] team_slave_0: left allmulticast mode [ 473.131841][T22988] team_slave_1: left allmulticast mode [ 473.137321][T22988] team0: left promiscuous mode [ 473.142593][T22988] team_slave_0: left promiscuous mode [ 473.148089][T22988] team_slave_1: left promiscuous mode [ 473.153863][T22988] bridge0: port 3(team0) entered disabled state [ 473.162982][T22988] netlink: 'syz.4.6799': attribute type 10 has an invalid length. [ 473.170963][T22988] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6799'. [ 473.180017][T22988] team0: entered promiscuous mode [ 473.210341][T22988] team_slave_0: entered promiscuous mode [ 473.216206][T22988] team_slave_1: entered promiscuous mode [ 473.499660][T22988] bridge0: port 3(team0) entered blocking state [ 473.506278][T22988] bridge0: port 3(team0) entered disabled state [ 473.530344][T22988] team0: entered allmulticast mode [ 473.542403][T22988] team_slave_0: entered allmulticast mode [ 473.548225][T22988] team_slave_1: entered allmulticast mode [ 473.584622][T22995] lo speed is unknown, defaulting to 1000 [ 473.999906][T23010] loop0: detected capacity change from 0 to 2048 [ 474.045522][T23014] loop3: detected capacity change from 0 to 512 [ 474.069815][T23010] loop0: p1 < > p4 [ 474.074896][T23014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.080040][T23010] loop0: p4 size 8388608 extends beyond EOD, truncated [ 474.088766][T23014] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.190870][T23026] netlink: 'syz.3.6806': attribute type 1 has an invalid length. [ 474.221344][T23025] netlink: 'syz.0.6808': attribute type 10 has an invalid length. [ 474.243661][T23025] team0: left allmulticast mode [ 474.248820][T23025] team_slave_0: left allmulticast mode [ 474.254640][T23025] team_slave_1: left allmulticast mode [ 474.260354][T23025] team0: left promiscuous mode [ 474.265251][T23025] team_slave_0: left promiscuous mode [ 474.270771][T23025] team_slave_1: left promiscuous mode [ 474.276546][T23028] netlink: 'syz.0.6808': attribute type 10 has an invalid length. [ 474.276545][T23025] bridge0: port 3(team0) entered disabled state [ 474.297811][T23028] team0: entered promiscuous mode [ 474.305590][T23028] team_slave_0: entered promiscuous mode [ 474.311374][T23028] team_slave_1: entered promiscuous mode [ 474.317546][T23028] bridge0: port 3(team0) entered blocking state [ 474.324082][T23028] bridge0: port 3(team0) entered disabled state [ 474.330911][T23028] team0: entered allmulticast mode [ 474.336970][T23028] team_slave_0: entered allmulticast mode [ 474.342804][T23028] team_slave_1: entered allmulticast mode [ 474.521417][T23035] loop0: detected capacity change from 0 to 256 [ 474.534191][T23035] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 474.557551][T23035] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.940473][T23053] loop4: detected capacity change from 0 to 2048 [ 474.987480][T23053] loop4: p1 < > p4 [ 474.996973][T23053] loop4: p4 size 8388608 extends beyond EOD, truncated [ 475.028795][T20130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.086729][T23055] lo speed is unknown, defaulting to 1000 [ 475.232729][T23062] loop4: detected capacity change from 0 to 164 [ 475.268537][T23062] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 475.280593][T23062] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 475.302004][T23062] Symlink component flag not implemented [ 475.307980][T23062] Symlink component flag not implemented [ 475.317794][T23062] Symlink component flag not implemented (7) [ 475.323913][T23062] Symlink component flag not implemented (116) [ 475.604559][T23077] __nla_validate_parse: 5 callbacks suppressed [ 475.604662][T23077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6824'. [ 475.645527][T23077] netlink: 'syz.4.6824': attribute type 10 has an invalid length. [ 475.666000][T23077] team0: left allmulticast mode [ 475.675878][T23077] team_slave_0: left allmulticast mode [ 475.681450][T23077] team_slave_1: left allmulticast mode [ 475.687029][T23077] team0: left promiscuous mode [ 475.714050][T23077] team_slave_0: left promiscuous mode [ 475.714090][T23074] netlink: 'syz.4.6824': attribute type 10 has an invalid length. [ 475.719573][T23077] team_slave_1: left promiscuous mode [ 475.727462][T23074] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6824'. [ 475.733297][T23077] bridge0: port 3(team0) entered disabled state [ 475.792236][T23074] team0: entered promiscuous mode [ 475.809731][T23074] team_slave_0: entered promiscuous mode [ 475.815643][T23074] team_slave_1: entered promiscuous mode [ 475.832750][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6825'. [ 475.874024][T23074] bridge0: port 3(team0) entered blocking state [ 475.880457][T23074] bridge0: port 3(team0) entered disabled state [ 475.895386][T23074] team0: entered allmulticast mode [ 475.906423][T23074] team_slave_0: entered allmulticast mode [ 475.912491][T23074] team_slave_1: entered allmulticast mode [ 476.104822][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6827'. [ 476.216008][T23096] loop1: detected capacity change from 0 to 512 [ 476.319775][T23096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.333113][T23096] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.390687][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6833'. [ 476.404955][T23108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6831'. [ 476.423619][T23109] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6830'. [ 476.429079][T23106] loop4: detected capacity change from 0 to 164 [ 476.440641][T23106] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 476.452128][T23106] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 476.468662][T23106] Symlink component flag not implemented [ 476.474468][T23106] Symlink component flag not implemented [ 476.491593][T23106] Symlink component flag not implemented (7) [ 476.497728][T23106] Symlink component flag not implemented (116) [ 476.738477][T23121] loop4: detected capacity change from 0 to 2048 [ 476.794243][T23121] loop4: p1 < > p4 [ 476.804354][T23121] loop4: p4 size 8388608 extends beyond EOD, truncated [ 476.908134][T23128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6841'. [ 476.939140][T23127] validate_nla: 1 callbacks suppressed [ 476.939157][T23127] netlink: 'syz.4.6841': attribute type 10 has an invalid length. [ 476.962072][T23127] team0: left allmulticast mode [ 476.983238][T23127] team_slave_0: left allmulticast mode [ 476.988917][T23127] team_slave_1: left allmulticast mode [ 476.994436][T23127] team0: left promiscuous mode [ 477.007685][T23128] netlink: 'syz.4.6841': attribute type 10 has an invalid length. [ 477.015591][T23128] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6841'. [ 477.016604][T23127] team_slave_0: left promiscuous mode [ 477.030027][T23127] team_slave_1: left promiscuous mode [ 477.035726][T23127] bridge0: port 3(team0) entered disabled state [ 477.070804][T23128] team0: entered promiscuous mode [ 477.077188][T23128] team_slave_0: entered promiscuous mode [ 477.083294][T23128] team_slave_1: entered promiscuous mode [ 477.101623][T23128] bridge0: port 3(team0) entered blocking state [ 477.108076][T23128] bridge0: port 3(team0) entered disabled state [ 477.146571][T23128] team0: entered allmulticast mode [ 477.151880][T23128] team_slave_0: entered allmulticast mode [ 477.157833][T23128] team_slave_1: entered allmulticast mode [ 477.347618][T21202] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.420309][T23137] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 477.489104][T23140] lo speed is unknown, defaulting to 1000 [ 477.622626][T23149] loop4: detected capacity change from 0 to 164 [ 477.656379][T23149] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 477.843240][T23149] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 477.863141][T23149] Symlink component flag not implemented [ 477.868861][T23149] Symlink component flag not implemented [ 477.905054][T23149] Symlink component flag not implemented (7) [ 477.911235][T23149] Symlink component flag not implemented (116) [ 477.941226][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 477.941321][ T29] audit: type=1400 audit(1749570800.870:21887): avc: denied { create } for pid=23148 comm="syz.4.6849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 478.006144][ T29] audit: type=1400 audit(1749570800.898:21888): avc: denied { map_read map_write } for pid=23148 comm="syz.4.6849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 478.026287][ T29] audit: type=1400 audit(1749570800.907:21889): avc: denied { prog_run } for pid=23164 comm="syz.2.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 478.045560][ T29] audit: type=1400 audit(1749570800.917:21890): avc: denied { create } for pid=23164 comm="syz.2.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.067883][ T29] audit: type=1400 audit(1749570800.917:21891): avc: denied { write } for pid=23164 comm="syz.2.