last executing test programs: 1m22.358796502s ago: executing program 0 (id=260): pipe(&(0x7f0000000080)) pipe(&(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) 1m22.278003694s ago: executing program 0 (id=264): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4e, 0x5}, 0x0, 0x0, 0x800004, 0x5, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, r2, 0x200000000000000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r11, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) recvfrom$inet(r11, &(0x7f0000000200)=""/225, 0xe1, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x6}, {0x3, 0xfff3}, {0xe, 0x3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000080) 1m22.147836146s ago: executing program 0 (id=266): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x38da1) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000400)={0x40, 0xd7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x80) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x7ff, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r0, 0x1) unshare(0x2a020400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x222100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x26, 0x6, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {0xa, 0x3}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2204c028}, 0x80) sync_file_range(0xffffffffffffffff, 0x10001, 0xf7fffffffffffffd, 0x2) r6 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@nolazytime}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="e7ffffff", @ANYRES16=0x0, @ANYRES8=r3, @ANYRES8=r6, @ANYRESHEX, @ANYRES32=r5, @ANYRES16=r2, @ANYRESDEC, @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000804) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40086604, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x18) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000240)=@ethtool_eee={0x45, 0x40, 0x9b91, 0xffffffff, 0xc1, 0x8, 0x807, 0x49dc, [0x100, 0x20]}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0x1}, 0x28) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r10, 0x20, "e359b305c1839d5a6a1ba703bfdfac01b87e4fc28706bc361ec1acd35a14fe28"}, &(0x7f0000000180)=0x28) 1m21.94542502s ago: executing program 0 (id=272): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@acl}, {@jqfmt_vfsv0}], [{@seclabel}]}, 0x1, 0x456, &(0x7f00000014c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) socketpair(0x1, 0x100000005, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) setpriority(0x2, r3, 0x2000000000000000) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfe, {0xe, 0xb, './bus/../file0', './bus/file0'}}, 0x34}}, 0x4000) getpeername$packet(r1, 0x0, &(0x7f0000000040)) 1m21.783055823s ago: executing program 0 (id=274): pipe(&(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) 1m21.537562057s ago: executing program 0 (id=278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18006edc400000a58bbad6d373ec85f37442489e88ff2d7b3d07000000ed05d529654a486daeae7900000010", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_read_part_table(0x5e6, &(0x7f0000000c00)="$eJzs2z9o1GcYB/DnosdZM7gIBZeqQweRguLoDSqXs6JwPc0iHSooIt50gnDSA0EHzaB4gzi6hMAt+bM0lxsyNSSQOQ0ZUgI3ZGlJlkCWXLnkDYUSWkKSgvD5wPHwvvf83u/zg3f9BV+0vviz2+1mIqKbizixz6cHm4WB78+WrpXvRWR6h8Vv3339Q++fb1JH79Se82m9nNbDn0+2367fzDaX7m58+9OvQ32740TEy4joH2kN/nv2sX3OylEYzc+cevW6WnxXyz9ZLNY7bxbm74ytFcqt20ON8VvZGw9T32yqx1N9FrV4EU/jQVSiEo+iekj5n5orl7bOFJuTj69uDrTfT19OfaU9nt2+9gf0z/zn5z7cb9SvX5w4/fFKbWquvJquaSV38CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7eaH7m1KvX1eK7Wj4XEZ03C/N3xtYK5dbtocb4reyNh6lvNtXjqT6LWryIp/EgKlGJR1HdPbDb/Y/EX4Yj4qs98p8sFuudT82VS1tnis3Jx1c3B9rvpy+nvtKhvvXftvMv9O8sivXO83Mf7jfq1y9OnP54pTY1V149tjNsJXdEAwAAAAAAAAAAAAAAAAAAAEBEFE7E2dK18r2ITPwYERf++Lmvt99N37tnUt/5VJfT/vDnk+236zezzaW7G9mI+D3tv0y//pHW4P/+MuzbXwEAAP//m5WRHw==") getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) brk(0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) 1m21.521822198s ago: executing program 32 (id=278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18006edc400000a58bbad6d373ec85f37442489e88ff2d7b3d07000000ed05d529654a486daeae7900000010", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_read_part_table(0x5e6, &(0x7f0000000c00)="$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") getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) brk(0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) 43.199231543s ago: executing program 4 (id=993): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 43.135699484s ago: executing program 4 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x3}, 0x0, 0xb, 0xe4, 0x3, 0x18, 'syz1\x00', "368eb4823d7f6c9d72851b1614406dc4d30891769c254e29f53004a4805375f3", "31103199f27fd2f947399a25c045af64002db6aeb1b91c48bb2de4b3e9982411", [{0x7, 0xa, {0x2, 0x9c}}, {0xfffe, 0x2, {0x3, 0x2}}, {0x200, 0x6, {0x2}}, {0x7, 0x9, {0x1, 0x800}}, {0x6, 0x9, {0x3, 0x6}}, {0x3ff, 0x0, {0x2, 0x1}}, {0x3ff, 0xff, {0x2, 0x9}}, {0x3, 0x7, {0x2, 0x8}}, {0x6, 0x4d19, {0x2, 0x9}}, {0x4, 0x4, {0x3, 0x5}}, {0x1da, 0x1, {0x1, 0xdec}}, {0x1, 0x8, {0x0, 0xb}}, {0x2, 0x5, {0x3, 0x3}}, {0xda, 0x8000, {0x2, 0xffff}}, {0xf, 0x7, {0x1, 0x2}}, {0x8, 0x0, {0x3, 0x3}}, {0x0, 0x4b8, {0x3, 0x737}}, {0x8000, 0x6, {0x3, 0x3}}, {0x8, 0x7, {0x0, 0x7}}, {0xd7ff, 0x80, {0x0, 0x8}}, {0xf, 0x2c6, {0x1}}, {0x9, 0xc}, {0x5, 0x7, {0x1, 0x1}}, {0x7ff, 0xfffa, {0x0, 0xd}}, {0xffd8, 0x8, {0x2, 0x7d5a7a5e}}, {0x7, 0x1, {0x0, 0x6}}, {0x1, 0x5, {0x1, 0x7}}, {0x1, 0x6, {0x1}}, {0x7d42, 0x8, {0x3, 0x5}}, {0x7, 0x2d48, {0x1, 0x2}}, {0x7f, 0x1, {0x2, 0x1d9d}}, {0x9, 0x9, {0x0, 0x8}}, {0x6, 0x0, {0x1, 0x5}}, {0x8, 0x9, {0x1, 0x81}}, {0x9, 0x2a97, {0x1, 0xc}}, {0x2, 0x8, {0x1, 0x572a}}, {0xfffc, 0x1, {0x1, 0x47}}, {0x6ddc, 0x7f}, {0x10, 0x9, {0x2, 0x4}}, {0x6, 0x3, {0x3, 0xb}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8eb5c0d3b8145741}, 0x20000000) 43.074506575s ago: executing program 4 (id=997): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x200) 43.042835356s ago: executing program 4 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0x4, 0x4, 0x2, 0x20000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xfee, &(0x7f0000001e00)=""/4078, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x27f}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r3 = socket$unix(0x1, 0x3, 0x0) r4 = open$dir(&(0x7f00000004c0)='./file0\x00', 0xc0400, 0x80) futimesat(r4, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600)={{0x0, 0x2710}, {0x77359400}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYRES8=r5], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statx(0xffffffffffffff9c, &(0x7f0000001700)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x100, 0x200, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x20, 0xb, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYBLOB="a13a7c6361d0113cdf12710b0430012045062fcdf11a0d9d8ef5a5ae1756c42f9c6fde9502fa99162a68a6854569fae3a8f84f4bd6f3e3f7c4134d40906297b99efb82ebe15b593f795706e74d7db54977239248841574c3a51270e52dd0560c45c535a2c1777016d8a75cdb19914edf6232a3212938cdd0b028c75369550737b064206959006e8e5306f3f3040cbde119ab8e2df516b46485a889c6e694c8d3ae"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x70) stat(&(0x7f00000006c0)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000020"], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f0000000480)) sendmsg$unix(r3, &(0x7f0000001940)={&(0x7f00000002c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r8}}}], 0x20, 0x800}, 0x4000800) syz_open_dev$loop(&(0x7f0000000080), 0x7fffffff, 0x101000) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 42.440320238s ago: executing program 4 (id=1003): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070098130000040000e597a5441fec4f70313fd4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) (async) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8080) (async) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) (async) exit(0x5) openat(0xffffffffffffff9c, 0x0, 0x240, 0x22) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) (async) recvfrom(r6, &(0x7f0000000280)=""/62, 0x3e, 0x40000160, 0x0, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x17d6, 0xc000, 0xe, "0062ba7d82000000883108e5f710d18b096604"}) syz_open_pts(r9, 0xa8b02) 41.724445921s ago: executing program 4 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 41.679702332s ago: executing program 33 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 2.67433887s ago: executing program 6 (id=1708): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) 2.64697782s ago: executing program 6 (id=1709): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='irq_handler_entry\x00', r2}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @mcast1, 0xa}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYRES8=r3], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="c5678a18000000000000ffffffffff0000000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="03000000010000000500"/28], 0x50) getrusage(0xffffffffffffffff, &(0x7f0000000840)) fchdir(r0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x7, 0x2b0, &(0x7f0000000280)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file1', [{0x20, 'cpuset.effective_mems\x00'}, {0x20, 'cpuset.effect\v\x00\x00\x00\x00\x00\x00\x00(\xbd\xfce\xfb\xe4O\x81\xb5i\xd8.NEJ\xf4S\xa0\xa2)\xbf: \x06\xd6\xfb\xb1\n\xb1\xc30\xff'}]}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1c, 0xf1, 0x0, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8000, 0x5}}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) 1.994297213s ago: executing program 3 (id=1729): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) write(r3, &(0x7f0000004200)='t', 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendto$inet(r3, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) 1.787626666s ago: executing program 6 (id=1736): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) 1.763723217s ago: executing program 6 (id=1738): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) 1.723095378s ago: executing program 6 (id=1740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x28) 1.639607289s ago: executing program 1 (id=1741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x40000, 0x102, 0xc}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1.510447622s ago: executing program 6 (id=1742): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket(0x10, 0x803, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x17) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000950000000000000073905716296c09f843968e5c379b83dd4b453c20cd112270b86da9c083f64422672c007de8"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(0x0, r6) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="010325bd7000fedbdf250200ffa608000500ffffffff14000b00fc01000000000000000000000000000108000700", @ANYRES32, @ANYBLOB="a60002000100000014000c00fe80000000000000000000000000001905000d000900000014000c02fe8000000000000000000000000000d8080005007f000001080004007f00000114000b00fe800000000000000000000000000001"], 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.426054153s ago: executing program 3 (id=1743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007b1f6ed4548fe50dd1b8ff863300000000003b9be941f22e7a09"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000c00)) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.320517625s ago: executing program 2 (id=1746): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.280727026s ago: executing program 2 (id=1747): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='irq_handler_entry\x00', r2}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @mcast1, 0xa}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYRES8=r3], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="c5678a18000000000000ffffffffff0000000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="03000000010000000500"/28], 0x50) getrusage(0xffffffffffffffff, &(0x7f0000000840)) fchdir(r0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7, 0x2b0, &(0x7f0000000280)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file1', [{0x20, 'cpuset.effective_mems\x00'}, {0x20, 'cpuset.effect\v\x00\x00\x00\x00\x00\x00\x00(\xbd\xfce\xfb\xe4O\x81\xb5i\xd8.NEJ\xf4S\xa0\xa2)\xbf: \x06\xd6\xfb\xb1\n\xb1\xc30\xff'}]}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1c, 0xf1, 0x0, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8000, 0x5}}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) 895.131183ms ago: executing program 5 (id=1752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x28) 866.713604ms ago: executing program 5 (id=1753): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) write(r3, &(0x7f0000004200)='t', 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendto$inet(r3, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) 494.405981ms ago: executing program 5 (id=1754): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) 478.437681ms ago: executing program 3 (id=1755): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r5) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000b4c401bf3874d14f", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendto$inet(r3, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) 357.566623ms ago: executing program 2 (id=1756): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 350.549104ms ago: executing program 1 (id=1757): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) lstat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000c00)) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 319.777034ms ago: executing program 1 (id=1758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) 282.955685ms ago: executing program 5 (id=1759): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000400)={[{@grpjquota}, {@block_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@noblock_validity}, {@bh}, {@nolazytime}, {@grpid}, {@nogrpid}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x0, 0x4f0, &(0x7f0000000640)="$eJzs3d9rW9cdAPDvla38dGZn20MWWGaWDCdskex4ScwesgzG9hTYlr2nxpaNsWwZS05iE4pD/4BCKW2hT33qS6F/QKHkTyiFQPte2tJSmqR56EurIumqtV0pdlLLCtbnAyf33F/+nqOgo3N0DroB9KzhiLgaEX0RcS4iBtPjmTTFeiPVrnv08M5ULSVRrV7/OokkPdb8W0m6PZredigi/vfviHhQrW6NW15dm58sFgvL6X6+srCUL6+unZ9bmJwtzBYWx8fHLk1cnrg4MfrMdbu5IT8UEVf++flrL7/9ryvv/+XWJze+PPtirbwD6fmN9dhNjdckW38tmvojYrkTwbqgL61PttsFAQBgR2r9019HxB/r/f/B6Kv35gAAAID9pPr3gfrcTRUAAADYtzL1NbBJJpeu9x2ITCaXa6zh/W0cyRRL5cqfZ0ori9ONtbJDkc3MzBULo+la4aHIJrX9sXSNbXP/wpb98Yg4HhGvDh6u7+emSsXpbn/5AQAAAD3i6Jbx/+PBxvgfAAAA2GeGul0AAAAAoOOM/wEAAGD/M/4HAACAfe0/167VUrX5/Ovpm6sr86Wb56cL5fncwspUbqq0vJSbLZVm67/Zt7Dd3yuWSkt/jcWV2/lKoVzJl1fXbiyUVhYrN+Y2PQIbAAAA2EPH/3Dv4yQi1v92uJ4iiTiQnst2uWxAZ2We5uLPOlcOYO/1dbsAQNf0d7sAQNcY4wPJNufbLt75YPfLAgAAdMbI77bM/4f5f+gVTzX/D+wr5v+hd7WY/7ckAHpEVg8Ael7n5/+r1acqEAAAsOsG6inJ5NK5wIHIZHK5iGP1xwJkk5m5YmE0In4VER8NZg/W9sfqdybbjhkAAAAAAAAAAAAAAAAAAAAAAAAAgIZqNYnqM3j8LDcBAAAAXRGR+SJJn/81MnhmYOv3AweSbwfr24i49eb1129PVirLY7XjD348XnkjPX5hmy8bPGwcAAAA9kRznN4cxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAbnr08M5UM+1l3K/+ERFDreL3x6H69lBkI+LIN0n0b7gviYi+XYi/fjciTrSKn9SKFUNpKbbGz0TE4S7HP7oL8aGX3au1P1dbvf8yMVzftn7/9afpl9rY/tWag43xm+1fX5v279gOY5y8/26+bfy7ESf7W7c/zfhJm/in20Y8uGnvhf+vrbW7svpWxEjLz59kU6x8ZWEpX15dOz+3MDlbmC0sjo+PXZq4PHFxYjQ/M1cspP+2jPHK79/7/kn1P9Im/tA29T/Ttv6bfXf/9sPfNLLZVvHPnt4cfzg9d6JN/Ez62fenNF87P9LMrzfyG51658NTafZnH1m1+NNt6r/d///ZHdb/3H9f+nSHlwIAe6C8ujY/WSwWljueGW59qtkj2qtiyDx/mb7YfKTZ9d/tWLVu63NS5ec/08VGCQAA6IifOv07uHjThPvBzhUKAAAAAAAAAAAAAAAAAAAAesxe/JzY1pjr3akqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAT/RAAAP//b2XLiA==") io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r5) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000e000000060011000500000008001300ff0700000500140001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44080) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r11, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(r10, 0x0, r9, 0x0, 0x1, 0x0) fcntl$setpipe(r8, 0x407, 0x10003ff) 137.424128ms ago: executing program 2 (id=1760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) 98.883429ms ago: executing program 1 (id=1761): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) 98.500459ms ago: executing program 2 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x40003e0000}, {0x0, 0x0, 0x8000}], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='irq_handler_entry\x00', r2}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @mcast1, 