last executing test programs: 1m47.711993166s ago: executing program 2 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m47.633020463s ago: executing program 2 (id=1438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1m46.602582825s ago: executing program 2 (id=1452): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1m46.347330195s ago: executing program 2 (id=1453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x6, 0xa}}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000e40)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)={0x23c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4058050) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[]) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x164, &(0x7f0000000940)={@local, @link_local, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x5}}, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x3, 0x3, 0x14e, 0x65, 0x0, 0x0, 0x21, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0xf, 0xaf, [@multicast2, @rand_addr=0x3, @local]}, @rr={0x7, 0xb, 0x75, [@empty, @broadcast]}, @generic={0x88, 0x12, "de5cc788eea5987020210a2d1217d020"}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0xa, 0x6, "f916a2", 0x8, "4786b2"}, "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"}}}}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 1m45.317167448s ago: executing program 2 (id=1464): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pwritev(r0, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 1m45.009586363s ago: executing program 2 (id=1466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m45.009264973s ago: executing program 32 (id=1466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 38.539257325s ago: executing program 4 (id=2349): socket$key(0xf, 0x3, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)="a92b94d1e118", 0x6}], 0x1}}], 0x1, 0x400c0d4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 38.499307878s ago: executing program 4 (id=2352): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000a00, 0xfffffd65) 38.332014951s ago: executing program 4 (id=2359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r1, &(0x7f0000000740), &(0x7f0000000840)=0x10) r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r2, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0xff63, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 37.620891649s ago: executing program 4 (id=2371): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DHOJEQq4fZFIwwUVsF9JVLXTTRaFdlP4Bha6z0UJXpZtWWuheKkV0n3InM8lgZpJUZzx+/H5w555zz2Se55lL5p4DcyeAl9ZE+ZBH7I+Ic1nEWPN4HhHDjdZIxNLq8x7cvzb18P61qSxWVj74O4useaz1Wllzv7vZGYmIX85k8d9PNsatLyzOVouiNtfsH56/eOVwfWHx0MzF6oXahdqlyROTx46fOHb87SM9q/XdvTfPfjV5as/3Z25dfe3G719mcSpGm2PtdfTKREysvSftBiOi2utgiQw062mvMxtMmBAAAJvK2+Zw/4uxGIj1ydtY3Po1aXIAAABAT6wMRKwAAAAAL7jM+h8AAABecK3vATy4f22qtaX9RsLTde90RIx3qn8wlhr7kRiKiF0Psmi/rTVb/bMnNhER+34a/7Hcok/3IW9m6XpE/L9T/Vmj/vHGXdwb688johd3Zk880n+e6j/Vg/ip6wfg5bR8evVCtvH6l6/Nf6LD9W+ww7XrcaS+/nWf/63XP9Bl/vf+NmPUDnz6ebex9vlf8e2rt8v45f6JivoX7l2PeGWw+/ynrD/rUv+5bcYY+uPnH7qNlfWX9ba2p13/yjcRBzuuf9Z/0Sbb/PeJDk/PFLXmY8cYN25/t69b/PbzX25l/NZa4Gkoz/+uLvVvdf6vbDPG8l8H/+w2tnX9+d3h7MNGa7h55Gp1fn5uMmI4O7vx+NHNc2k9p/UaZf1vvr75/3+n+svPhKXm+1CuBa4392X/40diHnrvnTcev/7+Kus//5jn/+Y2Y3z92dzdbmOp6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+ZBHxGhkeWWtneeVSsTuiNgXu/Licn3+renLH106X45FjMdQPj1T1I5ExNhqPyv7k432ev/oI/1jEbE3Ir4Y29noV6YuF+dTFw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCa3RExGlleiYg8Ih6O5XmlkjorAAAAoOfGUycAAAAA9J31PwAAALz4rP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADos70Hlu9kEbF0cmdjKw03x4aSZgb0W546ASCZgdQJAMkMpk4ASMYaH8i2GB/pOrKj57kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ow6uH/5ThYRSyd3NrbScHNsKGlmQL/lqRMAkhlInQCQzGDqBIBkrPGBbIvxka4jO3qeCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPrtHGluWViMgb7TyvVCL2RMR4DGXTM0XtSET8JyJ+GxvaUfYnUycNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAz9UXFmerRVGb09DQ0FhrpP5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghfrC4my1KGpz9dSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKnVFxZnq0VRm+tjI3WNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACk808AAAD///qbAaI=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ptrace(0x10, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresgid(0xee00, 0xee01, 0x0) setuid(0xee01) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x16, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) timer_gettime(r1, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)={0x0, r4}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x5c, 0x2, 0x4, 0x1, 0x0, 0x100, 0x200, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8001, 0x3}, 0x10, 0xe1cd, 0x63eb, 0x2, 0x3, 0xf9, 0x18a3, 0x0, 0x81}, r4, 0x4, r4, 0x82d360b482c4cf0d) mmap$perf(&(0x7f0000517000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r5, 0x100000001) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 36.936336193s ago: executing program 4 (id=2377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 36.22655643s ago: executing program 4 (id=2385): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlink(0x0, 0x0) 36.204506841s ago: executing program 33 (id=2385): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlink(0x0, 0x0) 3.185599675s ago: executing program 0 (id=2900): socket(0x23, 0x1, 0x0) socket$inet(0x2, 0xa, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x14) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x800000000000002}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.035706927s ago: executing program 1 (id=2902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x0) accept4(r3, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80, 0x41db06d3fab6e3db) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000020000000400000005", @ANYRES64=r0, @ANYBLOB="f055044d46799d6b865f542429e5c8ce8c7f9cefd7c24c824986e686ec6dfb09bb619ab0d992033eac3fd701f314a18e3ff805310d63e0bdeb5a62074b2fca", @ANYRES16=r1, @ANYRESOCT=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x4, 0x25, 0xf7, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000640)}, 0x4000, 0x2, 0x0, 0x8, 0x1, 0x10001, 0xd, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r2, 0x8) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x79, 0x3, 0xfd, 0x2, 0x0, 0xffffffffb05f2778, 0x61102, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x4, 0x75e}, 0x102872, 0x2, 0x4, 0x8, 0x1, 0x8, 0x7fff, 0x0, 0xe44, 0x0, 0xad}, 0xffffffffffffffff, 0x4, r6, 0x10) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x36) 2.956936294s ago: executing program 0 (id=2904): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000001500)=[{&(0x7f0000000400)='8', 0x1}], 0x1) (fail_nth: 6) 2.660560487s ago: executing program 0 (id=2905): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="c778f4821f40d3b60da0f04df19b311b929bbfa5ea04ed284653529aaf3d5610ca06c84e74c0e237134075c2280cb4864502defafd80abb93c7142ec77f7522336a89c383d70ab59b250737fabf375d94978a3de7f32280bef81abb21e78b2cfa8ef7bb4321149e975d1f479b18ff563ccca076d1dfa6c287c786995840f4ee3b746edf3110bff6a0701e87bf785eaea"], 0x1, 0x2cf, &(0x7f0000000880)="$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") (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="c778f4821f40d3b60da0f04df19b311b929bbfa5ea04ed284653529aaf3d5610ca06c84e74c0e237134075c2280cb4864502defafd80abb93c7142ec77f7522336a89c383d70ab59b250737fabf375d94978a3de7f32280bef81abb21e78b2cfa8ef7bb4321149e975d1f479b18ff563ccca076d1dfa6c287c786995840f4ee3b746edf3110bff6a0701e87bf785eaea"], 0x1, 0x2cf, &(0x7f0000000880)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aad", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737491a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b27578", 0x8c}], 0x1}}], 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r4, r1}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@enum64={0x6, 0x6, 0x0, 0x13, 0x1, 0xe, [{0x3, 0x3, 0x20000000}, {0xf, 0x800, 0x4}, {0x8, 0x4, 0x4}, {0x4, 0x1, 0xa}, {0x2, 0x1000, 0x6}, {0x5, 0x7, 0x4}]}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000001700)=""/106, 0x70, 0x6a, 0x1, 0x9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9027, '\x00', 0x0, r5, 0x3, 0x2, 0x4}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9027, '\x00', 0x0, r5, 0x3, 0x2, 0x4}, 0x50) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000003740)=""/4104, 0x1008}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000080)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/179, 0xb3, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000003740)=""/4104, 0x1008}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000080)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/179, 0xb3, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.660220447s