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.089141][ T29] audit: type=1400 audit(1749570800.991:21892): avc: denied { module_request } for pid=23151 comm="syz.3.6850" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 478.127996][ T29] audit: type=1400 audit(1749570801.038:21893): avc: denied { unmount } for pid=20930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 478.178149][ T29] audit: type=1400 audit(1749570801.038:21894): avc: denied { create } for pid=23151 comm="syz.3.6850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 478.199370][ T29] audit: type=1400 audit(1749570801.038:21895): avc: denied { write } for pid=23151 comm="syz.3.6850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 478.220198][ T29] audit: type=1400 audit(1749570801.038:21896): avc: denied { execmem } for pid=23151 comm="syz.3.6850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 478.227628][T23171] loop4: detected capacity change from 0 to 256 [ 478.250074][T23168] netlink: 'syz.2.6854': attribute type 10 has an invalid length. [ 478.259367][T23168] team0: left allmulticast mode [ 478.264419][T23168] team_slave_0: left allmulticast mode [ 478.270015][T23168] team_slave_1: left allmulticast mode [ 478.275527][T23168] team0: left promiscuous mode [ 478.297455][T23171] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 478.325975][T23172] netlink: 'syz.2.6854': attribute type 10 has an invalid length. [ 478.344842][T23171] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 478.358494][T23168] team_slave_0: left promiscuous mode [ 478.364031][T23168] team_slave_1: left promiscuous mode [ 478.369791][T23168] bridge0: port 3(team0) entered disabled state [ 478.372431][T23174] loop0: detected capacity change from 0 to 512 [ 478.413393][T23174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.429477][T23174] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.530317][T23172] team0: entered promiscuous mode [ 478.535489][T23172] team_slave_0: entered promiscuous mode [ 478.541312][T23172] team_slave_1: entered promiscuous mode [ 478.547256][T23172] bridge0: port 3(team0) entered blocking state [ 478.553762][T23172] bridge0: port 3(team0) entered disabled state [ 478.560618][T23172] team0: entered allmulticast mode [ 478.565890][T23172] team_slave_0: entered allmulticast mode [ 478.571746][T23172] team_slave_1: entered allmulticast mode [ 478.581343][T23181] netlink: 'syz.0.6856': attribute type 1 has an invalid length. [ 478.986497][T23201] loop2: detected capacity change from 0 to 2048 [ 479.061068][T23201] loop2: p1 < > p4 [ 479.094055][T23201] loop2: p4 size 8388608 extends beyond EOD, truncated [ 479.226282][T23174] syz.0.6856 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 479.240526][T23174] CPU: 1 UID: 0 PID: 23174 Comm: syz.0.6856 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 479.240563][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.240581][T23174] Call Trace: [ 479.240590][T23174] [ 479.240601][T23174] __dump_stack+0x1d/0x30 [ 479.240630][T23174] dump_stack_lvl+0xe8/0x140 [ 479.240656][T23174] dump_stack+0x15/0x1b [ 479.240679][T23174] dump_header+0x81/0x220 [ 479.240859][T23174] oom_kill_process+0x334/0x3f0 [ 479.240902][T23174] out_of_memory+0x979/0xb80 [ 479.240947][T23174] try_charge_memcg+0x5e6/0x9e0 [ 479.240984][T23174] obj_cgroup_charge_pages+0xa6/0x150 [ 479.241109][T23174] __memcg_kmem_charge_page+0x9f/0x170 [ 479.241225][T23174] __alloc_frozen_pages_noprof+0x188/0x360 [ 479.241358][T23174] alloc_pages_mpol+0xb3/0x250 [ 479.241477][T23174] alloc_pages_noprof+0x90/0x130 [ 479.241512][T23174] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 479.241605][T23174] __kvmalloc_node_noprof+0x30f/0x4e0 [ 479.241646][T23174] ? ip_set_alloc+0x1f/0x30 [ 479.241706][T23174] ? ip_set_alloc+0x1f/0x30 [ 479.241846][T23174] ip_set_alloc+0x1f/0x30 [ 479.241893][T23174] hash_netiface_create+0x282/0x740 [ 479.241992][T23174] ? __pfx_hash_netiface_create+0x10/0x10 [ 479.242107][T23174] ip_set_create+0x3cc/0x960 [ 479.242156][T23174] ? __nla_parse+0x40/0x60 [ 479.242180][T23174] nfnetlink_rcv_msg+0x4c3/0x590 [ 479.242263][T23174] ? selinux_capable+0x1f9/0x270 [ 479.242356][T23174] netlink_rcv_skb+0x120/0x220 [ 479.242448][T23174] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 479.242484][T23174] nfnetlink_rcv+0x16b/0x1690 [ 479.242523][T23174] ? __kfree_skb+0x109/0x150 [ 479.242548][T23174] ? nlmon_xmit+0x4f/0x60 [ 479.242651][T23174] ? consume_skb+0x49/0x150 [ 479.242770][T23174] ? nlmon_xmit+0x4f/0x60 [ 479.242803][T23174] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 479.242834][T23174] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 479.242862][T23174] ? __dev_queue_xmit+0x182/0x1fb0 [ 479.242893][T23174] ? ref_tracker_free+0x37d/0x3e0 [ 479.243104][T23174] ? __netlink_deliver_tap+0x4dc/0x500 [ 479.243140][T23174] netlink_unicast+0x5a1/0x670 [ 479.243268][T23174] netlink_sendmsg+0x58b/0x6b0 [ 479.243301][T23174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.243333][T23174] __sock_sendmsg+0x142/0x180 [ 479.243443][T23174] ____sys_sendmsg+0x31e/0x4e0 [ 479.243484][T23174] ___sys_sendmsg+0x17b/0x1d0 [ 479.243516][T23174] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 479.243624][T23174] __x64_sys_sendmsg+0xd4/0x160 [ 479.243750][T23174] x64_sys_call+0x2999/0x2fb0 [ 479.243785][T23174] do_syscall_64+0xd2/0x200 [ 479.243811][T23174] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 479.243866][T23174] ? clear_bhb_loop+0x40/0x90 [ 479.243929][T23174] ? clear_bhb_loop+0x40/0x90 [ 479.243962][T23174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.244000][T23174] RIP: 0033:0x7f5b8b5de929 [ 479.244023][T23174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.244050][T23174] RSP: 002b:00007f5b89c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.244074][T23174] RAX: ffffffffffffffda RBX: 00007f5b8b805fa0 RCX: 00007f5b8b5de929 [ 479.244138][T23174] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 000000000000000b [ 479.244155][T23174] RBP: 00007f5b8b660b39 R08: 0000000000000000 R09: 0000000000000000 [ 479.244173][T23174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.244191][T23174] R13: 0000000000000000 R14: 00007f5b8b805fa0 R15: 00007ffd594e7ed8 [ 479.244218][T23174] [ 479.311361][T23209] lo speed is unknown, defaulting to 1000 [ 479.316268][T23174] memory: usage 307200kB, limit 307200kB, failcnt 3001 [ 479.606807][T23174] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 479.614741][T23174] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 479.622097][T23174] Memory cgroup stats for /syz0: [ 479.622513][T23174] cache 8192 [ 479.630763][T23174] rss 0 [ 479.633553][T23174] shmem 0 [ 479.636664][T23174] mapped_file 0 [ 479.640296][T23174] dirty 0 [ 479.643514][T23174] writeback 0 [ 479.646891][T23174] workingset_refault_anon 1903 [ 479.648879][T23218] loop4: detected capacity change from 0 to 256 [ 479.651721][T23174] workingset_refault_file 16114 [ 479.651736][T23174] swap 479232 [ 479.666299][T23174] swapcached 0 [ 479.669761][T23174] pgpgin 1039084 [ 479.673338][T23174] pgpgout 1039082 [ 479.674334][T23218] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.676991][T23174] pgfault 673934 [ 479.677079][T23174] pgmajfault 739 [ 479.696026][T23174] inactive_anon 0 [ 479.699694][T23174] active_anon 0 [ 479.703398][T23174] inactive_file 8192 [ 479.707345][T23174] active_file 0 [ 479.710844][T23174] unevictable 0 [ 479.714388][T23174] hierarchical_memory_limit 314572800 [ 479.714907][T23218] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 479.720032][T23174] hierarchical_memsw_limit 9223372036854771712 [ 479.720046][T23174] total_cache 8192 [ 479.720056][T23174] total_rss 0 [ 479.720064][T23174] total_shmem 0 [ 479.720071][T23174] total_mapped_file 0 [ 479.720079][T23174] total_dirty 0 [ 479.720086][T23174] total_writeback 0 [ 479.720149][T23174] total_workingset_refault_anon 1903 [ 479.720158][T23174] total_workingset_refault_file 16114 [ 479.720166][T23174] total_swap 479232 [ 479.720174][T23174] total_swapcached 0 [ 479.720182][T23174] total_pgpgin 1039084 [ 479.782526][T23174] total_pgpgout 1039082 [ 479.786751][T23174] total_pgfault 673934 [ 479.790920][T23174] total_pgmajfault 739 [ 479.795087][T23174] total_inactive_anon 0 [ 479.799318][T23174] total_active_anon 0 [ 479.803317][T23174] total_inactive_file 8192 [ 479.807790][T23174] total_active_file 0 [ 479.811911][T23174] total_unevictable 0 [ 479.815961][T23174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6856,pid=23173,uid=0 [ 479.830799][T23174] Memory cgroup out of memory: Killed process 23173 (syz.0.6856) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 480.049340][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.159030][T23233] netlink: 'syz.0.6873': attribute type 10 has an invalid length. [ 480.177256][T23233] team0: left allmulticast mode [ 480.188413][T23233] team_slave_0: left allmulticast mode [ 480.194128][T23233] team_slave_1: left allmulticast mode [ 480.199683][T23233] team0: left promiscuous mode [ 480.213787][T23241] loop1: detected capacity change from 0 to 164 [ 480.214612][T23233] team_slave_0: left promiscuous mode [ 480.225719][T23233] team_slave_1: left promiscuous mode [ 480.231515][T23233] bridge0: port 3(team0) entered disabled state [ 480.237954][T23241] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 480.244155][T23239] netlink: 'syz.0.6873': attribute type 10 has an invalid length. [ 480.248129][T23241] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 480.266956][T23239] team0: entered promiscuous mode [ 480.274462][T23239] team_slave_0: entered promiscuous mode [ 480.280356][T23239] team_slave_1: entered