0xa}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYRES8=r3], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="c5678a18000000000000ffffffffff0000000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="03000000010000000500"/28], 0x50) getrusage(0xffffffffffffffff, &(0x7f0000000840)) fchdir(r0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7, 0x2b0, &(0x7f0000000280)="$eJzs3T9vI0UYB+B3E3vtg8IuqBASK0FBdbpcS+MI5aQIVyAXQAEn7k5CsYV0J0XijzBX0dJQ8gmQkOj4EjQU9Ei0SHRccdKi9e7GTlg72QgnwD1Pk8ns/Gbe3YwTpfD4g5dmR/eyePD481+j309iZxSjeJLEMHai9mWcMvo6AID/sid5Hn/kpTa5JCL62ysLANiilb//Ny4U+GHrJQEAW/b2O+++uT8eH7yVZf24M/vqeFL8Z198La/vP4iPYhr341YM4mlEfqJs38nzfN7JCsN4dTY/nhTJ2fs/VfPv/x6xyO/FIIaLrtP5w/HBXlZayc+LOp6r1h8V+dsxiBca1j8cH9xuyMckjddeWan/Zgzi5w/j45jGvUURy/wXe1n2Rv7Nn5+9V5RX5JP58aS3GLeU717xjwYAAAAAAAAAAAAAAAAAAAAAgP+xm9XZOb1YnN9TdFXn7+w+Lb7pRlYbnj6fp8wn9URnzgea5/Ftfb7OrSzL8mrgMt+JFzvRuZ67BgAAAAAAAAAAAAAAAAAAgH+XR598enR3Or3/8B9p1KcB1G/rv+w8o5Wel6NhzDBOenrLJXeqZTfMHLv1mCRiYxnFjK2K756/+prGjXWp775v++j654/pXqLClo16dx3dTZqfYS/qnn69SX5cHZPGBddK113KW22/tPFS2voFkj6/aMw3jIlkU2Gv/1Y+uaonOXsX6eKpNsa7VaN8LTTtjVb7+e+/KxKndQAAAAAAAAAAAAAAAAAAwFYt3/TbcPHxmtAvh+WH/Mdwy9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNVYfv5/i8a8Cl9gcBoPH13zLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAM+CsAAP//yylfnw==") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file1', [{0x20, 'cpuset.effective_mems\x00'}, {0x20, 'cpuset.effect\v\x00\x00\x00\x00\x00\x00\x00(\xbd\xfce\xfb\xe4O\x81\xb5i\xd8.NEJ\xf4S\xa0\xa2)\xbf: \x06\xd6\xfb\xb1\n\xb1\xc30\xff'}]}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1c, 0xf1, 0x0, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8000, 0x5}}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) 72.781109ms ago: executing program 1 (id=1763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x28) 42.781729ms ago: executing program 2 (id=1764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7}, 0x9) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400013000078000000160a0101000b000000000000010000000900010073797a30000000000900020073797a3000000000440003804000038014000100726f7365300000000000000000000000140001007663616e3000"], 0x100}, 0x1, 0x0, 0x0, 0x240408c1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r10, 0x0, 0x0, 0xa) listen(r3, 0x0) r11 = accept4(r3, 0x0, 0x0, 0x0) sendto(r11, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) setsockopt$inet_opts(r11, 0x0, 0xd, &(0x7f0000000180)="2fca44bb0d1ad6c53a503a86b5f2b9a0fa6834702386ed2d499d4045685b4172c6a7a238464d477ae329c0e7ea5f87613d557539ab429cab423fb40c1897bac5f78c94cf765c459b9eb2d40e0b12b1af95a7ee60902f49d3f9d70ccae724917a3a14d0599c3cd9aaedf9e19ac2d5271139e8fcbe996171fc4ae7c824a37b0780b50398d72d0c", 0x86) 0s ago: executing program 1 (id=1765): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) write(r3, &(0x7f0000004200)='t', 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendto$inet(r3, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): xe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.728420][ T29] audit: type=1326 audit(1759574852.590:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.751991][ T29] audit: type=1326 audit(1759574852.590:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.775541][ T29] audit: type=1326 audit(1759574852.590:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.799102][ T29] audit: type=1326 audit(1759574852.590:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.822636][ T29] audit: type=1326 audit(1759574852.590:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.846080][ T29] audit: type=1326 audit(1759574852.590:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.869823][ T29] audit: type=1326 audit(1759574852.590:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef381eeec9 code=0x7ffc0000 [ 107.904784][ T6861] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.911805][ T6861] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1069: EA inode hash validation failed [ 107.935067][ T6861] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.1069: corrupted inode contents [ 107.954124][ T6864] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.956733][ T6861] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.1069: mark_inode_dirty error [ 107.985574][ T6861] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.1069: corrupted inode contents [ 107.998006][ T6861] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.1069: mark_inode_dirty error [ 108.017067][ T6861] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.1069: mark inode dirty (error -117) [ 108.035324][ T6861] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 108.049956][ T6861] EXT4-fs (loop1): 1 orphan inode deleted [ 108.056470][ T6861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.078899][ T3407] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 108.111653][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.161985][ T6884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1078'. [ 108.202549][ T3374] usb 5-1: enqueue for inactive port 0 [ 108.208127][ T3374] usb 5-1: enqueue for inactive port 0 [ 108.259262][ T6890] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1078'. [ 108.280879][ T6871] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 108.289679][ T3374] vhci_hcd: vhci_device speed not set [ 108.291082][ T6893] SELinux: policydb version 576 does not match my version range 15-35 [ 108.303714][ T6893] SELinux: failed to load policy [ 108.400897][ T6902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6902 comm=syz.3.1082 [ 108.418372][ T6905] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 108.577210][ T6922] loop5: detected capacity change from 0 to 1024 [ 108.584325][ T6922] EXT4-fs: Ignoring removed orlov option [ 108.598553][ T6922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.640617][ T6922] program syz.5.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.679525][ T6928] loop6: detected capacity change from 0 to 1024 [ 108.692432][ T6928] EXT4-fs: Ignoring removed orlov option [ 108.700750][ T6928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.908424][ T6932] loop3: detected capacity change from 0 to 256 [ 108.916483][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.064174][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.084495][ T6944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6944 comm=syz.5.1098 [ 109.167837][ T3413] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 109.256550][ T6953] loop5: detected capacity change from 0 to 512 [ 109.281473][ T6953] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 109.341963][ T6940] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 109.342047][ T6957] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 109.386759][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1105'. [ 109.395949][ T6963] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1105'. [ 109.406484][ T6955] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 109.454508][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1106'. [ 109.905642][ T3374] hid-generic 0003:0004:0000.001D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 110.036586][ T6974] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 110.188159][ T6979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6979 comm=syz.3.1110 [ 110.266241][ T6984] loop1: detected capacity change from 0 to 512 [ 110.284566][ T6984] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.291947][ T6984] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1112: EA inode hash validation failed [ 110.293926][ T6988] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 110.312254][ T6984] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.1112: corrupted inode contents [ 110.324699][ T6984] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.1112: mark_inode_dirty error [ 110.336924][ T6984] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.1112: corrupted inode contents [ 110.349126][ T6984] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.1112: mark_inode_dirty error [ 110.363237][ T6984] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.1112: mark inode dirty (error -117) [ 110.377967][ T6984] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 110.387815][ T6984] EXT4-fs (loop1): 1 orphan inode deleted [ 110.394126][ T6984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.416225][ T6993] loop5: detected capacity change from 0 to 2364 [ 110.448633][ T6993] iso9660: Bad value for 'sbsector' [ 110.485124][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.571206][ T6999] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 110.618494][ T7010] loop1: detected capacity change from 0 to 1024 [ 110.625779][ T7010] EXT4-fs: Ignoring removed orlov option [ 110.634360][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.679384][ T7018] netlink: 'syz.5.1124': attribute type 10 has an invalid length. [ 110.882080][ T7027] loop3: detected capacity change from 0 to 256 [ 110.977280][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.011120][ T3374] hid-generic 0003:0004:0000.001E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 111.101465][ T7038] loop1: detected capacity change from 0 to 1024 [ 111.108218][ T7038] EXT4-fs: Ignoring removed orlov option [ 111.120715][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.204419][ T7043] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.533096][ T10] hid_parser_main: 80 callbacks suppressed [ 111.533118][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.546451][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.553883][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.561446][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.569016][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.576464][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.583995][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.591403][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.599042][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.607134][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 111.608478][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.637345][ T10] hid-generic 0003:0004:0000.001F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 111.653066][ T7066] __nla_validate_parse: 1 callbacks suppressed [ 111.653087][ T7066] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1142'. [ 111.688278][ T10] hid-generic 0003:0004:0000.0020: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 111.718023][ T7066] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1142'. [ 111.730935][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7071 comm=syz.3.1143 [ 111.748002][ T7073] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.791826][ T7078] SELinux: policydb version 576 does not match my version range 15-35 [ 111.825567][ T7078] SELinux: failed to load policy [ 111.848238][ T7082] SELinux: policydb version 576 does not match my version range 15-35 [ 111.860766][ T7082] SELinux: failed to load policy [ 111.874730][ T7086] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.901669][ T7094] loop3: detected capacity change from 0 to 512 [ 111.908996][ T7094] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 111.919027][ T7096] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.924439][ T7097] netlink: 'syz.1.1151': attribute type 10 has an invalid length. [ 111.947666][ T7100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7100 comm=syz.2.1156 [ 112.033581][ T36] hid-generic 0003:0004:0000.0021: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 112.059672][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1162'. [ 112.317863][ T10] hid-generic 0003:0004:0000.0022: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 112.416323][ T3413] hid-generic 0003:0004:0000.0023: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 112.504479][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1173'. [ 112.716757][ T7149] SELinux: policydb version 576 does not match my version range 15-35 [ 112.719885][ T7151] loop1: detected capacity change from 0 to 128 [ 112.732104][ T7149] SELinux: failed to load policy [ 112.760400][ T7147] loop5: detected capacity change from 0 to 256 [ 112.769120][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 112.769140][ T29] audit: type=1326 audit(1759574857.700:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.798801][ T29] audit: type=1326 audit(1759574857.700:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.823493][ T29] audit: type=1326 audit(1759574857.700:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.846972][ T29] audit: type=1326 audit(1759574857.700:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.870523][ T29] audit: type=1326 audit(1759574857.700:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.894011][ T29] audit: type=1326 audit(1759574857.700:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.917795][ T29] audit: type=1326 audit(1759574857.700:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.938564][ T7162] SELinux: policydb version 576 does not match my version range 15-35 [ 112.941288][ T29] audit: type=1326 audit(1759574857.700:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 112.963445][ T7162] SELinux: failed to load policy [ 112.973272][ T29] audit: type=1326 audit(1759574857.700:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 113.001718][ T29] audit: type=1326 audit(1759574857.700:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6ccceec9 code=0x7ffc0000 [ 113.046324][ T7163] loop1: detected capacity change from 0 to 1024 [ 113.054523][ T7166] rxe_newlink: 4 callbacks suppressed [ 113.054537][ T7166] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.081705][ T7163] EXT4-fs: Ignoring removed orlov option [ 113.122230][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.124005][ T7174] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.351497][ T7187] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.401765][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.460699][ T7196] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.478100][ T7199] loop1: detected capacity change from 0 to 512 [ 113.485073][ T7199] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.499345][ T7199] EXT4-fs (loop1): 1 truncate cleaned up [ 113.507701][ T7199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.550731][ T7208] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.601871][ T7193] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 114.110922][ T7231] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 114.154868][ T7232] loop6: detected capacity change from 0 to 1024 [ 114.166127][ T7232] EXT4-fs: Ignoring removed orlov option [ 114.194154][ T7232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.270043][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.370122][ T7238] loop5: detected capacity change from 0 to 512 [ 114.394451][ T7238] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.403550][ T7238] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1207: EA inode hash validation failed [ 114.425555][ T7215] syz.3.1201 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 114.433548][ T7238] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #15: comm syz.5.1207: corrupted inode contents [ 114.436598][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.3.1201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.436639][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.436736][ T7215] Call Trace: [ 114.436781][ T7215] [ 114.436793][ T7215] __dump_stack+0x1d/0x30 [ 114.436869][ T7215] dump_stack_lvl+0xe8/0x140 [ 114.436919][ T7215] dump_stack+0x15/0x1b [ 114.436964][ T7215] dump_header+0x81/0x220 [ 114.437062][ T7215] oom_kill_process+0x342/0x400 [ 114.437104][ T7215] out_of_memory+0x979/0xb80 [ 114.437159][ T7215] try_charge_memcg+0x5e6/0x9e0 [ 114.437224][ T7215] ? should_fail_ex+0x30/0x280 [ 114.437293][ T7215] charge_memcg+0x51/0xc0 [ 114.437321][ T7215] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 114.437393][ T7215] __read_swap_cache_async+0x17b/0x2d0 [ 114.437445][ T7215] swap_cluster_readahead+0x262/0x3c0 [ 114.437651][ T7215] swapin_readahead+0xde/0x6f0 [ 114.437819][ T7215] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 114.437870][ T7215] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 114.437968][ T7215] ? __rcu_read_unlock+0x4f/0x70 [ 114.438069][ T7215] ? swap_cache_get_folio+0x277/0x280 [ 114.438119][ T7215] do_swap_page+0x2ae/0x2370 [ 114.438152][ T7215] ? css_rstat_updated+0xb7/0x240 [ 114.438348][ T7215] ? __pfx_default_wake_function+0x10/0x10 [ 114.438387][ T7215] handle_mm_fault+0x9a5/0x2be0 [ 114.438420][ T7215] ? vma_start_read+0x141/0x1f0 [ 114.438468][ T7215] do_user_addr_fault+0x630/0x1080 [ 114.438536][ T7215] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 114.438584][ T7215] exc_page_fault+0x62/0xa0 [ 114.438620][ T7215] asm_exc_page_fault+0x26/0x30 [ 114.438723][ T7215] RIP: 0033:0x7fef38216c60 [ 114.438747][ T7215] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 114.438773][ T7215] RSP: 002b:00007ffeee2978c8 EFLAGS: 00010202 [ 114.438796][ T7215] RAX: 00000000fffffffa RBX: 00007fef38445fa0 RCX: 0000000000000000 [ 114.438885][ T7215] RDX: 00007ffeee297910 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.438903][ T7215] RBP: 00007fef38447da0 R08: 000000000e357b88 R09: 7fffffffffffffff [ 114.438921][ T7215] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001bee8 [ 114.438965][ T7215] R13: 00007fef38446090 R14: ffffffffffffffff R15: 00007ffeee297a50 [ 114.438994][ T7215] [ 114.439003][ T7215] memory: usage 307200kB, limit 307200kB, failcnt 1527 [ 114.602515][ T7238] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #15: comm syz.5.1207: mark_inode_dirty error [ 114.605605][ T7215] memory+swap: usage 307544kB, limit 9007199254740988kB, failcnt 0 [ 114.646633][ T7238] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #15: comm syz.5.1207: corrupted inode contents [ 114.652091][ T7215] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 114.652110][ T7215] Memory cgroup stats for /syz3: [ 114.726780][ T7215] cache 0 [ 114.735655][ T7215] rss 0 [ 114.738512][ T7215] shmem 0 [ 114.741501][ T7215] mapped_file 0 [ 114.745064][ T7215] dirty 0 [ 114.748041][ T7215] writeback 8192 [ 114.751593][ T7215] workingset_refault_anon 340 [ 114.756323][ T7215] workingset_refault_file 1895 [ 114.761180][ T7215] swap 352256 [ 114.764648][ T7215] swapcached 12288 [ 114.768387][ T7215] pgpgin 67106 [ 114.771774][ T7215] pgpgout 67101 [ 114.775303][ T7215] pgfault 85570 [ 114.778813][ T7215] pgmajfault 215 [ 114.782418][ T7215] inactive_anon 12288 [ 114.786437][ T7215] active_anon 0 [ 114.789911][ T7215] inactive_file 4096 [ 114.793919][ T7215] active_file 0 [ 114.797397][ T7215] unevictable 0 [ 114.800868][ T7215] hierarchical_memory_limit 314572800 [ 114.806394][ T7215] hierarchical_memsw_limit 9223372036854771712 [ 114.812594][ T7215] total_cache 0 [ 114.816118][ T7215] total_rss 0 [ 114.819435][ T7215] total_shmem 0 [ 114.822940][ T7215] total_mapped_file 0 [ 114.826935][ T7215] total_dirty 0 [ 114.830416][ T7215] total_writeback 8192 [ 114.834598][ T7215] total_workingset_refault_anon 340 [ 114.835440][ T7238] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.1207: mark_inode_dirty error [ 114.839894][ T7215] total_workingset_refault_file 1895 [ 114.839908][ T7215] total_swap 352256 [ 114.839917][ T7215] total_swapcached 12288 [ 114.839926][ T7215] total_pgpgin 67106 [ 114.839936][ T7215] total_pgpgout 67101 [ 114.840026][ T7215] total_pgfault 85570 [ 114.857474][ T7238] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1207: mark inode dirty (error -117) [ 114.861173][ T7215] total_pgmajfault 215 [ 114.893860][ T7238] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 114.894447][ T7215] total_inactive_anon 12288 [ 114.894457][ T7215] total_active_anon 0 [ 114.894464][ T7215] total_inactive_file 4096 [ 114.894471][ T7215] total_active_file 0 [ 114.894479][ T7215] total_unevictable 0 [ 114.894488][ T7215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 114.903685][ T7238] EXT4-fs (loop5): 1 orphan inode deleted [ 114.908044][ T7215] /,mems_allowed=0,oom_memcg= [ 114.912800][ T7238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.916666][ T7215] /syz3,task_memcg=/syz3,task=syz.3.1201,pid=7215,uid=0 [ 114.961821][ T7215] Memory cgroup out of memory: Killed process 7215 (syz.3.1201) total-vm:93956kB, anon-rss:1196kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 114.984017][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.003494][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1213'. [ 115.033083][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1213'. [ 115.054216][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.084540][ T9] hid-generic 0003:0004:0000.0024: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 115.174625][ T7268] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.181577][ T7270] loop1: detected capacity change from 0 to 1024 [ 115.210320][ T7270] EXT4-fs: Ignoring removed orlov option [ 115.221578][ T7270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.249590][ T7270] program syz.1.1215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.303416][ T9] hid-generic 0003:0004:0000.0025: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 115.312913][ T36] hid-generic 0003:0004:0000.0026: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 115.327073][ T7285] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.433174][ T7288] loop3: detected capacity change from 0 to 256 [ 115.449404][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1228'. [ 115.480398][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1228'. [ 115.527321][ T7300] loop3: detected capacity change from 0 to 512 [ 115.531280][ T3413] hid-generic 0003:0004:0000.0027: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 115.547214][ T7300] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 115.586365][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1232'. [ 115.631673][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.669115][ T7314] syz!: rxe_newlink: already configured on team_slave_0 [ 115.702534][ T7317] loop1: detected capacity change from 0 to 256 [ 115.714278][ T7320] netlink: 'syz.3.1235': attribute type 10 has an invalid length. [ 115.755926][ T3413] hid-generic 0003:0004:0000.0028: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 115.818692][ T7328] loop1: detected capacity change from 0 to 256 [ 115.884495][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1240'. [ 115.970894][ T7339] loop6: detected capacity change from 0 to 512 [ 115.980359][ T7341] loop1: detected capacity change from 0 to 512 [ 115.987673][ T7339] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 116.000543][ T7341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.010763][ T7341] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1244: invalid block [ 116.023322][ T7341] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1244: invalid indirect mapped block 4294967295 (level 1) [ 116.037615][ T7341] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1244: invalid indirect mapped block 4294967295 (level 1) [ 116.052641][ T7341] EXT4-fs (loop1): 2 truncates cleaned up [ 116.059141][ T7341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.073602][ T7341] EXT4-fs error (device loop1): ext4_get_parent:1834: inode #11: comm syz.1.1244: bad parent inode number: 3 [ 116.105136][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.152716][ T7347] syz!: rxe_newlink: already configured on team_slave_0 [ 116.258972][ T7357] loop1: detected capacity change from 0 to 256 [ 116.270307][ T7305] syz.5.1232 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 116.281464][ T7305] CPU: 0 UID: 0 PID: 7305 Comm: syz.5.1232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.281493][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.281509][ T7305] Call Trace: [ 116.281518][ T7305] [ 116.281528][ T7305] __dump_stack+0x1d/0x30 [ 116.281573][ T7305] dump_stack_lvl+0xe8/0x140 [ 116.281688][ T7305] dump_stack+0x15/0x1b [ 116.281751][ T7305] dump_header+0x81/0x220 [ 116.281793][ T7305] oom_kill_process+0x342/0x400 [ 116.281868][ T7305] out_of_memory+0x979/0xb80 [ 116.281908][ T7305] try_charge_memcg+0x5e6/0x9e0 [ 116.281991][ T7305] ? should_fail_ex+0x30/0x280 [ 116.282049][ T7305] charge_memcg+0x51/0xc0 [ 116.282076][ T7305] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 116.282114][ T7305] __read_swap_cache_async+0x17b/0x2d0 [ 116.282169][ T7305] swap_cluster_readahead+0x262/0x3c0 [ 116.282272][ T7305] swapin_readahead+0xde/0x6f0 [ 116.282313][ T7305] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 116.282393][ T7305] ? __rcu_read_unlock+0x34/0x70 [ 116.282423][ T7305] ? __rcu_read_unlock+0x4f/0x70 [ 116.282455][ T7305] ? swap_cache_get_folio+0x277/0x280 [ 116.282501][ T7305] do_swap_page+0x2ae/0x2370 [ 116.282530][ T7305] ? css_rstat_updated+0xb7/0x240 [ 116.282571][ T7305] ? __pfx_default_wake_function+0x10/0x10 [ 116.282676][ T7305] handle_mm_fault+0x9a5/0x2be0 [ 116.282725][ T7305] ? vma_start_read+0x141/0x1f0 [ 116.282769][ T7305] do_user_addr_fault+0x630/0x1080 [ 116.282796][ T7305] exc_page_fault+0x62/0xa0 [ 116.282827][ T7305] asm_exc_page_fault+0x26/0x30 [ 116.282853][ T7305] RIP: 0033:0x7f08f4e757cc [ 116.282896][ T7305] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 116.282914][ T7305] RSP: 002b:00007ffc55a8b000 EFLAGS: 00010287 [ 116.282934][ T7305] RAX: 0000000000000000 RBX: 00007f08f51f6090 RCX: 0000000000000000 [ 116.282951][ T7305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555594900808 [ 116.282967][ T7305] RBP: 00007f08f51f7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 116.282983][ T7305] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001c6aa [ 116.282995][ T7305] R13: 00007f08f51f6090 R14: ffffffffffffffff R15: 00007ffc55a8b110 [ 116.283054][ T7305] [ 116.508021][ T7305] memory: usage 307200kB, limit 307200kB, failcnt 270 [ 116.515364][ T7305] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 116.523319][ T7305] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 116.530665][ T7305] Memory cgroup stats for /syz5: [ 116.556123][ T7305] cache 0 [ 116.564215][ T7305] rss 0 [ 116.567185][ T7305] shmem 0 [ 116.570147][ T7305] mapped_file 0 [ 116.573688][ T7305] dirty 0 [ 116.576663][ T7305] writeback 8192 [ 116.580473][ T7305] workingset_refault_anon 49 [ 116.585396][ T7305] workingset_refault_file 0 [ 116.590212][ T7305] swap 200704 [ 116.593793][ T7305] swapcached 8192 [ 116.597513][ T7305] pgpgin 37855 [ 116.600922][ T7305] pgpgout 37851 [ 116.604537][ T7305] pgfault 50583 [ 116.608011][ T7305] pgmajfault 30 [ 116.611485][ T7305] inactive_anon 8192 [ 116.615429][ T7305] active_anon 0 [ 116.618893][ T7305] inactive_file 8192 [ 116.622915][ T7305] active_file 0 [ 116.626397][ T7305] unevictable 0 [ 116.629941][ T7305] hierarchical_memory_limit 314572800 [ 116.635375][ T7305] hierarchical_memsw_limit 9223372036854771712 [ 116.635659][ T7366] loop3: detected capacity change from 0 to 1024 [ 116.641572][ T7305] total_cache 0 [ 116.641582][ T7305] total_rss 0 [ 116.641591][ T7305] total_shmem 0 [ 116.641601][ T7305] total_mapped_file 0 [ 116.641611][ T7305] total_dirty 0 [ 116.641617][ T7305] total_writeback 8192 [ 116.641625][ T7305] total_workingset_refault_anon 49 [ 116.641666][ T7305] total_workingset_refault_file 0 [ 116.641674][ T7305] total_swap 200704 [ 116.666450][ T7366] EXT4-fs: Ignoring removed orlov option [ 116.670486][ T7305] total_swapcached 8192 [ 116.670498][ T7305] total_pgpgin 37855 [ 116.670508][ T7305] total_pgpgout 37851 [ 116.670518][ T7305] total_pgfault 50583 [ 116.686232][ T7366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.690812][ T7305] total_pgmajfault 30 [ 116.704779][ T7366] program syz.3.1252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.707152][ T7305] total_inactive_anon 8192 [ 116.707165][ T7305] total_active_anon 0 [ 116.707227][ T7305] total_inactive_file 8192 [ 116.746599][ T7305] total_active_file 0 [ 116.750675][ T7305] total_unevictable 0 [ 116.754764][ T7305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1232,pid=7305,uid=0 [ 116.769583][ T7305] Memory cgroup out of memory: Killed process 7305 (syz.5.1232) total-vm:93956kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 116.801750][ T7375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 116.839519][ T7377] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.839831][ T7379] syz!: rxe_newlink: already configured on team_slave_0 [ 116.953318][ T7384] FAULT_INJECTION: forcing a failure. [ 116.953318][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 116.966136][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.1.1258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.966174][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.966191][ T7384] Call Trace: [ 116.966198][ T7384] [ 116.966208][ T7384] __dump_stack+0x1d/0x30 [ 116.966262][ T7384] dump_stack_lvl+0xe8/0x140 [ 116.966349][ T7384] dump_stack+0x15/0x1b [ 116.966428][ T7384] should_fail_ex+0x265/0x280 [ 116.966467][ T7384] should_failslab+0x8c/0xb0 [ 116.966499][ T7384] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 116.966612][ T7384] ? __alloc_skb+0x101/0x320 [ 116.966672][ T7384] __alloc_skb+0x101/0x320 [ 116.966721][ T7384] tipc_msg_create+0x47/0x230 [ 116.966777][ T7384] tipc_group_proto_xmit+0xb7/0x2f0 [ 116.966811][ T7384] tipc_group_delete+0x97/0x290 [ 116.966844][ T7384] tipc_sk_leave+0xa9/0x270 [ 116.966893][ T7384] tipc_release+0x83/0xd20 [ 116.967013][ T7384] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 116.967086][ T7384] ? locks_remove_posix+0x1b4/0x300 [ 116.967121][ T7384] ? vfs_write+0x7e8/0x960 [ 116.967153][ T7384] sock_close+0x68/0x150 [ 116.967250][ T7384] ? __pfx_sock_close+0x10/0x10 [ 116.967382][ T7384] __fput+0x298/0x650 [ 116.967502][ T7384] fput_close_sync+0x6e/0x120 [ 116.967537][ T7384] __x64_sys_close+0x56/0xf0 [ 116.967563][ T7384] x64_sys_call+0x273c/0x3000 [ 116.967632][ T7384] do_syscall_64+0xd2/0x200 [ 116.967668][ T7384] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.967769][ T7384] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 116.967802][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.967831][ T7384] RIP: 0033:0x7f0c6ccceec9 [ 116.967851][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.967942][ T7384] RSP: 002b:00007f0c6b737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 116.967966][ T7384] RAX: ffffffffffffffda RBX: 00007f0c6cf25fa0 RCX: 00007f0c6ccceec9 [ 116.967979][ T7384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.967991][ T7384] RBP: 00007f0c6b737090 R08: 0000000000000000 R09: 0000000000000000 [ 116.968003][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.968062][ T7384] R13: 00007f0c6cf26038 R14: 00007f0c6cf25fa0 R15: 00007ffd9fbd6308 [ 116.968090][ T7384] [ 117.288030][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.311560][ T7394] loop1: detected capacity change from 0 to 256 [ 117.359657][ T7401] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1266'. [ 117.370491][ T7401] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1266'. [ 117.429068][ T3413] hid_parser_main: 170 callbacks suppressed [ 117.429146][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.442608][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.450087][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.457558][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.465212][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.472745][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.480220][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.486656][ T7414] SELinux: policydb version 576 does not match my version range 15-35 [ 117.487676][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.496256][ T7414] SELinux: failed to load policy [ 117.503328][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.516094][ T3413] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 117.528846][ T3413] hid-generic 0003:0004:0000.0029: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 117.584642][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1275'. [ 117.668471][ T7434] loop3: detected capacity change from 0 to 256 [ 117.701421][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1279'. [ 117.743748][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1279'. [ 117.781429][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 117.781452][ T29] audit: type=1326 audit(1759574862.710:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c6ceec9 code=0x7ffc0000 [ 117.811750][ T29] audit: type=1326 audit(1759574862.710:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c6ceec9 code=0x7ffc0000 [ 117.894815][ T7448] SELinux: policydb version 576 does not match my version range 15-35 [ 117.913560][ T7448] SELinux: failed to load policy [ 117.933922][ T29] audit: type=1400 audit(1759574862.860:5715): avc: denied { read } for pid=7446 comm="syz.6.