ago: executing program 1 (id=2906): socket(0x1e, 0x4, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f00000001c0)=0x59) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x84, 0x1ff, 0x1, 0x1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3c, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="cbaef92ae38f79e6d439f2ebe6e42b0589cf705f2f21bd173a277b383373456819f97a07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write(0xffffffffffffffff, &(0x7f0000000380)="8adc6364fa280e422208a887ac9e37d116546fca1589b50ecba8ed4143c3858c8a9b3f6e", 0x24) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r6, &(0x7f0000000040)="06", 0x1) sendfile(r6, r6, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000180)='0', 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x593040, 0x0) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000580)="89e7ee2c78dad9b4b473fec96558fbe84689f200000000000000278bb4d66f1e101d1cf05538a51c10ba554ad9d12e7e43057724098d468352e2397a509ba71c1e334d50b39f13e474d8357b847cc1a63359b324265ad9a5f19acdf1638303e0c12072ff9d93", 0x66}, {&(0x7f0000000440)="9c74dfbf77", 0x5}], 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') ioctl(r8, 0x510c, &(0x7f0000000600)="a4a64ec2b5488e44dcbdad455cb20f4fdefd039f07d3cef0ad5630adaa722a9b40fc0b7c230b31c7901ac534bce93d59aceeb7017187ba205adfc617c4332e955003bd3352b2723e1be67e0f9cf10d8e2510511d546d2a9f54adcae891ef5b907761d3826fff83473d1a7e643b48b2c84e7c1a383d4dd78a9405a4feb3cb32e7e4300c714092b9540452b949fbc2dd39ba96945aaee2cbbdb7266540cb6d9ce03185baa347d7640599ccaf3c080af1137afa15179392d0e2508e4eb9f64be200ea15b3011829b1a541d6c49bb65a91be7d3ab1db81fa938ae32fe8309f25daeaa3442c") 2.523882869s ago: executing program 0 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe(&(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.523538918s ago: executing program 5 (id=2910): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xd83, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd75, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd61, 0x0, @wg=@data={0x4, 0x7407, 0xfffdfffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2e"}}}}}}, 0x0) readv(r1, &(0x7f0000001780)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) syz_clone(0x40000000, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x0, 0x6, 0x8}, {0xb880, 0xff, 0x0, 0x1}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0xc800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111630000000000851000000200000085ea00000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) 2.324444994s ago: executing program 6 (id=2912): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 2.2546101s ago: executing program 6 (id=2913): socket$key(0xf, 0x3, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x6}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 1.714480383s ago: executing program 1 (id=2914): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000002c0)=ANY=[@ANYBLOB=',version=9p2000,context=']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) unshare(0x62040200) 1.465412613s ago: executing program 5 (id=2915): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x40000) 1.428280386s ago: executing program 5 (id=2916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x0) accept4(r3, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80, 0x41db06d3fab6e3db) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000020000000400000005", @ANYRES64=r0, @ANYBLOB="f055044d46799d6b865f542429e5c8ce8c7f9cefd7c24c824986e686ec6dfb09bb619ab0d992033eac3fd701f314a18e3ff805310d63e0bdeb5a62074b2fca", @ANYRES16=r1, @ANYRESOCT=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x4, 0x25, 0xf7, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000640)}, 0x4000, 0x2, 0x0, 0x8, 0x1, 0x10001, 0xd, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r2, 0x8) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x79, 0x3, 0xfd, 0x2, 0x0, 0xffffffffb05f2778, 0x61102, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x4, 0x75e}, 0x102872, 0x2, 0x4, 0x8, 0x1, 0x8, 0x7fff, 0x0, 0xe44, 0x0, 0xad}, 0xffffffffffffffff, 0x4, r6, 0x10) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x36) 1.205571954s ago: executing program 6 (id=2917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 911.663347ms ago: executing program 5 (id=2920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, 0x0, 0x0) 852.037122ms ago: executing program 1 (id=2921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x2004, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000050005"], 0x3c}}, 0x20) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000180)=""/106, 0x6a}) socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(0x3) 776.131188ms ago: executing program 3 (id=2922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x0) accept4(r2, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80, 0x41db06d3fab6e3db) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000020000000400000005", @ANYRES64=r0, @ANYBLOB="f055044d46799d6b865f542429e5c8ce8c7f9cefd7c24c824986e686ec6dfb09bb619ab0d992033eac3fd701f314a18e3ff805310d63e0bdeb5a62074b2fca", @ANYRES16=r1, @ANYRESOCT=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x36) 775.821738ms ago: executing program 0 (id=2923): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 771.411199ms ago: executing program 5 (id=2924): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 675.515347ms ago: executing program 5 (id=2925): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xd83, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd75, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd61, 0x0, @wg=@data={0x4, 0x7407, 0xfffdfffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2e"}}}}}}, 0x0) readv(r1, &(0x7f0000001780)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) syz_clone(0x40000000, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x0, 0x6, 0x8}, {0xb880, 0xff, 0x0, 0x1}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0xc800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111630000000000851000000200000085ea00000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) 566.802525ms ago: executing program 3 (id=2926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 539.892767ms ago: executing program 0 (id=2927): socket$key(0xf, 0x3, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x6}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 513.870649ms ago: executing program 3 (id=2928): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000000000000100000500000000000000aa08000b00", @ANYRES32, @ANYBLOB="08000800e000000106000a004e200000"], 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 435.064856ms ago: executing program 3 (id=2929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 388.053679ms ago: executing program 3 (id=2930): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89\x89\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zpo\xd0\xc7\'CT') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2704, &(0x7f00000004c0)={0x0, 0x6c0d, 0x40, 0x2, 0x13a}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005a8bd1e99959505a018aff63e1bf39c8cd510c785411e883a7f2c8772ebc5fa3f42b9a57e55a7a721657b35d5640f051ed5c10d6696727cf28e3cbc225733650ebaab8db5175"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0xc1, 0x2}}}}]}, 0x44}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000380)=0x8e8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setresgid(r8, r8, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000100000000001000000000dd78000009000000000000"], 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="00000000b7080000000200007ba200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000e511c41914060b764cf19e3399abeb16b870eff4e8c73009c1dc3f41cb2f58610a50a6f4b6f36d7583177d383838be9484b5cffdc0bae12fc2d11882ad3d483a8b110ad92d44b5f4c46c15a0d60ffc284a0bc597e71cf07463474d0017372d577c225a5b188068abe3170ca5626f2608e9e940407df471ab2a5cbdd5766921e90ee8ba8ba4e1a8b281068e353a82d8a53c8da06b36bb99229f9f5765a9ce2afddaf9a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") 349.553812ms ago: executing program 6 (id=2931): socket(0x23, 0x1, 0x0) socket$inet(0x2, 0xa, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x14) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r3, 0x0, 0x800000000000002}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 271.432729ms ago: executing program 3 (id=2932): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000ffffffffffffffff0000e1ffffffffffffff00"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup2(r7, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r9, 0x0, 0x2}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r11, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r12, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) 248.306641ms ago: executing program 1 (id=2933): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 202.421524ms ago: executing program 1 (id=2934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe(&(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 196.578865ms ago: executing program 6 (id=2935): socket(0x23, 0x1, 0x0) socket$inet(0x2, 0xa, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x14) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r3, 0x0, 0x800000000000002}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 6 (id=2936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T29] audit: type=1400 audit(1755990869.925:3683): avc: denied { open } for pid=9383 comm="syz.3.