promiscuous mode [ 480.286580][T23239] bridge0: port 3(team0) entered blocking state [ 480.293184][T23239] bridge0: port 3(team0) entered disabled state [ 480.300022][T23239] team0: entered allmulticast mode [ 480.306519][T23239] team_slave_0: entered allmulticast mode [ 480.312380][T23239] team_slave_1: entered allmulticast mode [ 480.323814][T23241] Symlink component flag not implemented [ 480.329531][T23241] Symlink component flag not implemented [ 480.335528][T23241] Symlink component flag not implemented (7) [ 480.341590][T23241] Symlink component flag not implemented (116) [ 480.399745][T23249] loop0: detected capacity change from 0 to 256 [ 480.416028][T23249] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 480.430728][T23249] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.494348][T23256] loop1: detected capacity change from 0 to 512 [ 480.504854][T23256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.517842][T23256] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.605603][T23259] netlink: 'syz.1.6884': attribute type 1 has an invalid length. [ 480.906272][T23268] lo speed is unknown, defaulting to 1000 [ 481.361189][T23287] loop4: detected capacity change from 0 to 256 [ 481.376313][T23287] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 481.403822][T23287] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 481.495402][T23292] loop4: detected capacity change from 0 to 2048 [ 481.561645][T23292] loop4: p1 < > p4 [ 481.567910][T23292] loop4: p4 size 8388608 extends beyond EOD, truncated [ 481.904068][T23308] __nla_validate_parse: 11 callbacks suppressed [ 481.904128][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6901'. [ 481.907425][T23307] hub 4-0:1.0: USB hub found [ 481.932233][T23307] hub 4-0:1.0: 8 ports detected [ 482.122007][T21202] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.347397][T23320] loop1: detected capacity change from 0 to 256 [ 482.378288][T23322] loop2: detected capacity change from 0 to 164 [ 482.385048][T23320] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 482.404456][T23322] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 482.417879][T23320] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 482.429864][T23322] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 482.448416][T23322] Symlink component flag not implemented [ 482.454183][T23322] Symlink component flag not implemented [ 482.475832][T23322] Symlink component flag not implemented (7) [ 482.482005][T23322] Symlink component flag not implemented (116) [ 482.509766][T23326] loop1: detected capacity change from 0 to 2048 [ 482.556091][T23326] loop1: p1 < > p4 [ 482.560507][T23326] loop1: p4 size 8388608 extends beyond EOD, truncated [ 482.762093][T23345] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 482.782804][T23342] lo speed is unknown, defaulting to 1000 [ 482.865896][T23349] hub 4-0:1.0: USB hub found [ 482.877981][T23349] hub 4-0:1.0: 8 ports detected [ 483.011873][T23351] loop3: detected capacity change from 0 to 512 [ 483.042759][T23351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.066813][T23351] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.089399][T23362] serio: Serial port ptm0 [ 483.118139][T23360] loop1: detected capacity change from 0 to 164 [ 483.136855][T23360] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 483.145600][T23364] netlink: 'syz.3.6917': attribute type 1 has an invalid length. [ 483.153498][T23364] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6917'. [ 483.166123][T23360] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 483.183702][T23360] Symlink component flag not implemented [ 483.189482][T23360] Symlink component flag not implemented [ 483.207588][T23360] Symlink component flag not implemented (7) [ 483.213707][T23360] Symlink component flag not implemented (116) [ 483.275935][T23366] loop1: detected capacity change from 0 to 256 [ 483.297037][T23366] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 483.390495][T23366] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 483.433179][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 483.433196][ T29] audit: type=1400 audit(1749570806.011:22163): avc: denied { mount } for pid=23365 comm="syz.1.6922" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 483.475717][ T29] audit: type=1400 audit(1749570806.049:22164): avc: denied { unmount } for pid=21202 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 483.530222][ T29] audit: type=1400 audit(1749570806.096:22165): avc: denied { create } for pid=23367 comm="syz.1.6923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 483.577027][ T29] audit: type=1400 audit(1749570806.124:22166): avc: denied { write } for pid=23367 comm="syz.1.6923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 483.651849][ T29] audit: type=1326 audit(1749570806.220:22167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23369 comm="syz.1.6925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4e7bee929 code=0x0 [ 483.707576][ T29] audit: type=1400 audit(1749570806.257:22168): avc: denied { create } for pid=23369 comm="syz.1.6925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 483.727296][ T29] audit: type=1400 audit(1749570806.257:22169): avc: denied { read } for pid=23369 comm="syz.1.6925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 483.760656][T23373] loop2: detected capacity change from 0 to 2048 [ 483.768240][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6925'. [ 483.781904][ T29] audit: type=1400 audit(1749570806.323:22170): avc: denied { write } for pid=23369 comm="syz.1.6925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 483.801733][ T29] audit: type=1400 audit(1749570806.323:22171): avc: denied { getopt } for pid=23369 comm="syz.1.6925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 483.821365][ T29] audit: type=1400 audit(1749570806.323:22172): avc: denied { bind } for pid=23369 comm="syz.1.6925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 483.886802][T23373] loop2: p1 < > p4 [ 483.902540][T23373] loop2: p4 size 8388608 extends beyond EOD, truncated [ 484.060609][T23385] loop4: detected capacity change from 0 to 256 [ 484.078324][T23385] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 484.105815][T23385] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 484.118301][T20130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.246081][T23395] loop3: detected capacity change from 0 to 256 [ 484.266295][T23395] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 484.305079][T23395] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 484.678468][T23407] lo speed is unknown, defaulting to 1000 [ 484.705898][T23408] loop3: detected capacity change from 0 to 164 [ 484.735972][T23408] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 484.877300][T23405] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 484.886347][T23415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6940'. [ 484.922985][T23414] netlink: 'syz.0.6940': attribute type 10 has an invalid length. [ 484.942284][T23405] Symlink component flag not implemented [ 484.948001][T23405] Symlink component flag not implemented [ 484.957918][T23414] team0: left allmulticast mode [ 484.972464][T23414] team_slave_0: left allmulticast mode [ 484.978001][T23414] team_slave_1: left allmulticast mode [ 484.983519][T23414] team0: left promiscuous mode [ 485.012274][T23414] team_slave_0: left promiscuous mode [ 485.017818][T23414] team_slave_1: left promiscuous mode [ 485.023447][T23414] bridge0: port 3(team0) entered disabled state [ 485.030177][T23405] Symlink component flag not implemented (7) [ 485.036290][T23405] Symlink component flag not implemented (116) [ 485.062429][T23415] netlink: 'syz.0.6940': attribute type 10 has an invalid length. [ 485.070391][T23415] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6940'. [ 485.099183][T23415] team0: entered promiscuous mode [ 485.106205][T23415] team_slave_0: entered promiscuous mode [ 485.112100][T23415] team_slave_1: entered promiscuous mode [ 485.148678][T23415] bridge0: port 3(team0) entered blocking state [ 485.155066][T23415] bridge0: port 3(team0) entered disabled state [ 485.183455][T23415] team0: entered allmulticast mode [ 485.188679][T23415] team_slave_0: entered allmulticast mode [ 485.194470][T23415] team_slave_1: entered allmulticast mode [ 485.379316][T23430] loop4: detected capacity change from 0 to 256 [ 485.425328][T23430] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 485.462058][T23430] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.483180][T23432] loop3: detected capacity change from 0 to 2048 [ 485.501520][T23432] loop3: p1 < > p4 [ 485.509027][T23432] loop3: p4 size 8388608 extends beyond EOD, truncated [ 485.564001][T23438] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 485.606001][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6948'. [ 485.705060][T23456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6953'. [ 485.722696][T23451] netlink: 'syz.3.6953': attribute type 10 has an invalid length. [ 485.744644][T23451] team0: left allmulticast mode [ 485.759815][T23451] team_slave_0: left allmulticast mode [ 485.765543][T23451] team_slave_1: left allmulticast mode [ 485.771069][T23451] team0: left promiscuous mode [ 485.804314][T23456] netlink: 