last executing test programs: 3.98576476s ago: executing program 0 (id=2510): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) 3.850046192s ago: executing program 0 (id=2515): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000200)) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_clone3(&(0x7f0000001f40)={0x804800, &(0x7f0000000500), &(0x7f00000005c0)=0x0, &(0x7f0000000e80), {0x2}, &(0x7f0000000ec0)=""/4096, 0x1000, &(0x7f0000001ec0), &(0x7f0000001f00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) setresuid(0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setregid(r11, r12) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x400400, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r14, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r14, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r14, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendmsg$netlink(r0, &(0x7f0000002140)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000002c0)={0xbc, 0x27, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x23, 0xd5, 0x0, 0x1, [@generic="b79edbff43f77303773ff53c8612b2ac1bdcfe5b08490a", @typed={0x8, 0x143, 0x0, 0x0, @pid=r4}]}, @generic="0de5f771ad4e2814a320f9448020a71120e257baa1c11ca9269d673c85759e18d6f980cdc70d6c52db2ada3f4adae614a041490aeeb5952275a34dc83a195e9399f1c93637af5fd109ebeb69eb26932ef136908abf6baedf8117b39c5c498e35bbc2528781fe34d125692b5385e8c0b79dfe6bd9007d442c962fe9e7ae4bbd53eb281c158fd10043"]}, 0xbc}, {&(0x7f0000000380)={0xe0, 0x1b, 0x8, 0xffff, 0x25dfdbff, "", [@nested={0xcd, 0x87, 0x0, 0x1, [@generic="e8b6c9eeaae9276f6aad8bd3cd1379e7c0267abb7df83a6656f569061029b02c1b85fcba117c86713c498be646da8983805c25ba3ff9a62c267ed3154318a2588fa86e35ce878c0ef82e1b4cc131658ba0aaf5c094105174926d86ec5efab964182bb7277b971b2410f02b26f29c351ba16d993623c03ed89e27fcd7816691cc8cb6c7bb0bda77cdaffa830595ae0aace639cea3ac9ddbbf01d0d55d7e0b64edd93351237a38fc915a1bd9ffc17ccdc3f6cdb4582d50b916e0", @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xfddf}, @generic, @typed={0x6, 0x142, 0x0, 0x0, @str='.\x00'}]}]}, 0xe0}, {&(0x7f0000000680)={0x530, 0x1d, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x11e, 0x13b, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r5}, @generic="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", @nested={0x4, 0xe2}]}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@empty}, @nested={0x92, 0xfb, 0x0, 0x1, [@generic="b4a35f0a5a20b5b1edbdbaf46deae84e5c83f79de4ae90397dac420eedf1f82526be20c15586b05ab3b64de57f778d94b0533c64b8da2572e5c220b2e99192e1793c62721c43c24dcbda38f33d3b33946019f8b95d05f2f52a3327c3c41db9fe59e065dc1e8fdf684107b24d683058c46493ad4394f76fb2b44d78586c1e9c14560b0bf0934734eb2e0a40c41c40"]}, @nested={0x23f, 0x25, 0x0, 0x1, [@generic="6bb97e82bfc66dc2f95918f1eb971e1601c194e1f0674435851686eb12088e7d0c3f0c3fef4a9ea45c3cec18318d58f3e38f22530d11f32929e5179ba6c8716526b31fcbb2ce71a7ed2857f426b4618787f8fb0b87c2d53671f7458f1aa6cdae5536bb3a5f830e7c210ca0f9b5c8df839aaec4bd5e8a801c02", @generic="ff0bc0abeb78733f7e486c88b650265ce017479f33817fd9a84c7688f0ea6ae2b4e9651e5f372c16b111fcf5c3d674e4a5566931c387184133a649936a242c54062b5833a2ebab675a04a6889b08c057250465b4da29", @generic="befe21bcab6e260dc3ca1c14d97249d82a3b622717df8d270cc66b1abbfa0ce1981d6fff70e119760ca08e57ef7c5f5cba15ba710112bc16e0d46367b7239cee4a3eed429ba5722d8373d0ff98ffb4f3a5601ae66f9082b23315b843eaeaa1db9ba48597b88ab87af46ca7babbfa413675d4afec0bf9f21497b3989441ce8142370b65e7f481f164be45dee8e6238e9915bf530937b2a2ea84b4149e7130e0a11c251aa2af01409b3e6eb10d74290400c057d198e7f95d3f3cbf84e6123dfdb420dc5b7297b4fef4768ac3505ee72ffab6385baac33691aac5d75096dbfb14edf75f47c4cd897534898a27bf", @generic="4b8dc6fe4458e1e74973164082ff6ea3043fb337c218b4036513f55dda00e8ac2a4145ae7b7061bb0b8c3a57b1c42caead900460d50dda003f119e584d94f75c7ffedbe0bdcb4a190db447d322b8087518b9c007af9b343a80dafe8d62c19788790cda1e5584a358c096b3cc94632cad", @typed={0x8, 0x93, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x143}, @nested={0x4, 0x1f}]}, @nested={0x123, 0xfc, 0x0, 0x1, [@typed={0xcb, 0x7a, 0x0, 0x0, @binary="13f5dd4b446a9023c4ab7801c154abb0202a3fc082568ec832cef332514030c83715f3ea80b6af839f25b0a1e63806deefcc25c7ca84ca8cdbb356fe11bc4c6a6ff1d0edaa52f052513878732d8651155b98fc74805465c73e3d140c25d583358902cbaac9c3b0aee0f20a1f01b9f53fedeb71c76987e974951badb328de5ada91f9a1ca3599e55216a470ab9a8fdddaddbfa985c8374af28056a84262e066d52b02c8914604e920514565e7eabfce1f637abf425b0f70f35a3ee58fd8b7ef2a8347772d96c9c3"}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x6}, @typed={0xb, 0x128, 0x0, 0x0, @str='batadv\x00'}, @generic="94ee35381f79d574b0b2d7869c3da0657213f0fc53d4df9f31bab956f831b4fa12d5f7c13045ab3f4d8cbbcfc4583b", @nested={0x4, 0x66}, @typed={0x8, 0x74, 0x0, 0x0, @uid=r6}]}]}, 0x530}, {&(0x7f0000000c00)={0xec, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xba, 0x11a, 0x0, 0x1, [@generic="8f0613f6f2f30dc7cc3a003ce7690ca5710487c689d44732fd75f8cf77fddc7cc141768bf2c8d51ff14a96c0c02609e1d002d90bde20b9c9c7d69ee6d06ac45ba56ae92d7124a22df60473c474586e33436ad9a09b54c58c26a8072b7eb73d57e2638cd2b55a95dc92bfd2c1ac67f5b4f9d800642325d469909cad936cedee1ef14844a5ae5f21da0103c4396f15c933c5823b6dfd29bfb1a4f2c144be32aaa3c8e8380b4c28425626c5cc7103eef54872fd", @nested={0x4, 0x5e}]}, @typed={0xb, 0x135, 0x0, 0x0, @str='batadv\x00'}, @nested={0x14, 0xfd, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x87}, @nested={0x4, 0xf6}]}]}, 0xec}, {&(0x7f0000000d00)={0x164, 0x3a, 0x100, 0x7, 0x25dfdbfb, "", [@generic="0ab62d50f1367ba535dc50654b21af764faa47938be68ac4499f45af5dfffd3b1606a6860f95e0ec63928b874dc7c374e45c5e5f291a5d956a977eeee85a8f06215b22c4b33195f68fc2bf8e5a422327e9f2714167af75041ba4ca09c54103103816d93ed68f26ee66af9586cde4b152d608b0176408281e63351174b794adfa590c7d7165f044a0ed486eb56cf5dabd5c6c6eeee510245b2d1b0d72f456198f80b5dfc48577c390da80ef88ff3882e2ffe7838f197fb550eb8cf3fb435439", @typed={0x26, 0x124, 0x0, 0x0, @binary="b9623fc8441f73967aac26db02aa899adac000e61d5a210bdc932cba907c4eec3aae"}, @nested={0x10, 0x2f, 0x0, 0x1, [@typed={0x4, 0x109}, @nested={0x4, 0xfe}, @nested={0x4, 0x5d}]}, @generic="48db5fcf9b55c07caa0030a0a60e44df3a89a54347953be57603ea7054521c282562a497bad55166347825e3e94e8879c7f304ba8f05581ea0e92b68fd332f8494f5653b8bc9ec4ae4e03af0e51df648f0b63c4e7c5737a80cf840f2de"]}, 0x164}], 0x5, &(0x7f0000002040)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r7, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r1, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xd8, 0x20000080}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.985320575s ago: executing program 0 (id=2529): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000408500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 2.956025525s ago: executing program 0 (id=2530): io_uring_setup(0x1ddd, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x11, &(0x7f0000001d40)={[{@acl}, {@resgid}, {@nodioread_nolock}, {@commit={'commit', 0x3d, 0x4000003}}, {@data_writeback}]}, 0x1, 0x605, &(0x7f0000001dc0)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r0, &(0x7f0000000480)='2', 0x1, 0x8080c64) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(r0, 0x1, 0x8e) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB="0002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', 0x0, r0, 0x0, 0x4, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x167) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x0, 0x0, 0x9, 0x3}) read$snapshot(r5, &(0x7f00000004c0)=""/130, 0x82) 2.6746175s ago: executing program 4 (id=2534): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c000780080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000046}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e80"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) symlink(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00') lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.559752371s ago: executing program 3 (id=2539): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.514675522s ago: executing program 3 (id=2542): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) setitimer(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x3, 0x3400}}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x1e, 0x80, 0x20, r0, 0x3, '\x00', 0x0, r4, 0x0, 0x1, 0x2, 0x9}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@fragment={0x87, 0x0, 0x5, 0x0, 0x0, 0x7, 0x65}, 0x8) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.078104789s ago: executing program 0 (id=2543): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'ip6gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 2.051104529s ago: executing program 3 (id=2545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfdb7) 1.96824666s ago: executing program 1 (id=2546): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005"], 0x0, 0x26, 0x0, 0x0, 0x80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x14, 0x0, 0x700, 0x10, &(0x7f0000000300), 0x10}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000000401010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005"], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r3, @ANYBLOB="009952a8b88b5f824caf6aa2e79582d8"], 0x34}, 0x1, 0x2}, 0x80) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={r3, @remote, @empty}, 0xc) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r4, 0x0, r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) 1.96356873s ago: executing program 3 (id=2547): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) 1.860970692s ago: executing program 1 (id=2548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x12) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r5, @ANYRESOCT=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$qrtrtun(r6, 0x0, 0x0) syz_clone(0x8005400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0xf4, 0x4, 0x2, 0x1}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000400)={@broadcast, @remote, 0xffffffffffffffff, "3890a5c3e29087e71b20124d8516a779a844c891ca69afe23e12b49b67f51932", 0x8000, 0x0, 0x0, 0x401}, 0x3c) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_cmd={0x7b3b11011c29416, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, 0xf7, 0x0, 0x0, [0x0, 0xec6]}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1.658402995s ago: executing program 0 (id=2549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x12) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32, @ANYRESOCT=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_clone(0x8005400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 1.649402835s ago: executing program 4 (id=2550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfdb7) 1.275289081s ago: executing program 4 (id=2551): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x61b3, 0x13580, 0x0, 0x368}, &(0x7f0000000100), &(0x7f0000000300)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="20000000100001070000000000000000"], 0x20}}, 0x4000084) 1.037865555s ago: executing program 4 (id=2553): io_uring_setup(0x1ddd, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x11, &(0x7f0000001d40)={[{@acl}, {@resgid}, {@nodioread_nolock}, {@commit={'commit', 0x3d, 0x4000003}}, {@data_writeback}]}, 0x1, 0x605, &(0x7f0000001dc0)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r0, &(0x7f0000000480)='2', 0x1, 0x8080c64) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(r0, 0x1, 0x8e) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB="0002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', 0x0, r0, 0x0, 0x4, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x167) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x0, 0x0, 0x9, 0x3}) read$snapshot(r5, &(0x7f00000004c0)=""/130, 0x82) 937.457116ms ago: executing program 3 (id=2556): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff18110000", @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 865.137827ms ago: executing program 1 (id=2558): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1d00000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="00000000000000001a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xffffffffdffffff7}, 0x18) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000009000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000ffffffffff7f0000cc00000000000100", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) clock_adjtime(0xa, &(0x7f0000000500)={0x9, 0x13, 0x1ff, 0x7, 0x9, 0x6, 0x8, 0x100000001, 0x31d8b54d, 0x5, 0xfffffffffffffff9, 0x32, 0x7, 0xfba0, 0xd, 0x54b5, 0x7, 0xc821, 0x9, 0x7, 0x1, 0x3de4, 0xff, 0x5, 0x9, 0x2}) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x4}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000ff7f0000080000000600000000000000", @ANYRES32, @ANYBLOB="d800b91de0987e0d75a2fe994c00"/30, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000000300"/28], 0x50) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) 776.475729ms ago: executing program 3 (id=2560): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c000780080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000046}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e80"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) symlink(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00') lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) 694.70744ms ago: executing program 4 (id=2563): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020400) r1 = getpid() capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x28}) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 661.84734ms ago: executing program 1 (id=2564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 661.32375ms ago: executing program 2 (id=2565): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020400) r1 = getpid() capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x28}) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 626.695941ms ago: executing program 2 (id=2566): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfdb7) 623.530971ms ago: executing program 1 (id=2567): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x8004) 587.066132ms ago: executing program 1 (id=2568): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) 548.085382ms ago: executing program 4 (id=2569): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x12) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r5, @ANYRESOCT=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$qrtrtun(r6, 0x0, 0x0) syz_clone(0x8005400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0xf4, 0x4, 0x2, 0x1}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000400)={@broadcast, @remote, 0xffffffffffffffff, "3890a5c3e29087e71b20124d8516a779a844c891ca69afe23e12b49b67f51932", 0x8000, 0x0, 0x0, 0x401}, 0x3c) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_cmd={0x7b3b11011c29416, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, 0xf7, 0x0, 0x0, [0x0, 0xec6]}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 430.350304ms ago: executing program 2 (id=2570): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x4, 0x1) 218.438087ms ago: executing program 2 (id=2571): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4}, 