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 189.335684][ T29] audit: type=1400 audit(1755990869.925:3684): avc: denied { kernel } for pid=9383 comm="syz.3.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 189.370836][ T9389] block device autoloading is deprecated and will be removed. [ 189.371405][ T9387] loop9: detected capacity change from 0 to 7 [ 189.380496][ T9389] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 189.385408][ T9387] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.402992][ T9387] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.411469][ T9387] loop9: unable to read partition table [ 189.417266][ T9387] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 189.417266][ T9387] ) failed (rc=-5) [ 189.441475][ T29] audit: type=1400 audit(1755990870.065:3685): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.467962][ T29] audit: type=1400 audit(1755990870.065:3686): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.495750][ T29] audit: type=1400 audit(1755990870.115:3687): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=616 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.515112][ T9392] program syz.3.2174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.523263][ T29] audit: type=1400 audit(1755990870.125:3688): avc: denied { create } for pid=9383 comm="syz.3.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 189.552871][ T29] audit: type=1400 audit(1755990870.125:3689): avc: denied { write } for pid=9383 comm="syz.3.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 189.570813][ T9387] lo speed is unknown, defaulting to 1000 [ 189.574539][ T29] audit: type=1400 audit(1755990870.135:3690): avc: denied { read } for pid=9383 comm="syz.3.2174" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 189.606801][ T29] audit: type=1400 audit(1755990870.135:3691): avc: denied { open } for pid=9383 comm="syz.3.2174" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 189.632073][ T29] audit: type=1400 audit(1755990870.215:3692): avc: denied { create } for pid=9390 comm="syz.0.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.942528][ T9407] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2182'. [ 190.118495][ T9420] loop5: detected capacity change from 0 to 512 [ 190.144718][ T9420] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.210407][ T9420] EXT4-fs (loop5): 1 truncate cleaned up [ 190.221123][ T9420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.299661][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.373610][ T9438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2196'. [ 190.488125][ T9435] loop5: detected capacity change from 0 to 164 [ 190.759356][ T9458] lo speed is unknown, defaulting to 1000 [ 190.985449][ T9465] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2207'. [ 191.372761][ T9473] lo speed is unknown, defaulting to 1000 [ 192.404699][ T9478] loop4: detected capacity change from 0 to 512 [ 192.442997][ T9478] ext4: Unknown parameter 'fsmagic' [ 192.652258][ T9497] loop1: detected capacity change from 0 to 512 [ 192.707439][ T9497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 192.725070][ T9497] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.767938][ T9508] loop4: detected capacity change from 0 to 512 [ 192.798835][ T9508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 192.823476][ T9508] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.825529][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 192.880476][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 192.891157][ T9512] loop5: detected capacity change from 0 to 8192 [ 193.193918][ T9525] lo speed is unknown, defaulting to 1000 [ 194.044995][ T9531] loop3: detected capacity change from 0 to 512 [ 194.082461][ T9531] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2229: Failed to acquire dquot type 1 [ 194.177360][ T9531] EXT4-fs (loop3): 1 truncate cleaned up [ 194.197664][ T9531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.240211][ T9531] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.274204][ T9544] loop1: detected capacity change from 0 to 512 [ 194.299121][ T9544] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.310228][ T9544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.310943][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.338570][ T9548] loop5: detected capacity change from 0 to 512 [ 194.348060][ T9544] EXT4-fs (loop1): 1 truncate cleaned up [ 194.354886][ T9544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.380494][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 194.380508][ T29] audit: type=1400 audit(1755990874.995:3915): avc: denied { append } for pid=9543 comm="syz.1.2235" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 194.417267][ T29] audit: type=1400 audit(1755990874.995:3916): avc: denied { create } for pid=9543 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.439533][ T29] audit: type=1400 audit(1755990874.995:3917): avc: denied { setopt } for pid=9543 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.462712][ T29] audit: type=1400 audit(1755990874.995:3918): avc: denied { read write } for pid=9543 comm="gtp" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 194.493183][ T29] audit: type=1400 audit(1755990874.995:3919): avc: denied { open } for pid=9543 comm="gtp" path="/407/file1/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 194.527561][ T29] audit: type=1400 audit(1755990875.145:3920): avc: denied { kexec_image_load } for pid=9545 comm="syz.0.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 194.611950][ T9557] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 194.619395][ T9557] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.639644][ T9548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 194.696959][ T9548] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.713104][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.866203][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 194.986561][ T9560] loop3: detected capacity change from 0 to 8192 [ 195.681615][ T29] audit: type=1400 audit(1755990876.275:3921): avc: denied { mac_admin } for pid=9564 comm="syz.1.2240" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.139430][ T9579] lo speed is unknown, defaulting to 1000 [ 196.280118][ T29] audit: type=1400 audit(1755990876.895:3922): avc: denied { mounton } for pid=9583 comm="syz.0.2249" path="/497/file0" dev="tmpfs" ino=2631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.311635][ T9582] loop3: detected capacity change from 0 to 512 [ 196.375749][ T9582] ext4: Unknown parameter 'fsmagic' [ 196.413112][ T9586] syzkaller0: entered promiscuous mode [ 196.418978][ T9586] syzkaller0: entered allmulticast mode [ 196.444140][ T29] audit: type=1326 audit(1755990877.065:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.0.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b740cebe9 code=0x7ffc0000 [ 196.471062][ T29] audit: type=1326 audit(1755990877.065:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.0.