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.979143][ T29] audit: type=1400 audit(1759574862.910:5716): avc: denied { cpu } for pid=7452 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.034262][ T7456] netlink: 'syz.5.1284': attribute type 10 has an invalid length. [ 118.042900][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1284'. [ 118.052534][ T29] audit: type=1400 audit(1759574862.960:5717): avc: denied { create } for pid=7452 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.072189][ T29] audit: type=1400 audit(1759574862.960:5718): avc: denied { bind } for pid=7452 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.103871][ T29] audit: type=1400 audit(1759574863.040:5719): avc: denied { listen } for pid=7452 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.106716][ T3390] hid-generic 0003:0004:0000.002A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 118.123731][ T29] audit: type=1400 audit(1759574863.040:5720): avc: denied { accept } for pid=7452 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.123768][ T29] audit: type=1326 audit(1759574863.040:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.6.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c6ceec9 code=0x7ffc0000 [ 118.142060][ T29] audit: type=1326 audit(1759574863.040:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.6.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f076c6ceec9 code=0x7ffc0000 [ 118.322991][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 118.332117][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1289'. [ 118.341185][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 118.350889][ T7471] netlink: 'syz.2.1289': attribute type 6 has an invalid length. [ 118.360755][ T7470] loop3: detected capacity change from 0 to 256 [ 118.446939][ T7429] syz.1.1275 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 118.461136][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.1.1275 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.461254][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.461335][ T7429] Call Trace: [ 118.461342][ T7429] [ 118.461350][ T7429] __dump_stack+0x1d/0x30 [ 118.461404][ T7429] dump_stack_lvl+0xe8/0x140 [ 118.461448][ T7429] dump_stack+0x15/0x1b [ 118.461489][ T7429] dump_header+0x81/0x220 [ 118.461524][ T7429] oom_kill_process+0x342/0x400 [ 118.461580][ T7429] out_of_memory+0x979/0xb80 [ 118.461639][ T7429] try_charge_memcg+0x5e6/0x9e0 [ 118.461671][ T7429] obj_cgroup_charge_pages+0xa6/0x150 [ 118.461766][ T7429] __memcg_kmem_charge_page+0x9f/0x170 [ 118.461801][ T7429] __alloc_frozen_pages_noprof+0x188/0x360 [ 118.461845][ T7429] alloc_pages_mpol+0xb3/0x260 [ 118.461950][ T7429] alloc_pages_noprof+0x90/0x130 [ 118.462045][ T7429] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 118.462134][ T7429] __kvmalloc_node_noprof+0x483/0x670 [ 118.462177][ T7429] ? ip_set_alloc+0x24/0x30 [ 118.462210][ T7429] ? ip_set_alloc+0x24/0x30 [ 118.462311][ T7429] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 118.462484][ T7429] ip_set_alloc+0x24/0x30 [ 118.462526][ T7429] hash_netiface_create+0x282/0x740 [ 118.462617][ T7429] ? __pfx_hash_netiface_create+0x10/0x10 [ 118.462663][ T7429] ip_set_create+0x3c9/0x970 [ 118.462757][ T7429] ? __nla_parse+0x40/0x60 [ 118.462788][ T7429] nfnetlink_rcv_msg+0x4c3/0x590 [ 118.462855][ T7429] netlink_rcv_skb+0x123/0x220 [ 118.462890][ T7429] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.463013][ T7429] nfnetlink_rcv+0x167/0x16c0 [ 118.463050][ T7429] ? kmem_cache_free+0xe4/0x3d0 [ 118.463165][ T7429] ? __kfree_skb+0x109/0x150 [ 118.463208][ T7429] ? nlmon_xmit+0x4f/0x60 [ 118.463248][ T7429] ? consume_skb+0x49/0x150 [ 118.463364][ T7429] ? nlmon_xmit+0x4f/0x60 [ 118.463454][ T7429] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 118.463560][ T7429] ? __dev_queue_xmit+0x1200/0x2000 [ 118.463584][ T7429] ? __dev_queue_xmit+0x182/0x2000 [ 118.463612][ T7429] ? ref_tracker_free+0x37d/0x3e0 [ 118.463718][ T7429] ? __netlink_deliver_tap+0x4dc/0x500 [ 118.463843][ T7429] netlink_unicast+0x5c0/0x690 [ 118.463923][ T7429] netlink_sendmsg+0x58b/0x6b0 [ 118.463946][ T7429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.463965][ T7429] __sock_sendmsg+0x145/0x180 [ 118.464073][ T7429] ____sys_sendmsg+0x31e/0x4e0 [ 118.464110][ T7429] ___sys_sendmsg+0x17b/0x1d0 [ 118.464153][ T7429] __x64_sys_sendmsg+0xd4/0x160 [ 118.464184][ T7429] x64_sys_call+0x191e/0x3000 [ 118.464258][ T7429] do_syscall_64+0xd2/0x200 [ 118.464331][ T7429] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.464361][ T7429] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.464429][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.464457][ T7429] RIP: 0033:0x7f0c6ccceec9 [ 118.464476][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.464566][ T7429] RSP: 002b:00007f0c6b737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.464586][ T7429] RAX: ffffffffffffffda RBX: 00007f0c6cf25fa0 RCX: 00007f0c6ccceec9 [ 118.464600][ T7429] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000c [ 118.464617][ T7429] RBP: 00007f0c6cd51f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.464635][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.464652][ T7429] R13: 00007f0c6cf26038 R14: 00007f0c6cf25fa0 R15: 00007ffd9fbd6308 [ 118.464686][ T7429] [ 118.806367][ T7429] memory: usage 307200kB, limit 307200kB, failcnt 971 [ 118.813451][ T7429] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 118.821439][ T7429] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 118.828779][ T7429] Memory cgroup stats for /syz1: [ 118.829379][ T7429] cache 0 [ 118.837327][ T7429] rss 0 [ 118.840124][ T7429] shmem 0 [ 118.843395][ T7429] mapped_file 0 [ 118.846879][ T7429] dirty 0 [ 118.850025][ T7429] writeback 0 [ 118.853619][ T7429] workingset_refault_anon 255 [ 118.858403][ T7429] workingset_refault_file 2601 [ 118.863209][ T7429] swap 204800 [ 118.866516][ T7429] swapcached 0 [ 118.870056][ T7429] pgpgin 41433 [ 118.873497][ T7429] pgpgout 41428 [ 118.877006][ T7429] pgfault 53190 [ 118.880521][ T7429] pgmajfault 140 [ 118.884131][ T7429] inactive_anon 0 [ 118.887774][ T7429] active_anon 0 [ 118.891236][ T7429] inactive_file 0 [ 118.894940][ T7429] active_file 20480 [ 118.898770][ T7429] unevictable 0 [ 118.900996][ T7484] SELinux: policydb version 576 does not match my version range 15-35 [ 118.902444][ T7429] hierarchical_memory_limit 314572800 [ 118.916177][ T7429] hierarchical_memsw_limit 9223372036854771712 [ 118.922528][ T7429] total_cache 0 [ 118.926010][ T7429] total_rss 0 [ 118.929473][ T7429] total_shmem 0 [ 118.929863][ T7484] SELinux: failed to load policy [ 118.933045][ T7429] total_mapped_file 0 [ 118.942105][ T7429] total_dirty 0 [ 118.945731][ T7429] total_writeback 0 [ 118.949735][ T7429] total_workingset_refault_anon 255 [ 118.955014][ T7429] total_workingset_refault_file 2601 [ 118.960375][ T7429] total_swap 204800 [ 118.964358][ T7429] total_swapcached 0 [ 118.968415][ T7429] total_pgpgin 41433 [ 118.972372][ T7429] total_pgpgout 41428 [ 118.976443][ T7429] total_pgfault 53190 [ 118.980432][ T7429] total_pgmajfault 140 [ 118.984537][ T7429] total_inactive_anon 0 [ 118.988724][ T7429] total_active_anon 0 [ 118.992814][ T7429] total_inactive_file 0 [ 118.997012][ T7429] total_active_file 20480 [ 119.001339][ T7429] total_unevictable 0 [ 119.005382][ T7429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1275,pid=7428,uid=0 [ 119.020086][ T7429] Memory cgroup out of memory: Killed process 7428 (syz.1.1275) total-vm:93956kB, anon-rss:1264kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 119.047671][ T3390] hid-generic 0003:0004:0000.002B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 119.083355][ T7489] netlink: 'syz.6.1296': attribute type 10 has an invalid length. [ 119.121309][ T7489] team0 (unregistering): Port device team_slave_0 removed [ 119.161036][ T7489] team0 (unregistering): Port device team_slave_1 removed [ 119.283885][ T7510] SELinux: policydb version 0 does not match my version range 15-35 [ 119.294125][ T7510] SELinux: failed to load policy [ 119.330234][ T7520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7520 comm=syz.2.1306 [ 119.361540][ T7522] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.416248][ T36] hid-generic 0003:0004:0000.002C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 119.607162][ T36] hid-generic 0003:0004:0000.002D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 119.881590][ T7556] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.931800][ T7560] loop6: detected capacity change from 0 to 256 [ 119.991985][ T10] hid-generic 0003:0004:0000.002E: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 120.225332][ T7582] netlink: 'syz.6.1328': attribute type 10 has an invalid length. [ 120.252701][ T7583] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.373176][ T7586] syz!: rxe_newlink: already configured on team_slave_0 [ 120.426156][ T7590] loop1: detected capacity change from 0 to 256 [ 120.491289][ T7594] loop1: detected capacity change from 0 to 512 [ 120.506031][ T7594] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 121.046452][ T7613] loop3: detected capacity change from 0 to 512 [ 121.053646][ T7613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.063634][ T7613] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1341: invalid block [ 121.075831][ T7613] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1341: invalid indirect mapped block 4294967295 (level 1) [ 121.092516][ T7613] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1341: invalid indirect mapped block 4294967295 (level 1) [ 121.107083][ T7613] EXT4-fs (loop3): 2 truncates cleaned up [ 121.113296][ T7613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.128188][ T7613] EXT4-fs error (device loop3): ext4_get_parent:1834: inode #11: comm syz.3.1341: bad parent inode number: 3 [ 121.154481][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.183667][ T7616] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.211832][ T7618] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.247575][ T7620] loop3: detected capacity change from 0 to 256 [ 121.355854][ T7624] netlink: 'syz.3.1345': attribute type 10 has an invalid length. [ 121.396823][ T7629] loop1: detected capacity change from 0 to 512 [ 121.403514][ T7629] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 121.546811][ T7640] loop5: detected capacity change from 0 to 256 [ 121.693334][ T7660] SELinux: policydb version 576 does not match my version range 15-35 [ 121.701731][ T7660] SELinux: failed to load policy [ 121.816164][ T7671] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.838296][ T7673] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.877984][ T7678] loop6: detected capacity change from 0 to 256 [ 121.936840][ T7688] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.963081][ T7690] loop6: detected capacity change from 0 to 512 [ 121.970583][ T7690] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 121.970985][ T7692] loop5: detected capacity change from 0 to 256 [ 121.983759][ T7693] netlink: 'syz.2.1368': attribute type 10 has an invalid length. [ 121.994443][ T7682] __nla_validate_parse: 11 callbacks suppressed [ 121.994465][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 122.045900][ T7700] SELinux: policydb version 576 does not match my version range 15-35 [ 122.054433][ T7700] SELinux: failed to load policy [ 122.080489][ T7703] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.113706][ T3390] hid-generic 0003:0004:0000.002F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 122.198457][ T7713] loop6: detected capacity change from 0 to 256 [ 122.239724][ T7720] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.285220][ T7726] loop6: detected capacity change from 0 to 256 [ 122.352905][ T7734] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.460076][ T7741] loop6: detected capacity change from 0 to 1024 [ 122.466818][ T7741] EXT4-fs: Ignoring removed orlov option [ 122.475449][ T7741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.500402][ T7741] program syz.6.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.523593][ T7745] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 122.750885][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.829734][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 122.829750][ T29] audit: type=1326 audit(1759574867.760:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7746 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c6ceec9 code=0x7ffc0000 [ 122.919288][ T7753] loop5: detected capacity change from 0 to 256 [ 123.067714][ T7765] loop6: detected capacity change from 0 to 256 [ 123.117862][ T29] audit: type=1326 audit(1759574868.050:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.141467][ T29] audit: type=1326 audit(1759574868.050:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.175762][ T29] audit: type=1326 audit(1759574868.110:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.199240][ T29] audit: type=1326 audit(1759574868.110:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.212321][ T7777] loop5: detected capacity change from 0 to 1024 [ 123.222963][ T29] audit: type=1326 audit(1759574868.110:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.253048][ T29] audit: type=1326 audit(1759574868.110:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.257009][ T7777] EXT4-fs: Ignoring removed orlov option [ 123.276538][ T29] audit: type=1326 audit(1759574868.110:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.305805][ T29] audit: type=1326 audit(1759574868.110:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.329784][ T29] audit: type=1326 audit(1759574868.110:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3a52eec9 code=0x7ffc0000 [ 123.363872][ T7781] SELinux: policydb version 576 does not match my version range 15-35 [ 123.372649][ T7781] SELinux: failed to load policy [ 123.394614][ T7777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.470742][ T7790] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 123.479288][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 123.555965][ T7796] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1408'. [ 123.622848][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.755633][ T7806] loop6: detected capacity change from 0 to 256 [ 123.766582][ T7807] loop5: detected capacity change from 0 to 1024 [ 123.773415][ T7807] EXT4-fs: Ignoring removed orlov option [ 123.781913][ T7807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.876143][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.996200][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1419'. [ 124.014230][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1419'. [ 124.027278][ T7830] loop5: detected capacity change from 0 to 1024 [ 124.034369][ T7830] EXT4-fs: Ignoring removed orlov option [ 124.044600][ T7830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.055688][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1419'. [ 124.133454][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.154699][ T7839] loop6: detected capacity change from 0 to 256 [ 124.161768][ T7841] loop5: detected capacity change from 0 to 256 [ 124.236123][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1425'. [ 124.250856][ T7852] syz!: rxe_newlink: already configured on team_slave_0 [ 124.327678][ T7863] loop3: detected capacity change from 0 to 1024 [ 124.334815][ T7863] EXT4-fs: Ignoring removed orlov option [ 124.351679][ T7863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.364785][ T7869] rxe_newlink: 1 callbacks suppressed [ 124.364802][ T7869] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 124.431331][ T7875] SELinux: policydb version 576 does not match my version