0x50) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) io_destroy(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 214.343107ms ago: executing program 2 (id=2572): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff18110000", @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 0s ago: executing program 2 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='./control\x00', 0x0) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) kernel console output (not intermixed with test programs): =0x7ffc0000 [ 139.790004][ T29] audit: type=1326 audit(1751049394.306:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 139.813490][ T29] audit: type=1326 audit(1751049394.306:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 139.872102][ T9146] SELinux: ebitmap: truncated map [ 139.875734][ T9133] loop3: p1 < > p4 [ 139.894462][ T9133] loop3: p4 size 8388608 extends beyond EOD, truncated [ 139.895333][ T9146] SELinux: failed to load policy [ 140.066543][ T9159] vxcan5: entered allmulticast mode [ 140.188153][ T9183] netlink: 'syz.4.1478': attribute type 1 has an invalid length. [ 140.201714][ T9182] can0: slcan on ttyS3. [ 140.264731][ T9182] can0 (unregistered): slcan off ttyS3. [ 140.301214][ T9180] loop3: detected capacity change from 0 to 2048 [ 140.341858][ T9180] loop3: p1 < > p4 [ 140.346401][ T9180] loop3: p4 size 8388608 extends beyond EOD, truncated [ 140.355244][ T9190] xt_CT: No such helper "snmp_trap" [ 140.393427][ T9180] SELinux: ebitmap: truncated map [ 140.399881][ T9180] SELinux: failed to load policy [ 140.484705][ T9209] vlan2: entered allmulticast mode [ 140.576557][ T9219] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 140.608932][ T9221] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 140.734965][ T9228] can0: slcan on ttyS3. [ 140.883480][ T9228] can0 (unregistered): slcan off ttyS3. [ 141.084918][ T9244] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 141.180970][ T9256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1515'. [ 141.190019][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 141.205227][ T9262] loop4: detected capacity change from 0 to 512 [ 141.212135][ T9262] journal_path: Non-blockdev passed as './bus' [ 141.218488][ T9262] EXT4-fs: error: could not find journal device path [ 141.371259][ T9270] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 141.389353][ T9271] loop4: detected capacity change from 0 to 2048 [ 141.440739][ T9271] loop4: p1 < > p4 [ 141.470884][ T9271] loop4: p4 size 8388608 extends beyond EOD, truncated [ 141.486464][ T9285] vlan2: entered allmulticast mode [ 141.506327][ T9283] xt_CT: No such helper "snmp_trap" [ 141.554400][ T9266] SELinux: ebitmap: truncated map [ 141.866130][ T9300] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.341831][ T9325] loop3: detected capacity change from 0 to 2048 [ 142.402303][ T9325] loop3: p1 < > p4 [ 142.410144][ T9325] loop3: p4 size 8388608 extends beyond EOD, truncated [ 142.424663][ T9329] loop4: detected capacity change from 0 to 512 [ 142.464344][ T9329] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.477161][ T9317] SELinux: ebitmap: truncated map [ 142.532213][ T9329] EXT4-fs (loop4): 1 truncate cleaned up [ 142.538608][ T9329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.670826][ T9335] 9pnet_fd: Insufficient options for proto=fd [ 142.936482][ T9356] can0: slcan on ttyS3. [ 142.955560][ T9353] loop1: detected capacity change from 0 to 2048 [ 143.023904][ T9353] loop1: p1 < > p4 [ 143.028622][ T9356] can0 (unregistered): slcan off ttyS3. [ 143.045337][ T9353] loop1: p4 size 8388608 extends beyond EOD, truncated [ 143.102034][ T9353] SELinux: ebitmap: truncated map [ 143.388511][ T9367] vxcan5: entered allmulticast mode [ 143.406514][ T9372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1559'. [ 143.415885][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 143.533574][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.592936][ T9382] loop4: detected capacity change from 0 to 1024 [ 143.612769][ T9382] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 143.646327][ T9382] loop4: detected capacity change from 0 to 512 [ 143.660986][ T9382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.692015][ T9382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.707006][ T9390] loop1: detected capacity change from 0 to 1024 [ 143.722212][ T9382] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.743797][ T9390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.750877][ T9382] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1561: iget: bad i_size value: 2533274857506816 [ 143.805167][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.828325][ T9390] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1566: Allocating blocks 385-513 which overlap fs metadata [ 143.849778][ T9390] EXT4-fs (loop1): pa ffff8881054ba540: logic 16, phys. 129, len 24 [ 143.857878][ T9390] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 143.886408][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.958809][ T9405] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 144.059027][ T9409] vxcan3: entered allmulticast mode [ 144.104995][ T9415] loop1: detected capacity change from 0 to 512 [ 144.117256][ T9415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.145989][ T9415] EXT4-fs (loop1): 1 truncate cleaned up [ 144.153232][ T9415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.423691][ T9419] loop4: detected capacity change from 0 to 1024 [ 144.431556][ T9419] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 144.455895][ T9419] loop4: detected capacity change from 0 to 512 [ 144.466700][ T9419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.484565][ T9419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.497409][ T9419] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.537411][ T9419] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1577: iget: bad i_size value: 2533274857506816 [ 144.572758][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.725924][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 144.725937][ T29] audit: type=1326 audit(1751049399.466:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.731840][ T9415] syz.1.1572 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 144.767502][ T29] audit: type=1326 audit(1751049399.476:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.772144][ T9415] CPU: 0 UID: 0 PID: 9415 Comm: syz.1.1572 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 144.772174][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.772187][ T9415] Call Trace: [ 144.772194][ T9415] [ 144.772202][ T9415] __dump_stack+0x1d/0x30 [ 144.772237][ T9415] dump_stack_lvl+0xe8/0x140 [ 144.772256][ T9415] dump_stack+0x15/0x1b [ 144.772274][ T9415] dump_header+0x81/0x220 [ 144.772308][ T9415] oom_kill_process+0x334/0x3f0 [ 144.772410][ T9415] out_of_memory+0x979/0xb80 [ 144.772455][ T9415] try_charge_memcg+0x5e6/0x9e0 [ 144.772483][ T9415] obj_cgroup_charge_pages+0xa6/0x150 [ 144.772515][ T9415] __memcg_kmem_charge_page+0x9f/0x170 [ 144.772596][ T9415] __alloc_frozen_pages_noprof+0x188/0x360 [ 144.772634][ T9415] alloc_pages_mpol+0xb3/0x250 [ 144.772690][ T9415] alloc_pages_noprof+0x90/0x130 [ 144.772766][ T9415] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 144.772829][ T9415] __kvmalloc_node_noprof+0x30f/0x4e0 [ 144.772858][ T9415] ? ip_set_alloc+0x1f/0x30 [ 144.772887][ T9415] ? ip_set_alloc+0x1f/0x30 [ 144.772964][ T9415] ? __kmalloc_cache_noprof+0x189/0x320 [ 144.773066][ T9415] ip_set_alloc+0x1f/0x30 [ 144.773094][ T9415] hash_netiface_create+0x282/0x740 [ 144.773126][ T9415] ? __pfx_hash_netiface_create+0x10/0x10 [ 144.773254][ T9415] ip_set_create+0x3c9/0x960 [ 144.773296][ T9415] nfnetlink_rcv_msg+0x4c6/0x590 [ 144.773411][ T9415] ? selinux_capable+0x1f9/0x270 [ 144.773443][ T9415] netlink_rcv_skb+0x120/0x220 [ 144.773475][ T9415] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 144.773570][ T9415] nfnetlink_rcv+0x16b/0x1690 [ 144.773597][ T9415] ? __kfree_skb+0x109/0x150 [ 144.773664][ T9415] ? nlmon_xmit+0x4f/0x60 [ 144.773686][ T9415] ? consume_skb+0x49/0x150 [ 144.773714][ T9415] ? nlmon_xmit+0x4f/0x60 [ 144.773794][ T9415] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 144.773828][ T9415] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 144.773860][ T9415] ? __dev_queue_xmit+0x182/0x1fb0 [ 144.773895][ T9415] ? ref_tracker_free+0x37d/0x3e0 [ 144.773987][ T9415] ? __netlink_deliver_tap+0x4dc/0x500 [ 144.774023][ T9415] netlink_unicast+0x5a1/0x670 [ 144.774056][ T9415] netlink_sendmsg+0x58b/0x6b0 [ 144.774107][ T9415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.774126][ T9415] __sock_sendmsg+0x142/0x180 [ 144.774151][ T9415] ____sys_sendmsg+0x31e/0x4e0 [ 144.774280][ T9415] ___sys_sendmsg+0x17b/0x1d0 [ 144.774324][ T9415] __x64_sys_sendmsg+0xd4/0x160 [ 144.774366][ T9415] x64_sys_call+0x2999/0x2fb0 [ 144.774469][ T9415] do_syscall_64+0xd2/0x200 [ 144.774557][ T9415] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.774584][ T9415] ? clear_bhb_loop+0x40/0x90 [ 144.774633][ T9415] ? clear_bhb_loop+0x40/0x90 [ 144.774656][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.774743][ T9415] RIP: 0033:0x7f29242ce929 [ 144.774759][ T9415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.774777][ T9415] RSP: 002b:00007f2922937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.774868][ T9415] RAX: ffffffffffffffda RBX: 00007f29244f5fa0 RCX: 00007f29242ce929 [ 144.774882][ T9415] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 144.774895][ T9415] RBP: 00007f2924350b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.774907][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.774920][ T9415] R13: 0000000000000000 R14: 00007f29244f5fa0 R15: 00007fffcc308ba8 [ 144.774938][ T9415] [ 144.774945][ T9415] memory: usage 307200kB, limit 307200kB, failcnt 232 [ 144.795922][ T29] audit: type=1326 audit(1751049399.476:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.795989][ T29] audit: type=1326 audit(1751049399.476:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.796012][ T29] audit: type=1326 audit(1751049399.476:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.796062][ T29] audit: type=1326 audit(1751049399.476:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.796082][ T29] audit: type=1326 audit(1751049399.476:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.809495][ T9415] memory+swap: usage 307820kB, limit 9007199254740988kB, failcnt 0 [ 144.809513][ T9415] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 144.809525][ T9415] Memory cgroup stats for /syz1 [ 144.822621][ T29] audit: type=1326 audit(1751049399.476:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.826080][ T9415] : [ 144.828934][ T29] audit: type=1326 audit(1751049399.476:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.936705][ T9445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1587'. [ 144.939201][ T29] audit: type=1326 audit(1751049399.476:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 144.944143][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 144.952054][ T9415] cache 4096 [ 145.384364][ T9415] rss 0 [ 145.387234][ T9415] shmem 0 [ 145.390714][ T9415] mapped_file 0 [ 145.394268][ T9415] dirty 0 [ 145.397363][ T9415] writeback 0 [ 145.400663][ T9415] workingset_refault_anon 166 [ 145.405337][ T9415] workingset_refault_file 133 [ 145.410365][ T9415] swap 634880 [ 145.413651][ T9415] swapcached 0 [ 145.417377][ T9415] pgpgin 152941 [ 145.420851][ T9415] pgpgout 152938 [ 145.424477][ T9415] pgfault 148057 [ 145.428023][ T9415] pgmajfault 122 [ 145.431699][ T9415] inactive_anon 0 [ 145.435417][ T9415] active_anon 0 [ 145.438872][ T9415] inactive_file 12288 [ 145.442866][ T9415] active_file 0 [ 145.446321][ T9415] unevictable 0 [ 145.449886][ T9415] hierarchical_memory_limit 314572800 [ 145.455334][ T9415] hierarchical_memsw_limit 9223372036854771712 [ 145.461581][ T9415] total_cache 4096 [ 145.465302][ T9415] total_rss 0 [ 145.468577][ T9415] total_shmem 0 [ 145.472076][ T9415] total_mapped_file 0 [ 145.476066][ T9415] total_dirty 0 [ 145.479606][ T9415] total_writeback 0 [ 145.483521][ T9415] total_workingset_refault_anon 166 [ 145.488842][ T9415] total_workingset_refault_file 133 [ 145.494778][ T9415] total_swap 634880 [ 145.498609][ T9415] total_swapcached 0 [ 145.502945][ T9415] total_pgpgin 152941 [ 145.507280][ T9415] total_pgpgout 152938 [ 145.511694][ T9415] total_pgfault 148057 [ 145.516169][ T9415] total_pgmajfault 122 [ 145.520431][ T9415] total_inactive_anon 0 [ 145.524576][ T9415] total_active_anon 0 [ 145.528617][ T9415] total_inactive_file 12288 [ 145.533142][ T9415] total_active_file 0 [ 145.537232][ T9415] total_unevictable 0 [ 145.541233][ T9415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1572,pid=9414,uid=0 [ 145.555920][ T9415] Memory cgroup out of memory: Killed process 9414 (syz.1.1572) total-vm:93620kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 145.596712][ T9460] vlan2: entered allmulticast mode [ 145.750751][ T9470] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 145.960194][ T9490] loop3: detected capacity change from 0 to 1024 [ 146.015320][ T9490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.061886][ T9509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1612'. [ 146.070928][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 146.116912][ T9490] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1605: Allocating blocks 385-513 which overlap fs metadata [ 146.132556][ T9512] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 146.259052][ T9490] EXT4-fs (loop3): pa ffff8881054ba460: logic 16, phys. 129, len 24 [ 146.264056][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.267251][ T9490] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 146.306330][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.370583][ T9523] loop1: detected capacity change from 0 to 8192 [ 146.418342][ T9531] xt_CT: No such helper "snmp_trap" [ 146.467053][ T9540] loop1: detected capacity change from 0 to 512 [ 146.477537][ T9540] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.529003][ T9540] EXT4-fs (loop1): 1 truncate cleaned up [ 146.540927][ T9545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1628'. [ 146.549977][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 146.564594][ T9540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.944716][ T9550] vlan2: entered allmulticast mode [ 147.476840][ T9564] loop4: detected capacity change from 0 to 8192 [ 147.489377][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.560437][ T9574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1640'. [ 147.569580][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 147.775858][ T9581] vxcan5: entered allmulticast mode [ 147.807705][ T9580] loop1: detected capacity change from 0 to 2048 [ 147.849749][ T9580] loop1: p1 < > p4 [ 147.857352][ T9580] loop1: p4 size 8388608 extends beyond EOD, truncated [ 147.902019][ T9580] SELinux: ebitmap: truncated map [ 147.907918][ T9580] sel_write_load: 7 callbacks suppressed [ 147.907930][ T9580] SELinux: failed to load policy [ 147.973500][ T9595] vlan2: entered