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b740cebe9 code=0x7ffc0000 [ 196.552884][ T9596] loop9: detected capacity change from 0 to 7 [ 196.559477][ T9596] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.568490][ T9596] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.576519][ T9596] loop9: unable to read partition table [ 196.589099][ T9596] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 196.589099][ T9596] ) failed (rc=-5) [ 196.679141][ T9593] lo speed is unknown, defaulting to 1000 [ 196.680983][ T9596] program syz.3.2253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.832723][ T9603] loop1: detected capacity change from 0 to 164 [ 196.882893][ T9613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2261'. [ 196.914033][ T9617] loop1: detected capacity change from 0 to 512 [ 196.920944][ T9617] ext4: Unknown parameter 'fsmagic' [ 196.956374][ T9619] loop4: detected capacity change from 0 to 512 [ 197.011582][ T9619] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.020911][ T9619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.163657][ T9619] EXT4-fs (loop4): 1 truncate cleaned up [ 197.171937][ T9619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.237098][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.505051][ T9639] loop3: detected capacity change from 0 to 164 [ 197.588387][ T9642] loop0: detected capacity change from 0 to 512 [ 197.611106][ T9642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 197.631559][ T9642] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.742631][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 197.760932][ T7478] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 197.773208][ T7478] CPU: 1 UID: 0 PID: 7478 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.773307][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.773319][ T7478] Call Trace: [ 197.773328][ T7478] [ 197.773337][ T7478] __dump_stack+0x1d/0x30 [ 197.773358][ T7478] dump_stack_lvl+0xe8/0x140 [ 197.773394][ T7478] dump_stack+0x15/0x1b [ 197.773410][ T7478] dump_header+0x81/0x220 [ 197.773440][ T7478] oom_kill_process+0x342/0x400 [ 197.773470][ T7478] out_of_memory+0x979/0xb80 [ 197.773513][ T7478] try_charge_memcg+0x5e6/0x9e0 [ 197.773542][ T7478] charge_memcg+0x51/0xc0 [ 197.773561][ T7478] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 197.773644][ T7478] __read_swap_cache_async+0x1df/0x350 [ 197.773738][ T7478] swap_cluster_readahead+0x376/0x3e0 [ 197.773766][ T7478] swapin_readahead+0xde/0x6f0 [ 197.773837][ T7478] ? __filemap_get_folio+0x4f7/0x6b0 [ 197.773865][ T7478] ? ktime_get+0x1eb/0x210 [ 197.773885][ T7478] ? swap_cache_get_folio+0x77/0x200 [ 197.773912][ T7478] do_swap_page+0x301/0x2430 [ 197.773958][ T7478] ? finish_task_switch+0xad/0x2b0 [ 197.773977][ T7478] ? __pfx_default_wake_function+0x10/0x10 [ 197.774056][ T7478] handle_mm_fault+0x9a5/0x2c20 [ 197.774086][ T7478] do_user_addr_fault+0x636/0x1090 [ 197.774118][ T7478] ? fpregs_restore_userregs+0xe2/0x1d0 [ 197.774320][ T7478] ? switch_fpu_return+0xe/0x20 [ 197.774347][ T7478] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.774369][ T7478] exc_page_fault+0x62/0xa0 [ 197.774454][ T7478] asm_exc_page_fault+0x26/0x30 [ 197.774470][ T7478] RIP: 0033:0x7f0456cb1465 [ 197.774564][ T7478] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 197.774579][ T7478] RSP: 002b:00007ffe8b3f5428 EFLAGS: 00010246 [ 197.774593][ T7478] RAX: 0000000000000000 RBX: 000000000000016d RCX: 00007f0456cb1463 [ 197.774603][ T7478] RDX: 00007ffe8b3f5440 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.774614][ T7478] RBP: 00007ffe8b3f54ac R08: 000000002a93e728 R09: 0000000000000000 [ 197.774625][ T7478] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 197.774635][ T7478] R13: 00000000000927c0 R14: 000000000003011b R15: 00007ffe8b3f5500 [ 197.774715][ T7478] [ 197.774722][ T7478] memory: usage 307200kB, limit 307200kB, failcnt 640 [ 198.018940][ T7478] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 198.026932][ T7478] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 198.034556][ T7478] Memory cgroup stats for /syz5: [ 198.034959][ T7478] cache 0 [ 198.043958][ T7478] rss 0 [ 198.047050][ T7478] shmem 0 [ 198.050095][ T7478] mapped_file 0 [ 198.053926][ T7478] dirty 0 [ 198.056943][ T7478] writeback 0 [ 198.060241][ T7478] workingset_refault_anon 138 [ 198.064936][ T7478] workingset_refault_file 2961 [ 198.069701][ T7478] swap 196608 [ 198.073147][ T7478] swapcached 4096 [ 198.076769][ T7478] pgpgin 165279 [ 198.080267][ T7478] pgpgout 165278 [ 198.083845][ T7478] pgfault 96450 [ 198.087429][ T7478] pgmajfault 62 [ 198.090936][ T7478] inactive_anon 4096 [ 198.094994][ T7478] active_anon 0 [ 198.098514][ T7478] inactive_file 0 [ 198.102250][ T7478] active_file 0 [ 198.102259][ T7478] unevictable 0 [ 198.102299][ T7478] hierarchical_memory_limit 314572800 [ 198.102306][ T7478] hierarchical_memsw_limit 9223372036854771712 [ 198.102312][ T7478] total_cache 0 [ 198.102318][ T7478] total_rss 0 [ 198.102323][ T7478] total_shmem 0 [ 198.102329][ T7478] total_mapped_file 0 [ 198.102335][ T7478] total_dirty 0 [ 198.102340][ T7478] total_writeback 0 [ 198.102346][ T7478] total_workingset_refault_anon 138 [ 198.102353][ T7478] total_workingset_refault_file 2961 [ 198.102359][ T7478] total_swap 196608 [ 198.158735][ T7478] total_swapcached 4096 [ 198.158810][ T7478] total_pgpgin 165279 [ 198.158816][ T7478] total_pgpgout 165278 [ 198.158822][ T7478] total_pgfault 96450 [ 198.158828][ T7478] total_pgmajfault 62 [ 198.158833][ T7478] total_inactive_anon 4096 [ 198.158839][ T7478] total_active_anon 0 [ 198.158845][ T7478] total_inactive_file 0 [ 198.158890][ T7478] total_active_file 0 [ 198.158897][ T7478] total_unevictable 0 [ 198.206474][ T7478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2262,pid=9614,uid=0 [ 198.223738][ T7478] Memory cgroup out of memory: Killed process 9614 (syz.5.2262) total-vm:93632kB, anon-rss:948kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 198.353327][ T9667] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2284'. [ 198.579378][ T9689] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 198.587307][ T9689] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.681361][ T9691] lo speed is unknown, defaulting to 1000 [ 198.941027][ T9700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2297'. [ 198.969282][ T9702] loop3: detected capacity change from 0 to 512 [ 198.977085][ T9702] ext4: Unknown parameter 'fsmagic' [ 199.256413][ T9706] lo speed is unknown, defaulting to 1000 [ 199.513552][ T9710] loop1: detected capacity change from 0 to 164 [ 199.537502][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 199.537515][ T29] audit: type=1326 audit(1755990880.155:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.586795][ T29] audit: type=1326 audit(1755990880.195:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.612445][ T29] audit: type=1326 audit(1755990880.195:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.637213][ T29] audit: type=1326 audit(1755990880.195:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.661520][ T29] audit: type=1326 audit(1755990880.195:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.687088][ T29] audit: type=1326 audit(1755990880.195:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.712428][ T29] audit: type=1326 audit(1755990880.195:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.737363][ T29] audit: type=1326 audit(1755990880.195:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.737419][ T29] audit: type=1326 audit(1755990880.195:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.737438][ T29] audit: type=1326 audit(1755990880.195:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 199.915560][ T9729] loop5: detected capacity change from 0 to 8192 [ 200.122165][ T9739] loop3: detected capacity change from 0 to 512 [ 200.160663][ T9739] ext4: Unknown parameter 'fsmagic' [ 200.614960][ T9751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2318'. [ 200.832135][ T9775] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 200.839568][ T9775] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 200.883793][ T9786] FAULT_INJECTION: forcing a failure. [ 200.883793][ T9786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.898071][ T9786] CPU: 1 UID: 0 PID: 9786 Comm: syz.3.2335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.898100][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.898112][ T9786] Call Trace: [ 200.898120][ T9786] [ 200.898204][ T9786] __dump_stack+0x1d/0x30 [ 200.898226][ T9786] dump_stack_lvl+0xe8/0x140 [ 200.898246][ T9786] dump_stack+0x15/0x1b [ 200.898261][ T9786] should_fail_ex+0x265/0x280 [ 200.898282][ T9786] should_fail+0xb/0x20 [ 200.898414][ T9786] should_fail_usercopy+0x1a/0x20 [ 200.898490][ T9786] _copy_from_user+0x1c/0xb0 [ 200.898514][ T9786] ___sys_sendmsg+0xc1/0x1d0 [ 200.898548][ T9786] __x64_sys_sendmsg+0xd4/0x160 [ 200.898641][ T9786] x64_sys_call+0x191e/0x2ff0 [ 200.898659][ T9786] do_syscall_64+0xd2/0x200 [ 200.898680][ T9786] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.898737][ T9786] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.898760][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.898778][ T9786] RIP: 0033:0x7fec3e70ebe9 [ 200.898792][ T9786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.898806][ T9786] RSP: 002b:00007fec3d177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.898903][ T9786] RAX: ffffffffffffffda RBX: 00007fec3e935fa0 RCX: 00007fec3e70ebe9 [ 200.898916][ T9786] RDX: 00000000200080c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 