range 15-35 [ 124.440220][ T7875] SELinux: failed to load policy [ 124.595620][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.767321][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1446'. [ 125.131437][ T7913] loop5: detected capacity change from 0 to 512 [ 125.138648][ T7913] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 125.294012][ T7918] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 125.299517][ T3301] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 125.311649][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.311682][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.311694][ T3301] Call Trace: [ 125.311701][ T3301] [ 125.311711][ T3301] __dump_stack+0x1d/0x30 [ 125.311791][ T3301] dump_stack_lvl+0xe8/0x140 [ 125.311833][ T3301] dump_stack+0x15/0x1b [ 125.311976][ T3301] dump_header+0x81/0x220 [ 125.312110][ T3301] oom_kill_process+0x342/0x400 [ 125.312148][ T3301] out_of_memory+0x979/0xb80 [ 125.312187][ T3301] try_charge_memcg+0x5e6/0x9e0 [ 125.312216][ T3301] ? should_fail_ex+0x30/0x280 [ 125.312346][ T3301] charge_memcg+0x51/0xc0 [ 125.312373][ T3301] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 125.312444][ T3301] __read_swap_cache_async+0x17b/0x2d0 [ 125.312494][ T3301] swap_cluster_readahead+0x262/0x3c0 [ 125.312588][ T3301] swapin_readahead+0xde/0x6f0 [ 125.312633][ T3301] ? css_rstat_updated+0xb7/0x240 [ 125.312678][ T3301] ? __rcu_read_unlock+0x4f/0x70 [ 125.312708][ T3301] ? __rcu_read_unlock+0x4f/0x70 [ 125.312777][ T3301] ? swap_cache_get_folio+0x277/0x280 [ 125.312812][ T3301] do_swap_page+0x2ae/0x2370 [ 125.312834][ T3301] ? _raw_spin_unlock+0x26/0x50 [ 125.312872][ T3301] ? finish_task_switch+0xad/0x2b0 [ 125.312969][ T3301] ? __pfx_default_wake_function+0x10/0x10 [ 125.313005][ T3301] handle_mm_fault+0x9a5/0x2be0 [ 125.313035][ T3301] ? vma_start_read+0x141/0x1f0 [ 125.313082][ T3301] do_user_addr_fault+0x630/0x1080 [ 125.313110][ T3301] ? fpregs_restore_userregs+0xe2/0x1d0 [ 125.313141][ T3301] ? switch_fpu_return+0xe/0x20 [ 125.313177][ T3301] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.313215][ T3301] exc_page_fault+0x62/0xa0 [ 125.313245][ T3301] asm_exc_page_fault+0x26/0x30 [ 125.313266][ T3301] RIP: 0033:0x7fef38221745 [ 125.313288][ T3301] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 125.313307][ T3301] RSP: 002b:00007ffeee297b18 EFLAGS: 00010246 [ 125.313408][ T3301] RAX: 0000000000000000 RBX: 00000000000002f0 RCX: 00007fef38221743 [ 125.313421][ T3301] RDX: 00007ffeee297b30 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.313433][ T3301] RBP: 00007ffeee297b9c R08: 000000000e51ebd3 R09: 0000000000000000 [ 125.313492][ T3301] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 125.313504][ T3301] R13: 00000000000927c0 R14: 000000000001e79a R15: 00007ffeee297bf0 [ 125.313523][ T3301] [ 125.556991][ T3301] memory: usage 307200kB, limit 307200kB, failcnt 1904 [ 125.563947][ T3301] memory+swap: usage 307548kB, limit 9007199254740988kB, failcnt 0 [ 125.571968][ T3301] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 125.572199][ T7919] loop1: detected capacity change from 0 to 256 [ 125.579299][ T3301] Memory cgroup stats for /syz3: [ 125.594235][ T3301] cache 0 [ 125.602206][ T3301] rss 4096 [ 125.605274][ T3301] shmem 0 [ 125.608231][ T3301] mapped_file 0 [ 125.611707][ T3301] dirty 0 [ 125.614751][ T3301] writeback 8192 [ 125.618315][ T3301] workingset_refault_anon 362 [ 125.623029][ T3301] workingset_refault_file 2147 [ 125.627814][ T3301] swap 356352 [ 125.631117][ T3301] swapcached 8192 [ 125.634788][ T3301] pgpgin 75303 [ 125.638199][ T3301] pgpgout 75299 [ 125.641822][ T3301] pgfault 95922 [ 125.645383][ T3301] pgmajfault 230 [ 125.648938][ T3301] inactive_anon 8192 [ 125.652931][ T3301] active_anon 0 [ 125.656429][ T3301] inactive_file 8192 [ 125.660417][ T3301] active_file 0 [ 125.663922][ T3301] unevictable 0 [ 125.668506][ T3301] hierarchical_memory_limit 314572800 [ 125.673931][ T3301] hierarchical_memsw_limit 9223372036854771712 [ 125.680111][ T3301] total_cache 0 [ 125.683718][ T3301] total_rss 4096 [ 125.687275][ T3301] total_shmem 0 [ 125.690817][ T3301] total_mapped_file 0 [ 125.694838][ T3301] total_dirty 0 [ 125.698316][ T3301] total_writeback 8192 [ 125.702425][ T3301] total_workingset_refault_anon 362 [ 125.707835][ T3301] total_workingset_refault_file 2147 [ 125.713157][ T3301] total_swap 356352 [ 125.716995][ T3301] total_swapcached 8192 [ 125.721152][ T3301] total_pgpgin 75303 [ 125.725081][ T3301] total_pgpgout 75299 [ 125.729066][ T3301] total_pgfault 95922 [ 125.733068][ T3301] total_pgmajfault 230 [ 125.737188][ T3301] total_inactive_anon 8192 [ 125.741667][ T3301] total_active_anon 0 [ 125.745691][ T3301] total_inactive_file 8192 [ 125.750146][ T3301] total_active_file 0 [ 125.754164][ T3301] total_unevictable 0 [ 125.758182][ T3301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1446,pid=7908,uid=0 [ 125.772861][ T3301] Memory cgroup out of memory: Killed process 7908 (syz.3.1446) total-vm:93956kB, anon-rss:1088kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 125.840731][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1458'. [ 125.957952][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1463'. [ 126.486191][ T7939] syz.5.1458 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 126.500355][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.5.1458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.500428][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.500446][ T7939] Call Trace: [ 126.500497][ T7939] [ 126.500507][ T7939] __dump_stack+0x1d/0x30 [ 126.500550][ T7939] dump_stack_lvl+0xe8/0x140 [ 126.500599][ T7939] dump_stack+0x15/0x1b [ 126.500723][ T7939] dump_header+0x81/0x220 [ 126.500763][ T7939] oom_kill_process+0x342/0x400 [ 126.500871][ T7939] out_of_memory+0x979/0xb80 [ 126.500918][ T7939] try_charge_memcg+0x5e6/0x9e0 [ 126.500989][ T7939] ? update_load_avg+0x1da/0x820 [ 126.501047][ T7939] obj_cgroup_charge_pages+0xa6/0x150 [ 126.501103][ T7939] __memcg_kmem_charge_page+0x9f/0x170 [ 126.501176][ T7939] __alloc_frozen_pages_noprof+0x188/0x360 [ 126.501224][ T7939] alloc_pages_mpol+0xb3/0x260 [ 126.501294][ T7939] alloc_pages_noprof+0x90/0x130 [ 126.501350][ T7939] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 126.501427][ T7939] __kvmalloc_node_noprof+0x483/0x670 [ 126.501548][ T7939] ? ip_set_alloc+0x24/0x30 [ 126.501586][ T7939] ? ip_set_alloc+0x24/0x30 [ 126.501627][ T7939] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 126.501703][ T7939] ip_set_alloc+0x24/0x30 [ 126.501744][ T7939] hash_netiface_create+0x282/0x740 [ 126.501791][ T7939] ? __pfx_hash_netiface_create+0x10/0x10 [ 126.501894][ T7939] ip_set_create+0x3c9/0x970 [ 126.501965][ T7939] nfnetlink_rcv_msg+0x4c3/0x590 [ 126.502036][ T7939] netlink_rcv_skb+0x123/0x220 [ 126.502183][ T7939] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 126.502234][ T7939] nfnetlink_rcv+0x167/0x16c0 [ 126.502270][ T7939] ? kmem_cache_free+0xe4/0x3d0 [ 126.502386][ T7939] ? __kfree_skb+0x109/0x150 [ 126.502427][ T7939] ? nlmon_xmit+0x4f/0x60 [ 126.502461][ T7939] ? consume_skb+0x49/0x150 [ 126.502568][ T7939] ? nlmon_xmit+0x4f/0x60 [ 126.502611][ T7939] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 126.502663][ T7939] ? __dev_queue_xmit+0x1200/0x2000 [ 126.502687][ T7939] ? __dev_queue_xmit+0x182/0x2000 [ 126.502714][ T7939] ? ref_tracker_free+0x37d/0x3e0 [ 126.502789][ T7939] ? __netlink_deliver_tap+0x4dc/0x500 [ 126.502911][ T7939] netlink_unicast+0x5c0/0x690 [ 126.502948][ T7939] netlink_sendmsg+0x58b/0x6b0 [ 126.502976][ T7939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.503002][ T7939] __sock_sendmsg+0x145/0x180 [ 126.503079][ T7939] ____sys_sendmsg+0x31e/0x4e0 [ 126.503100][ T7939] ___sys_sendmsg+0x17b/0x1d0 [ 126.503182][ T7939] __x64_sys_sendmsg+0xd4/0x160 [ 126.503216][ T7939] x64_sys_call+0x191e/0x3000 [ 126.503244][ T7939] do_syscall_64+0xd2/0x200 [ 126.503357][ T7939] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.503382][ T7939] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 126.503408][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.503438][ T7939] RIP: 0033:0x7f08f4f9eec9 [ 126.503478][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.503498][ T7939] RSP: 002b:00007f08f39ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.503591][ T7939] RAX: ffffffffffffffda RBX: 00007f08f51f5fa0 RCX: 00007f08f4f9eec9 [ 126.503672][ T7939] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 126.503689][ T7939] RBP: 00007f08f5021f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.503702][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.503719][ T7939] R13: 00007f08f51f6038 R14: 00007f08f51f5fa0 R15: 00007ffc55a8ae98 [ 126.503747][ T7939] [ 126.845784][ T7939] memory: usage 307200kB, limit 307200kB, failcnt 471 [ 126.852805][ T7939] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 126.860766][ T7939] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 126.868141][ T7939] Memory cgroup stats for /syz5: [ 126.868959][ T7939] cache 0 [ 126.876975][ T7939] rss 8192 [ 126.880030][ T7939] shmem 0 [ 126.883026][ T7939] mapped_file 0 [ 126.886499][ T7939] dirty 0 [ 126.889484][ T7939] writeback 0 [ 126.892821][ T7939] workingset_refault_anon 124 [ 126.897491][ T7939] workingset_refault_file 0 [ 126.902066][ T7939] swap 208896 [ 126.905371][ T7939] swapcached 8192 [ 126.909001][ T7939] pgpgin 40715 [ 126.912425][ T7939] pgpgout 40711 [ 126.915888][ T7939] pgfault 56673 [ 126.919344][ T7939] pgmajfault 69 [ 126.922915][ T7939] inactive_anon 4096 [ 126.926804][ T7939] active_anon 4096 [ 126.930532][ T7939] inactive_file 8192 [ 126.934444][ T7939] active_file 0 [ 126.937914][ T7939] unevictable 0 [ 126.941483][ T7939] hierarchical_memory_limit 314572800 [ 126.946938][ T7939] hierarchical_memsw_limit 9223372036854771712 [ 126.953214][ T7939] total_cache 0 [ 126.956683][ T7939] total_rss 8192 [ 126.960311][ T7939] total_shmem 0 [ 126.963786][ T7939] total_mapped_file 0 [ 126.967758][ T7939] total_dirty 0 [ 126.971296][ T7939] total_writeback 0 [ 126.975133][ T7939] total_workingset_refault_anon 124 [ 126.980639][ T7939] total_workingset_refault_file 0 [ 126.985716][ T7939] total_swap 208896 [ 126.989627][ T7939] total_swapcached 8192 [ 126.993827][ T7939] total_pgpgin 40715 [ 126.997777][ T7939] total_pgpgout 40711 [ 127.001768][ T7939] total_pgfault 56673 [ 127.005885][ T7939] total_pgmajfault 69 [ 127.009886][ T7939] total_inactive_anon 4096 [ 127.014564][ T7939] total_active_anon 4096 [ 127.018998][ T7939] total_inactive_file 8192 [ 127.023471][ T7939] total_active_file 0 [ 127.027470][ T7939] total_unevictable 0 [ 127.031475][ T7939] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1458,pid=7938,uid=0 [ 127.046220][ T7939] Memory cgroup out of memory: Killed process 7938 (syz.5.1458) total-vm:96004kB, anon-rss:1136kB, file-rss:22508kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 127.146008][ T7983] loop3: detected capacity change from 0 to 512 [ 127.152731][ T7983] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 127.219539][ T7989] SELinux: policydb version 576 does not match my version range 15-35 [ 127.227948][ T7989] SELinux: failed to load policy [ 127.240805][ T7994] loop5: detected capacity change from 0 to 512 [ 127.247874][ T7994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.259622][ T7994] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1475: invalid block [ 127.274519][ T7994] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1475: invalid indirect mapped block 4294967295 (level 1) [ 127.289090][ T7994] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1475: invalid indirect mapped block 4294967295 (level 1) [ 127.303741][ T7994] EXT4-fs (loop5): 2 truncates cleaned up [ 127.309983][ T7994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.327239][ T7994] EXT4-fs error (device loop5): ext4_get_parent:1834: inode #11: comm syz.5.1475: bad parent inode number: 3 [ 127.364122][ T8004] netlink: 'syz.6.1477': attribute type 10 has an invalid length. [ 127.375680][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.384813][ T8000] __nla_validate_parse: 2 callbacks suppressed [ 127.384832][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1477'. [ 127.419494][ T8008] loop5: detected capacity change from 0 to 256 [ 127.538781][ T8023] syz!: rxe_newlink: already configured on team_slave_0 [ 127.563251][ T8026] SELinux: policydb version 576 does not match my version range 15-35 [ 127.571642][ T8026] SELinux: failed to load policy [ 128.025734][ T8039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1490'. [ 128.039311][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 128.039368][ T29] audit: type=1400 audit(1759574872.970:6506): avc: denied { create } for pid=8038 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.073604][ T29] audit: type=1400 audit(1759574873.000:6507): avc: denied { create } for pid=8038 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.102293][ T29] audit: type=1400 audit(1759574873.040:6508): avc: denied { write } for pid=8043 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.123234][ T29] audit: type=1400 audit(1759574873.040:6509): avc: denied { read } for pid=8043 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.157537][ T29] audit: type=1400 audit(1759574873.080:6510): avc: denied { create } for pid=8038 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.177351][ T29] audit: type=1400 audit(1759574873.080:6511): avc: denied { ioctl } for pid=8038 comm="syz.3.1490" path="socket:[19350]" dev="sockfs" ino=19350 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.181154][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1493'. [ 128.203247][ T29] audit: type=1400 audit(1759574873.080:6512): avc: denied { ioctl } for pid=8038 comm="syz.3.1490" path="socket:[19352]" dev="sockfs" ino=19352 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.237001][ T29] audit: type=1400 audit(1759574873.090:6513): avc: denied { write } for pid=8038 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.256552][ T29] audit: type=1400 audit(1759574873.090:6514): avc: denied { read } for pid=8038 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.361235][ T8057] loop5: detected capacity change from 0 to 512 [ 128.375858][ T8057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.376804][ T29] audit: type=1326 audit(1759574873.310:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076c6ceec9 code=0x7ffc0000 [ 128.424748][ T8057] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1496: invalid block [ 128.458446][ T8057] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1496: invalid indirect mapped block 4294967295 (level 1) [ 128.473698][ T8057] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1496: invalid indirect mapped block 4294967295 (level 1) [ 128.488184][ T8057] EXT4-fs (loop5): 2 truncates cleaned up [ 128.495036][ T8057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.539177][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.572124][ T8069] loop5: detected capacity change from 0 to 512 [ 128.583476][ T8067] loop3: detected capacity change from 0 to 1024 [ 128.590735][ T8067] EXT4-fs: Ignoring removed orlov option [ 128.597805][ T8067] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 128.608069][ T8069] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 128.628764][ T8067] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 128.673938][ T8076] syz!: rxe_newlink: already configured on team_slave_0 [ 128.761422][ T8082] loop1: detected capacity change from 0 to 1024 [ 128.788090][ T8082] EXT4-fs: Ignoring removed orlov option [ 128.805870][ T8082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.975326][ T8047] syz.6.1493 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 128.989497][ T8047] CPU: 1 UID: 0 PID: 8047 Comm: syz.6.1493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.989598][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.989617][ T8047] Call Trace: [ 128.989626][ T8047] [ 128.989634][ T8047] __dump_stack+0x1d/0x30 [ 128.989695][ T8047] dump_stack_lvl+0xe8/0x140 [ 128.989741][ T8047] dump_stack+0x15/0x1b [ 128.989782][ T8047] dump_header+0x81/0x220 [ 128.989857][ T8047] oom_kill_process+0x342/0x400 [ 128.989898][ T8047] out_of_memory+0x979/0xb80 [ 128.989957][ T8047] try_charge_memcg+0x5e6/0x9e0 [ 128.990000][ T8047] obj_cgroup_charge_pages+0xa6/0x150 [ 128.990079][ T8047] __memcg_kmem_charge_page+0x9f/0x170 [ 128.990126][ T8047] __alloc_frozen_pages_noprof+0x188/0x360 [ 128.990176][ T8047] alloc_pages_mpol+0xb3/0x260 [ 128.990259][ T8047] ? alloc_pages_noprof+0xf4/0x130 [ 128.990308][ T8047] alloc_pages_noprof+0x90/0x130 [ 128.990397][ T8047] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 128.990457][ T8047] __kvmalloc_node_noprof+0x483/0x670 [ 128.990501][ T8047] ? ip_set_alloc+0x24/0x30 [ 128.990532][ T8047] ? ip_set_alloc+0x24/0x30 [ 128.990574][ T8047] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 128.990650][ T8047] ip_set_alloc+0x24/0x30 [ 128.990692][ T8047] hash_netiface_create+0x282/0x740 [ 128.990734][ T8047] ? __pfx_hash_netiface_create+0x10/0x10 [ 128.990829][ T8047] ip_set_create+0x3c9/0x970 [ 128.990953][ T8047] ? __nla_parse+0x40/0x60 [ 128.990987][ T8047] nfnetlink_rcv_msg+0x4c3/0x590 [ 128.991050][ T8047] netlink_rcv_skb+0x123/0x220 [ 128.991084][ T8047] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 128.991195][ T8047] nfnetlink_rcv+0x167/0x16c0 [ 128.991232][ T8047] ? kmem_cache_free+0xe4/0x3d0 [ 128.991346][ T8047] ? __kfree_skb+0x109/0x150 [ 128.991381][ T8047] ? nlmon_xmit+0x4f/0x60 [ 128.991421][ T8047] ? consume_skb+0x49/0x150 [ 128.991522][ T8047] ? nlmon_xmit+0x4f/0x60 [ 128.991564][ T8047] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 128.991610][ T8047] ? __dev_queue_xmit+0x1200/0x2000 [ 128.991636][ T8047] ? __dev_queue_xmit+0x182/0x2000 [ 128.991722][ T8047] ? ref_tracker_free+0x37d/0x3e0 [ 128.991776][ T8047] ? __netlink_deliver_tap+0x4dc/0x500 [ 128.991825][ T8047] netlink_unicast+0x5c0/0x690 [ 128.991904][ T8047] netlink_sendmsg+0x58b/0x6b0 [ 128.991934][ T8047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.991954][ T8047] __sock_sendmsg+0x145/0x180 [ 128.992012][ T8047] ____sys_sendmsg+0x31e/0x4e0 [ 128.992043][ T8047] ___sys_sendmsg+0x17b/0x1d0 [ 128.992089][ T8047] __x64_sys_sendmsg+0xd4/0x160 [ 128.992123][ T8047] x64_sys_call+0x191e/0x3000 [ 128.992212][ T8047] do_syscall_64+0xd2/0x200 [ 128.992299][ T8047] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.992337][ T8047] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.992371][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.992401][ T8047] RIP: 0033:0x7f076c6ceec9 [ 128.992422][ T8047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.992446][ T8047] RSP: 002b:00007f076b137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.992596][ T8047] RAX: ffffffffffffffda RBX: 00007f076c925fa0 RCX: 00007f076c6ceec9 [ 128.992614][ T8047] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 128.992631][ T8047] RBP: 00007f076c751f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.992647][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.992660][ T8047] R13: 00007f076c926038 R14: 00007f076c925fa0 R15: 00007fff3141e2d8 [ 128.992740][ T8047] [ 129.338026][ T8047] memory: usage 307200kB, limit 307200kB, failcnt 102 [ 129.344985][ T8047] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 129.353720][ T8047] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 129.361070][ T8047] Memory cgroup stats for /syz6: [ 129.368091][ T8047] cache 0 [ 129.376214][ T8047] rss 0 [ 129.379525][ T8047] shmem 0 [ 129.382593][ T8047] mapped_file 0 [ 129.386128][ T8047] dirty 0 [ 129.389091][ T8047] writeback 0 [ 129.392175][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1505'. [ 129.392505][ T8047] workingset_refault_anon 27 [ 129.406023][ T8047] workingset_refault_file 0 [ 129.410538][ T8047] swap 204800 [ 129.413938][ T8047] swapcached 0 [ 129.417935][ T8047] pgpgin 14324 [ 129.421302][ T8047] pgpgout 14324 [ 129.424778][ T8047] pgfault 15698 [ 129.428270][ T8047] pgmajfault 14 [ 129.431805][ T8047] inactive_anon 0 [ 129.435586][ T8047] active_anon 0 [ 129.439296][ T8047] inactive_file 0 [ 129.443383][ T8047] active_file 0 [ 129.446848][ T8047] unevictable 0 [ 129.450302][ T8047] hierarchical_memory_limit 314572800 [ 129.455688][ T8047] hierarchical_memsw_limit 9223372036854771712 [ 129.461861][ T8047] total_cache 0 [ 129.465335][ T8047] total_rss 0 [ 129.469830][ T8047] total_shmem 0 [ 129.473297][ T8047] total_mapped_file 0 [ 129.477271][ T8047] total_dirty 0 [ 129.480730][ T8047] total_writeback 0 [ 129.484543][ T8047] total_workingset_refault_anon 27 [ 129.489705][ T8047] total_workingset_refault_file 0 [ 129.494754][ T8047] total_swap 204800 [ 129.498559][ T8047] total_swapcached 0 [ 129.502545][ T8047] total_pgpgin 14324 [ 129.506443][ T8047] total_pgpgout 14324 [ 129.510438][ T8047] total_pgfault 15698 [ 129.514429][ T8047] total_pgmajfault 14 [ 129.518402][ T8047] total_inactive_anon 0 [ 129.522575][ T8047] total_active_anon 0 [ 129.526692][ T8047] total_inactive_file 0 [ 129.530869][ T8047] total_active_file 0 [ 129.534865][ T8047] total_unevictable 0 [ 129.538844][ T8047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1493,pid=8046,uid=0 [ 129.553457][ T8047] Memory cgroup out of memory: Killed process 8046 (syz.6.1493) total-vm:93956kB, anon-rss:1264kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 129.576372][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.594104][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1505'. [ 129.621865][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1505'. [ 129.690841][ T9] hid_parser_main: 116 callbacks suppressed [ 129.690864][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.704665][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.712135][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.719553][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.727001][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.734453][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.741961][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.749403][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.756828][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.764332][ T9] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 129.765636][ T9] hid-generic 0003:0004:0000.0030: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 129.781146][ T8104] netlink: 'syz.3.1508': attribute type 10 has an invalid length. [ 129.789907][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 129.864951][ T8121] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 129.904016][ T8126] loop6: detected capacity change from 0 to 1024 [ 129.911030][ T8126] EXT4-fs: Ignoring removed orlov option [ 129.919410][ T8126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.350126][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.435056][ T8136] loop6: detected capacity change from 0 to 512 [ 130.442276][ T8136] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 130.583863][ T8143] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 130.671939][ T8152] netlink: 'syz.3.1524': attribute type 10 has an invalid length. [ 130.681002][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 130.737322][ T8157] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 130.786974][ T8162] loop5: detected capacity change from 0 to 256 [ 130.827844][ T8168] loop1: detected capacity change from 0 to 1024 [ 130.834800][ T8168] EXT4-fs: Ignoring removed orlov option [ 130.843748][ T8168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.916552][ T8173] netlink: 'syz.5.1532': attribute type 10 has an invalid length. [ 130.925239][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1532'. [ 131.055249][ T8178] loop5: detected capacity change from 0 to 1024 [ 131.062282][ T8178] EXT4-fs: Ignoring removed orlov option [ 131.072995][ T8178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.097984][ T8178] program syz.5.1533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.349105][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.385170][ T8183] syz!: rxe_newlink: already configured on team_slave_0 [ 131.417067][ T8184] netlink: 'syz.6.1535': attribute type 10 has an invalid length. [ 131.425605][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1535'. [ 131.497850][ T8191] SELinux: policydb version 576 does not match my version range 15-35 [ 131.527536][ T8191] SELinux: failed to load policy [ 131.683725][ T8202] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 131.717994][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.746696][ T8211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8211 comm=syz.5.1544 [ 131.796934][ T8214] loop5: detected capacity change from 0 to 512 [ 131.817995][ T8214] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 131.903264][ T8226] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 132.468223][ T8229] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 132.477156][ T8229] __nla_validate_parse: 2 callbacks suppressed [ 132.477171][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 132.541330][ T8236] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1552'. [ 132.554945][ T8238] syz!: rxe_newlink: already configured on team_slave_0 [ 132.630580][ T8242] loop1: detected capacity change from 0 to 512 [ 132.637556][ T8242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.648854][ T8242] EXT4-fs (loop1): 1 truncate cleaned up [ 132.656131][ T8242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.735748][ T8253] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 132.769498][ T8242] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 132.863004][ T8273] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 132.868282][ T8274] loop6: detected capacity change from 0 to 512 [ 132.871627][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 132.878829][ T8274] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 133.421846][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 133.421866][ T29] audit: type=1400 audit(1759574878.350:6755): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 133.430075][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.502764][ T8283] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 133.521059][ T8284] netlink: 'syz.1.1567': attribute type 10 has an invalid length. [ 133.530009][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 133.539527][ T29] audit: type=1400 audit(1759574878.470:6756): avc: denied { mounton } for pid=8285 comm="syz.3.1571" path="/307/file0" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.584649][ T29] audit: type=1400 audit(1759574878.520:6757): avc: denied { create } for pid=8289 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.586971][ T8290] SELinux: policydb version 576 does not match my version range 15-35 [ 133.613120][ T8290] SELinux: failed to load policy [ 133.620960][ T29] audit: type=1400 audit(1759574878.520:6758): avc: denied { write } for pid=8289 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.640513][ T29] audit: type=1400 audit(1759574878.520:6759): avc: denied { load_policy } for pid=8289 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 133.669818][ T29] audit: type=1400 audit(1759574878.600:6760): avc: denied { execute } for pid=8289 comm="syz.1.1573" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.696726][ T29] audit: type=1400 audit(1759574878.600:6761): avc: denied { execute_no_trans } for pid=8289 comm="syz.1.1573" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.751786][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1577'. [ 133.757660][ T29] audit: type=1400 audit(1759574878.690:6762): avc: denied { mount } for pid=8303 comm="syz.1.1578" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.783110][ T29] audit: type=1400 audit(1759574878.690:6763): avc: denied { write } for pid=8303 comm="syz.1.1578" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.804121][ T29] audit: type=1400 audit(1759574878.690:6764): avc: denied { open } for pid=8303 comm="syz.1.1578" path="/322/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.847725][ T8309] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1580'. [ 133.963128][ T8313] syz!: rxe_newlink: already configured on team_slave_0 [ 134.165158][ T8326] loop1: detected capacity change from 0 to 512 [ 134.172666][ T8326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.187648][ T8325] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 134.224449][ T8326] EXT4-fs (loop1): 1 truncate cleaned up [ 134.233908][ T8326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.302227][ T8321] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 134.411685][ T4346] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 134.422754][ T4346] CPU: 1 UID: 0 PID: 4346 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.422865][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.422880][ T4346] Call Trace: [ 134.422888][ T4346] [ 134.422896][ T4346] __dump_stack+0x1d/0x30 [ 134.422985][ T4346] dump_stack_lvl+0xe8/0x140 [ 134.423080][ T4346] dump_stack+0x15/0x1b [ 134.423121][ T4346] dump_header+0x81/0x220 [ 134.423185][ T4346] oom_kill_process+0x342/0x400 [ 134.423214][ T4346] out_of_memory+0x979/0xb80 [ 134.423244][ T4346] try_charge_memcg+0x5e6/0x9e0 [ 134.423268][ T4346] ? should_fail_ex+0x30/0x280 [ 134.423321][ T4346] charge_memcg+0x51/0xc0 [ 134.423413][ T4346] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 134.423437][ T4346] __read_swap_cache_async+0x17b/0x2d0 [ 134.423481][ T4346] swap_cluster_readahead+0x262/0x3c0 [ 134.423587][ T4346] swapin_readahead+0xde/0x6f0 [ 134.423623][ T4346] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 134.423664][ T4346] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 134.423705][ T4346] ? __rcu_read_unlock+0x4f/0x70 [ 134.423729][ T4346] ? swap_cache_get_folio+0x277/0x280 [ 134.423769][ T4346] do_swap_page+0x2ae/0x2370 [ 134.423799][ T4346] ? css_rstat_updated+0xb7/0x240 [ 134.423924][ T4346] ? __pfx_default_wake_function+0x10/0x10 [ 134.423961][ T4346] handle_mm_fault+0x9a5/0x2be0 [ 134.423984][ T4346] ? vma_start_read+0x141/0x1f0 [ 134.424077][ T4346] do_user_addr_fault+0x630/0x1080 [ 134.424104][ T4346] ? fpregs_restore_userregs+0xe2/0x1d0 [ 134.424220][ T4346] ? switch_fpu_return+0xe/0x20 [ 134.424292][ T4346] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 134.424383][ T4346] exc_page_fault+0x62/0xa0 [ 134.424413][ T4346] asm_exc_page_fault+0x26/0x30 [ 134.424440][ T4346] RIP: 0033:0x7f08f4f9ee6a [ 134.424461][ T4346] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 7b 62 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90 [ 134.424512][ T4346] RSP: 002b:00007ffc55a8b1f0 EFLAGS: 00010206 [ 134.424528][ T4346] RAX: 0000000000000000 RBX: 00000000000002b3 RCX: 00007f08f4fd1743 [ 134.424561][ T4346] RDX: 24d461f6f5655800 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.424578][ T4346] RBP: 00007ffc55a8b25c R08: 00000000157cb638 R09: 0000000000000000 [ 134.424594][ T4346] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 134.424611][ T4346] R13: 00000000000927c0 R14: 0000000000020b1c R15: 00007ffc55a8b2b0 [ 134.424638][ T4346] [ 134.424647][ T4346] memory: usage 307200kB, limit 307200kB, failcnt 631 [ 134.636796][ T8331] SELinux: policydb version 576 does not match my version range 15-35 [ 134.637679][ T4346] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 134.645986][ T8331] SELinux: failed to load policy [ 134.653754][ T4346] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 134.653821][ T4346] Memory cgroup stats for /syz5: [ 134.655416][ T4346] cache 0 [ 134.708440][ T4346] rss 0 [ 134.711213][ T4346] shmem 0 [ 134.714189][ T4346] mapped_file 0 [ 134.717649][ T4346] dirty 0 [ 134.720595][ T4346] writeback 0 [ 134.723914][ T4346] workingset_refault_anon 149 [ 134.728602][ T4346] workingset_refault_file 0 [ 134.733161][ T4346] swap 204800 [ 134.736460][ T4346] swapcached 12288 [ 134.740197][ T4346] pgpgin 44926 [ 134.743683][ T4346] pgpgout 44921 [ 134.747147][ T4346] pgfault 62151 [ 134.750617][ T4346] pgmajfault 88 [ 134.754113][ T4346] inactive_anon 12288 [ 134.758098][ T4346] active_anon 0 [ 134.761554][ T4346] inactive_file 8192 [ 134.765698][ T4346] active_file 0 [ 134.769180][ T4346] unevictable 0 [ 134.772840][ T4346] hierarchical_memory_limit 314572800 [ 134.778226][ T4346] hierarchical_memsw_limit 9223372036854771712 [ 134.784599][ T4346] total_cache 0 [ 134.788073][ T4346] total_rss 0 [ 134.791371][ T4346] total_shmem 