allmulticast mode [ 148.134077][ T9613] vxcan7: entered allmulticast mode [ 148.156562][ T9618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1657'. [ 148.165791][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 148.308454][ T9620] loop3: detected capacity change from 0 to 2048 [ 148.345324][ T9637] vlan2: entered allmulticast mode [ 148.351442][ T9620] loop3: p1 < > p4 [ 148.356101][ T9620] loop3: p4 size 8388608 extends beyond EOD, truncated [ 148.420473][ T9620] SELinux: ebitmap: truncated map [ 148.438810][ T9620] SELinux: failed to load policy [ 148.698313][ T9653] vxcan5: entered allmulticast mode [ 148.698858][ T9658] loop4: detected capacity change from 0 to 1024 [ 148.738158][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1676'. [ 148.747205][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 148.757736][ T9658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.796564][ T9658] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1673: Allocating blocks 385-513 which overlap fs metadata [ 148.876668][ T9658] EXT4-fs (loop4): pa ffff8881054ba5b0: logic 16, phys. 129, len 24 [ 148.884767][ T9658] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 148.911111][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.925172][ T9669] SELinux: ebitmap: truncated map [ 148.931410][ T9669] SELinux: failed to load policy [ 149.024571][ T9694] vlan2: entered allmulticast mode [ 149.072995][ T9702] loop1: detected capacity change from 0 to 1024 [ 149.089178][ T9699] vxcan5: entered allmulticast mode [ 149.104701][ T9702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.121401][ T9702] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1691: Allocating blocks 385-513 which overlap fs metadata [ 149.154526][ T9702] EXT4-fs (loop1): pa ffff8881054ba620: logic 16, phys. 129, len 24 [ 149.162713][ T9702] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 149.175571][ T9713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1696'. [ 149.218911][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.240639][ T9724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1700'. [ 149.354185][ T9714] SELinux: ebitmap: truncated map [ 149.360701][ T9714] SELinux: failed to load policy [ 149.368035][ T9737] vlan2: entered allmulticast mode [ 149.402944][ T9739] vxcan3: entered allmulticast mode [ 149.510429][ T9752] loop2: detected capacity change from 0 to 1024 [ 149.555435][ T9752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.617939][ T9752] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1710: Allocating blocks 385-513 which overlap fs metadata [ 149.638655][ T9752] EXT4-fs (loop2): pa ffff888106a7fb60: logic 16, phys. 129, len 24 [ 149.646862][ T9752] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 149.674315][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.751147][ T9773] vlan2: entered allmulticast mode [ 149.827845][ T9770] loop2: detected capacity change from 0 to 2048 [ 149.901775][ T9770] loop2: p1 < > p4 [ 149.905834][ T9782] vxcan3: entered allmulticast mode [ 149.917902][ T9770] loop2: p4 size 8388608 extends beyond EOD, truncated [ 150.002875][ T9770] SELinux: ebitmap: truncated map [ 150.024524][ T9770] SELinux: failed to load policy [ 150.034044][ T9792] loop3: detected capacity change from 0 to 1024 [ 150.171017][ T9792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.190162][ T9792] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1727: Allocating blocks 385-513 which overlap fs metadata [ 150.207794][ T9792] EXT4-fs (loop3): pa ffff888106a7fbd0: logic 16, phys. 129, len 24 [ 150.215841][ T9792] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 150.238663][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.260838][ T9802] loop2: detected capacity change from 0 to 128 [ 150.277918][ T9802] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000004' [ 150.358088][ T9820] vlan2: entered allmulticast mode [ 150.378120][ T9817] vxcan5: entered allmulticast mode [ 150.443300][ T9831] loop3: detected capacity change from 0 to 1024 [ 150.462410][ T9834] loop4: detected capacity change from 0 to 2048 [ 150.481459][ T9831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.500806][ T9831] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1743: Allocating blocks 385-513 which overlap fs metadata [ 150.521056][ T9831] EXT4-fs (loop3): pa ffff8881054ba690: logic 16, phys. 129, len 24 [ 150.529234][ T9831] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 150.549890][ T9834] loop4: p1 < > p4 [ 150.554244][ T9834] loop4: p4 size 8388608 extends beyond EOD, truncated [ 150.562425][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.632864][ T9823] SELinux: ebitmap: truncated map [ 150.659506][ T9823] SELinux: failed to load policy [ 150.737907][ T9854] vlan2: entered allmulticast mode [ 150.924831][ T9861] vxcan5: entered allmulticast mode [ 151.181013][ T9877] loop2: detected capacity change from 0 to 2048 [ 151.205488][ T9883] vlan2: entered allmulticast mode [ 151.230038][ T9877] loop2: p1 < > p4 [ 151.234506][ T9877] loop2: p4 size 8388608 extends beyond EOD, truncated [ 151.303636][ T9877] SELinux: ebitmap: truncated map [ 151.309453][ T9877] SELinux: failed to load policy [ 151.558905][ T9897] vxcan5: entered allmulticast mode [ 151.695111][ T9910] vlan2: entered allmulticast mode [ 151.753652][ T9920] __nla_validate_parse: 10 callbacks suppressed [ 151.753669][ T9920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1780'. [ 151.768957][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 151.838767][ T9921] loop4: detected capacity change from 0 to 2048 [ 151.890116][ T9921] loop4: p1 < > p4 [ 151.896762][ T9921] loop4: p4 size 8388608 extends beyond EOD, truncated [ 151.936210][ T9914] SELinux: ebitmap: truncated map [ 151.942548][ T9914] SELinux: failed to load policy [ 152.134627][ T9932] vxcan9: entered allmulticast mode [ 152.425165][ T9949] loop4: detected capacity change from 0 to 1024 [ 152.474515][ T9954] vlan2: entered allmulticast mode [ 152.487113][ T9949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.523318][ T9949] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1791: Allocating blocks 385-513 which overlap fs metadata [ 152.601503][ T9949] EXT4-fs (loop4): pa ffff888106a7fb60: logic 16, phys. 129, len 24 [ 152.609720][ T9949] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 152.687535][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.774248][ T9960] loop3: detected capacity change from 0 to 2048 [ 152.820117][ T9960] loop3: p1 < > p4 [ 152.824426][ T9960] loop3: p4 size 8388608 extends beyond EOD, truncated [ 152.862234][ T9960] SELinux: ebitmap: truncated map [ 152.877677][ T9966] vxcan11: entered allmulticast mode [ 152.886692][ T9960] SELinux: failed to load policy [ 153.010829][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1804'. [ 153.020150][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 153.057045][ T9987] vlan2: entered allmulticast mode [ 153.178573][ T9990] loop2: detected capacity change from 0 to 1024 [ 153.215935][ T9990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.252184][ T9990] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1807: Allocating blocks 385-513 which overlap fs metadata [ 153.286907][T10000] vxcan5: entered allmulticast mode [ 153.323829][ T9990] EXT4-fs (loop2): pa ffff8881054ba690: logic 16, phys. 129, len 24 [ 153.331970][ T9990] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 153.412090][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.478283][T10007] loop4: detected capacity change from 0 to 2048 [ 153.490715][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1817'. [ 153.500140][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 153.519884][T10007] loop4: p1 < > p4 [ 153.526547][T10007] loop4: p4 size 8388608 extends beyond EOD, truncated [ 153.585000][T10018] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1815'. [ 153.624381][T10007] SELinux: ebitmap: truncated map [ 153.640180][T10007] SELinux: failed to load policy [ 154.067477][T10037] vxcan5: entered allmulticast mode [ 154.122182][T10040] vlan2: entered allmulticast mode [ 154.240192][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1828'. [ 154.453523][T10051] loop2: detected capacity change from 0 to 2048 [ 154.489717][T10071] vxcan5: entered allmulticast mode [ 154.501881][T10075] vlan2: entered allmulticast mode [ 154.520224][T10051] loop2: p1 < > p4 [ 154.526208][T10051] loop2: p4 size 8388608 extends beyond EOD, truncated [ 154.577028][T10051] SELinux: ebitmap: truncated map [ 154.585012][T10051] SELinux: failed to load policy [ 154.667212][T10091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1846'. [ 154.676303][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 154.807101][T10103] vxcan3: entered allmulticast mode [ 154.817744][T10110] vlan2: entered allmulticast mode [ 155.031132][T10117] loop2: detected capacity change from 0 to 2048 [ 155.092682][T10117] loop2: p1 < > p4 [ 155.097631][T10117] loop2: p4 size 8388608 extends beyond EOD, truncated [ 155.141831][T10117] SELinux: ebitmap: truncated map [ 155.148383][T10117] SELinux: failed to load policy [ 155.319866][T10139] vxcan5: entered allmulticast mode [ 155.437220][T10149] vlan2: entered allmulticast mode [ 155.832591][T10173] vxcan5: entered allmulticast mode [ 155.844935][T10163] loop1: detected capacity change from 0 to 2048 [ 155.890057][T10163] loop1: p1 < > p4 [ 155.894383][T10163] loop1: p4 size 8388608 extends beyond EOD, truncated [ 155.912251][T10186] vlan2: entered allmulticast mode [ 155.928158][T10163] SELinux: ebitmap: truncated map [ 155.934523][T10163] SELinux: failed to load policy [ 156.175719][T10217] vxcan3: entered allmulticast mode [ 156.249650][T10213] loop2: detected capacity change from 0 to 2048 [ 156.300018][T10213] loop2: p1 < > p4 [ 156.305600][T10213] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.466958][T10213] SELinux: ebitmap: truncated map [ 156.474317][T10213] SELinux: failed to load policy [ 156.519890][T10227] vlan2: entered allmulticast mode [ 156.825826][T10251] vxcan5: entered allmulticast mode [ 156.929881][T10257] vlan2: entered allmulticast mode [ 157.036502][T10249] SELinux: ebitmap: truncated map [ 157.045576][T10249] SELinux: failed to load policy [ 157.104649][T10275] __nla_validate_parse: 10 callbacks suppressed [ 157.104666][T10275] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1924'. [ 157.145622][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1928'. [ 157.154787][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 157.255723][T10286] vxcan13: entered allmulticast mode [ 157.333597][T10307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1937'. [ 157.342632][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'. [ 157.600732][T10324] loop2: detected capacity change from 0 to 1024 [ 157.608991][T10324] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 157.640310][T10328] vxcan5: entered allmulticast mode [ 157.804010][T10324] loop2: detected capacity change from 0 to 512 [ 157.815113][T10324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.060355][T10324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.064768][T10299] syz.0.1933 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 158.087012][T10299] CPU: 1 UID: 0 PID: 10299 Comm: syz.0.1933 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 158.087067][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.087078][T10299] Call Trace: [ 158.087091][T10299] [ 158.087099][T10299] __dump_stack+0x1d/0x30 [ 158.087122][T10299] dump_stack_lvl+0xe8/0x140 [ 158.087143][T10299] dump_stack+0x15/0x1b [ 158.087161][T10299] dump_header+0x81/0x220 [ 158.087217][T10299] oom_kill_process+0x334/0x3f0 [ 158.087248][T10299] out_of_memory+0x979/0xb80 [ 158.087284][T10299] try_charge_memcg+0x5e6/0x9e0 [ 158.087311][T10299] obj_cgroup_charge_pages+0xa6/0x150 [ 158.087343][T10299] __memcg_kmem_charge_page+0x9f/0x170 [ 158.087445][T10299] __alloc_frozen_pages_noprof+0x188/0x360 [ 158.087550][T10299] alloc_pages_mpol+0xb3/0x250 [ 158.087580][T10299] alloc_pages_noprof+0x90/0x130 [ 158.087629][T10299] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 158.087667][T10299] __kvmalloc_node_noprof+0x30f/0x4e0 [ 158.087773][T10299] ? ip_set_alloc+0x1f/0x30 [ 158.087800][T10299] ? ip_set_alloc+0x1f/0x30 [ 158.087859][T10299] ? __kmalloc_cache_noprof+0x189/0x320 [ 158.087885][T10299] ip_set_alloc+0x1f/0x30 [ 158.087915][T10299] hash_netiface_create+0x282/0x740 [ 158.087948][T10299] ? __pfx_hash_netiface_create+0x10/0x10 [ 158.088040][T10299] ip_set_create+0x3c9/0x960 [ 158.088073][T10299] ? __nla_parse+0x40/0x60 [ 158.088120][T10299] nfnetlink_rcv_msg+0x4c6/0x590 [ 158.088220][T10299] ? selinux_capable+0x1f9/0x270 [ 158.088251][T10299] netlink_rcv_skb+0x120/0x220 [ 158.088293][T10299] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 158.088374][T10299] nfnetlink_rcv+0x16b/0x1690 [ 158.088430][T10299] ? __kfree_skb+0x109/0x150 [ 158.088455][T10299] ? nlmon_xmit+0x4f/0x60 [ 158.088473][T10299] ? consume_skb+0x49/0x150 [ 158.088498][T10299] ? nlmon_xmit+0x4f/0x60 [ 158.088550][T10299] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 158.088642][T10299] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 158.088749][T10299] ? __dev_queue_xmit+0x182/0x1fb0 [ 158.088841][T10299] ? ref_tracker_free+0x37d/0x3e0 [ 158.088875][T10299] ? __netlink_deliver_tap+0x4dc/0x500 [ 158.088907][T10299] netlink_unicast+0x5a1/0x670 [ 158.088945][T10299] netlink_sendmsg+0x58b/0x6b0 [ 158.088968][T10299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.088987][T10299] __sock_sendmsg+0x142/0x180 [ 158.089014][T10299] ____sys_sendmsg+0x31e/0x4e0 [ 158.089066][T10299] ___sys_sendmsg+0x17b/0x1d0 [ 158.089112][T10299] __x64_sys_sendmsg+0xd4/0x160 [ 158.089155][T10299] x64_sys_call+0x2999/0x2fb0 [ 158.089176][T10299] do_syscall_64+0xd2/0x200 [ 158.089193][T10299] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.089216][T10299] ? clear_bhb_loop+0x40/0x90 [ 158.089321][T10299] ? clear_bhb_loop+0x40/0x90 [ 158.089418][T10299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.089436][T10299] RIP: 0033:0x7f6580b7e929 [ 158.089453][T10299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.089479][T10299] RSP: 002b:00007f657f1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.089498][T10299] RAX: ffffffffffffffda RBX: 00007f6580da5fa0 RCX: 00007f6580b7e929 [ 158.089512][T10299] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 158.089524][T10299] RBP: 00007f6580c00b39 R08: 0000000000000000 R09: 0000000000000000 [ 158.089536][T10299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.089547][T10299] R13: 0000000000000000 R14: 00007f6580da5fa0 R15: 00007fffca4ac8c8 [ 158.089589][T10299] [ 158.105657][T10324] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.112222][T10299] memory: usage 307200kB, limit 307200kB, failcnt 298 [ 158.120187][T10339] loop3: detected capacity change from 0 to 1024 [ 158.122955][T10299] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 158.177762][T10324] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.1944: iget: bad i_size value: 