200.898929][ T9786] RBP: 00007fec3d177090 R08: 0000000000000000 R09: 0000000000000000 [ 200.898940][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.899030][ T9786] R13: 00007fec3e936038 R14: 00007fec3e935fa0 R15: 00007ffe1a4c7d88 [ 200.899045][ T9786] [ 201.106667][ T9789] loop3: detected capacity change from 0 to 512 [ 201.125679][ T9789] ext4: Unknown parameter 'fsmagic' [ 201.132057][ T9787] loop0: detected capacity change from 0 to 8192 [ 201.366957][ T9811] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 201.374639][ T9811] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 202.034763][ T9813] lo speed is unknown, defaulting to 1000 [ 202.093287][ T9819] loop1: detected capacity change from 0 to 512 [ 202.102031][ T9819] ext4: Unknown parameter 'fsmagic' [ 202.228868][ T9839] loop0: detected capacity change from 0 to 512 [ 202.253606][ T9839] ext4: Unknown parameter 'fsmagic' [ 202.267471][ T9837] loop5: detected capacity change from 0 to 8192 [ 202.318730][ T9841] loop3: detected capacity change from 0 to 164 [ 203.017028][ T9878] loop4: detected capacity change from 0 to 4096 [ 203.028008][ T9878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.150528][ T9883] lo speed is unknown, defaulting to 1000 [ 203.487554][ T9884] EXT4-fs (loop4): shut down requested (0) [ 203.673611][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.686716][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.777248][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.786331][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.795503][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.805726][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.815902][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.827446][ T3310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 203.964250][ T4267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.985030][ T9903] bond2: entered promiscuous mode [ 203.990229][ T9903] bond2: entered allmulticast mode [ 203.996115][ T9903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.136949][ T9910] lo speed is unknown, defaulting to 1000 [ 204.254648][ T51] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.373059][ T51] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.443729][ T51] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.513489][ T51] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.597532][ T9917] lo speed is unknown, defaulting to 1000 [ 204.693406][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 204.693421][ T29] audit: type=1400 audit(1755990885.315:4299): avc: denied { name_bind } for pid=9931 comm="syz.5.2389" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 204.771292][ T51] ip6gretap0 (unregistering): left promiscuous mode [ 204.793805][ T51] gretap0 (unregistering): left promiscuous mode [ 204.811329][ T29] audit: type=1400 audit(1755990885.425:4300): avc: denied { mounton } for pid=9936 comm="syz.5.2391" path="/167/file0" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 204.882973][ T51] bond0 (unregistering): Released all slaves [ 204.899137][ T51] bond1 (unregistering): Released all slaves [ 204.918041][ T51] bond2 (unregistering): Released all slaves [ 204.935672][ T51] bond3 (unregistering): Released all slaves [ 204.950403][ T51] bond4 (unregistering): Released all slaves [ 204.985144][ T9943] syzkaller0: entered promiscuous mode [ 204.990674][ T9943] syzkaller0: entered allmulticast mode [ 205.001985][ T29] audit: type=1400 audit(1755990885.625:4301): avc: denied { create } for pid=9949 comm="syz.3.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.032626][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 205.061083][ T9952] loop5: detected capacity change from 0 to 2048 [ 205.085222][ T29] audit: type=1326 audit(1755990885.665:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.5.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 205.109440][ T29] audit: type=1326 audit(1755990885.665:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.5.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 205.133308][ T29] audit: type=1326 audit(1755990885.665:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.5.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 205.156904][ T29] audit: type=1326 audit(1755990885.665:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.5.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 205.180664][ T29] audit: type=1326 audit(1755990885.665:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.5.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 205.204507][ T29] audit: type=1326 audit(1755990885.665:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.5.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 205.228363][ T29] audit: type=1326 audit(1755990885.665:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.5.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456c7ebe9 code=0x7ffc0000 [ 205.295506][ T9952] loop5: p2 p3 p7 [ 205.300873][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2398'. [ 205.315500][ T9933] lo speed is unknown, defaulting to 1000 [ 205.363754][ T9952] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2398'. [ 205.423756][ T51] hsr_slave_0: left promiscuous mode [ 205.433101][ T51] hsr_slave_1: left promiscuous mode [ 205.444563][ T51] veth1_macvtap: left promiscuous mode [ 205.450281][ T51] veth0_macvtap: left promiscuous mode [ 205.459879][ T51] veth1_vlan: left promiscuous mode [ 205.465493][ T9971] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 205.468542][ T51] veth0_vlan: left promiscuous mode [ 205.473196][ T9971] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 205.667234][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.674663][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.684973][ T9978] program syz.0.2406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.702882][ T9917] bridge_slave_0: entered allmulticast mode [ 205.709430][ T9917] bridge_slave_0: entered promiscuous mode [ 205.732369][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.739454][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.768613][ T9917] bridge_slave_1: entered allmulticast mode [ 205.782153][ T9917] bridge_slave_1: entered promiscuous mode [ 205.822694][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.832748][ T9977] lo speed is unknown, defaulting to 1000 [ 205.837390][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.901053][ T9917] team0: Port device team_slave_0 added [ 205.935101][ T9917] team0: Port device team_slave_1 added [ 205.958999][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.967117][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.993673][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.006204][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.013262][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.039903][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.067620][ T9917] hsr_slave_0: entered promiscuous mode [ 206.074788][ T9917] hsr_slave_1: entered promiscuous mode [ 206.080802][ T9917] debugfs: 'hsr0' already exists in 'hsr' [ 206.087016][ T9917] Cannot create hsr debugfs directory [ 206.113370][ T51] IPVS: stop unused estimator thread 0... [ 206.232585][ T9917] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 206.254018][ T9917] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 206.275307][ T9917] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.297526][ T9917] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.358815][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.373432][ T9917] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.385094][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.392360][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.409441][ T9917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.420848][ T9917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.464630][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.473798][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.558746][ T9917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.566779][T10006] FAULT_INJECTION: forcing a failure. [ 206.566779][T10006] name failslab, interval 1, probability 0, space 0, times 0 [ 206.581424][T10006] CPU: 0 UID: 0 PID: 10006 Comm: syz.3.2414 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.581472][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.581484][T10006] Call Trace: [ 206.581491][T10006] [ 206.581507][T10006] __dump_stack+0x1d/0x30 [ 206.581556][T10006] dump_stack_lvl+0xe8/0x140 [ 206.581592][T10006] dump_stack+0x15/0x1b [ 206.581681][T10006] should_fail_ex+0x265/0x280 [ 206.581853][T10006] should_failslab+0x8c/0xb0 [ 206.581882][T10006] kmem_cache_alloc_noprof+0x50/0x310 [ 206.581938][T10006] ? security_inode_alloc+0x37/0x100 [ 206.582025][T10006] security_inode_alloc+0x37/0x100 [ 206.582133][T10006] inode_init_always_gfp+0x4b7/0x500 [ 206.582220][T10006] alloc_inode+0x58/0x170 [ 206.582241][T10006] create_pipe_files+0x41/0x440 [ 206.582270][T10006] __do_pipe_flags+0x44/0x150 [ 206.582294][T10006] do_pipe2+0x61/0x130 [ 206.582316][T10006] __x64_sys_pipe+0x21/0x30 [ 206.582336][T10006] x64_sys_call+0x353/0x2ff0 [ 206.582357][T10006] do_syscall_64+0xd2/0x200 [ 206.582410][T10006] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.582435][T10006] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.582584][T10006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.582607][T10006] RIP: 0033:0x7fec3e70ebe9 [ 206.582621][T10006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.582643][T10006] RSP: 002b:00007fec3d177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 206.582664][T10006] RAX: ffffffffffffffda RBX: 00007fec3e935fa0 RCX: 00007fec3e70ebe9 [ 206.582674][T10006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 206.582684][T10006] RBP: 00007fec3d177090 R08: 0000000000000000 R09: 0000000000000000 [ 206.582700][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.582710][T10006] R13: 00007fec3e936038 R14: 00007fec3e935fa0 R15: 00007ffe1a4c7d88 [ 206.582724][T10006] [ 206.965810][ T9917] veth0_vlan: entered promiscuous mode [ 206.992188][ T9917] veth1_vlan: entered promiscuous mode [ 207.016153][T10038] program syz.3.2420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.097382][T10033] lo speed is unknown, defaulting to 1000 [ 207.098109][ T9917] veth0_macvtap: entered promiscuous mode [ 207.148494][ T9917] veth1_macvtap: entered promiscuous mode [ 207.164159][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.190981][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.258999][T10041] lo speed is unknown, defaulting to 1000 [ 207.512243][ T2090] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.526142][ T2090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.549422][ T2090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.569642][ T2090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.689059][T10048] lo speed is unknown, defaulting to 1000 [ 207.916152][T10061] loop5: detected capacity change from 0 to 512 [ 207.936175][T10061] EXT4-fs: Ignoring removed bh option [ 207.961515][T10061] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.970748][T10061] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 208.010671][T10061] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 208.023584][T10061] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 208.047484][T10061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.192709][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.655898][T10099] program syz.6.2444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.816619][T10107] bond6: entered promiscuous mode [ 208.821746][T10107] bond6: entered allmulticast mode [ 208.847923][T10107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.864498][T10097] lo speed is unknown, defaulting to 1000 [ 208.891940][T10114] loop1: detected capacity change from 0 to 1024 [ 208.907944][T10094] lo speed is unknown, defaulting to 1000 [ 208.914029][T10114] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 208.926032][T10114] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 208.947511][T10105] lo speed is unknown, defaulting to 1000 [ 209.017119][T10114] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 209.027782][T10114] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 209.267230][T10133] vhci_hcd: invalid port number 255 [ 209.315257][T10105] lo speed is unknown, defaulting to 1000 [ 209.576434][T10145] loop6: detected capacity change from 0 to 512 [ 209.622242][T10145] ext4: Unknown parameter 'fsmagic' [ 209.669741][T10151] vhci_hcd: invalid port number 255 [ 209.704135][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 209.704148][ T29] audit: type=1400 audit(1755990890.325:4497): avc: denied { create } for pid=10154 comm="syz.0.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.749646][ T29] audit: type=1326 audit(1755990890.365:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10156 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b740cebe9 code=0x7ffc0000 [ 209.751157][T10158] loop0: detected capacity change from 0 to 512 [ 209.773320][ T29] audit: type=1326 audit(1755990890.365:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10156 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b740cebe9 code=0x7ffc0000 [ 209.773349][ T29] audit: type=1326 audit(1755990890.365:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10156 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b740cec23 code=0x7ffc0000 [ 209.790678][ T29] audit: type=1326 audit(1755990890.365:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10156 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b740cd69f code=0x7ffc0000 [ 209.850838][ T29] audit: type=1326 audit(1755990890.365:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10156 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b740cec77 code=0x7ffc0000 [ 209.874495][ T29] audit: type=1326 audit(1755990890.365:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10156 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b740cd550 code=0x7ffc0000 [ 209.898502][ T29] audit: type=1326 audit(1755990890.365:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10156 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b740ce7eb code=0x7ffc0000 [ 209.923164][T10158] ext4: Unknown parameter 'fsmagic' [ 209.935021][T10162] loop3: detected capacity change from 0 to 164 [ 209.991550][T10171] FAULT_INJECTION: forcing a failure. [ 209.991550][T10171] name failslab, interval 1, probability 0, space 0, times 0 [ 210.004525][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.6.2474 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.004549][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.004584][T10171] Call Trace: [ 210.004591][T10171] [ 210.004599][T10171] __dump_stack+0x1d/0x30 [ 210.004617][T10171] dump_stack_lvl+0xe8/0x140 [ 210.004633][T10171] dump_stack+0x15/0x1b [ 210.004647][T10171] should_fail_ex+0x265/0x280 [ 210.004665][T10171] should_failslab+0x8c/0xb0 [ 210.004741][T10171] __kmalloc_noprof+0xa5/0x3e0 [ 210.004761][T10171] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 210.004786][T10171] kernfs_fop_write_iter+0xe1/0x2d0 [ 210.004915][T10171] ? rw_verify_area+0x8d/0x160 [ 210.004936][T10171] aio_write+0x2e2/0x410 [ 210.004967][T10171] io_submit_one+0xacd/0x11d0 [ 210.005060][T10171] __se_sys_io_submit+0xfb/0x280 [ 210.005082][T10171] __x64_sys_io_submit+0x43/0x50 [ 210.005165][T10171] x64_sys_call+0x2d5d/0x2ff0 [ 210.005186][T10171] do_syscall_64+0xd2/0x200 [ 210.005269][T10171] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.005287][T10171] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.005439][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.005456][T10171] RIP: 0033:0x7f5ccf30ebe9 [ 210.005470][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.005487][T10171] RSP: 002b:00007f5ccdd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 210.005506][T10171] RAX: ffffffffffffffda RBX: 00007f5ccf535fa0 RCX: 00007f5ccf30ebe9 [ 210.005519][T10171] RDX: 0000200000000400 RSI: 0000000000000001 RDI: 00007f5cd006f000 [ 210.005531][T10171] RBP: 00007f5ccdd77090 R08: 0000000000000000 R09: 0000000000000000 [ 210.005581][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.005594][T10171] R13: 00007f5ccf536038 R14: 00007f5ccf535fa0 R15: 00007ffc0c725448 [ 210.005612][T10171] [ 210.206508][ T29] audit: type=1400 audit(1755990890.505:4505): avc: denied { allowed } for pid=10161 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 210.226000][ T29] audit: type=1400 audit(1755990890.525:4506): avc: denied { create } for pid=10161 comm="+}[@" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.819315][T10195] lo speed is unknown, defaulting to 1000 [ 210.877088][T10196] loop0: detected capacity change from 0 to 512 [ 210.887585][T10196] ext4: Unknown parameter 'fsmagic' [ 211.056671][T10216] lo speed is unknown, defaulting to 1000 [ 211.073738][T10218] program syz.6.2492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.271450][T10232] loop3: detected capacity change from 0 to 512 [ 211.278384][T10232] ext4: Unknown parameter 'fsmagic' [ 211.794001][T10230] syz.0.2497 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 211.808595][T10230] CPU: 0 UID: 0 PID: 10230 Comm: syz.0.2497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.808623][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.808713][T10230] Call