'syz.3.6953': attribute type 10 has an invalid length. [ 485.812265][T23456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6953'. [ 485.814708][T23451] team_slave_0: left promiscuous mode [ 485.826717][T23451] team_slave_1: left promiscuous mode [ 485.832378][T23451] bridge0: port 3(team0) entered disabled state [ 485.849857][T23456] team0: entered promiscuous mode [ 485.859566][T23456] team_slave_0: entered promiscuous mode [ 485.865389][T23456] team_slave_1: entered promiscuous mode [ 485.883956][T23456] bridge0: port 3(team0) entered blocking state [ 485.890314][T23456] bridge0: port 3(team0) entered disabled state [ 485.910546][T23456] team0: entered allmulticast mode [ 485.922607][T23456] team_slave_0: entered allmulticast mode [ 485.928498][T23456] team_slave_1: entered allmulticast mode [ 485.972738][T23459] lo speed is unknown, defaulting to 1000 [ 486.717331][T23480] loop2: detected capacity change from 0 to 164 [ 486.727379][T23480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 486.737249][T23480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 486.746459][T23480] Symlink component flag not implemented [ 486.752154][T23480] Symlink component flag not implemented [ 486.767254][T23480] Symlink component flag not implemented (7) [ 486.773319][T23480] Symlink component flag not implemented (116) [ 486.845285][T23495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6968'. [ 486.873149][T23490] netlink: 'syz.1.6968': attribute type 10 has an invalid length. [ 486.892406][T23490] team0: left allmulticast mode [ 486.903067][T23490] team_slave_0: left allmulticast mode [ 486.908685][T23490] team_slave_1: left allmulticast mode [ 486.914199][T23490] team0: left promiscuous mode [ 486.922167][T23490] team_slave_0: left promiscuous mode [ 486.927784][T23490] team_slave_1: left promiscuous mode [ 486.933374][T23490] bridge0: port 3(team0) entered disabled state [ 486.947931][T23495] netlink: 'syz.1.6968': attribute type 10 has an invalid length. [ 486.958389][T23495] team0: entered promiscuous mode [ 486.964865][T23495] team_slave_0: entered promiscuous mode [ 486.970734][T23495] team_slave_1: entered promiscuous mode [ 486.980983][T23495] bridge0: port 3(team0) entered blocking state [ 486.987345][T23495] bridge0: port 3(team0) entered disabled state [ 486.997845][T23495] team0: entered allmulticast mode [ 487.005103][T23495] team_slave_0: entered allmulticast mode [ 487.010899][T23495] team_slave_1: entered allmulticast mode [ 487.636278][T23514] loop3: detected capacity change from 0 to 256 [ 487.687596][T23514] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 487.764545][T23514] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 487.897865][T23519] lo speed is unknown, defaulting to 1000 [ 488.086812][T23527] loop3: detected capacity change from 0 to 2048 [ 488.179002][T23527] loop3: p1 < > p4 [ 488.201057][T23527] loop3: p4 size 8388608 extends beyond EOD, truncated [ 488.391560][T23540] __nla_validate_parse: 2 callbacks suppressed [ 488.391579][T23540] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 488.506114][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6988'. [ 488.624544][T23559] loop4: detected capacity change from 0 to 256 [ 488.631763][T23559] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 488.644397][T23559] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.797342][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 488.797357][ T29] audit: type=1400 audit(1749570811.016:22380): avc: denied { map_create } for pid=23570 comm="syz.0.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 488.823367][ T29] audit: type=1400 audit(1749570811.044:22381): avc: denied { map_read map_write } for pid=23570 comm="syz.0.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 488.844375][T23571] loop0: detected capacity change from 0 to 2048 [ 488.905521][T23571] loop0: p1 < > p4 [ 488.911312][T23571] loop0: p4 size 8388608 extends beyond EOD, truncated [ 488.941566][ T29] audit: type=1400 audit(1749570811.156:22382): avc: denied { prog_run } for pid=23572 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 488.964637][ T29] audit: type=1400 audit(1749570811.185:22383): avc: denied { module_request } for pid=23572 comm="+}[@" kmod="netdev-veth0_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 488.986910][ T29] audit: type=1400 audit(1749570811.185:22384): avc: denied { sys_module } for pid=23572 comm="+}[@" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 488.989870][T23573] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 489.033207][ T29] audit: type=1400 audit(1749570811.241:22385): avc: denied { create } for pid=23576 comm="syz.0.7001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 489.052939][ T29] audit: type=1400 audit(1749570811.259:22386): avc: denied { write } for pid=23576 comm="syz.0.7001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 489.093907][T23579] loop0: detected capacity change from 0 to 256 [ 489.100707][ T29] audit: type=1400 audit(1749570811.306:22387): avc: denied { mounton } for pid=23578 comm="syz.0.7002" path="/184/file0" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 489.101152][T23579] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 489.135920][T23579] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 489.147373][ T29] audit: type=1400 audit(1749570811.353:22388): avc: denied { mount } for pid=23578 comm="syz.0.7002" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 489.178842][ T29] audit: type=1400 audit(1749570811.381:22389): avc: denied { unmount } for pid=20740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 489.288143][T23587] loop3: detected capacity change from 0 to 256 [ 489.295417][T23587] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 489.307976][T23587] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 489.319438][T23589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7005'. [ 489.333298][T23585] netlink: 'syz.2.7005': attribute type 10 has an invalid length. [ 489.341339][T23585] team0: left allmulticast mode [ 489.346520][T23585] team_slave_0: left allmulticast mode [ 489.352093][T23585] team_slave_1: left allmulticast mode [ 489.357688][T23585] team0: left promiscuous mode [ 489.362676][T23585] team_slave_0: left promiscuous mode [ 489.368215][T23585] team_slave_1: left promiscuous mode [ 489.373886][T23585] bridge0: port 3(team0) entered disabled state [ 489.382094][T23585] netlink: 'syz.2.7005': attribute type 10 has an invalid length. [ 489.390021][T23585] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7005'. [ 489.399154][T23585] team0: entered promiscuous mode [ 489.578611][T23585] team_slave_0: entered promiscuous mode [ 489.584511][T23585] team_slave_1: entered promiscuous mode [ 489.617272][T23585] bridge0: port 3(team0) entered blocking state [ 489.623674][T23585] bridge0: port 3(team0) entered disabled state [ 489.703004][T23585] team0: entered allmulticast mode [ 489.741990][T23585] team_slave_0: entered allmulticast mode [ 489.747860][T23585] team_slave_1: entered allmulticast mode [ 489.811911][T23600] loop1: detected capacity change from 0 to 2048 [ 489.835026][T23594] lo speed is unknown, defaulting to 1000 [ 489.878437][T23600] loop1: p1 < > p4 [ 489.883818][T23600] loop1: p4 size 8388608 extends beyond EOD, truncated [ 489.892066][T23602] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 489.930188][T23609] loop4: detected capacity change from 0 to 256 [ 489.939914][T23609] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 489.952134][T23607] loop2: detected capacity change from 0 to 164 [ 489.959964][T23609] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 489.972332][T23607] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 489.986838][T23607] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 489.995590][T23607] Symlink component flag not implemented [ 490.001449][T23607] Symlink component flag not implemented [ 490.007434][T23607] Symlink component flag not implemented (7) [ 490.013536][T23607] Symlink component flag not implemented (116) [ 490.059343][T23621] loop2: detected capacity change from 0 to 256 [ 490.066259][T23621] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 490.078688][T23621] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 490.111331][T23624] serio: Serial port ptm0 [ 490.153127][T23625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7017'. [ 490.267462][T23632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7022'. [ 490.282927][T23631] netlink: 'syz.0.7022': attribute type 10 has an invalid length. [ 490.292404][T23631] team0: left allmulticast mode [ 490.297554][T23631] team_slave_0: left allmulticast mode [ 490.303206][T23631] team_slave_1: left allmulticast mode [ 490.308873][T23631] team0: left promiscuous mode [ 490.313861][T23631] team_slave_0: left promiscuous mode [ 490.319402][T23631] team_slave_1: left promiscuous mode [ 490.325066][T23631] bridge0: port 3(team0) entered disabled state [ 490.333285][T23631] netlink: 'syz.0.7022': attribute type 10 has an invalid length. [ 490.341197][T23631] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7022'. [ 490.350163][T23631] team0: entered promiscuous mode [ 490.355244][T23631] team_slave_0: entered promiscuous mode [ 490.361012][T23631] team_slave_1: entered