2533274857506816 [ 158.433605][T10339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.440260][T10299] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 158.440278][T10299] Memory cgroup stats for /syz0: [ 158.442966][T10299] cache 0 [ 158.461420][T10339] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.466892][T10299] rss 0 [ 158.499442][T10339] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: comm syz.3.1948: lblock 0 mapped to illegal pblock 0 (length 5) [ 158.499604][T10339] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 158.506758][T10299] shmem 0 [ 158.506768][T10299] mapped_file 0 [ 158.506796][T10299] dirty 0 [ 158.506805][T10299] writeback 0 [ 158.506811][T10299] workingset_refault_anon 318 [ 158.511828][T10339] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.511828][T10339] [ 158.514941][T10299] workingset_refault_file 1428 [ 158.514952][T10299] swap 176128 [ 158.514958][T10299] swapcached 8192 [ 158.593385][T10299] pgpgin 388598 [ 158.596872][T10299] pgpgout 388596 [ 158.600470][T10299] pgfault 134484 [ 158.604008][T10299] pgmajfault 192 [ 158.607548][T10299] inactive_anon 8192 [ 158.611491][T10299] active_anon 0 [ 158.614994][T10299] inactive_file 0 [ 158.618613][T10299] active_file 0 [ 158.622083][T10299] unevictable 0 [ 158.625573][T10299] hierarchical_memory_limit 314572800 [ 158.631009][T10299] hierarchical_memsw_limit 9223372036854771712 [ 158.637907][T10299] total_cache 0 [ 158.641489][T10299] total_rss 0 [ 158.644767][T10299] total_shmem 0 [ 158.648338][T10299] total_mapped_file 0 [ 158.652407][T10299] total_dirty 0 [ 158.655970][T10299] total_writeback 0 [ 158.659801][T10299] total_workingset_refault_anon 318 [ 158.665057][T10299] total_workingset_refault_file 1428 [ 158.670504][T10299] total_swap 176128 [ 158.674472][T10299] total_swapcached 8192 [ 158.678757][T10299] total_pgpgin 388598 [ 158.682771][T10299] total_pgpgout 388596 [ 158.686829][T10299] total_pgfault 134484 [ 158.690916][T10299] total_pgmajfault 192 [ 158.695021][T10299] total_inactive_anon 8192 [ 158.699452][T10299] total_active_anon 0 [ 158.703481][T10299] total_inactive_file 0 [ 158.707825][T10299] total_active_file 0 [ 158.711819][T10299] total_unevictable 0 [ 158.715926][T10299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1933,pid=10296,uid=0 [ 158.730698][T10299] Memory cgroup out of memory: Killed process 10296 (syz.0.1933) total-vm:93620kB, anon-rss:1064kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 158.796316][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.800178][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 158.839193][T10350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1951'. [ 158.848244][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 158.893012][T10356] loop4: detected capacity change from 0 to 1024 [ 158.914681][T10356] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 158.932847][T10356] loop4: detected capacity change from 0 to 512 [ 158.940667][T10356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.000350][T10356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.045361][T10363] vxcan5: entered allmulticast mode [ 159.077565][T10356] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.145234][T10356] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1955: iget: bad i_size value: 2533274857506816 [ 159.185924][T10373] loop1: detected capacity change from 0 to 512 [ 159.199640][T10373] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.212640][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.224423][T10373] EXT4-fs (loop1): 1 truncate cleaned up [ 159.230602][T10373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.265494][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1964'. [ 159.274631][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 159.325173][T10384] loop4: detected capacity change from 0 to 512 [ 159.351386][T10384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.437831][T10384] EXT4-fs (loop4): 1 truncate cleaned up [ 159.444208][T10384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.739846][T10402] vxcan3: entered allmulticast mode [ 160.150619][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.159810][T10412] vlan2: entered allmulticast mode [ 160.170908][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.274359][T10429] loop3: detected capacity change from 0 to 8192 [ 160.296367][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 160.296382][ T29] audit: type=1326 audit(1751049415.036:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 160.326361][ T29] audit: type=1326 audit(1751049415.036:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fade540d290 code=0x7ffc0000 [ 160.350100][T10421] loop2: detected capacity change from 0 to 2048 [ 160.356730][ T29] audit: type=1326 audit(1751049415.036:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fade5410157 code=0x7ffc0000 [ 160.382085][ T29] audit: type=1326 audit(1751049415.036:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 160.406742][ T29] audit: type=1326 audit(1751049415.036:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fade5410157 code=0x7ffc0000 [ 160.430538][ T29] audit: type=1326 audit(1751049415.036:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fade540d58a code=0x7ffc0000 [ 160.454475][ T29] audit: type=1326 audit(1751049415.036:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 160.477974][ T29] audit: type=1326 audit(1751049415.036:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fade54107bc code=0x7ffc0000 [ 160.501651][ T29] audit: type=1326 audit(1751049415.036:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fade54106f4 code=0x7ffc0000 [ 160.525521][ T29] audit: type=1326 audit(1751049415.036:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fade54106f4 code=0x7ffc0000 [ 160.585646][T10437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1986'. [ 160.604269][T10421] loop2: p1 < > p4 [ 160.604630][T10441] loop1: detected capacity change from 0 to 1024 [ 160.610708][T10421] loop2: p4 size 8388608 extends beyond EOD, truncated [ 160.754626][T10441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.893890][T10456] vlan2: entered allmulticast mode [ 160.894534][T10441] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1987: Allocating blocks 385-513 which overlap fs metadata [ 161.144552][T10466] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 161.199628][T10441] EXT4-fs (loop1): pa ffff8881054ba690: logic 16, phys. 129, len 24 [ 161.207703][T10441] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 161.332511][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.617719][T10487] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 161.632971][T10487] SELinux: failed to load policy [ 161.660110][T10483] loop1: detected capacity change from 0 to 2048 [ 161.720029][T10483] loop1: p1 < > p4 [ 161.724835][T10483] loop1: p4 size 8388608 extends beyond EOD, truncated [ 161.737359][T10483] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 161.748239][T10483] SELinux: failed to load policy [ 161.974112][T10506] loop2: detected capacity change from 0 to 8192 [ 162.189206][T10522] netlink: 'syz.4.2015': attribute type 1 has an invalid length. [ 162.266815][T10524] loop2: detected capacity change from 0 to 2048 [ 162.387588][T10524] loop2: p1 < > p4 [ 162.392448][T10524] loop2: p4 size 8388608 extends beyond EOD, truncated [ 162.415387][T10524] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 162.436060][T10524] SELinux: failed to load policy [ 162.519174][T10536] loop2: detected capacity change from 0 to 1024 [ 162.543315][T10536] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 162.579161][T10536] loop2: detected capacity change from 0 to 512 [ 162.631605][T10536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.640253][T10532] loop4: detected capacity change from 0 to 8192 [ 162.699697][T10536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.718556][T10536] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.740743][T10536] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.2025: iget: bad i_size value: 2533274857506816 [ 162.781563][T10541] loop3: detected capacity change from 0 to 8192 [ 162.782212][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.863880][T10555] vlan2: entered allmulticast mode [ 162.934262][T10561] vxcan15: entered allmulticast mode [ 162.963275][T10568] __nla_validate_parse: 7 callbacks suppressed [ 162.963289][T10568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2037'. [ 162.978786][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 163.011131][T10572] loop4: detected capacity change from 0 to 1024 [ 163.013464][T10566] netlink: 'syz.2.2032': attribute type 1 has an invalid length. [ 163.017915][T10572] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 163.048780][T10570] SELinux: failed to load policy [ 163.062725][T10572] loop4: detected capacity change from 0 to 512 [ 163.069522][T10572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.081900][T10572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.094682][T10572] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.115208][T10572] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.2039: iget: bad i_size value: 2533274857506816 [ 163.158164][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.176997][T10583] loop1: detected capacity change from 0 to 8192 [ 163.187435][T10585] loop4: detected capacity change from 0 to 1024 [ 163.200781][T10585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.213109][T10585] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.240230][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.284486][T10591] loop1: detected capacity change from 0 to 8192 [ 163.293859][T10595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2048'. [ 163.302907][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 163.361101][T10597] vlan2: entered allmulticast mode [ 163.473344][T10600] vxcan5: entered allmulticast mode [ 163.635280][T10610] SELinux: failed to load policy [ 163.939458][T10635] loop2: detected capacity change from 0 to 1024 [ 163.970631][T10635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.001135][T10635] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.041063][T10644] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 164.066522][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.107368][T10646] loop3: detected capacity change from 0 to 512 [ 164.114283][T10646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.125680][T10646] EXT4-fs (loop3): 1 truncate cleaned up [ 164.134874][T10646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.181298][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.260467][T10655] SELinux: failed to load policy [ 164.347466][T10666] loop3: detected capacity change from 0 to 2048 [ 164.380070][T10672] loop2: detected capacity change from 0 to 1024 [ 164.390977][T10666] loop3: p1 < > p4 [ 164.395662][T10666] loop3: p4 size 8388608 extends beyond EOD, truncated [ 164.402774][T10669] loop4: detected capacity change from 0 to 8192 [ 164.405156][T10672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.423034][T10672] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.456598][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.496631][T10676] loop4: detected capacity change from 0 to 512 [ 164.505938][T10676] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.522506][T10676] EXT4-fs (loop4): 1 truncate cleaned up [ 164.528629][T10676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.557208][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.562877][T10680] SELinux: failed to load policy [ 164.621069][T10694] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2090'. [ 164.630197][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 164.640317][T10690] loop4: detected capacity change from 0 to 8192 [ 164.760299][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 164.835676][T10708] vxcan5: entered allmulticast mode [ 164.891510][T10701] loop4: detected capacity change from 0 to 2048 [ 164.931672][T10701] loop4: p1 < > p4 [ 164.948505][T10701] loop4: p4 size 8388608 extends beyond EOD, truncated [ 165.130056][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 165.158946][T10729] SELinux: failed to load policy [ 165.325102][T10754] vlan2: entered allmulticast mode [ 165.333398][T10755] netlink: 'syz.0.2109': attribute type 1 has an invalid length. [ 165.351914][T10746] loop1: detected capacity change from 0 to 8192 [ 165.375140][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 165.375165][ T29] audit: type=1326 audit(1751049420.116:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29242ce929 code=0x7ffc0000 [ 165.454300][T10757] loop4: detected capacity change from 0 to 8192 [ 165.460879][ T29] audit: type=1326 audit(1751049420.116:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29242cd290 code=0x7ffc0000 [ 165.463830][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 165.485299][ T29] audit: type=1326 audit(1751049420.116:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f29242d0157 code=0x7ffc0000 [ 165.518477][ T29] audit: type=1326 audit(1751049420.116:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29242ce929 code=0x7ffc0000 [ 165.524583][T10761] loop1: detected capacity change from 0 to 1024 [ 165.542103][ T29] audit: type=1326 audit(1751049420.116:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f29242d0157 code=0x7ffc0000 [ 165.542130][ T29] audit: type=1326 audit(1751049420.116:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29242cd58a code=0x7ffc0000 [ 165.542161][ T29] audit: type=1326 audit(1751049420.116:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29242ce929 code=0x7ffc0000 [ 165.621617][ T29] audit: type=1326 audit(1751049420.116:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f29242d07bc code=0x7ffc0000 [ 165.645632][ T29] audit: type=1326 audit(1751049420.116:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f29242d06f4 code=0x7ffc0000 [ 165.669134][ T29] audit: type=1326 audit(1751049420.116:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f29242d06f4 code=0x7ffc0000 [ 165.702340][T10761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.736446][T10761] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.787236][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.948273][T10776] vlan2: entered allmulticast mode [ 166.050416][T10784] loop2: detected capacity change from 0 to 8192 [ 166.076721][T10786] vxcan5: entered allmulticast mode [ 166.086408][T10788] loop1: detected capacity change from 0 to 512 [ 166.096168][T10788] journal_path: Non-blockdev passed as './bus' [ 166.102476][T10788] EXT4-fs: error: could not find journal device path [ 166.126383][T10789] xt_CT: No such helper "snmp_trap" [ 166.287603][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 166.478319][T10798] loop2: detected capacity change from 0 to 8192 [ 166.705177][T10815] loop1: detected capacity change from 0 to 512 [ 166.719770][T10815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.788017][T10815] EXT4-fs (loop1): 1 truncate cleaned up [ 166.840629][T10828] SELinux: ebitmap: truncated map [ 166.859407][T10828] SELinux: failed to load policy [ 166.869018][T10815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.926177][T10825] loop2: detected capacity change from 0 to 8192 [ 166.999924][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.106734][T10832] loop1: detected capacity change from 0 to 1024 [ 167.149804][T10832] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 167.190322][T10832] loop1: detected capacity change from 0 to 512 [ 167.196980][T10832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.240596][T10832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.259452][T10832] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.279391][T10840] SELinux: failed to load policy [ 167.292988][T10832] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.2147: iget: bad i_size value: 2533274857506816 [ 167.432897][T10855] loop2: detected capacity change from 0 to 512 [ 167.451296][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.455137][T10855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.477342][T10855] EXT4-fs (loop2): 1 truncate cleaned up [ 167.484406][T10855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.524522][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.568609][T10860] vlan2: entered allmulticast mode [ 167.584613][T10868] vlan2: entered allmulticast mode [ 167.685766][T10874] vlan2: entered allmulticast mode [ 167.716618][T10878] loop4: detected capacity change from 0 to 512 [ 167.724071][T10878] journal_path: Non-blockdev passed as './bus' [ 167.730828][T10878] EXT4-fs: error: could not find journal device path [ 168.628351][T10885] vlan2: entered allmulticast mode [ 168.719955][T10895] loop1: detected capacity change from 0 to 512 [ 168.739374][T10895] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.772844][T10894] loop2: detected capacity change from 0 to 8192 [ 168.827537][T10895] EXT4-fs (loop1): 1 truncate cleaned up [ 168.838020][T10895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.872470][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.965628][T10917] FAULT_INJECTION: forcing a failure. [ 168.965628][T10917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.978777][T10917] CPU: 1 UID: 0 PID: 10917 Comm: syz.2.2176 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 168.978806][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.978817][T10917] Call Trace: [ 168.978823][T10917] [ 168.978891][T10917] __dump_stack+0x1d/0x30 [ 168.978912][T10917] dump_stack_lvl+0xe8/0x140 [ 168.978933][T10917] dump_stack+0x15/0x1b [ 168.978975][T10917] should_fail_ex+0x265/0x280 [ 168.979001][T10917] should_fail+0xb/0x20 [ 168.979030][T10917] should_fail_usercopy+0x1a/0x20 [ 168.979104][T10917] _copy_from_user+0x1c/0xb0 [ 168.979179][T10917] io_unregister_pbuf_ring+0x4a/0x170 [ 168.979280][T10917] __se_sys_io_uring_register+0xbf5/0xeb0 [ 168.979376][T10917] ? fput+0x8f/0xc0 [ 168.979401][T10917] ? ksys_write+0x192/0x1a0 [ 168.979426][T10917] __x64_sys_io_uring_register+0x55/0x70 [ 168.979462][T10917] x64_sys_call+0xc91/0x2fb0 [ 168.979484][T10917] do_syscall_64+0xd2/0x200 [ 168.979532][T10917] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.979559][T10917] ? clear_bhb_loop+0x40/0x90 [ 168.979630][T10917] ? clear_bhb_loop+0x40/0x90 [ 168.979653][T10917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.979674][T10917] RIP: 0033:0x7faa6200e929 [ 168.979699][T10917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.979714][T10917] RSP: 002b:00007faa604c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 168.979763][T10917] RAX: ffffffffffffffda RBX: 00007faa62236080 RCX: 00007faa6200e929 [ 168.979776][T10917] RDX: 0000200000000f40 RSI: 0000000000000017 RDI: 0000000000000006 [ 168.979789][T10917] RBP: 00007faa604c5090 R08: 0000000000000000 R09: 0000000000000000 [ 168.979802][T10917] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 168.979815][T10917] R13: 0000000000000001 R14: 00007faa62236080 R15: 00007ffe50145c78 [ 168.979834][T10917] [ 169.213405][T10916] loop1: detected capacity change from 0 to 8192 [ 169.275639][T10928] vxcan5: entered allmulticast mode [ 169.319321][T10931] xt_CT: No such helper "snmp_trap" [ 169.350374][T10935] vlan2: entered allmulticast mode [ 169.370513][T10921] SELinux: ebitmap: truncated map [ 169.378906][T10921] SELinux: failed to load policy [ 169.385393][T10937] __nla_validate_parse: 2 callbacks suppressed [ 169.385405][T10937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2188'. [ 169.401361][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 169.508120][T10944] loop2: detected capacity change from 0 to 8192 [ 169.844316][T10962] netlink: 'syz.0.2196': attribute type 1 has an invalid length. [ 169.978679][T10961] loop2: detected capacity change from 0 to 8192 [ 170.115471][T10965] loop4: detected capacity change from 0 to 8192 [ 170.186501][T10970] vxcan5: entered allmulticast mode [ 170.265479][T10974] vlan2: entered allmulticast mode [ 170.305678][T10967] SELinux: ebitmap: truncated map [ 170.325129][T10967] SELinux: failed to load policy [ 170.497102][T10980] loop2: detected capacity change from 0 to 8192 [ 170.520878][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 170.520890][ T29] audit: type=1326 audit(1751049425.266:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 170.624062][ T29] audit: type=1326 audit(1751049425.296:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa6200d290 code=0x7ffc0000 [ 170.647669][ T29] audit: type=1326 audit(1751049425.296:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7faa62010157 code=0x7ffc0000 [ 170.671273][ T29] audit: type=1326 audit(1751049425.296:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 170.694808][ T29] audit: type=1326 audit(1751049425.296:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7faa62010157 code=0x7ffc0000 [ 170.718443][ T29] audit: type=1326 audit(1751049425.296:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faa6200d58a code=0x7ffc0000 [ 170.741989][ T29] audit: type=1326 audit(1751049425.296:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 170.765487][ T29] audit: type=1326 audit(1751049425.296:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 170.885481][ T29] audit: type=1326 audit(1751049425.596:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7faa620107bc code=0x7ffc0000 [ 170.909068][ T29] audit: type=1326 audit(1751049425.596:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7faa620106f4 code=0x7ffc0000 [ 170.914505][T10992] can0: slcan on ttyS3. [ 170.965459][T10996] loop4: detected capacity change from 0 to 512 [ 170.982226][T10996] journal_path: Non-blockdev passed as './bus' [ 170.988495][T10996] EXT4-fs: error: could not find journal device path [ 171.069902][T10998] can0 (unregistered): slcan off ttyS3. [ 171.088436][T11007] vlan2: entered allmulticast mode [ 171.126250][T11001] loop1: detected capacity change from 0 to 2048 [ 171.128866][T11004] vxcan5: entered allmulticast mode [ 171.159955][T11001] loop1: p1 < > p4 [ 171.164284][T11001] loop1: p4 size 8388608 extends beyond EOD, truncated [ 171.165344][T11010] loop4: detected capacity change from 0 to 512 [ 171.184286][T11010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.200776][T11001] SELinux: ebitmap: truncated map [ 171.206346][T11010] EXT4-fs (loop4): 1 truncate cleaned up [ 171.216739][T11010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.235643][T11001] SELinux: failed to load policy [ 171.450111][T11023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2221'. [ 171.459160][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 171.583282][T11026] xt_CT: No such helper "snmp_trap" [ 171.684086][T11033] loop1: detected capacity change from 0 to 8192 [ 172.227607][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.395599][T11044] vxcan17: entered allmulticast mode [ 172.833279][T11058] loop4: detected capacity change from 0 to 8192 [ 172.934834][T11066] loop4: detected capacity change from 0 to 1024 [ 172.959552][T11066] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 172.984535][T11066] loop4: detected capacity change from 0 to 512 [ 172.991466][T11066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.004762][T11072] loop2: detected capacity change from 0 to 512 [ 173.011806][T11072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.012459][T11066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.036140][T11072] EXT4-fs (loop2): 1 truncate cleaned up [ 173.050506][T11066] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.065552][T11072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.080999][T11076] SELinux: ebitmap: truncated map [ 173.086650][T11076] SELinux: failed to load policy [ 173.114513][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.148403][T11066] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.2234: iget: bad i_size value: 2533274857506816 [ 173.188713][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.210625][T11081] loop3: detected capacity change from 0 to 512 [ 173.223002][T11081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.234952][T11081] EXT4-fs (loop3): 1 truncate cleaned up [ 173.242565][T11081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.398680][T11091] loop4: detected capacity change from 0 to 8192 [ 173.412326][T11089] loop2: detected capacity change from 0 to 8192 [ 173.500421][T11100] loop1: detected capacity change from 0 to 512 [ 173.507101][T11100] journal_path: Non-blockdev passed as './bus' [ 173.513312][T11100] EXT4-fs: error: could not find journal device path [ 173.573647][T11110] loop1: detected capacity change from 0 to 1024 [ 173.580479][T11110] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 173.593685][T11110] loop1: detected capacity change from 0 to 512 [ 173.600493][T11110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.610266][T11111] loop2: detected capacity change from 0 to 512 [ 173.650222][T11111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.668635][T11111] EXT4-fs (loop2): 1 truncate cleaned up [ 173.681684][T11110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.700039][T11111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.756088][T11110] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.906655][T11110] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.2253: iget: bad i_size value: 2533274857506816 [ 174.097939][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.128268][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 174.147822][T11119] SELinux: ebitmap: truncated map [ 174.155204][T11119] SELinux: failed to load policy [ 174.301606][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.319676][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.335809][T11136] loop1: detected capacity change from 0 to 8192 [ 174.396683][T11142] loop3: detected capacity change from 0 to 8192 [ 174.436671][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 174.546005][T11163] loop2: detected capacity change from 0 to 2048 [ 174.550190][T11160] loop1: detected capacity change from 0 to 512 [ 174.563697][T11160] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.578339][T11165] loop3: detected capacity change from 0 to 512 [ 174.585516][T11165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.585816][T11160] EXT4-fs (loop1): 1 truncate cleaned up [ 174.601611][T11163] loop2: p1 < > p4 [ 174.606729][T11160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.619197][T11163] loop2: p4 size 8388608 extends beyond EOD, truncated [ 174.622185][T11165] EXT4-fs (loop3): 1 truncate cleaned up [ 174.655621][T11165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.672693][T11150] SELinux: ebitmap: truncated map [ 174.679066][T11150] SELinux: failed to load policy [ 174.682186][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.717309][T11171] loop2: detected capacity change from 0 to 512 [ 174.749719][T11171] journal_path: Non-blockdev passed as './bus' [ 174.755961][T11171] EXT4-fs: error: could not find journal device path [ 174.798445][T11174] xt_CT: No such helper "snmp_trap" [ 175.264782][T11179] loop2: detected capacity change from 0 to 8192 [ 175.392327][T11189] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2280'. [ 175.520136][T11193] loop2: detected capacity change from 0 to 8192 [ 175.533057][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 175.533072][ T29] audit: type=1326 audit(1751049430.276:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.579233][ T29] audit: type=1326 audit(1751049430.276:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.603534][ T29] audit: type=1326 audit(1751049430.276:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.627222][ T29] audit: type=1326 audit(1751049430.276:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.651019][ T29] audit: type=1326 audit(1751049430.276:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.666018][T11202] loop4: detected capacity change from 0 to 2048 [ 175.674607][ T29] audit: type=1326 audit(1751049430.276:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.704504][ T29] audit: type=1326 audit(1751049430.276:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.728120][ T29] audit: type=1326 audit(1751049430.276:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.751573][ T29] audit: type=1326 audit(1751049430.276:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6200e929 code=0x7ffc0000 [ 175.798731][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.840388][T11202] loop4: p1 < > p4 [ 175.854315][T11202] loop4: p4 size 8388608 extends beyond EOD, truncated [ 175.899844][T11204] loop2: detected capacity change from 0 to 2048 [ 175.974602][T11204] loop2: p1 < > p4 [ 175.978720][T11221] loop3: detected capacity change from 0 to 8192 [ 175.988741][T11204] loop2: p4 size 8388608 extends beyond EOD, truncated [ 175.992404][ T29] audit: type=1326 audit(1751049430.726:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 176.002401][T11199] SELinux: ebitmap: truncated map [ 176.028539][T11199] SELinux: failed to load policy [ 176.041451][T11204] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 176.055651][T11204] SELinux: failed to load policy [ 176.101158][T11223] xt_CT: No such helper "snmp_trap" [ 176.202587][T11229] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2294'. [ 176.366484][T11244] loop2: detected capacity change from 0 to 512 [ 176.373265][T11244] journal_path: Non-blockdev passed as './bus' [ 176.379471][T11244] EXT4-fs: error: could not find journal device path [ 176.393169][T11245] loop3: detected capacity change from 0 to 512 [ 176.434039][T11245] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.450535][T11245] EXT4-fs (loop3): 1 truncate cleaned up [ 176.456609][T11245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.479443][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.625012][T11260] netlink: 'syz.2.2304': attribute type 1 has an invalid length. [ 176.738483][T11253] loop3: detected capacity change from 0 to 2048 [ 176.880598][T11253] loop3: p1 < > p4 [ 176.889174][T11253] loop3: p4 size 8388608 extends beyond EOD, truncated [ 176.898193][T11263] loop1: detected capacity change from 0 to 8192 [ 176.932456][T11253] SELinux: ebitmap: truncated map [ 176.938898][T11253] SELinux: failed to load policy [ 177.028133][T11278] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2312'. [ 177.086238][T11284] loop1: detected capacity change from 0 to 512 [ 177.096495][T11284] journal_path: Non-blockdev passed as './bus' [ 177.097706][T11267] SELinux: ebitmap: truncated map [ 177.102774][T11284] EXT4-fs: error: could not find journal device path [ 177.108794][T11267] SELinux: failed to load policy [ 177.267578][T11288] loop3: detected capacity change from 0 to 8192 [ 177.288523][T11296] loop4: detected capacity change from 0 to 8192 [ 177.311766][T11295] loop1: detected capacity change from 0 to 2048 [ 177.369899][T11295] loop1: p1 < > p4 [ 177.374453][T11295] loop1: p4 size 8388608 extends beyond EOD, truncated [ 177.427584][T11306] can0: slcan on ttyS3. [ 177.499483][T11306] can0 (unregistered): slcan off ttyS3. [ 177.560437][T11307] xt_CT: No such helper "snmp_trap" [ 177.581108][T11315] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 177.609317][T11295] SELinux: ebitmap: truncated map [ 177.615614][T11295] SELinux: failed to load policy [ 177.668677][T11317] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2326'. [ 177.909374][T11323] loop1: detected capacity change from 0 to 512 [ 177.923610][T11323] journal_path: Non-blockdev passed as './bus' [ 177.929907][T11323] EXT4-fs: error: could not find journal device path [ 177.995958][T11329] loop1: detected capacity change from 0 to 512 [ 178.005099][T11328] loop2: detected capacity change from 0 to 512 [ 178.019994][T11329] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.030359][T11328] journal_path: Non-blockdev passed as './bus' [ 178.036530][T11328] EXT4-fs: error: could not find journal device path [ 178.073799][T11329] EXT4-fs (loop1): 1 truncate cleaned up [ 178.081018][T11329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.292783][T11345] loop4: detected capacity change from 0 to 512 [ 178.316965][T11345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.356472][T11345] EXT4-fs (loop4): 1 truncate cleaned up [ 178.369634][T11345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.412935][T11349] loop3: detected capacity change from 0 to 2048 [ 178.479779][T11349] loop3: p1 < > p4 [ 178.484819][T11349] loop3: p4 size 8388608 extends beyond EOD, truncated [ 178.633651][T11349] SELinux: ebitmap: truncated map [ 178.639814][T11349] SELinux: failed to load policy [ 178.928252][T11329] syz.1.2331 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 178.942472][T11329] CPU: 1 UID: 0 PID: 11329 Comm: syz.1.2331 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 178.942499][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.942511][T11329] Call Trace: [ 178.942517][T11329] [ 178.942525][T11329] __dump_stack+0x1d/0x30 [ 178.942551][T11329] dump_stack_lvl+0xe8/0x140 [ 178.942572][T11329] dump_stack+0x15/0x1b [ 178.942590][T11329] dump_header+0x81/0x220 [ 178.942623][T11329] oom_kill_process+0x334/0x3f0 [ 178.942733][T11329] out_of_memory+0x979/0xb80 [ 178.942761][T11329] try_charge_memcg+0x5e6/0x9e0 [ 178.942786][T11329] obj_cgroup_charge_pages+0xa6/0x150 [ 178.942813][T11329] __memcg_kmem_charge_page+0x9f/0x170 [ 178.942873][T11329] __alloc_frozen_pages_noprof+0x188/0x360 [ 178.942938][T11329] alloc_pages_mpol+0xb3/0x250 [ 178.942970][T11329] alloc_pages_noprof+0x90/0x130 [ 178.943029][T11329] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 178.943068][T11329] __kvmalloc_node_noprof+0x30f/0x4e0 [ 178.943103][T11329] ? ip_set_alloc+0x1f/0x30 [ 178.943156][T11329] ? ip_set_alloc+0x1f/0x30 [ 178.943181][T11329] ? __kmalloc_cache_noprof+0x189/0x320 [ 178.943261][T11329] ip_set_alloc+0x1f/0x30 [ 178.943303][T11329] hash_netiface_create+0x282/0x740 [ 178.943386][T11329] ? __pfx_hash_netiface_create+0x10/0x10 [ 178.943414][T11329] ip_set_create+0x3c9/0x960 [ 178.943460][T11329] ? __nla_parse+0x40/0x60 [ 178.943495][T11329] nfnetlink_rcv_msg+0x4c6/0x590 [ 178.943517][T11329] ? put_dec+0xd3/0xe0 [ 178.943550][T11329] ? selinux_capable+0x1f9/0x270 [ 178.943659][T11329] netlink_rcv_skb+0x120/0x220 [ 178.943692][T11329] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 178.943725][T11329] nfnetlink_rcv+0x16b/0x1690 [ 178.943826][T11329] ? __kfree_skb+0x109/0x150 [ 178.943873][T11329] ? nlmon_xmit+0x4f/0x60 [ 178.943890][T11329] ? consume_skb+0x49/0x150 [ 178.943928][T11329] ? nlmon_xmit+0x4f/0x60 [ 178.943952][T11329] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 178.943983][T11329] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 178.944016][T11329] ? __dev_queue_xmit+0x182/0x1fb0 [ 178.944046][T11329] ? ref_tracker_free+0x37d/0x3e0 [ 178.944100][T11329] ? __netlink_deliver_tap+0x4dc/0x500 [ 178.944139][T11329] netlink_unicast+0x5a1/0x670 [ 178.944314][T11329] netlink_sendmsg+0x58b/0x6b0 [ 178.944334][T11329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.944355][T11329] __sock_sendmsg+0x142/0x180 [ 178.944444][T11329] ____sys_sendmsg+0x31e/0x4e0 [ 178.944511][T11329] ___sys_sendmsg+0x17b/0x1d0 [ 178.944552][T11329] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 178.944668][T11329] __x64_sys_sendmsg+0xd4/0x160 [ 178.944707][T11329] x64_sys_call+0x2999/0x2fb0 [ 178.944731][T11329] do_syscall_64+0xd2/0x200 [ 178.944750][T11329] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.944846][T11329] ? clear_bhb_loop+0x40/0x90 [ 178.944917][T11329] ? clear_bhb_loop+0x40/0x90 [ 178.945017][T11329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.945085][T11329] RIP: 0033:0x7f29242ce929 [ 178.945103][T11329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.945121][T11329] RSP: 002b:00007f2922937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.945140][T11329] RAX: ffffffffffffffda RBX: 00007f29244f5fa0 RCX: 00007f29242ce929 [ 178.945212][T11329] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 178.945225][T11329] RBP: 00007f2924350b39 R08: 0000000000000000 R09: 0000000000000000 [ 178.945237][T11329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.945250][T11329] R13: 0000000000000000 R14: 00007f29244f5fa0 R15: 00007fffcc308ba8 [ 178.945269][T11329] [ 178.945277][T11329] memory: usage 307200kB, limit 307200kB, failcnt 702 [ 179.309298][T11329] memory+swap: usage 307820kB, limit 9007199254740988kB, failcnt 0 [ 179.317434][T11329] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 179.324771][T11329] Memory cgroup stats for /syz1: [ 179.324909][T11329] cache 4096 [ 179.333130][T11329] rss 0 [ 179.335953][T11329] shmem 0 [ 179.338372][T11358] vlan2: entered allmulticast mode [ 179.338875][T11329] mapped_file 0 [ 179.347506][T11329] dirty 0 [ 179.350614][T11329] writeback 0 [ 179.353893][T11329] workingset_refault_anon 277 [ 179.358638][T11329] workingset_refault_file 327 [ 179.363471][T11329] swap 634880 [ 179.366758][T11329] swapcached 0 [ 179.370155][T11329] pgpgin 193112 [ 179.373808][T11329] pgpgout 193109 [ 179.377350][T11329] pgfault 198333 [ 179.380922][T11329] pgmajfault 196 [ 179.384467][T11329] inactive_anon 0 [ 179.388085][T11329] active_anon 0 [ 179.391556][T11329] inactive_file 12288 [ 179.395529][T11329] active_file 0 [ 179.398995][T11329] unevictable 0 [ 179.402546][T11329] hierarchical_memory_limit 314572800 [ 179.407912][T11329] hierarchical_memsw_limit 9223372036854771712 [ 179.414083][T11329] total_cache 4096 [ 179.417876][T11329] total_rss 0 [ 179.421164][T11329] total_shmem 0 [ 179.424621][T11329] total_mapped_file 0 [ 179.428675][T11329] total_dirty 0 [ 179.432406][T11329] total_writeback 0 [ 179.436260][T11329] total_workingset_refault_anon 277 [ 179.441484][T11329] total_workingset_refault_file 327 [ 179.446713][T11329] total_swap 634880 [ 179.450607][T11329] total_swapcached 0 [ 179.454569][T11329] total_pgpgin 193112 [ 179.458556][T11329] total_pgpgout 193109 [ 179.462705][T11329] total_pgfault 198333 [ 179.466989][T11329] total_pgmajfault 196 [ 179.471589][T11329] total_inactive_anon 0 [ 179.475793][T11329] total_active_anon 0 [ 179.479838][T11329] total_inactive_file 12288 [ 179.484394][T11329] total_active_file 0 [ 179.488499][T11329] total_unevictable 0 [ 179.492508][T11329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2331,pid=11326,uid=0 [ 179.507324][T11329] Memory cgroup out of memory: Killed process 11326 (syz.1.2331) total-vm:95668kB, anon-rss:1064kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 179.629021][T11360] loop3: detected capacity change from 0 to 8192 [ 179.772899][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.800791][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.824217][T11373] can0: slcan on ttyS3. [ 179.892429][T11379] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 179.900319][T11373] can0 (unregistered): slcan off ttyS3. [ 179.911552][T11377] vxcan5: entered allmulticast mode [ 179.993309][T11390] vlan2: entered allmulticast mode [ 180.168501][T11402] loop1: detected capacity change from 0 to 512 [ 180.191635][T11402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.212702][T11402] EXT4-fs (loop1): 1 truncate cleaned up [ 180.231671][T11402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.632453][T11405] loop2: detected capacity change from 0 to 512 [ 180.653689][T11405] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.684607][T11407] loop3: detected capacity change from 0 to 512 [ 180.706069][T11407] journal_path: Non-blockdev passed as './bus' [ 180.707197][T11400] syz.0.2362 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 180.712389][T11407] EXT4-fs: error: could not find journal device path [ 180.726380][T11400] CPU: 0 UID: 0 PID: 11400 Comm: syz.0.2362 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 180.726409][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.726425][T11400] Call Trace: [ 180.726431][T11400] [ 180.726438][T11400] __dump_stack+0x1d/0x30 [ 180.726460][T11400] dump_stack_lvl+0xe8/0x140 [ 180.726481][T11400] dump_stack+0x15/0x1b [ 180.726499][T11400] dump_header+0x81/0x220 [ 180.726582][T11400] oom_kill_process+0x334/0x3f0 [ 180.726636][T11400] out_of_memory+0x979/0xb80 [ 180.726668][T11400] try_charge_memcg+0x5e6/0x9e0 [ 180.726696][T11400] obj_cgroup_charge_pages+0xa6/0x150 [ 180.726726][T11400] __memcg_kmem_charge_page+0x9f/0x170 [ 180.726836][T11400] __alloc_frozen_pages_noprof+0x188/0x360 [ 180.726872][T11400] alloc_pages_mpol+0xb3/0x250 [ 180.726916][T11400] alloc_pages_noprof+0x90/0x130 [ 180.726946][T11400] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 180.727031][T11400] __kvmalloc_node_noprof+0x30f/0x4e0 [ 180.727119][T11400] ? ip_set_alloc+0x1f/0x30 [ 180.727219][T11400] ? ip_set_alloc+0x1f/0x30 [ 180.727247][T11400] ? __kmalloc_cache_noprof+0x189/0x320 [ 180.727285][T11400] ip_set_alloc+0x1f/0x30 [ 180.727313][T11400] hash_netiface_create+0x282/0x740 [ 180.727365][T11400] ? __pfx_hash_netiface_create+0x10/0x10 [ 180.727461][T11400] ip_set_create+0x3c9/0x960 [ 180.727597][T11400] ? __nla_parse+0x40/0x60 [ 180.727675][T11400] nfnetlink_rcv_msg+0x4c6/0x590 [ 180.727716][T11400] ? selinux_capable+0x1f9/0x270 [ 180.727747][T11400] netlink_rcv_skb+0x120/0x220 [ 180.727779][T11400] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 180.727817][T11400] nfnetlink_rcv+0x16b/0x1690 [ 180.727843][T11400] ? __kfree_skb+0x109/0x150 [ 180.727871][T11400] ? nlmon_xmit+0x4f/0x60 [ 180.727932][T11400] ? consume_skb+0x49/0x150 [ 180.727981][T11400] ? nlmon_xmit+0x4f/0x60 [ 180.728002][T11400] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 180.728055][T11400] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 180.728086][T11400] ? __dev_queue_xmit+0x182/0x1fb0 [ 180.728117][T11400] ? shmem_recalc_inode+0x19f/0x1c0 [ 180.728210][T11400] ? ref_tracker_free+0x37d/0x3e0 [ 180.728243][T11400] ? __netlink_deliver_tap+0x4dc/0x500 [ 180.728279][T11400] netlink_unicast+0x5a1/0x670 [ 180.728389][T11400] netlink_sendmsg+0x58b/0x6b0 [ 180.728486][T11400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.728564][T11400] __sock_sendmsg+0x142/0x180 [ 180.728596][T11400] ____sys_sendmsg+0x31e/0x4e0 [ 180.728656][T11400] ___sys_sendmsg+0x17b/0x1d0 [ 180.728685][T11400] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 180.728795][T11400] __x64_sys_sendmsg+0xd4/0x160 [ 180.728832][T11400] x64_sys_call+0x2999/0x2fb0 [ 180.728853][T11400] do_syscall_64+0xd2/0x200 [ 180.728871][T11400] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.729015][T11400] ? clear_bhb_loop+0x40/0x90 [ 180.729037][T11400] ? clear_bhb_loop+0x40/0x90 [ 180.729090][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.729112][T11400] RIP: 0033:0x7f6580b7e929 [ 180.729129][T11400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.729158][T11400] RSP: 002b:00007f657f1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.729175][T11400] RAX: ffffffffffffffda RBX: 00007f6580da5fa0 RCX: 00007f6580b7e929 [ 180.729186][T11400] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 180.729266][T11400] RBP: 00007f6580c00b39 R08: 0000000000000000 R09: 0000000000000000 [ 180.729279][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.729292][T11400] R13: 0000000000000000 R14: 00007f6580da5fa0 R15: 00007fffca4ac8c8 [ 180.729312][T11400] [ 180.729468][T11400] memory: usage 307200kB, limit 307200kB, failcnt 542 [ 180.763057][T11405] EXT4-fs (loop2): 1 truncate cleaned up [ 180.766901][T11400] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 180.766917][T11400] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 180.766929][T11400] Memory cgroup stats for [ 180.780831][T11405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.785080][T11400] /syz0: [ 180.786033][T11400] cache 4096 [ 181.143162][T11400] rss 0 [ 181.145953][T11400] shmem 0 [ 181.148916][T11400] mapped_file 0 [ 181.152445][T11400] dirty 0 [ 181.155483][T11400] writeback 0 [ 181.158752][T11400] workingset_refault_anon 374 [ 181.163434][T11400] workingset_refault_file 1576 [ 181.168249][T11400] swap 184320 [ 181.171611][T11400] swapcached 4096 [ 181.175233][T11400] pgpgin 436876 [ 181.178678][T11400] pgpgout 436874 [ 181.182308][T11400] pgfault 167461 [ 181.185888][T11400] pgmajfault 236 [ 181.189477][T11400] inactive_anon 4096 [ 181.193363][T11400] active_anon 0 [ 181.196945][T11400] inactive_file 4096 [ 181.201048][T11400] active_file 0 [ 181.204519][T11400] unevictable 0 [ 181.207993][T11400] hierarchical_memory_limit 314572800 [ 181.213361][T11400] hierarchical_memsw_limit 9223372036854771712 [ 181.219529][T11400] total_cache 4096 [ 181.223294][T11400] total_rss 0 [ 181.226585][T11400] total_shmem 0 [ 181.230064][T11400] total_mapped_file 0 [ 181.234101][T11400] total_dirty 0 [ 181.237545][T11400] total_writeback 0 [ 181.241426][T11400] total_workingset_refault_anon 374 [ 181.246644][T11400] total_workingset_refault_file 1576 [ 181.251938][T11400] total_swap 184320 [ 181.255740][T11400] total_swapcached 4096 [ 181.259981][T11400] total_pgpgin 436876 [ 181.264001][T11400] total_pgpgout 436874 [ 181.268105][T11400] total_pgfault 167461 [ 181.272310][T11400] total_pgmajfault 236 [ 181.276392][T11400] total_inactive_anon 4096 [ 181.280814][T11400] total_active_anon 0 [ 181.284779][T11400] total_inactive_file 4096 [ 181.289308][T11400] total_active_file 0 [ 181.293597][T11400] total_unevictable 0 [ 181.297569][T11400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2362,pid=11399,uid=0 [ 181.312301][T11400] Memory cgroup out of memory: Killed process 11399 (syz.0.2362) total-vm:93620kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 181.379052][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 181.379068][ T29] audit: type=1326 audit(1751049436.116:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.413557][ T29] audit: type=1326 audit(1751049436.116:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.437173][ T29] audit: type=1326 audit(1751049436.116:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.460918][ T29] audit: type=1326 audit(1751049436.116:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.473680][T11420] vxcan19: entered allmulticast mode [ 181.484485][ T29] audit: type=1326 audit(1751049436.116:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.513420][ T29] audit: type=1326 audit(1751049436.116:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.541016][ T29] audit: type=1326 audit(1751049436.186:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.565050][ T29] audit: type=1326 audit(1751049436.186:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.589158][ T29] audit: type=1326 audit(1751049436.186:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.612787][ T29] audit: type=1326 audit(1751049436.186:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.3.