Trace: [ 211.808720][T10230] [ 211.808730][T10230] __dump_stack+0x1d/0x30 [ 211.808751][T10230] dump_stack_lvl+0xe8/0x140 [ 211.808770][T10230] dump_stack+0x15/0x1b [ 211.808787][T10230] dump_header+0x81/0x220 [ 211.808884][T10230] oom_kill_process+0x342/0x400 [ 211.808916][T10230] out_of_memory+0x979/0xb80 [ 211.808974][T10230] try_charge_memcg+0x5e6/0x9e0 [ 211.809001][T10230] obj_cgroup_charge_pages+0xa6/0x150 [ 211.809063][T10230] __memcg_kmem_charge_page+0x9f/0x170 [ 211.809181][T10230] __alloc_frozen_pages_noprof+0x188/0x360 [ 211.809296][T10230] alloc_pages_mpol+0xb3/0x250 [ 211.809416][T10230] alloc_pages_noprof+0x90/0x130 [ 211.809447][T10230] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 211.809486][T10230] __kvmalloc_node_noprof+0x30f/0x4e0 [ 211.809515][T10230] ? ip_set_alloc+0x1f/0x30 [ 211.809578][T10230] ? ip_set_alloc+0x1f/0x30 [ 211.809607][T10230] ? __kmalloc_cache_noprof+0x189/0x320 [ 211.809636][T10230] ip_set_alloc+0x1f/0x30 [ 211.809738][T10230] hash_netiface_create+0x282/0x740 [ 211.809772][T10230] ? __pfx_hash_netiface_create+0x10/0x10 [ 211.809858][T10230] ip_set_create+0x3cc/0x960 [ 211.809963][T10230] ? __nla_parse+0x40/0x60 [ 211.809987][T10230] nfnetlink_rcv_msg+0x4c3/0x590 [ 211.810032][T10230] netlink_rcv_skb+0x123/0x220 [ 211.810052][T10230] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 211.810111][T10230] nfnetlink_rcv+0x16b/0x1690 [ 211.810182][T10230] ? nlmon_xmit+0x4f/0x60 [ 211.810207][T10230] ? consume_skb+0x49/0x150 [ 211.810226][T10230] ? nlmon_xmit+0x4f/0x60 [ 211.810330][T10230] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 211.810359][T10230] ? __dev_queue_xmit+0x1200/0x2000 [ 211.810381][T10230] ? __dev_queue_xmit+0x182/0x2000 [ 211.810429][T10230] ? ref_tracker_free+0x37d/0x3e0 [ 211.810457][T10230] ? __netlink_deliver_tap+0x4dc/0x500 [ 211.810482][T10230] netlink_unicast+0x5bd/0x690 [ 211.810521][T10230] netlink_sendmsg+0x58b/0x6b0 [ 211.810545][T10230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.810567][T10230] __sock_sendmsg+0x145/0x180 [ 211.810671][T10230] ____sys_sendmsg+0x31e/0x4e0 [ 211.810695][T10230] ___sys_sendmsg+0x17b/0x1d0 [ 211.810775][T10230] __x64_sys_sendmsg+0xd4/0x160 [ 211.810808][T10230] x64_sys_call+0x191e/0x2ff0 [ 211.810831][T10230] do_syscall_64+0xd2/0x200 [ 211.810857][T10230] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.810959][T10230] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.810984][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.811083][T10230] RIP: 0033:0x7f1b740cebe9 [ 211.811114][T10230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.811132][T10230] RSP: 002b:00007f1b72b2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.811151][T10230] RAX: ffffffffffffffda RBX: 00007f1b742f5fa0 RCX: 00007f1b740cebe9 [ 211.811164][T10230] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 211.811176][T10230] RBP: 00007f1b74151e19 R08: 0000000000000000 R09: 0000000000000000 [ 211.811189][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.811249][T10230] R13: 00007f1b742f6038 R14: 00007f1b742f5fa0 R15: 00007ffc0143f9c8 [ 211.811271][T10230] [ 211.811317][T10230] memory: usage 307200kB, limit 307200kB, failcnt 5198 [ 212.158433][T10230] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 212.167261][T10230] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 212.175120][T10230] Memory cgroup stats for /syz0: [ 212.175422][T10230] cache 0 [ 212.184841][T10230] rss 0 [ 212.187922][T10230] shmem 0 [ 212.190868][T10230] mapped_file 0 [ 212.195100][T10230] dirty 0 [ 212.198131][T10230] writeback 0 [ 212.201543][T10230] workingset_refault_anon 601 [ 212.206520][T10230] workingset_refault_file 15174 [ 212.211480][T10230] swap 192512 [ 212.214986][T10230] swapcached 4096 [ 212.219439][T10230] pgpgin 499532 [ 212.223843][T10230] pgpgout 499531 [ 212.227577][T10230] pgfault 287554 [ 212.231186][T10230] pgmajfault 433 [ 212.235085][T10230] inactive_anon 0 [ 212.239573][T10230] active_anon 4096 [ 212.243471][T10230] inactive_file 0 [ 212.247108][T10230] active_file 0 [ 212.250573][T10230] unevictable 0 [ 212.254267][T10230] hierarchical_memory_limit 314572800 [ 212.259645][T10230] hierarchical_memsw_limit 9223372036854771712 [ 212.265887][T10230] total_cache 0 [ 212.269340][T10230] total_rss 0 [ 212.272921][T10230] total_shmem 0 [ 212.276610][T10230] total_mapped_file 0 [ 212.280720][T10230] total_dirty 0 [ 212.284341][T10230] total_writeback 0 [ 212.288349][T10230] total_workingset_refault_anon 601 [ 212.293796][T10230] total_workingset_refault_file 15174 [ 212.299866][T10230] total_swap 192512 [ 212.303744][T10230] total_swapcached 4096 [ 212.304857][T10238] loop5: detected capacity change from 0 to 4096 [ 212.307887][T10230] total_pgpgin 499532 [ 212.307896][T10230] total_pgpgout 499531 [ 212.307903][T10230] total_pgfault 287554 [ 212.307909][T10230] total_pgmajfault 433 [ 212.307916][T10230] total_inactive_anon 0 [ 212.335922][T10230] total_active_anon 4096 [ 212.338168][T10238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.340165][T10230] total_inactive_file 0 [ 212.340175][T10230] total_active_file 0 [ 212.340182][T10230] total_unevictable 0 [ 212.340251][T10230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2497,pid=10229,uid=0 [ 212.380464][T10230] Memory cgroup out of memory: Killed process 10229 (syz.0.2497) total-vm:93632kB, anon-rss:944kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 212.412847][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.717226][T10268] loop5: detected capacity change from 0 to 4096 [ 212.755485][T10268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.790423][T10274] loop1: detected capacity change from 0 to 1024 [ 212.790455][T10280] loop3: detected capacity change from 0 to 512 [ 212.813103][T10280] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 212.823798][T10274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.825522][T10280] EXT4-fs (loop3): orphan cleanup on readonly fs [ 212.849576][T10280] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2518: Failed to acquire dquot type 1 [ 212.885962][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.898832][T10280] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2518: bg 0: block 40: padding at end of block bitmap is not set [ 212.915372][T10288] lo speed is unknown, defaulting to 1000 [ 212.943434][T10280] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 212.977069][T10288] program syz.0.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.988126][T10280] EXT4-fs (loop3): 1 truncate cleaned up [ 213.007788][T10280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.054370][T10295] vhci_hcd: invalid port number 255 [ 213.085944][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.198245][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.563332][T10316] lo speed is unknown, defaulting to 1000 [ 213.821791][T10319] program syz.0.2529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.852548][T10318] lo speed is unknown, defaulting to 1000 [ 214.272110][T10328] lo speed is unknown, defaulting to 1000 [ 214.395223][T10330] bond1: entered promiscuous mode [ 214.400391][T10330] bond1: entered allmulticast mode [ 214.470629][T10330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.717624][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 214.717639][ T29] audit: type=1400 audit(1755990895.335:4784): avc: denied { setopt } for pid=10337 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.763266][ T29] audit: type=1400 audit(1755990895.345:4785): avc: denied { execmem } for pid=10340 comm="syz.1.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 214.782787][ T29] audit: type=1400 audit(1755990895.365:4786): avc: denied { connect } for pid=10337 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.802333][ T29] audit: type=1400 audit(1755990895.365:4787): avc: denied { name_connect } for pid=10337 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 214.882788][T10338] loop3: detected capacity change from 0 to 164 [ 215.022077][T10346] lo speed is unknown, defaulting to 1000 [ 215.267039][ T29] audit: type=1400 audit(1755990895.505:4788): avc: denied { mounton } for pid=10337 comm="+}[@" path=2F3536322F2E02 dev="tmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 215.289727][ T29] audit: type=1400 audit(1755990895.545:4789): avc: denied { create } for pid=10343 comm="syz.3.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.309326][ T29] audit: type=1400 audit(1755990895.545:4790): avc: denied { create } for pid=10343 comm="syz.3.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.329196][ T29] audit: type=1400 audit(1755990895.545:4791): avc: denied { bind } for pid=10343 comm="syz.3.