promiscuous mode [ 490.366895][T23631] bridge0: port 3(team0) entered blocking state [ 490.373276][T23631] bridge0: port 3(team0) entered disabled state [ 490.379830][T23631] team0: entered allmulticast mode [ 490.385024][T23631] team_slave_0: entered allmulticast mode [ 490.390837][T23631] team_slave_1: entered allmulticast mode [ 490.483854][T23636] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 490.593885][T23649] loop0: detected capacity change from 0 to 164 [ 490.601486][T23649] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 490.611070][T23649] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 490.620012][T23649] Symlink component flag not implemented [ 490.625716][T23649] Symlink component flag not implemented [ 490.631772][T23649] Symlink component flag not implemented (7) [ 490.637826][T23649] Symlink component flag not implemented (116) [ 490.897658][T23656] lo speed is unknown, defaulting to 1000 [ 491.276758][T23667] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 491.295564][T23667] lo speed is unknown, defaulting to 1000 [ 491.415628][T23672] netlink: 'syz.1.7036': attribute type 10 has an invalid length. [ 491.434484][T23672] team0: left allmulticast mode [ 491.448714][T23672] team_slave_0: left allmulticast mode [ 491.454399][T23672] team_slave_1: left allmulticast mode [ 491.460397][T23672] team0: left promiscuous mode [ 491.488065][T23672] team_slave_0: left promiscuous mode [ 491.488662][T23673] netlink: 'syz.1.7036': attribute type 10 has an invalid length. [ 491.493616][T23672] team_slave_1: left promiscuous mode [ 491.507283][T23672] bridge0: port 3(team0) entered disabled state [ 491.524464][T23673] team0: entered promiscuous mode [ 491.529732][T23673] team_slave_0: entered promiscuous mode [ 491.535774][T23673] team_slave_1: entered promiscuous mode [ 491.569254][T23673] bridge0: port 3(team0) entered blocking state [ 491.575669][T23673] bridge0: port 3(team0) entered disabled state [ 491.589598][T23683] loop4: detected capacity change from 0 to 512 [ 491.603061][T23683] EXT4-fs: Ignoring removed mblk_io_submit option [ 491.610204][T23683] EXT4-fs: Ignoring removed bh option [ 491.633319][T23683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 491.641991][T23673] team0: entered allmulticast mode [ 491.643220][T23683] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 491.648288][T23673] team_slave_0: entered allmulticast mode [ 491.648309][T23673] team_slave_1: entered allmulticast mode [ 491.825976][T23692] loop4: detected capacity change from 0 to 164 [ 491.850192][T23700] loop1: detected capacity change from 0 to 512 [ 491.897473][T23692] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 491.927907][T23692] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 491.965756][T23700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.980734][T23692] Symlink component flag not implemented [ 491.986540][T23692] Symlink component flag not implemented [ 491.992635][T23700] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.004151][T23692] Symlink component flag not implemented (7) [ 492.010223][T23692] Symlink component flag not implemented (116) [ 492.074754][T23712] netlink: 'syz.1.7046': attribute type 1 has an invalid length. [ 492.158512][T23715] loop2: detected capacity change from 0 to 164 [ 492.167552][T23715] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 492.177244][T23715] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 492.185765][T23715] Symlink component flag not implemented [ 492.191605][T23715] Symlink component flag not implemented [ 492.197673][T23715] Symlink component flag not implemented (7) [ 492.203728][T23715] Symlink component flag not implemented (116) [ 492.398143][T23725] loop4: detected capacity change from 0 to 164 [ 492.405736][T23725] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 492.415352][T23725] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 492.423835][T23725] Symlink component flag not implemented [ 492.429549][T23725] Symlink component flag not implemented [ 492.505376][T23728] lo speed is unknown, defaulting to 1000 [ 492.606841][T23725] Symlink component flag not implemented (7) [ 492.612916][T23725] Symlink component flag not implemented (116) [ 492.995241][T21202] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.041596][T23746] loop4: detected capacity change from 0 to 164 [ 493.049301][T23746] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 493.058732][T23746] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 493.067328][T23746] Symlink component flag not implemented [ 493.073022][T23746] Symlink component flag not implemented [ 493.076762][T23747] loop0: detected capacity change from 0 to 164 [ 493.080820][T23746] Symlink component flag not implemented (7) [ 493.091185][T23746] Symlink component flag not implemented (116) [ 493.098273][T23747] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 493.115700][T23747] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 493.124350][T23747] Symlink component flag not implemented [ 493.130082][T23747] Symlink component flag not implemented [ 493.159752][T23747] Symlink component flag not implemented (7) [ 493.165868][T23747] Symlink component flag not implemented (116) [ 493.197827][T23754] usb usb8: usbfs: process 23754 (syz.3.7063) did not claim interface 0 before use [ 493.311255][T23762] loop2: detected capacity change from 0 to 512 [ 493.317852][T23762] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.324529][T23762] EXT4-fs: Ignoring removed bh option [ 493.340847][T23762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 493.350998][T23762] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 493.465956][T23772] loop2: detected capacity change from 0 to 512 [ 493.587453][T23772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.614358][T23772] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.693582][T23791] netlink: 'syz.2.7070': attribute type 1 has an invalid length. [ 493.746088][T23792] lo speed is unknown, defaulting to 1000 [ 493.932785][T23797] __nla_validate_parse: 8 callbacks suppressed [ 493.932849][T23797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7075'. [ 494.015300][T23796] netlink: 'syz.1.7075': attribute type 10 has an invalid length. [ 494.066742][T23796] team0: left allmulticast mode [ 494.090704][T23797] netlink: 'syz.1.7075': attribute type 10 has an invalid length. [ 494.098634][T23797] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7075'. [ 494.143364][T23796] team_slave_0: left allmulticast mode [ 494.149017][T23796] team_slave_1: left allmulticast mode [ 494.154538][T23796] team0: left promiscuous mode [ 494.163754][T23800] loop3: detected capacity change from 0 to 164 [ 494.191026][T23800] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 494.218195][T23796] team_slave_0: left promiscuous mode [ 494.223871][T23796] team_slave_1: left promiscuous mode [ 494.229439][T23796] bridge0: port 3(team0) entered disabled state [ 494.236708][T23800] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 494.262515][T23800] Symlink component flag not implemented [ 494.268224][T23800] Symlink component flag not implemented [ 494.310785][T23800] Symlink component flag not implemented (7) [ 494.316906][T23800] Symlink component flag not implemented (116) [ 494.345567][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 494.345586][ T29] audit: type=1400 audit(1749570816.207:22813): avc: denied { read write } for pid=20740 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 494.375365][ T29] audit: type=1400 audit(1749570816.207:22814): avc: denied { open } for pid=20740 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 494.415971][T23797] team0: entered promiscuous mode [ 494.432075][T23797] team_slave_0: entered promiscuous mode [ 494.437903][T23797] team_slave_1: entered promiscuous mode [ 494.496178][ T29] audit: type=1400 audit(1749570816.273:22815): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 494.501609][T23797] bridge0: port 3(team0) entered blocking state [ 494.519894][ T29] audit: type=1400 audit(1749570816.273:22816): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 494.526157][T23797] bridge0: port 3(team0) entered disabled state [ 494.555950][ T29] audit: type=1400 audit(1749570816.273:22818): avc: denied { recv } for pid=23799 comm="syz.3.7076" saddr=10.128.0.163 src=30030 daddr=10.128.1.140 dest=50420 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 494.581743][ T29] audit: type=1400 audit(1749570816.273:22817): avc: denied { read write } for pid=23799 comm="syz.3.7076" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.600742][T23797] team0: entered allmulticast mode [ 494.606236][ T29] audit: type=1400 audit(1749570816.273:22819): avc: denied { open } for pid=23799 comm="syz.3.7076" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.635462][ T29] audit: type=1400 audit(1749570816.273:22820): avc: denied { ioctl } for pid=20740 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1460 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 494.652901][T23797] team_slave_0: entered allmulticast mode [ 494.660417][ T29] audit: type=1400 audit(1749570816.273:22821): avc: denied { map_create } for pid=23799 comm="syz.3.7076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 