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 181.716453][T11431] loop3: detected capacity change from 0 to 512 [ 181.724077][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.736320][T11431] journal_path: Non-blockdev passed as './bus' [ 181.742778][T11431] EXT4-fs: error: could not find journal device path [ 181.756728][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.783117][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2380'. [ 181.786180][T11440] vlan2: entered allmulticast mode [ 181.792248][T11441] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2380'. [ 181.792267][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 181.862278][T11448] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 181.870649][T11446] vxcan5: entered allmulticast mode [ 181.956456][T11459] loop1: detected capacity change from 0 to 512 [ 181.966412][T11459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.977675][T11459] EXT4-fs (loop1): 1 truncate cleaned up [ 181.983751][T11463] loop2: detected capacity change from 0 to 512 [ 181.983873][T11459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.997203][T11463] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.018645][T11463] EXT4-fs (loop2): 1 truncate cleaned up [ 182.024694][T11463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.054263][T11467] loop3: detected capacity change from 0 to 512 [ 182.066717][T11467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.082162][T11467] EXT4-fs (loop3): 1 truncate cleaned up [ 182.480537][T11458] syz.1.2386 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 182.491612][T11458] CPU: 1 UID: 0 PID: 11458 Comm: syz.1.2386 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 182.491636][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.491646][T11458] Call Trace: [ 182.491653][T11458] [ 182.491660][T11458] __dump_stack+0x1d/0x30 [ 182.491679][T11458] dump_stack_lvl+0xe8/0x140 [ 182.491719][T11458] dump_stack+0x15/0x1b [ 182.491736][T11458] dump_header+0x81/0x220 [ 182.491768][T11458] oom_kill_process+0x334/0x3f0 [ 182.491870][T11458] out_of_memory+0x979/0xb80 [ 182.491896][T11458] try_charge_memcg+0x5e6/0x9e0 [ 182.491919][T11458] charge_memcg+0x51/0xc0 [ 182.491945][T11458] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 182.492059][T11458] __read_swap_cache_async+0x1df/0x350 [ 182.492094][T11458] swap_cluster_readahead+0x277/0x3e0 [ 182.492145][T11458] swapin_readahead+0xde/0x6f0 [ 182.492234][T11458] ? __filemap_get_folio+0x4f7/0x6b0 [ 182.492262][T11458] ? __rcu_read_unlock+0x34/0x70 [ 182.492299][T11458] ? swap_cache_get_folio+0x77/0x200 [ 182.492328][T11458] do_swap_page+0x301/0x2430 [ 182.492350][T11458] ? css_rstat_updated+0xcd/0x5b0 [ 182.492386][T11458] ? __pfx_default_wake_function+0x10/0x10 [ 182.492418][T11458] handle_mm_fault+0x9a5/0x2be0 [ 182.492442][T11458] ? mas_walk+0xf2/0x120 [ 182.492492][T11458] do_user_addr_fault+0x636/0x1090 [ 182.492522][T11458] exc_page_fault+0x62/0xa0 [ 182.492545][T11458] asm_exc_page_fault+0x26/0x30 [ 182.492631][T11458] RIP: 0033:0x7f29241a5368 [ 182.492647][T11458] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 5a 28 35 00 00 0f 8e 09 fe ff ff e8 13 a0 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 [ 182.492663][T11458] RSP: 002b:00007fffcc308d10 EFLAGS: 00010216 [ 182.492679][T11458] RAX: 000000000002c8ac RBX: 00007f29244f7ba0 RCX: 000000000002c6f0 [ 182.492693][T11458] RDX: 00000000000001bc RSI: 00007fffcc308cf0 RDI: 0000000000000001 [ 182.492706][T11458] RBP: 00007f29244f7ba0 R08: 000000001a7cfb4b R09: 7fffffffffffffff [ 182.492719][T11458] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000002c9e6 [ 182.492732][T11458] R13: 00007fffcc308e00 R14: ffffffffffffffff R15: 00007fffcc308e20 [ 182.492808][T11458] [ 182.492815][T11458] memory: usage 307200kB, limit 307200kB, failcnt 926 [ 182.714871][T11458] memory+swap: usage 307812kB, limit 9007199254740988kB, failcnt 0 [ 182.722862][T11458] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 182.730190][T11458] Memory cgroup stats for /syz1: [ 182.731706][T11458] cache 12288 [ 182.740151][T11458] rss 4096 [ 182.743265][T11458] shmem 0 [ 182.746239][T11458] mapped_file 0 [ 182.749808][T11458] dirty 0 [ 182.752924][T11458] writeback 8192 [ 182.756472][T11458] workingset_refault_anon 308 [ 182.761260][T11458] workingset_refault_file 359 [ 182.766047][T11458] swap 626688 [ 182.769353][T11458] swapcached 8192 [ 182.773002][T11458] pgpgin 193708 [ 182.776466][T11458] pgpgout 193701 [ 182.780149][T11458] pgfault 199520 [ 182.783732][T11458] pgmajfault 207 [ 182.787280][T11458] inactive_anon 8192 [ 182.791223][T11458] active_anon 0 [ 182.794684][T11458] inactive_file 20480 [ 182.798736][T11458] active_file 0 [ 182.802266][T11458] unevictable 0 [ 182.805718][T11458] hierarchical_memory_limit 314572800 [ 182.811108][T11458] hierarchical_memsw_limit 9223372036854771712 [ 182.817271][T11458] total_cache 12288 [ 182.821117][T11458] total_rss 4096 [ 182.824693][T11458] total_shmem 0 [ 182.828158][T11458] total_mapped_file 0 [ 182.832194][T11458] total_dirty 0 [ 182.835642][T11458] total_writeback 8192 [ 182.839737][T11458] total_workingset_refault_anon 308 [ 182.844971][T11458] total_workingset_refault_file 359 [ 182.850179][T11458] total_swap 626688 [ 182.854031][T11458] total_swapcached 8192 [ 182.858212][T11458] total_pgpgin 193708 [ 182.862392][T11458] total_pgpgout 193701 [ 182.866476][T11458] total_pgfault 199520 [ 182.871143][T11458] total_pgmajfault 207 [ 182.875301][T11458] total_inactive_anon 8192 [ 182.879853][T11458] total_active_anon 0 [ 182.884494][T11458] total_inactive_file 20480 [ 182.889139][T11458] total_active_file 0 [ 182.893132][T11458] total_unevictable 0 [ 182.897105][T11458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2386,pid=11458,uid=0 [ 182.912840][T11458] Memory cgroup out of memory: Killed process 11458 (syz.1.2386) total-vm:93620kB, anon-rss:1044kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 182.949843][T11478] loop4: detected capacity change from 0 to 512 [ 182.956760][T11478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.970987][T11478] EXT4-fs (loop4): 1 truncate cleaned up [ 183.031846][T11481] vxcan3: entered allmulticast mode [ 183.162141][T11487] loop1: detected capacity change from 0 to 1024 [ 183.190602][T11487] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 183.204971][T11491] vxcan5: entered allmulticast mode [ 183.216580][T11487] loop1: detected capacity change from 0 to 512 [ 183.228906][T11487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.229149][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2399'. [ 183.244871][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2399'. [ 183.266082][T11487] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.314779][T11500] can0: slcan on ttyS3. [ 183.353598][T11487] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.2395: iget: bad i_size value: 2533274857506816 [ 183.381770][T11500] can0 (unregistered): slcan off ttyS3. [ 183.511305][T11506] loop3: detected capacity change from 0 to 8192 [ 183.784056][T11512] loop1: detected capacity change from 0 to 512 [ 184.035570][T11512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.058406][T11512] EXT4-fs (loop1): 1 truncate cleaned up [ 184.077290][T11522] loop3: detected capacity change from 0 to 512 [ 184.098190][T11522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.121977][T11522] EXT4-fs (loop3): 1 truncate cleaned up [ 184.369723][T11536] vxcan21: entered allmulticast mode [ 184.505904][T11535] xt_CT: No such helper "snmp_trap" [ 184.796988][T11550] loop1: detected capacity change from 0 to 512 [ 184.803622][T11550] journal_path: Non-blockdev passed as './bus' [ 184.810051][T11550] EXT4-fs: error: could not find journal device path [ 184.861552][T11556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2420'. [ 184.870602][T11556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'. [ 184.963861][T11570] loop4: detected capacity change from 0 to 512 [ 184.980330][T11570] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.019549][T11570] EXT4-fs (loop4): 1 truncate cleaned up [ 185.046214][T11580] loop2: detected capacity change from 0 to 512 [ 185.054913][T11572] vxcan5: entered allmulticast mode [ 185.104136][T11580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.154841][T11580] EXT4-fs (loop2): 1 truncate cleaned up [ 185.162961][T11581] can0: slcan on ttyS3. [ 185.289965][T11578] can0 (unregistered): slcan off ttyS3. [ 185.346969][T11584] loop1: detected capacity change from 0 to 512 [ 185.361909][T11584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.397826][T11584] EXT4-fs (loop1): 1 truncate cleaned up [ 185.744877][T11591] vlan2: entered allmulticast mode [ 185.910459][T11601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2437'. [ 185.919892][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2437'. [ 185.945280][T11606] loop4: detected capacity change from 0 to 1024 [ 185.952390][T11606] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 185.980248][T11612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2443'. [ 185.983315][T11606] loop4: detected capacity change from 0 to 512 [ 185.999661][T11606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.021044][T11606] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.061807][T11606] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.2440: iget: bad i_size value: 2533274857506816 [ 186.087258][T11610] loop2: detected capacity change from 0 to 8192 [ 186.158500][T11619] can0: slcan on ttyS3. [ 186.391351][T11626] can0 (unregistered): slcan off ttyS3. [ 186.518294][T11636] loop2: detected capacity change from 0 to 512 [ 186.697663][T11636] journal_path: Non-blockdev passed as './bus' [ 186.704019][T11636] EXT4-fs: error: could not find journal device path [ 186.844935][T11642] loop4: detected capacity change from 0 to 512 [ 186.860049][T11642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.890667][T11642] EXT4-fs (loop4): 1 truncate cleaned up [ 186.901744][T11650] __nla_validate_parse: 1 callbacks suppressed [ 186.901759][T11650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2457'. [ 186.917015][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 187.120738][T11668] loop1: detected capacity change from 0 to 512 [ 187.127900][T11668] journal_path: Non-blockdev passed as './bus' [ 187.134447][T11668] EXT4-fs: error: could not find journal device path [ 187.142296][T11654] loop4: detected capacity change from 0 to 8192 [ 187.159991][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 187.160005][ T29] audit: type=1326 audit(1751049441.906:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 187.599511][T11672] xt_CT: No such helper "snmp_trap" [ 187.926006][ T29] audit: type=1326 audit(1751049441.906:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 187.949681][ T29] audit: type=1326 audit(1751049441.906:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f905d7cd290 code=0x7ffc0000 [ 187.963525][T11688] vxcan5: entered allmulticast mode [ 187.973361][ T29] audit: type=1326 audit(1751049441.906:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f905d7d0157 code=0x7ffc0000 [ 188.002173][ T29] audit: type=1326 audit(1751049441.906:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 188.026561][ T29] audit: type=1326 audit(1751049441.906:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f905d7d0157 code=0x7ffc0000 [ 188.050274][ T29] audit: type=1326 audit(1751049441.906:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f905d7cd58a code=0x7ffc0000 [ 188.073753][ T29] audit: type=1326 audit(1751049441.906:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 188.097506][ T29] audit: type=1326 audit(1751049441.906:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 188.121033][ T29] audit: type=1326 audit(1751049441.906:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905d7ce929 code=0x7ffc0000 [ 188.151111][T11693] vlan2: entered allmulticast mode [ 188.254781][T11689] loop4: detected capacity change from 0 to 512 [ 188.287579][T11689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.315967][T11689] EXT4-fs (loop4): 1 truncate cleaned up [ 188.329783][T11689] EXT4-fs mount: 22 callbacks suppressed [ 188.329797][T11689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.384416][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.476212][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2479'. [ 188.488145][T11705] loop2: detected capacity change from 0 to 8192 [ 188.520905][T11715] FAULT_INJECTION: forcing a failure. [ 188.520905][T11715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.534050][T11715] CPU: 0 UID: 0 PID: 11715 Comm: syz.0.2481 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 188.534146][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.534158][T11715] Call Trace: [ 188.534165][T11715] [ 188.534173][T11715] __dump_stack+0x1d/0x30 [ 188.534258][T11715] dump_stack_lvl+0xe8/0x140 [ 188.534276][T11715] dump_stack+0x15/0x1b [ 188.534290][T11715] should_fail_ex+0x265/0x280 [ 188.534365][T11715] should_fail+0xb/0x20 [ 188.534454][T11715] should_fail_usercopy+0x1a/0x20 [ 188.534480][T11715] _copy_from_iter+0xcf/0xe40 [ 188.534508][T11715] ? alloc_pages_mpol+0x201/0x250 [ 188.534581][T11715] copy_page_from_iter+0x178/0x2a0 [ 188.534598][T11715] tun_get_user+0x5f0/0x2500 [ 188.534626][T11715] ? ref_tracker_alloc+0x1f2/0x2f0 [ 188.534784][T11715] tun_chr_write_iter+0x15e/0x210 [ 188.534806][T11715] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 188.534828][T11715] vfs_write+0x4a0/0x8e0 [ 188.534864][T11715] ksys_write+0xda/0x1a0 [ 188.534895][T11715] __x64_sys_write+0x40/0x50 [ 188.534993][T11715] x64_sys_call+0x2cdd/0x2fb0 [ 188.535015][T11715] do_syscall_64+0xd2/0x200 [ 188.535034][T11715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.535060][T11715] ? clear_bhb_loop+0x40/0x90 [ 188.535081][T11715] ? clear_bhb_loop+0x40/0x90 [ 188.535118][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.535136][T11715] RIP: 0033:0x7f6580b7d3df [ 188.535156][T11715] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 188.535203][T11715] RSP: 002b:00007f657f1e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 188.535223][T11715] RAX: ffffffffffffffda RBX: 00007f6580da5fa0 RCX: 00007f6580b7d3df [ 188.535236][T11715] RDX: 000000000000003e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 188.535248][T11715] RBP: 00007f657f1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.535273][T11715] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 188.535286][T11715] R13: 0000000000000001 R14: 00007f6580da5fa0 R15: 00007fffca4ac8c8 [ 188.535344][T11715] [ 188.568571][T11720] loop3: detected capacity change from 0 to 1024 [ 188.636895][T11721] xt_CT: No such helper "snmp_trap" [ 188.763638][T11720] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 188.785532][T11720] loop3: detected capacity change from 0 to 512 [ 188.811938][T11720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.831411][T11720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.853622][T11720] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.867665][T11720] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.2483: iget: bad i_size value: 2533274857506816 [ 188.886791][T11733] loop1: detected capacity change from 0 to 512 [ 188.899226][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.901991][T11731] vlan2: entered allmulticast mode [ 188.929850][T11733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.966485][T11730] vxcan5: entered allmulticast mode [ 188.972876][T11733] EXT4-fs (loop1): 1 truncate cleaned up [ 188.979116][T11733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.004413][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.017629][T11740] vlan2: entered allmulticast mode [ 189.023079][T11740] bond0: entered allmulticast mode [ 189.025803][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2492'. [ 189.028241][T11740] bond_slave_0: entered allmulticast mode [ 189.028325][T11740] bond_slave_1: entered allmulticast mode [ 189.086006][T11749] loop4: detected capacity change from 0 to 512 [ 189.094544][T11749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.121551][T11749] EXT4-fs (loop4): 1 truncate cleaned up [ 189.128253][T11749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.120084][T11773] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 190.215465][T11780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2503'. [ 190.224678][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 190.233850][T11770] xt_CT: No such helper "snmp_trap" [ 190.236125][T11777] loop1: detected capacity change from 0 to 512 [ 190.284307][T11777] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.311913][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2504'. [ 190.349985][T11777] EXT4-fs (loop1): 1 truncate cleaned up [ 190.356101][T11777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.390065][T11787] vxcan3: entered allmulticast mode [ 190.429693][T11788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11788 comm=syz.2.2504 [ 190.468453][T11791] vlan2: entered allmulticast mode [ 190.480640][T11749] syz.4.2493 (11749) used greatest stack depth: 5880 bytes left [ 190.493124][T11782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11782 comm=syz.2.2504 [ 190.513707][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.541525][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.587463][T11800] vlan2: entered allmulticast mode [ 190.622455][T11804] loop1: detected capacity change from 0 to 1024 [ 190.639919][T11804] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 190.683548][T11804] loop1: detected capacity change from 0 to 512 [ 190.692942][T11808] loop4: detected capacity change from 0 to 8192 [ 190.700390][T11804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.732131][T11804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.752731][T11804] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.772713][T11817] loop2: detected capacity change from 0 to 512 [ 190.810101][T11817] journal_path: Non-blockdev passed as './bus' [ 190.816361][T11817] EXT4-fs: error: could not find journal device path [ 190.823567][T11818] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 190.828140][T11804] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.2511: iget: bad i_size value: 2533274857506816 [ 190.886643][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.902500][T11822] loop2: detected capacity change from 0 to 512 [ 190.912728][T11822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.927272][T11822] EXT4-fs (loop2): 1 truncate cleaned up [ 190.938828][T11822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.953880][T11827] loop1: detected capacity change from 0 to 512 [ 190.965574][T11824] FAULT_INJECTION: forcing a failure. [ 190.965574][T11824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.978736][T11824] CPU: 1 UID: 0 PID: 11824 Comm: syz.4.2520 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 190.978760][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.978770][T11824] Call Trace: [ 190.978833][T11824] [ 190.978840][T11824] __dump_stack+0x1d/0x30 [ 190.978861][T11824] dump_stack_lvl+0xe8/0x140 [ 190.978876][T11824] dump_stack+0x15/0x1b [ 190.978890][T11824] should_fail_ex+0x265/0x280 [ 190.978928][T11824] should_fail+0xb/0x20 [ 190.979003][T11824] should_fail_usercopy+0x1a/0x20 [ 190.979042][T11824] _copy_from_user+0x1c/0xb0 [ 190.979060][T11824] ___sys_sendmsg+0xc1/0x1d0 [ 190.979096][T11824] __x64_sys_sendmsg+0xd4/0x160 [ 190.979129][T11824] x64_sys_call+0x2999/0x2fb0 [ 190.979146][T11824] do_syscall_64+0xd2/0x200 [ 190.979162][T11824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.979183][T11824] ? clear_bhb_loop+0x40/0x90 [ 190.979200][T11824] ? clear_bhb_loop+0x40/0x90 [ 190.979269][T11824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.979287][T11824] RIP: 0033:0x7f905d7ce929 [ 190.979301][T11824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.979316][T11824] RSP: 002b:00007f905be37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.979331][T11824] RAX: ffffffffffffffda RBX: 00007f905d9f5fa0 RCX: 00007f905d7ce929 [ 190.979341][T11824] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 190.979416][T11824] RBP: 00007f905be37090 R08: 0000000000000000 R09: 0000000000000000 [ 190.979425][T11824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.979487][T11824] R13: 0000000000000000 R14: 00007f905d9f5fa0 R15: 00007fff3f89f758 [ 190.979501][T11824] [ 191.165984][T11827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.183663][T11827] EXT4-fs (loop1): 1 truncate cleaned up [ 191.192442][T11827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.291588][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2521'. [ 191.642137][T11844] loop3: detected capacity change from 0 to 8192 [ 191.838152][T11851] SELinux: failed to load policy [ 191.844206][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2533'. [ 191.885290][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.890163][T11857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2534'. [ 191.906336][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.067811][T11871] loop1: detected capacity change from 0 to 512 [ 192.140921][T11873] loop3: detected capacity change from 0 to 8192 [ 192.149684][T11871] journal_path: Non-blockdev passed as './bus' [ 192.155903][T11871] EXT4-fs: error: could not find journal device path [ 192.212561][T11874] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 192.231076][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 192.231089][ T29] audit: type=1326 audit(1751049446.946:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 192.261178][ T29] audit: type=1326 audit(1751049446.946:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fade5410847 code=0x7ffc0000 [ 192.285609][ T29] audit: type=1326 audit(1751049446.946:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fade54107bc code=0x7ffc0000 [ 192.309288][ T29] audit: type=1326 audit(1751049446.946:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fade54106f4 code=0x7ffc0000 [ 192.332906][ T29] audit: type=1326 audit(1751049446.946:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fade540d58a code=0x7ffc0000 [ 192.356417][ T29] audit: type=1326 audit(1751049446.946:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 192.380752][ T29] audit: type=1326 audit(1751049446.946:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 192.404555][ T29] audit: type=1326 audit(1751049446.946:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 192.428291][ T29] audit: type=1326 audit(1751049446.946:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 192.452880][ T29] audit: type=1326 audit(1751049446.946:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade540e929 code=0x7ffc0000 [ 192.511014][T11878] vlan2: entered allmulticast mode [ 192.564093][T11880] SELinux: failed to load policy [ 192.607771][T11884] loop3: detected capacity change from 0 to 512 [ 192.614797][T11884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.627454][T11882] loop1: detected capacity change from 0 to 512 [ 192.634401][T11882] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.645741][T11882] EXT4-fs (loop1): 1 truncate cleaned up [ 192.652105][T11882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.670645][T11884] EXT4-fs (loop3): 1 truncate cleaned up [ 192.676968][T11884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.695160][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.158741][T11895] SELinux: failed to load policy [ 193.397717][T11897] xt_CT: No such helper "snmp_trap" [ 193.564049][T11911] loop4: detected capacity change from 0 to 1024 [ 193.589131][T11911] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 193.621070][T11911] loop4: detected capacity change from 0 to 512 [ 193.629375][ T5135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.650474][T11911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.696765][T11911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.722256][T11911] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.745276][T11924] loop3: detected capacity change from 0 to 512 [ 193.752168][T11924] journal_path: Non-blockdev passed as './bus' [ 193.758355][T11924] EXT4-fs: error: could not find journal device path [ 193.785163][T11911] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.2553: iget: bad i_size value: 2533274857506816 [ 193.800787][T11928] __nla_validate_parse: 1 callbacks suppressed [ 193.800860][T11928] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2560'. [ 193.816121][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 193.901299][ T6573] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.988589][T11936] SELinux: failed to load policy [ 193.988813][T11940] loop1: detected capacity change from 0 to 512 [ 194.031173][T11940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.058698][T11940] EXT4-fs (loop1): 1 truncate cleaned up [ 194.068085][T11940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.403428][T11960] loop2: detected capacity change from 0 to 512 [ 194.508603][T11960] journal_path: Non-blockdev passed as './bus' [ 194.514903][T11960] EXT4-fs: error: could not find journal device path [ 194.521739][T11950] xt_CT: No such helper "snmp_trap" [ 194.589340][T11940] ================================================================== [ 194.597464][T11940] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 194.607289][T11940] [ 194.609615][T11940] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 194.617677][T11940] tick_do_update_jiffies64+0x113/0x1c0 [ 194.623248][T11940] tick_nohz_handler+0x7f/0x2d0 [ 194.628120][T11940] __hrtimer_run_queues+0x20f/0x5a0 [ 194.633330][T11940] hrtimer_interrupt+0x21a/0x460 [ 194.638274][T11940] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 194.644181][T11940] sysvec_apic_timer_interrupt+0x6f/0x80 [ 194.649907][T11940] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.656172][T11940] unix_dgram_recvmsg+0x81/0x90 [ 194.661049][T11940] sock_recvmsg_nosec+0x104/0x130 [ 194.666093][T11940] ____sys_recvmsg+0x26f/0x280 [ 194.670856][T11940] ___sys_recvmsg+0x11f/0x370 [ 194.675624][T11940] do_recvmmsg+0x1ef/0x540 [ 194.680055][T11940] __x64_sys_recvmmsg+0xe5/0x170 [ 194.684999][T11940] x64_sys_call+0x1c6a/0x2fb0 [ 194.689684][T11940] do_syscall_64+0xd2/0x200 [ 194.694193][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.700098][T11940] [ 194.702425][T11940] read to 0xffffffff868099c0 of 8 bytes by task 11940 on cpu 0: [ 194.710055][T11940] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 194.716308][T11940] count_shadow_nodes+0x6a/0x230 [ 194.721257][T11940] do_shrink_slab+0x60/0x680 [ 194.725868][T11940] shrink_slab+0x448/0x760 [ 194.730303][T11940] shrink_node+0x6c3/0x2120 [ 194.734864][T11940] do_try_to_free_pages+0x3f6/0xcd0 [ 194.740074][T11940] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 194.745988][T11940] try_charge_memcg+0x358/0x9e0 [ 194.750848][T11940] obj_cgroup_charge_pages+0xa6/0x150 [ 194.756240][T11940] __memcg_kmem_charge_page+0x9f/0x170 [ 194.761856][T11940] __alloc_frozen_pages_noprof+0x188/0x360 [ 194.767690][T11940] alloc_pages_mpol+0xb3/0x250 [ 194.772477][T11940] alloc_pages_noprof+0x90/0x130 [ 194.777423][T11940] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 194.783256][T11940] __kvmalloc_node_noprof+0x30f/0x4e0 [ 194.788645][T11940] ip_set_alloc+0x1f/0x30 [ 194.792996][T11940] hash_netiface_create+0x282/0x740 [ 194.798209][T11940] ip_set_create+0x3c9/0x960 [ 194.802813][T11940] nfnetlink_rcv_msg+0x4c6/0x590 [ 194.807759][T11940] netlink_rcv_skb+0x120/0x220 [ 194.812531][T11940] nfnetlink_rcv+0x16b/0x1690 [ 194.817213][T11940] netlink_unicast+0x5a1/0x670 [ 194.822083][T11940] netlink_sendmsg+0x58b/0x6b0 [ 194.826854][T11940] __sock_sendmsg+0x142/0x180 [ 194.831539][T11940] ____sys_sendmsg+0x31e/0x4e0 [ 194.836317][T11940] ___sys_sendmsg+0x17b/0x1d0 [ 194.841009][T11940] __x64_sys_sendmsg+0xd4/0x160 [ 194.845877][T11940] x64_sys_call+0x2999/0x2fb0 [ 194.850566][T11940] do_syscall_64+0xd2/0x200 [ 194.855169][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.861174][T11940] [ 194.863708][T11940] value changed: 0x00000000ffffd6a3 -> 0x00000000ffffd6a4 [ 194.870851][T11940] [ 194.873167][T11940] Reported by Kernel Concurrency Sanitizer on: [ 194.879316][T11940] CPU: 0 UID: 0 PID: 11940 Comm: syz.1.2568 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 194.891917][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.901983][T11940] ================================================================== [ 195.204107][ T5912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.