0 [ 134.794845][ T4346] total_mapped_file 0 [ 134.798901][ T4346] total_dirty 0 [ 134.802383][ T4346] total_writeback 0 [ 134.806232][ T4346] total_workingset_refault_anon 149 [ 134.811520][ T4346] total_workingset_refault_file 0 [ 134.816571][ T4346] total_swap 204800 [ 134.820398][ T4346] total_swapcached 12288 [ 134.824726][ T4346] total_pgpgin 44926 [ 134.828634][ T4346] total_pgpgout 44921 [ 134.832653][ T4346] total_pgfault 62151 [ 134.836633][ T4346] total_pgmajfault 88 [ 134.840616][ T4346] total_inactive_anon 12288 [ 134.845188][ T4346] total_active_anon 0 [ 134.849173][ T4346] total_inactive_file 8192 [ 134.853608][ T4346] total_active_file 0 [ 134.857594][ T4346] total_unevictable 0 [ 134.861633][ T4346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1577,pid=8301,uid=0 [ 134.876437][ T4346] Memory cgroup out of memory: Killed process 8301 (syz.5.1577) total-vm:96004kB, anon-rss:1136kB, file-rss:22612kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 134.908925][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.945349][ T10] hid_parser_main: 8 callbacks suppressed [ 134.945408][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 134.958660][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 134.966125][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 134.973567][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 134.981123][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 134.988571][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 134.996080][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 135.003532][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 135.010956][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 135.018519][ T10] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 135.037520][ T10] hid-generic 0003:0004:0000.0031: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 135.078115][ T8343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1591'. [ 135.095113][ T8345] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 135.119677][ T8351] program syz.6.1593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.152620][ T8357] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 135.169404][ T8360] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1598'. [ 135.235981][ T8366] netlink: 'syz.2.1599': attribute type 10 has an invalid length. [ 135.247547][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 135.258966][ T8368] loop6: detected capacity change from 0 to 512 [ 135.265897][ T8368] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.276823][ T8368] EXT4-fs (loop6): 1 truncate cleaned up [ 135.283053][ T8368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.303333][ T8368] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 135.322591][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.396066][ T8375] loop6: detected capacity change from 0 to 1024 [ 135.403388][ T8375] EXT4-fs: Ignoring removed orlov option [ 135.411925][ T8375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.430364][ T8375] program syz.6.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.648337][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.923212][ T3390] hid-generic 0003:0004:0000.0032: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 136.028209][ T8393] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 136.144523][ T8407] loop3: detected capacity change from 0 to 512 [ 136.152058][ T8407] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.164975][ T8407] EXT4-fs (loop3): 1 truncate cleaned up [ 136.171499][ T8407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.192555][ T8407] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 136.213757][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.318098][ T8421] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 136.327895][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 136.399384][ T8423] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 136.537411][ T8425] loop6: detected capacity change from 0 to 256 [ 136.590399][ T8429] loop6: detected capacity change from 0 to 256 [ 137.136201][ T8447] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 137.205068][ T6629] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 137.216017][ T6629] CPU: 1 UID: 0 PID: 6629 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.216094][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.216110][ T6629] Call Trace: [ 137.216119][ T6629] [ 137.216128][ T6629] __dump_stack+0x1d/0x30 [ 137.216255][ T6629] dump_stack_lvl+0xe8/0x140 [ 137.216291][ T6629] dump_stack+0x15/0x1b [ 137.216452][ T6629] dump_header+0x81/0x220 [ 137.216526][ T6629] oom_kill_process+0x342/0x400 [ 137.216557][ T6629] out_of_memory+0x979/0xb80 [ 137.216588][ T6629] try_charge_memcg+0x5e6/0x9e0 [ 137.216665][ T6629] ? should_fail_ex+0x30/0x280 [ 137.216708][ T6629] charge_memcg+0x51/0xc0 [ 137.216795][ T6629] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 137.216820][ T6629] __read_swap_cache_async+0x17b/0x2d0 [ 137.216876][ T6629] swap_cluster_readahead+0x262/0x3c0 [ 137.217019][ T6629] swapin_readahead+0xde/0x6f0 [ 137.217054][ T6629] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 137.217083][ T6629] ? css_rstat_updated+0xb7/0x240 [ 137.217137][ T6629] ? __rcu_read_unlock+0x4f/0x70 [ 137.217166][ T6629] ? __rcu_read_unlock+0x4f/0x70 [ 137.217191][ T6629] ? swap_cache_get_folio+0x277/0x280 [ 137.217300][ T6629] do_swap_page+0x2ae/0x2370 [ 137.217321][ T6629] ? _raw_spin_unlock+0x26/0x50 [ 137.217355][ T6629] ? finish_task_switch+0xad/0x2b0 [ 137.217381][ T6629] ? __pfx_default_wake_function+0x10/0x10 [ 137.217457][ T6629] handle_mm_fault+0x9a5/0x2be0 [ 137.217519][ T6629] ? vma_start_read+0x141/0x1f0 [ 137.217554][ T6629] do_user_addr_fault+0x630/0x1080 [ 137.217575][ T6629] ? fpregs_restore_userregs+0xe2/0x1d0 [ 137.217606][ T6629] ? switch_fpu_return+0xe/0x20 [ 137.217694][ T6629] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.217722][ T6629] exc_page_fault+0x62/0xa0 [ 137.217753][ T6629] asm_exc_page_fault+0x26/0x30 [ 137.217847][ T6629] RIP: 0033:0x7f076c701745 [ 137.217863][ T6629] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 137.217882][ T6629] RSP: 002b:00007fff3141e618 EFLAGS: 00010246 [ 137.217899][ T6629] RAX: 0000000000000000 RBX: 0000000000000125 RCX: 00007f076c701743 [ 137.217913][ T6629] RDX: 00007fff3141e630 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.217926][ T6629] RBP: 00007fff3141e69c R08: 00000000076077a8 R09: 0000000000000000 [ 137.217939][ T6629] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 137.218030][ T6629] R13: 00000000000927c0 R14: 00000000000215fd R15: 00007fff3141e6f0 [ 137.218085][ T6629] [ 137.218106][ T6629] memory: usage 307200kB, limit 307200kB, failcnt 318 [ 137.280936][ T8458] SELinux: policydb version 576 does not match my version range 15-35 [ 137.281148][ T6629] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 137.285882][ T8458] SELinux: failed to load policy [ 137.291653][ T6629] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 137.291672][ T6629] Memory cgroup stats for /syz6: [ 137.503762][ T6629] cache 0 [ 137.511697][ T6629] rss 0 [ 137.514483][ T6629] shmem 0 [ 137.517429][ T6629] mapped_file 0 [ 137.520904][ T6629] dirty 0 [ 137.523931][ T6629] writeback 0 [ 137.527330][ T6629] workingset_refault_anon 66 [ 137.531943][ T6629] workingset_refault_file 0 [ 137.536524][ T6629] swap 196608 [ 137.539844][ T6629] swapcached 8192 [ 137.543530][ T6629] pgpgin 16170 [ 137.546953][ T6629] pgpgout 16167 [ 137.547096][ T8464] loop5: detected capacity change from 0 to 256 [ 137.550415][ T6629] pgfault 19297 [ 137.550426][ T6629] pgmajfault 35 [ 137.550436][ T6629] inactive_anon 0 [ 137.550446][ T6629] active_anon 8192 [ 137.571105][ T6629] inactive_file 0 [ 137.574894][ T6629] active_file 4096 [ 137.578639][ T6629] unevictable 0 [ 137.582221][ T6629] hierarchical_memory_limit 314572800 [ 137.587595][ T6629] hierarchical_memsw_limit 9223372036854771712 [ 137.593876][ T6629] total_cache 0 [ 137.597354][ T6629] total_rss 0 [ 137.600698][ T6629] total_shmem 0 [ 137.604186][ T6629] total_mapped_file 0 [ 137.608159][ T6629] total_dirty 0 [ 137.611612][ T6629] total_writeback 0 [ 137.615440][ T6629] total_workingset_refault_anon 66 [ 137.620548][ T6629] total_workingset_refault_file 0 [ 137.625682][ T6629] total_swap 196608 [ 137.629520][ T6629] total_swapcached 8192 [ 137.633779][ T6629] total_pgpgin 16170 [ 137.637667][ T6629] total_pgpgout 16167 [ 137.641653][ T6629] total_pgfault 19297 [ 137.645735][ T6629] total_pgmajfault 35 [ 137.649811][ T6629] total_inactive_anon 0 [ 137.654070][ T6629] total_active_anon 8192 [ 137.658310][ T6629] total_inactive_file 0 [ 137.662479][ T6629] total_active_file 4096 [ 137.666735][ T6629] total_unevictable 0 [ 137.670725][ T6629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1622,pid=8432,uid=0 [ 137.685646][ T6629] Memory cgroup out of memory: Killed process 8432 (syz.6.1622) total-vm:93956kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 137.803693][ T8472] __nla_validate_parse: 2 callbacks suppressed [ 137.803710][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 137.869925][ T8478] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 137.900358][ T8480] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 137.964802][ T8485] loop6: detected capacity change from 0 to 512 [ 137.971861][ T8485] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.983160][ T8485] EXT4-fs (loop6): 1 truncate cleaned up [ 137.989426][ T8485] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.013423][ T8482] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.043595][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.061337][ T8491] loop1: detected capacity change from 0 to 256 [ 138.090736][ T8487] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.129726][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1647'. [ 138.152549][ T3390] hid-generic 0003:0004:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 138.184037][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1650'. [ 138.679376][ T8520] loop3: detected capacity change from 0 to 1024 [ 138.692774][ T8520] EXT4-fs: Ignoring removed orlov option [ 138.708775][ T8520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.737309][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 138.737326][ T29] audit: type=1400 audit(1759574883.670:6959): avc: denied { add_name } for pid=8517 comm="syz.3.1651" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.764136][ T29] audit: type=1400 audit(1759574883.670:6960): avc: denied { create } for pid=8517 comm="syz.3.1651" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.788141][ T8503] syz.1.1647 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 138.802344][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.1.1647 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.802380][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.802441][ T8503] Call Trace: [ 138.802449][ T8503] [ 138.802459][ T8503] __dump_stack+0x1d/0x30 [ 138.802515][ T8503] dump_stack_lvl+0xe8/0x140 [ 138.802549][ T8503] dump_stack+0x15/0x1b [ 138.802714][ T8503] dump_header+0x81/0x220 [ 138.802768][ T8503] oom_kill_process+0x342/0x400 [ 138.802802][ T8503] out_of_memory+0x979/0xb80 [ 138.802858][ T8503] try_charge_memcg+0x5e6/0x9e0 [ 138.802895][ T8503] obj_cgroup_charge_pages+0xa6/0x150 [ 138.802930][ T8503] __memcg_kmem_charge_page+0x9f/0x170 [ 138.803060][ T8503] __alloc_frozen_pages_noprof+0x188/0x360 [ 138.803214][ T8503] alloc_pages_mpol+0xb3/0x260 [ 138.803257][ T8503] alloc_pages_noprof+0x90/0x130 [ 138.803307][ T8503] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 138.803359][ T8503] __kvmalloc_node_noprof+0x483/0x670 [ 138.803400][ T8503] ? ip_set_alloc+0x24/0x30 [ 138.803504][ T8503] ? ip_set_alloc+0x24/0x30 [ 138.803622][ T8503] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 138.803676][ T8503] ip_set_alloc+0x24/0x30 [ 138.803715][ T8503] hash_netiface_create+0x282/0x740 [ 138.803827][ T8503] ? __pfx_hash_netiface_create+0x10/0x10 [ 138.803869][ T8503] ip_set_create+0x3c9/0x970 [ 138.803925][ T8503] ? __nla_parse+0x40/0x60 [ 138.803949][ T8503] nfnetlink_rcv_msg+0x4c3/0x590 [ 138.804075][ T8503] netlink_rcv_skb+0x123/0x220 [ 138.804120][ T8503] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 138.804169][ T8503] nfnetlink_rcv+0x167/0x16c0 [ 138.804221][ T8503] ? kmem_cache_free+0xe4/0x3d0 [ 138.804251][ T8503] ? __kfree_skb+0x109/0x150 [ 138.804328][ T8503] ? nlmon_xmit+0x4f/0x60 [ 138.804382][ T8503] ? consume_skb+0x49/0x150 [ 138.804454][ T8503] ? nlmon_xmit+0x4f/0x60 [ 138.804511][ T8503] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 138.804557][ T8503] ? __dev_queue_xmit+0x1200/0x2000 [ 138.804588][ T8503] ? __dev_queue_xmit+0x182/0x2000 [ 138.804616][ T8503] ? ref_tracker_free+0x37d/0x3e0 [ 138.804679][ T8503] ? __netlink_deliver_tap+0x4dc/0x500 [ 138.804731][ T8503] netlink_unicast+0x5c0/0x690 [ 138.804765][ T8503] netlink_sendmsg+0x58b/0x6b0 [ 138.804867][ T8503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.804888][ T8503] __sock_sendmsg+0x145/0x180 [ 138.804914][ T8503] ____sys_sendmsg+0x31e/0x4e0 [ 138.804937][ T8503] ___sys_sendmsg+0x17b/0x1d0 [ 138.804992][ T8503] __x64_sys_sendmsg+0xd4/0x160 [ 138.805024][ T8503] x64_sys_call+0x191e/0x3000 [ 138.805101][ T8503] do_syscall_64+0xd2/0x200 [ 138.805202][ T8503] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.805257][ T8503] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 138.805290][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.805337][ T8503] RIP: 0033:0x7f0c6ccceec9 [ 138.805410][ T8503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.805435][ T8503] RSP: 002b:00007f0c6b737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.805454][ T8503] RAX: ffffffffffffffda RBX: 00007f0c6cf25fa0 RCX: 00007f0c6ccceec9 [ 138.805467][ T8503] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 138.805480][ T8503] RBP: 00007f0c6cd51f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.805494][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.805536][ T8503] R13: 00007f0c6cf26038 R14: 00007f0c6cf25fa0 R15: 00007ffd9fbd6308 [ 138.805559][ T8503] [ 138.805575][ T8503] memory: usage 307200kB, limit 307200kB, failcnt 1048 [ 138.857955][ T8518] program syz.3.1651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.858932][ T8503] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 138.858953][ T8503] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 138.897495][ T29] audit: type=1400 audit(1759574883.780:6961): avc: denied { read } for pid=8517 comm="syz.3.1651" path="/322/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.901516][ T8503] Memory cgroup stats for /syz1: [ 138.906089][ T29] audit: type=1400 audit(1759574883.790:6962): avc: denied { write } for pid=8517 comm="syz.3.1651" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.906116][ T29] audit: type=1400 audit(1759574883.790:6963): avc: denied { append } for pid=8517 comm="syz.3.1651" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.251437][ T29] audit: type=1400 audit(1759574883.790:6964): avc: denied { open } for pid=8517 comm="syz.3.1651" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.275664][ T29] audit: type=1400 audit(1759574883.790:6965): avc: denied { append } for pid=8517 comm="syz.3.1651" path="/322/bus/cpu.stat" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.298804][ T29] audit: type=1400 audit(1759574883.790:6966): avc: denied { map } for pid=8517 comm="syz.3.1651" path="/322/bus/cpu.stat" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.304622][ T8503] cache 12288 [ 139.324968][ T8503] rss 0 [ 139.327747][ T8503] shmem 0 [ 139.330694][ T8503] mapped_file 0 [ 139.334185][ T8503] dirty 0 [ 139.337127][ T8503] writeback 4096 [ 139.340844][ T8503] workingset_refault_anon 289 [ 139.345807][ T8503] workingset_refault_file 2870 [ 139.350867][ T8503] swap 167936 [ 139.354227][ T8503] swapcached 36864 [ 139.357979][ T8503] pgpgin 48486 [ 139.361362][ T8503] pgpgout 48468 [ 139.364859][ T8503] pgfault 64139 [ 139.368341][ T8503] pgmajfault 162 [ 139.371975][ T8503] inactive_anon 36864 [ 139.376007][ T8503] active_anon 0 [ 139.379639][ T8503] inactive_file 32768 [ 139.383661][ T8503] active_file 4096 [ 139.387407][ T8503] unevictable 0 [ 139.390877][ T8503] hierarchical_memory_limit 314572800 [ 139.396292][ T8503] hierarchical_memsw_limit 9223372036854771712 [ 139.402639][ T8503] total_cache 12288 [ 139.406474][ T8503] total_rss 0 [ 139.409808][ T8503] total_shmem 0 [ 139.413330][ T8503] total_mapped_file 0 [ 139.417316][ T8503] total_dirty 0 [ 139.420777][ T8503] total_writeback 4096 [ 139.424908][ T8503] total_workingset_refault_anon 289 [ 139.430227][ T8503] total_workingset_refault_file 2870 [ 139.435676][ T8503] total_swap 167936 [ 139.439584][ T8503] total_swapcached 36864 [ 139.443887][ T8503] total_pgpgin 48486 [ 139.447792][ T8503] total_pgpgout 48468 [ 139.451789][ T8503] total_pgfault 64139 [ 139.455809][ T8503] total_pgmajfault 162 [ 139.459929][ T8503] total_inactive_anon 36864 [ 139.464498][ T8503] total_active_anon 0 [ 139.469277][ T8503] total_inactive_file 32768 [ 139.472494][ T3390] hid-generic 0003:0004:0000.0034: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 139.473841][ T8503] total_active_file 4096 [ 139.473852][ T8503] total_unevictable 0 [ 139.473860][ T8503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 139.483077][ T29] audit: type=1326 audit(1759574884.400:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.5.