494.666171][T23797] team_slave_1: entered allmulticast mode [ 494.685456][ T29] audit: type=1400 audit(1749570816.273:22822): avc: denied { prog_load } for pid=23799 comm="syz.3.7076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 494.968221][T23817] loop1: detected capacity change from 0 to 256 [ 495.025357][T23821] loop0: detected capacity change from 0 to 512 [ 495.041593][T23817] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 495.075589][T23821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.116254][T23821] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.126989][T23817] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.137847][T21060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.255355][T23828] netlink: 'syz.0.7085': attribute type 1 has an invalid length. [ 495.263263][T23828] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7085'. [ 495.326408][T23833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7087'. [ 495.364269][T23836] loop4: detected capacity change from 0 to 256 [ 495.390175][T23836] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 495.405036][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7088'. [ 495.431537][T23836] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.521286][T23843] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 495.527900][T23843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 495.535474][T23843] vhci_hcd vhci_hcd.0: Device attached [ 495.621026][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7091'. [ 495.630270][T23844] vhci_hcd: cannot find a urb of seqnum 1634742272 max seqnum 0 [ 495.641991][T20411] vhci_hcd: stop threads [ 495.646381][T20411] vhci_hcd: release socket [ 495.650860][T20411] vhci_hcd: disconnect device [ 495.864037][T23821] syz.0.7085 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 495.878309][T23821] CPU: 0 UID: 0 PID: 23821 Comm: syz.0.7085 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 495.878339][T23821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.878352][T23821] Call Trace: [ 495.878359][T23821] [ 495.878370][T23821] __dump_stack+0x1d/0x30 [ 495.878421][T23821] dump_stack_lvl+0xe8/0x140 [ 495.878446][T23821] dump_stack+0x15/0x1b [ 495.878464][T23821] dump_header+0x81/0x220 [ 495.878498][T23821] oom_kill_process+0x334/0x3f0 [ 495.878610][T23821] out_of_memory+0x979/0xb80 [ 495.878644][T23821] try_charge_memcg+0x5e6/0x9e0 [ 495.878676][T23821] obj_cgroup_charge_pages+0xa6/0x150 [ 495.878788][T23821] __memcg_kmem_charge_page+0x9f/0x170 [ 495.878828][T23821] __alloc_frozen_pages_noprof+0x188/0x360 [ 495.878874][T23821] alloc_pages_mpol+0xb3/0x250 [ 495.878922][T23821] alloc_pages_noprof+0x90/0x130 [ 495.878980][T23821] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 495.879027][T23821] __kvmalloc_node_noprof+0x30f/0x4e0 [ 495.879058][T23821] ? ip_set_alloc+0x1f/0x30 [ 495.879100][T23821] ? ip_set_alloc+0x1f/0x30 [ 495.879201][T23821] ip_set_alloc+0x1f/0x30 [ 495.879237][T23821] hash_netiface_create+0x282/0x740 [ 495.879319][T23821] ? __pfx_hash_netiface_create+0x10/0x10 [ 495.879361][T23821] ip_set_create+0x3cc/0x960 [ 495.879397][T23821] ? __nla_parse+0x40/0x60 [ 495.879465][T23821] nfnetlink_rcv_msg+0x4c3/0x590 [ 495.879580][T23821] ? selinux_capable+0x1f9/0x270 [ 495.879627][T23821] netlink_rcv_skb+0x120/0x220 [ 495.879675][T23821] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 495.879720][T23821] nfnetlink_rcv+0x16b/0x1690 [ 495.879750][T23821] ? __kfree_skb+0x109/0x150 [ 495.879782][T23821] ? nlmon_xmit+0x4f/0x60 [ 495.879816][T23821] ? consume_skb+0x49/0x150 [ 495.879906][T23821] ? nlmon_xmit+0x4f/0x60 [ 495.879947][T23821] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 495.879972][T23821] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 495.880033][T23821] ? __dev_queue_xmit+0x182/0x1fb0 [ 495.880060][T23821] ? ref_tracker_free+0x37d/0x3e0 [ 495.880113][T23821] ? __netlink_deliver_tap+0x4dc/0x500 [ 495.880223][T23821] netlink_unicast+0x5a1/0x670 [ 495.880261][T23821] netlink_sendmsg+0x58b/0x6b0 [ 495.880294][T23821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.880324][T23821] __sock_sendmsg+0x142/0x180 [ 495.880354][T23821] ____sys_sendmsg+0x31e/0x4e0 [ 495.880451][T23821] ___sys_sendmsg+0x17b/0x1d0 [ 495.880471][T23821] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 495.880529][T23821] __x64_sys_sendmsg+0xd4/0x160 [ 495.880608][T23821] x64_sys_call+0x2999/0x2fb0 [ 495.880637][T23821] do_syscall_64+0xd2/0x200 [ 495.880701][T23821] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 495.880858][T23821] ? clear_bhb_loop+0x40/0x90 [ 495.880888][T23821] ? clear_bhb_loop+0x40/0x90 [ 495.880919][T23821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.880986][T23821] RIP: 0033:0x7f5b8b5de929 [ 495.881003][T23821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.881025][T23821] RSP: 002b:00007f5b89c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.881045][T23821] RAX: ffffffffffffffda RBX: 00007f5b8b805fa0 RCX: 00007f5b8b5de929 [ 495.881058][T23821] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 000000000000000b [ 495.881070][T23821] RBP: 00007f5b8b660b39 R08: 0000000000000000 R09: 0000000000000000 [ 495.881162][T23821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.881177][T23821] R13: 0000000000000000 R14: 00007f5b8b805fa0 R15: 00007ffd594e7ed8 [ 495.881200][T23821] [ 495.881208][T23821] memory: usage 307200kB, limit 307200kB, failcnt 3164 [ 496.235170][T23821] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 496.243130][T23821] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 496.250468][T23821] Memory cgroup stats for /syz0: [ 496.250826][T23821] cache 8192 [ 496.259031][T23821] rss 0 [ 496.259043][T23821] shmem 0 [ 496.259053][T23821] mapped_file 0 [ 496.268371][T23821] dirty 0 [ 496.271430][T23821] writeback 0 [ 496.274791][T23821] workingset_refault_anon 1940 [ 496.279647][T23821] workingset_refault_file 16253 [ 496.284554][T23821] swap 479232 [ 496.287936][T23821] swapcached 0 [ 496.291484][T23821] pgpgin 1056429 [ 496.295106][T23821] pgpgout 1056427 [ 496.298814][T23821] pgfault 693706 [ 496.302385][T23821] pgmajfault 763 [ 496.305995][T23821] inactive_anon 0 [ 496.309653][T23821] active_anon 0 [ 496.313209][T23821] inactive_file 8192 [ 496.315348][T23856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7093'. [ 496.317140][T23821] active_file 0 [ 496.329636][T23821] unevictable 0 [ 496.333176][T23821] hierarchical_memory_limit 314572800 [ 496.338617][T23821] hierarchical_memsw_limit 9223372036854771712 [ 496.344892][T23821] total_cache 8192 [ 496.348645][T23821] total_rss 0 [ 496.351955][T23821] total_shmem 0 [ 496.355412][T23821] total_mapped_file 0 [ 496.359410][T23821] total_dirty 0 [ 496.362967][T23821] total_writeback 0 [ 496.366826][T23821] total_workingset_refault_anon 1940 [ 496.372234][T23821] total_workingset_refault_file 16253 [ 496.377662][T23821] total_swap 479232 [ 496.381484][T23821] total_swapcached 0 [ 496.383598][T23849] netlink: 'syz.1.7093': attribute type 10 has an invalid length. [ 496.385430][T23821] total_pgpgin 1056429 [ 496.385443][T23821] total_pgpgout 1056427 [ 496.385454][T23821] total_pgfault 693706 [ 496.393850][T23849] team0: left allmulticast mode [ 496.397365][T23821] total_pgmajfault 763 [ 496.401600][T23849] team_slave_0: left allmulticast mode [ 496.405701][T23821] total_inactive_anon 0 [ 496.410604][T23849] team_slave_1: left allmulticast mode [ 496.414654][T23821] total_active_anon 0 [ 496.414667][T23821] total_inactive_file 8192 [ 496.420129][T23849] team0: left promiscuous mode [ 496.424305][T23821] total_active_file 0 [ 496.424317][T23821] total_unevictable 0 [ 496.429998][T23849] team_slave_0: left promiscuous mode [ 496.433769][T23821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 496.438324][T23849] team_slave_1: left promiscuous mode [ 496.443199][T23821] ,cpuset= [ 496.447235][T23849] bridge0: port 3(team0) entered disabled state [ 496.451027][T23821] /,mems_allowed=0 [ 496.463650][T23859] netlink: 'syz.1.7093': attribute type 10 has an invalid length. [ 496.468781][T23821] ,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7085,pid=23820,uid=0 [ 496.471855][T23859] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7093'. [ 496.506882][T23821] Memory cgroup out of memory: Killed process 23820 (syz.0.7085) total-vm:95800kB, anon-rss:1064kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 496.535614][T23859] team0: entered promiscuous mode [ 496.548504][T23859] team_slave_0: entered promiscuous mode [ 496.554668][T23859] team_slave_1: entered promiscuous mode [ 496.562283][T23861] loop3: detected capacity change from 0 to 512 [ 496.570398][T23859] bridge0: port 3(team0) entered blocking state [ 496.576841][T23859] bridge0: port 3(team0) entered disabled state [ 496.585298][T23861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.597895][T23859] team0: entered allmulticast mode [ 496.618100][T23859] team_slave_0: entered allmulticast mode [ 496.623970][T23859] team_slave_1: entered allmulticast mode [ 496.647655][T23861] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.662132][T23869] loop2: detected capacity change from 0 to 256 [ 496.669042][T23869] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 496.689582][T23869] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 496.754424][T23873] netlink: 'syz.3.7098': attribute type 1 has an invalid length. [ 496.762360][T23873] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7098'. [ 496.773732][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.818888][T23881] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 496.825512][T23881] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 496.833171][T23881] vhci_hcd vhci_hcd.0: Device attached [ 496.840726][T23882] vhci_hcd: cannot find a urb of seqnum 1634742272 max seqnum 1 [ 496.849470][T13721] vhci_hcd: stop threads [ 496.849725][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7105'. [ 496.853780][T13721] vhci_hcd: release socket [ 496.853792][T13721] vhci_hcd: disconnect device [ 497.282728][T23861] syz.3.7098 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 497.296979][T23861] CPU: 0 UID: 0 PID: 23861 Comm: syz.3.7098 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 497.297019][T23861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.297037][T23861] Call Trace: [ 497.297072][T23861] [ 497.297081][T23861] __dump_stack+0x1d/0x30 [ 497.297106][T23861] dump_stack_lvl+0xe8/0x140 [ 497.297146][T23861] dump_stack+0x15/0x1b [ 497.297163][T23861] dump_header+0x81/0x220 [ 497.297202][T23861] oom_kill_process+0x334/0x3f0 [ 497.297248][T23861] out_of_memory+0x979/0xb80 [ 497.297282][T23861] try_charge_memcg+0x5e6/0x9e0 [ 497.297318][T23861] obj_cgroup_charge_pages+0xa6/0x150 [ 497.297390][T23861] __memcg_kmem_charge_page+0x9f/0x170 [ 497.297429][T23861] __alloc_frozen_pages_noprof+0x188/0x360 [ 497.297480][T23861] alloc_pages_mpol+0xb3/0x250 [ 497.297591][T23861] alloc_pages_noprof+0x90/0x130 [ 497.297698][T23861] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 497.297748][T23861] __kvmalloc_node_noprof+0x30f/0x4e0 [ 497.297865][T23861] ? ip_set_alloc+0x1f/0x30 [ 497.297909][T23861] ? ip_set_alloc+0x1f/0x30 [ 497.297958][T23861] ? hash_netiface_create+0x21b/0x740 [ 497.298015][T23861] ? __kmalloc_cache_noprof+0x189/0x320 [ 497.298053][T23861] ip_set_alloc+0x1f/0x30 [ 497.298097][T23861] hash_netiface_create+0x282/0x740 [ 497.298144][T23861] ? __pfx_hash_netiface_create+0x10/0x10 [ 497.298235][T23861] ip_set_create+0x3cc/0x960 [ 497.298274][T23861] nfnetlink_rcv_msg+0x4c3/0x590 [ 497.298327][T23861] ? selinux_capable+0x1f9/0x270 [ 497.298457][T23861] netlink_rcv_skb+0x120/0x220 [ 497.298483][T23861] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 497.298523][T23861] nfnetlink_rcv+0x16b/0x1690 [ 497.298563][T23861] ? __kfree_skb+0x109/0x150 [ 497.298610][T23861] ? nlmon_xmit+0x4f/0x60 [ 497.298641][T23861] ? consume_skb+0x49/0x150 [ 497.298758][T23861] ? nlmon_xmit+0x4f/0x60 [ 497.298788][T23861] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 497.298855][T23861] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 497.298883][T23861] ? __dev_queue_xmit+0x182/0x1fb0 [ 497.298915][T23861] ? ref_tracker_free+0x37d/0x3e0 [ 497.298994][T23861] ? __netlink_deliver_tap+0x4dc/0x500 [ 497.299024][T23861] netlink_unicast+0x5a1/0x670 [ 497.299061][T23861] netlink_sendmsg+0x58b/0x6b0 [ 497.299103][T23861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.299134][T23861] __sock_sendmsg+0x142/0x180 [ 497.299164][T23861] ____sys_sendmsg+0x31e/0x4e0 [ 497.299189][T23861] ___sys_sendmsg+0x17b/0x1d0 [ 497.299280][T23861] __x64_sys_sendmsg+0xd4/0x160 [ 497.299316][T23861] x64_sys_call+0x2999/0x2fb0 [ 497.299346][T23861] do_syscall_64+0xd2/0x200 [ 497.299375][T23861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.299428][T23861] ? clear_bhb_loop+0x40/0x90 [ 497.299455][T23861] ? clear_bhb_loop+0x40/0x90 [ 497.299480][T23861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.299563][T23861] RIP: 0033:0x7f32000ae929 [ 497.299579][T23861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.299603][T23861] RSP: 002b:00007f31fe717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.299630][T23861] RAX: ffffffffffffffda RBX: 00007f32002d5fa0 RCX: 00007f32000ae929 [ 497.299647][T23861] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 000000000000000b [ 497.299665][T23861] RBP: 00007f3200130b39 R08: 0000000000000000 R09: 0000000000000000 [ 497.299682][T23861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.299753][T23861] R13: 0000000000000000 R14: 00007f32002d5fa0 R15: 00007fff42e5caf8 [ 497.299775][T23861] [ 497.299784][T23861] memory: usage 307200kB, limit 307200kB, failcnt 3419 [ 497.654860][T23861] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 497.662845][T23861] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 497.670200][T23861] Memory cgroup stats for /syz3: [ 497.670493][T23861] cache 12288 [ 497.679330][T23861] rss 0 [ 497.682290][T23861] shmem 0 [ 497.685397][T23861] mapped_file 0 [ 497.688921][T23861] dirty 0 [ 497.692454][T23861] writeback 0 [ 497.696288][T23861] workingset_refault_anon 1045 [ 497.701217][T23861] workingset_refault_file 22055 [ 497.706474][T23861] swap 471040 [ 497.709803][T23861] swapcached 0 [ 497.713698][T23861] pgpgin 1323016 [ 497.717660][T23861] pgpgout 1323012 [ 497.721448][T23861] pgfault 851017 [ 497.725230][T23861] pgmajfault 685 [ 497.728906][T23861] inactive_anon 0 [ 497.732620][T23861] active_anon 0 [ 497.736214][T23861] inactive_file 16384 [ 497.740240][T23861] active_file 0 [ 497.743853][T23861] unevictable 0 [ 497.747366][T23861] hierarchical_memory_limit 314572800 [ 497.752766][T23861] hierarchical_memsw_limit 9223372036854771712 [ 497.759063][T23861] total_cache 12288 [ 497.762895][T23861] total_rss 0 [ 497.766278][T23861] total_shmem 0 [ 497.769440][T23901] loop0: detected capacity change from 0 to 256 [ 497.769860][T23861] total_mapped_file 0 [ 497.776921][T23901] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 497.780095][T23861] total_dirty 0 [ 497.780108][T23861] total_writeback 0 [ 497.780136][T23861] total_workingset_refault_anon 1045 [ 497.780145][T23861] total_workingset_refault_file 22055 [ 497.780153][T23861] total_swap 471040 [ 497.780161][T23861] total_swapcached 0 [ 497.780226][T23861] total_pgpgin 1323016 [ 497.780233][T23861] total_pgpgout 1323012 [ 497.796046][T23901] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.799788][T23861] total_pgfault 851017 [ 497.841157][T23861] total_pgmajfault 685 [ 497.845346][T23861] total_inactive_anon 0 [ 497.849637][T23861] total_active_anon 0 [ 497.853661][T23861] total_inactive_file 16384 [ 497.858291][T23861] total_active_file 0 [ 497.862271][T23861] total_unevictable 0 [ 497.866270][T23861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7098,pid=23860,uid=0 [ 497.881079][T23861] Memory cgroup out of memory: Killed process 23860 (syz.3.7098) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 497.941949][T23906] loop0: detected capacity change from 0 to 256 [ 497.950037][T23906] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 497.962709][T23906] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.057245][T23910] netlink: 'syz.0.7115': attribute type 10 has an invalid length. [ 498.065402][T23910] team0: left allmulticast mode [ 498.070537][T23910] team_slave_0: left allmulticast mode [ 498.076049][T23910] team_slave_1: left allmulticast mode [ 498.081726][T23910] team0: left promiscuous mode [ 498.087469][T23910] team_slave_0: left promiscuous mode [ 498.093037][T23910] team_slave_1: left promiscuous mode [ 498.098630][T23910] bridge0: port 3(team0) entered disabled state [ 498.121980][T23919] loop1: detected capacity change from 0 to 512 [ 498.128676][T23919] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.135300][T23919] EXT4-fs: Ignoring removed bh option [ 498.135381][T23917] netlink: 'syz.0.7115': attribute type 10 has an invalid length. [ 498.154128][T23919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 498.164029][T23919] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 498.188456][T23921] loop2: detected capacity change from 0 to 164 [ 498.194891][T23917] team0: entered promiscuous mode [ 498.195401][T20130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.200049][T23917] team_slave_0: entered promiscuous mode [ 498.212473][T23921] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 498.214690][T23917] team_slave_1: entered promiscuous mode [ 498.232732][T23921] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 498.241716][T23921] Symlink component flag not implemented [ 498.247488][T23921] Symlink component flag not implemented [ 498.252055][T23917] bridge0: port 3(team0) entered blocking state [ 498.259517][T23917] bridge0: port 3(team0) entered disabled state [ 498.268271][T23921] Symlink component flag not implemented (7) [ 498.274511][T23921] Symlink component flag not implemented (116) [ 498.274515][T23924] loop4: detected capacity change from 0 to 256 [ 498.275293][T23924] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 498.299835][T23917] team0: entered allmulticast mode [ 498.305466][T23917] team_slave_0: entered allmulticast mode [ 498.311325][T23917] team_slave_1: entered allmulticast mode [ 498.317502][T23924] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.352335][T23926] ip6erspan0: entered promiscuous mode [ 498.376244][T23933] loop3: detected capacity change from 0 to 512 [ 498.389319][T23933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.411355][T23926] loop1: detected capacity change from 0 to 