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4f9eec9 code=0x7ffc0000 [ 139.487215][ T8503] ,mems_allowed=0 [ 139.491158][ T29] audit: type=1326 audit(1759574884.400:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.5.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4f9eec9 code=0x7ffc0000 [ 139.498811][ T8503] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1647,pid=8502,uid=0 [ 139.498880][ T8503] Memory cgroup out of memory: Killed process 8502 (syz.1.1647) total-vm:93956kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 139.621809][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.712367][ T8539] loop6: detected capacity change from 0 to 256 [ 139.725636][ T1034] hid-generic 0003:0004:0000.0035: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 139.766367][ T8549] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 139.794813][ T8553] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 139.805235][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 139.878746][ T8557] loop6: detected capacity change from 0 to 1024 [ 139.886732][ T8557] EXT4-fs: Ignoring removed orlov option [ 139.895034][ T8557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.912496][ T8557] program syz.6.1664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.973754][ T8559] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 139.985052][ T8563] netlink: 'syz.1.1665': attribute type 10 has an invalid length. [ 139.993758][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 140.036294][ T8565] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'. [ 140.142496][ T1034] hid_parser_main: 80 callbacks suppressed [ 140.142513][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.155924][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.163447][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.171004][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.178456][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.186034][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.193488][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.200994][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.208658][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.216079][ T1034] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 140.223984][ T1034] hid-generic 0003:0004:0000.0036: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.224899][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.260580][ T8576] loop6: detected capacity change from 0 to 256 [ 140.300651][ T10] hid-generic 0003:0004:0000.0037: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.331780][ T8586] syz!: rxe_newlink: already configured on team_slave_0 [ 140.354742][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 140.364093][ T8588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8588 comm=syz.1.1675 [ 140.475986][ T8603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1681'. [ 140.516351][ T8606] loop6: detected capacity change from 0 to 1024 [ 140.525180][ T8606] EXT4-fs: Ignoring removed orlov option [ 140.533641][ T8606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.556628][ T8606] program syz.6.1680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.579213][ T8611] loop3: detected capacity change from 0 to 256 [ 140.619328][ T8613] loop1: detected capacity change from 0 to 512 [ 140.669457][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'. [ 140.678874][ T8619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8619 comm=syz.5.1686 [ 140.709269][ T8622] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 140.752288][ T8613] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 140.801966][ T8631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1692'. [ 140.813414][ T6629] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.848198][ T1034] hid-generic 0003:0004:0000.0038: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.887712][ T8646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8646 comm=syz.3.1697 [ 140.931565][ T3374] hid-generic 0003:0004:0000.0039: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.957817][ T8653] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 140.992545][ T8655] loop6: detected capacity change from 0 to 256 [ 141.091689][ T8674] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.113916][ T8676] SELinux: policydb version 576 does not match my version range 15-35 [ 141.122436][ T8676] SELinux: failed to load policy [ 141.146259][ T8679] loop3: detected capacity change from 0 to 1024 [ 141.153179][ T8673] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 141.153449][ T8679] EXT4-fs: Ignoring removed orlov option [ 141.170547][ T8679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.366036][ T8693] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.391805][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.542256][ T3374] hid-generic 0003:0004:0000.003A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 141.585485][ T8712] syz!: rxe_newlink: already configured on team_slave_0 [ 141.656446][ T8722] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.692224][ T8724] loop3: detected capacity change from 0 to 256 [ 141.822141][ T8733] loop5: detected capacity change from 0 to 512 [ 141.828765][ T8733] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 141.863288][ T8736] loop3: detected capacity change from 0 to 1024 [ 141.907721][ T3390] hid-generic 0003:0004:0000.003B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 141.954932][ T8736] EXT4-fs: Ignoring removed orlov option [ 141.972940][ T8745] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.998589][ T8750] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.006359][ T8736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.043362][ T8752] loop1: detected capacity change from 0 to 256 [ 142.329417][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.370762][ T3374] hid-generic 0003:0004:0000.003C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 142.464259][ T8759] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 142.780970][ T8782] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.815750][ T8784] loop5: detected capacity change from 0 to 256 [ 142.915059][ T8761] syz.6.1742 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.929329][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.6.1742 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.929415][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.929428][ T8761] Call Trace: [ 142.929435][ T8761] [ 142.929443][ T8761] __dump_stack+0x1d/0x30 [ 142.929605][ T8761] dump_stack_lvl+0xe8/0x140 [ 142.929648][ T8761] dump_stack+0x15/0x1b [ 142.929782][ T8761] dump_header+0x81/0x220 [ 142.929824][ T8761] oom_kill_process+0x342/0x400 [ 142.929894][ T8761] out_of_memory+0x979/0xb80 [ 142.929927][ T8761] try_charge_memcg+0x5e6/0x9e0 [ 142.929960][ T8761] obj_cgroup_charge_pages+0xa6/0x150 [ 142.930007][ T8761] __memcg_kmem_charge_page+0x9f/0x170 [ 142.930135][ T8761] __alloc_frozen_pages_noprof+0x188/0x360 [ 142.930260][ T8761] alloc_pages_mpol+0xb3/0x260 [ 142.930309][ T8761] alloc_pages_noprof+0x90/0x130 [ 142.930424][ T8761] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 142.930513][ T8761] __kvmalloc_node_noprof+0x483/0x670 [ 142.930629][ T8761] ? ip_set_alloc+0x24/0x30 [ 142.930682][ T8761] ? ip_set_alloc+0x24/0x30 [ 142.930723][ T8761] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 142.930763][ T8761] ip_set_alloc+0x24/0x30 [ 142.930806][ T8761] hash_netiface_create+0x282/0x740 [ 142.930917][ T8761] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.930959][ T8761] ip_set_create+0x3c9/0x970 [ 142.931065][ T8761] ? __nla_parse+0x40/0x60 [ 142.931092][ T8761] nfnetlink_rcv_msg+0x4c3/0x590 [ 142.931216][ T8761] netlink_rcv_skb+0x123/0x220 [ 142.931249][ T8761] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.931297][ T8761] nfnetlink_rcv+0x167/0x16c0 [ 142.931348][ T8761] ? kmem_cache_free+0xe4/0x3d0 [ 142.931389][ T8761] ? __kfree_skb+0x109/0x150 [ 142.931473][ T8761] ? nlmon_xmit+0x4f/0x60 [ 142.931555][ T8761] ? consume_skb+0x49/0x150 [ 142.931592][ T8761] ? nlmon_xmit+0x4f/0x60 [ 142.931692][ T8761] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 142.931803][ T8761] ? __dev_queue_xmit+0x1200/0x2000 [ 142.931828][ T8761] ? __dev_queue_xmit+0x182/0x2000 [ 142.931856][ T8761] ? ref_tracker_free+0x37d/0x3e0 [ 142.932010][ T8761] ? __netlink_deliver_tap+0x4dc/0x500 [ 142.932075][ T8761] netlink_unicast+0x5c0/0x690 [ 142.932190][ T8761] netlink_sendmsg+0x58b/0x6b0 [ 142.932212][ T8761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.932309][ T8761] __sock_sendmsg+0x145/0x180 [ 142.932336][ T8761] ____sys_sendmsg+0x31e/0x4e0 [ 142.932359][ T8761] ___sys_sendmsg+0x17b/0x1d0 [ 142.932473][ T8761] __x64_sys_sendmsg+0xd4/0x160 [ 142.932505][ T8761] x64_sys_call+0x191e/0x3000 [ 142.932600][ T8761] do_syscall_64+0xd2/0x200 [ 142.932690][ T8761] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.932723][ T8761] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.932758][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.932784][ T8761] RIP: 0033:0x7f076c6ceec9 [ 142.932869][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.933004][ T8761] RSP: 002b:00007f076b137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.933044][ T8761] RAX: ffffffffffffffda RBX: 00007f076c925fa0 RCX: 00007f076c6ceec9 [ 142.933063][ T8761] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 142.933081][ T8761] RBP: 00007f076c751f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.933128][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.933141][ T8761] R13: 00007f076c926038 R14: 00007f076c925fa0 R15: 00007fff3141e2d8 [ 142.933172][ T8761] [ 142.955266][ T8792] loop5: detected capacity change from 0 to 1024 [ 142.956426][ T8761] memory: usage 307200kB, limit 307200kB, failcnt 499 [ 142.961712][ T8792] EXT4-fs: Ignoring removed orlov option [ 142.963629][ T8761] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 142.963649][ T8761] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 142.972196][ T8792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.972426][ T8761] Memory cgroup stats for /syz6: [ 143.331702][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.361177][ T8800] loop3: detected capacity change from 0 to 1024 [ 143.369485][ T8761] cache 0 [ 143.370984][ T8800] EXT4-fs: Ignoring removed orlov option [ 143.372631][ T8761] rss 0 [ 143.381032][ T8761] shmem 0 [ 143.381613][ T8800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.384053][ T8761] mapped_file 0 [ 143.399928][ T8761] dirty 0 [ 143.402942][ T8761] writeback 0 [ 143.406260][ T8761] workingset_refault_anon 101 [ 143.410956][ T8761] workingset_refault_file 0 [ 143.415510][ T8761] swap 204800 [ 143.418831][ T8761] swapcached 0 [ 143.422298][ T8761] pgpgin 17744 [ 143.425713][ T8761] pgpgout 17742 [ 143.429189][ T8761] pgfault 22424 [ 143.432686][ T8761] pgmajfault 56 [ 143.436186][ T8761] inactive_anon 0 [ 143.439829][ T8761] active_anon 0 [ 143.443314][ T8761] inactive_file 0 [ 143.447081][ T8761] active_file 8192 [ 143.450816][ T8761] unevictable 0 [ 143.454444][ T8761] hierarchical_memory_limit 314572800 [ 143.459846][ T8761] hierarchical_memsw_limit 9223372036854771712 [ 143.466036][ T8761] total_cache 0 [ 143.469579][ T8761] total_rss 0 [ 143.472939][ T8761] total_shmem 0 [ 143.476418][ T8761] total_mapped_file 0 [ 143.480398][ T8761] total_dirty 0 [ 143.483919][ T8761] total_writeback 0 [ 143.487740][ T8761] total_workingset_refault_anon 101 [ 143.492974][ T8761] total_workingset_refault_file 0 [ 143.498010][ T8761] total_swap 204800 [ 143.501850][ T8761] total_swapcached 0 [ 143.505780][ T8761] total_pgpgin 17744 [ 143.509690][ T8761] total_pgpgout 17742 [ 143.513719][ T8761] total_pgfault 22424 [ 143.517733][ T8761] total_pgmajfault 56 [ 143.521745][ T8761] total_inactive_anon 0 [ 143.525927][ T8761] total_active_anon 0 [ 143.529924][ T8761] total_inactive_file 0 [ 143.533464][ T8810] loop5: detected capacity change from 0 to 512 [ 143.534124][ T8761] total_active_file 8192 [ 143.540811][ T8810] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 143.544601][ T8761] total_unevictable 0 [ 143.544615][ T8761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1742,pid=8760,uid=0 [ 143.571270][ T8761] Memory cgroup out of memory: Killed process 8760 (syz.6.1742) total-vm:93956kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 143.627131][ T8815] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.640000][ T8816] syz!: rxe_newlink: already configured on team_slave_0 [ 143.754204][ T8796] ================================================================== [ 143.762347][ T8796] BUG: KCSAN: data-race in filemap_read / filemap_read [ 143.769247][ T8796] [ 143.771590][ T8796] read to 0xffff88810476e5e8 of 8 bytes by task 8800 on cpu 0: [ 143.779151][ T8796] filemap_read+0x6f/0xa00 [ 143.783746][ T8796] generic_file_read_iter+0x79/0x330 [ 143.789180][ T8796] ext4_file_read_iter+0x1cc/0x290 [ 143.794529][ T8796] copy_splice_read+0x43f/0x660 [ 143.799428][ T8796] splice_direct_to_actor+0x290/0x680 [ 143.804847][ T8796] do_splice_direct+0xda/0x150 [ 143.809639][ T8796] do_sendfile+0x380/0x650 [ 143.814108][ T8796] __x64_sys_sendfile64+0x105/0x150 [ 143.819342][ T8796] x64_sys_call+0x2bb4/0x3000 [ 143.824078][ T8796] do_syscall_64+0xd2/0x200 [ 143.828633][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.834537][ T8796] [ 143.836880][ T8796] write to 0xffff88810476e5e8 of 8 bytes by task 8796 on cpu 1: [ 143.844777][ T8796] filemap_read+0x974/0xa00 [ 143.849321][ T8796] generic_file_read_iter+0x79/0x330 [ 143.854654][ T8796] ext4_file_read_iter+0x1cc/0x290 [ 143.859809][ T8796] copy_splice_read+0x43f/0x660 [ 143.864715][ T8796] splice_direct_to_actor+0x290/0x680 [ 143.870126][ T8796] do_splice_direct+0xda/0x150 [ 143.874922][ T8796] do_sendfile+0x380/0x650 [ 143.878293][ T8826] loop1: detected capacity change from 0 to 1024 [ 143.879378][ T8796] __x64_sys_sendfile64+0x105/0x150 [ 143.886429][ T8826] EXT4-fs: Ignoring removed orlov option [ 143.890913][ T8796] x64_sys_call+0x2bb4/0x3000 [ 143.890943][ T8796] do_syscall_64+0xd2/0x200 [ 143.900025][ T8826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.901246][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.924097][ T8796] [ 143.926434][ T8796] value changed: 0x000000000000032a -> 0x000000000000032b [ 143.933552][ T8796] [ 143.935892][ T8796] Reported by Kernel Concurrency Sanitizer on: [ 143.942061][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.3.1755 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.951817][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.961902][ T8796] ================================================================== [ 143.975100][ T8827] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 143.984184][ T8827] __nla_validate_parse: 1 callbacks suppressed [ 143.984200][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 144.033195][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.130126][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.