512 [ 498.421010][T23933] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.449520][T23926] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7123: Failed to acquire dquot type 1 [ 498.483747][T23926] EXT4-fs (loop1): 1 truncate cleaned up [ 498.489972][T23926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.522889][T23952] loop2: detected capacity change from 0 to 512 [ 498.529578][T23926] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.550279][T23953] netlink: 'syz.3.7125': attribute type 1 has an invalid length. [ 498.619157][T23952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.633423][T21202] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.642560][T23952] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.744582][T23961] lo speed is unknown, defaulting to 1000 [ 498.836895][T23965] netlink: 'syz.2.7131': attribute type 1 has an invalid length. [ 499.392003][T20130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.410128][T23970] loop4: detected capacity change from 0 to 256 [ 499.419542][T23970] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 499.433189][T23970] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 499.544357][T23972] loop0: detected capacity change from 0 to 164 [ 499.554778][T21060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.566450][T23972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 499.577090][T23972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 499.595088][T23972] Symlink component flag not implemented [ 499.601246][T23972] Symlink component flag not implemented [ 499.614863][T23972] Symlink component flag not implemented (7) [ 499.621912][T23972] Symlink component flag not implemented (116) [ 499.631687][T23987] __nla_validate_parse: 8 callbacks suppressed [ 499.631730][T23987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7138'. [ 499.631811][T23983] loop2: detected capacity change from 0 to 164 [ 499.656753][T23983] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 499.670449][T23983] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 499.680416][T23983] Symlink component flag not implemented [ 499.682078][T23979] netlink: 'syz.3.7138': attribute type 10 has an invalid length. [ 499.686130][T23983] Symlink component flag not implemented [ 499.694129][T23979] team0: left allmulticast mode [ 499.700190][T23983] Symlink component flag not implemented (7) [ 499.710763][T23983] Symlink component flag not implemented (116) [ 499.717105][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 499.717200][ T29] audit: type=1400 audit(1749570821.230:23060): avc: denied { read write } for pid=20930 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.719055][T23979] team_slave_0: left allmulticast mode [ 499.723420][ T29] audit: type=1400 audit(1749570821.230:23061): avc: denied { open } for pid=20930 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.748037][T23979] team_slave_1: left allmulticast mode [ 499.748058][T23979] team0: left promiscuous mode [ 499.753309][T23987] netlink: 'syz.3.7138': attribute type 10 has an invalid length. [ 499.753950][ T29] audit: type=1400 audit(1749570821.230:23062): avc: denied { ioctl } for pid=20930 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.778162][T23987] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7138'. [ 499.783708][ T29] audit: type=1400 audit(1749570821.230:23063): avc: denied { read write } for pid=23971 comm="syz.0.7137" name="loop0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 499.854603][ T29] audit: type=1400 audit(1749570821.230:23064): avc: denied { open } for pid=23971 comm="syz.0.7137" path="/dev/loop0" dev="devtmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 499.878227][ T29] audit: type=1400 audit(1749570821.239:23065): avc: denied { map_create } for pid=23971 comm="syz.0.7137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.880823][T23991] loop4: detected capacity change from 0 to 2048 [ 499.897631][T23979] team_slave_0: left promiscuous mode [ 499.897755][T23979] team_slave_1: left promiscuous mode [ 499.915175][T23979] bridge0: port 3(team0) entered disabled state [ 499.926308][ T29] audit: type=1400 audit(1749570821.239:23066): avc: denied { prog_load } for pid=23971 comm="syz.0.7137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.945672][ T29] audit: type=1400 audit(1749570821.239:23067): avc: denied { bpf } for pid=23971 comm="syz.0.7137" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.966454][ T29] audit: type=1400 audit(1749570821.239:23068): avc: denied { perfmon } for pid=23971 comm="syz.0.7137" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.988135][ T29] audit: type=1400 audit(1749570821.277:23069): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30030 daddr=10.128.1.140 dest=50420 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 500.017179][T23987] team0: entered promiscuous mode [ 500.035199][T23987] team_slave_0: entered promiscuous mode [ 500.039433][T23991] loop4: p1 < > p4 [ 500.041529][T23987] team_slave_1: entered promiscuous mode [ 500.052676][T23991] loop4: p4 size 8388608 extends beyond EOD, truncated [ 500.064504][T23997] loop2: detected capacity change from 0 to 512 [ 500.071329][T23987] bridge0: port 3(team0) entered blocking state [ 500.071375][T23987] bridge0: port 3(team0) entered disabled state [ 500.071451][T23997] ================================================================== [ 500.071490][T23997] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 500.071538][T23997] [ 500.071544][T23997] write to 0xffffffff868dbb88 of 88 bytes by task 23987 on cpu 1: [ 500.071560][T23997] prb_reserve+0x696/0xaf0 [ 500.071579][T23987] team0: entered allmulticast mode [ 500.071594][T23997] vprintk_store+0x56d/0x860 [ 500.071598][T23987] team_slave_0: entered allmulticast mode [ 500.071617][T23987] team_slave_1: entered allmulticast mode [ 500.071615][T23997] vprintk_emit+0x178/0x650 [ 500.071634][T23997] vprintk_default+0x26/0x30 [ 500.071652][T23997] vprintk+0x1d/0x30 [ 500.071682][T23997] _printk+0x79/0xa0 [ 500.071713][T23997] br_set_state+0x28c/0x390 [ 500.071737][T23997] br_init_port+0x5c/0xf0 [ 500.071765][T23997] new_nbp+0x22b/0x300 [ 500.071805][T23997] br_add_if+0x1e7/0xa60 [ 500.071840][T23997] br_add_slave+0x2c/0x40 [ 500.071863][T23997] do_set_master+0x390/0x460 [ 500.071888][T23997] do_setlink+0xa43/0x2810 [ 500.071920][T23997] rtnl_newlink+0xe75/0x12d0 [ 500.071949][T23997] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 500.071978][T23997] netlink_rcv_skb+0x120/0x220 [ 500.072002][T23997] rtnetlink_rcv+0x1c/0x30 [ 500.072029][T23997] netlink_unicast+0x5a1/0x670 [ 500.072066][T23997] netlink_sendmsg+0x58b/0x6b0 [ 500.072091][T23997] __sock_sendmsg+0x142/0x180 [ 500.072122][T23997] ____sys_sendmsg+0x31e/0x4e0 [ 500.072142][T23997] ___sys_sendmsg+0x17b/0x1d0 [ 500.072160][T23997] __x64_sys_sendmsg+0xd4/0x160 [ 500.072179][T23997] x64_sys_call+0x2999/0x2fb0 [ 500.072205][T23997] do_syscall_64+0xd2/0x200 [ 500.072230][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.072256][T23997] [ 500.072262][T23997] read to 0xffffffff868dbb88 of 8 bytes by task 23997 on cpu 0: [ 500.072278][T23997] _prb_read_valid+0x383/0x920 [ 500.072317][T23997] prb_read_valid+0x3c/0x60 [ 500.072353][T23997] printk_get_next_message+0xc8/0x510 [ 500.072379][T23997] console_flush_all+0x290/0x730 [ 500.072406][T23997] console_unlock+0xa1/0x330 [ 500.072426][T23997] vprintk_emit+0x388/0x650 [ 500.072443][T23997] vprintk_default+0x26/0x30 [ 500.072461][T23997] vprintk+0x1d/0x30 [ 500.072484][T23997] _printk+0x79/0xa0 [ 500.072519][T23997] set_capacity_and_notify+0x14c/0x1f0 [ 500.072544][T23997] loop_set_size+0x2e/0x70 [ 500.072570][T23997] loop_configure+0x8d3/0xa50 [ 500.072593][T23997] lo_ioctl+0x559/0x15d0 [ 500.072610][T23997] blkdev_ioctl+0x352/0x440 [ 500.072629][T23997] __se_sys_ioctl+0xce/0x140 [ 500.072672][T23997] __x64_sys_ioctl+0x43/0x50 [ 500.072711][T23997] x64_sys_call+0x19a8/0x2fb0 [ 500.072738][T23997] do_syscall_64+0xd2/0x200 [ 500.072762][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.072790][T23997] [ 500.072795][T23997] value changed: 0x0000000000002c17 -> 0x0000000000004c17 [ 500.072809][T23997] [ 500.072815][T23997] Reported by Kernel Concurrency Sanitizer on: [ 500.072828][T23997] CPU: 0 UID: 0 PID: 23997 Comm: syz.2.7144 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 500.072863][T23997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.072879][T23997] ================================================================== [ 500.075405][T23994] ip6erspan0: entered promiscuous mode [ 500.079904][T23997] EXT4-fs: Ignoring removed mblk_io_submit option [ 500.242879][T24002] loop1: detected capacity change from 0 to 512 [ 500.248621][T23997] EXT4-fs: Ignoring removed bh option [ 500.366079][T24002] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7143: Failed to acquire dquot type 1 [ 500.370713][T23997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 500.380826][T24002] EXT4-fs (loop1): 1 truncate cleaned up [ 500.390017][T23997] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 500.458752][T24002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.472194][T24002] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.497488][T21202] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.