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.350040][ T29] audit: type=1400 audit(1755990895.545:4792): avc: denied { connect } for pid=10329 comm="syz.6.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.370624][ T29] audit: type=1400 audit(1755990895.545:4793): avc: denied { create } for pid=10329 comm="syz.6.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.597635][T10356] program syz.0.2540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.620015][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2542'. [ 215.629148][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2542'. [ 215.672366][T10352] lo speed is unknown, defaulting to 1000 [ 215.698852][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2542'. [ 215.708187][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2542'. [ 215.758414][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2542'. [ 215.767572][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2542'. [ 215.946485][T10385] bridge_slave_0: left allmulticast mode [ 215.952520][T10385] bridge_slave_0: left promiscuous mode [ 215.958503][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.287659][T10385] bridge_slave_1: left allmulticast mode [ 216.293528][T10385] bridge_slave_1: left promiscuous mode [ 216.299274][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.327134][T10385] bond0: (slave bond_slave_0): Releasing backup interface [ 216.349490][T10385] bond0: (slave bond_slave_1): Releasing backup interface [ 216.379083][T10385] team0: Failed to send options change via netlink (err -105) [ 216.387993][T10385] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 216.391814][T10404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2552'. [ 216.405979][T10385] team0: Port device team_slave_0 removed [ 216.420301][T10385] team0: Failed to send options change via netlink (err -105) [ 216.429657][T10385] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 216.440656][T10385] team0: Port device team_slave_1 removed [ 216.452156][T10385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.459746][T10385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.477407][T10385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.484979][T10385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.544161][T10388] lo speed is unknown, defaulting to 1000 [ 216.787178][T10421] program syz.3.2555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.821493][T10422] loop6: detected capacity change from 0 to 2048 [ 216.892693][T10417] lo speed is unknown, defaulting to 1000 [ 216.976693][T10422] loop6: p2 p3 p7 [ 216.997121][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2559'. [ 217.027788][T10422] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2559'. [ 217.318560][T10434] loop6: detected capacity change from 0 to 1024 [ 217.326368][T10434] EXT4-fs warning (device loop6): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 217.337155][T10434] EXT4-fs warning (device loop6): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop5 [ 217.395020][T10434] lo speed is unknown, defaulting to 1000 [ 217.457207][T10440] loop5: detected capacity change from 0 to 164 [ 217.606750][T10446] loop0: detected capacity change from 0 to 512 [ 217.622824][T10446] ext4: Unknown parameter 'fsmagic' [ 217.827031][T10475] loop9: detected capacity change from 0 to 7 [ 217.833530][T10475] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.843675][T10475] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.852360][T10475] loop9: unable to read partition table [ 217.858094][T10475] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 217.858094][T10475] ) failed (rc=-5) [ 217.910638][T10475] lo speed is unknown, defaulting to 1000 [ 217.929739][T10487] program syz.0.2582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.280064][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2595'. [ 218.348661][T10517] 9pnet_fd: Insufficient options for proto=fd [ 218.386153][T10522] loop6: detected capacity change from 0 to 512 [ 218.393349][T10522] ext4: Unknown parameter 'fsmagic' [ 218.798076][T10557] lo speed is unknown, defaulting to 1000 [ 218.813100][T10558] program syz.5.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.199969][T10564] loop1: detected capacity change from 0 to 2048 [ 219.267713][T10564] loop1: p2 p3 p7 [ 219.677771][T10595] loop0: detected capacity change from 0 to 2048 [ 219.724815][T10595] loop0: p2 p3 p7 [ 219.731130][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 219.731146][ T29] audit: type=1326 audit(1755990900.345:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b740cd3fa code=0x7ffc0000 [ 219.764037][ T29] audit: type=1326 audit(1755990900.345:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b740cd3fa code=0x7ffc0000 [ 219.788094][ T29] audit: type=1326 audit(1755990900.355:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1b740ce167 code=0x7ffc0000 [ 219.812738][ T29] audit: type=1326 audit(1755990900.355:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b740cd3fa code=0x7ffc0000 [ 219.837168][ T29] audit: type=1326 audit(1755990900.355:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1b740ce167 code=0x7ffc0000 [ 219.863211][ T29] audit: type=1326 audit(1755990900.355:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b740cd3fa code=0x7ffc0000 [ 219.887333][ T29] audit: type=1326 audit(1755990900.355:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b740cd3fa code=0x7ffc0000 [ 219.911154][ T29] audit: type=1326 audit(1755990900.355:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b740cd3fa code=0x7ffc0000 [ 219.935208][ T29] audit: type=1326 audit(1755990900.355:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b740cd3fa code=0x7ffc0000 [ 219.959347][ T29] audit: type=1326 audit(1755990900.355:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.0.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1b740ce167 code=0x7ffc0000 [ 220.283228][T10627] lo speed is unknown, defaulting to 1000 [ 220.849861][T10649] lo speed is unknown, defaulting to 1000 [ 221.415043][T10675] FAULT_INJECTION: forcing a failure. [ 221.415043][T10675] name failslab, interval 1, probability 0, space 0, times 0 [ 221.428105][T10675] CPU: 0 UID: 0 PID: 10675 Comm: syz.6.2672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.428186][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.428201][T10675] Call Trace: [ 221.428249][T10675] [ 221.428321][T10675] __dump_stack+0x1d/0x30 [ 221.428422][T10675] dump_stack_lvl+0xe8/0x140 [ 221.428441][T10675] dump_stack+0x15/0x1b [ 221.428457][T10675] should_fail_ex+0x265/0x280 [ 221.428479][T10675] should_failslab+0x8c/0xb0 [ 221.428502][T10675] kmem_cache_alloc_node_noprof+0x57/0x320 [ 221.428531][T10675] ? __alloc_skb+0x101/0x320 [ 221.428562][T10675] __alloc_skb+0x101/0x320 [ 221.428590][T10675] ? audit_log_start+0x365/0x6c0 [ 221.428675][T10675] audit_log_start+0x380/0x6c0 [ 221.428714][T10675] audit_seccomp+0x48/0x100 [ 221.428738][T10675] ? __seccomp_filter+0x68c/0x10d0 [ 221.428759][T10675] __seccomp_filter+0x69d/0x10d0 [ 221.428809][T10675] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.428870][T10675] ? vfs_write+0x7e8/0x960 [ 221.428896][T10675] __secure_computing+0x82/0x150 [ 221.428957][T10675] syscall_trace_enter+0xcf/0x1e0 [ 221.428981][T10675] do_syscall_64+0xac/0x200 [ 221.429070][T10675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 221.429093][T10675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 221.429123][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.429144][T10675] RIP: 0033:0x7f5ccf30ebe9 [ 221.429160][T10675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.429188][T10675] RSP: 002b:00007f5ccdd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 221.429208][T10675] RAX: ffffffffffffffda RBX: 00007f5ccf535fa0 RCX: 00007f5ccf30ebe9 [ 221.429221][T10675] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000008 [ 221.429251][T10675] RBP: 00007f5ccdd77090 R08: 0000000000000000 R09: 0000000000000000 [ 221.429264][T10675] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 221.429276][T10675] R13: 00007f5ccf536038 R14: 00007f5ccf535fa0 R15: 00007ffc0c725448 [ 221.429295][T10675] [ 221.714624][T10677] lo speed is unknown, defaulting to 1000 [ 222.438478][T10714] lo speed is unknown, defaulting to 1000 [ 222.598768][T10719] FAULT_INJECTION: forcing a failure. [ 222.598768][T10719] name failslab, interval 1, probability 0, space 0, times 0 [ 222.611741][T10719] CPU: 1 UID: 0 PID: 10719 Comm: syz.0.2689 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.611766][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.611777][T10719] Call Trace: [ 222.611783][T10719] [ 222.611790][T10719] __dump_stack+0x1d/0x30 [ 222.611887][T10719] dump_stack_lvl+0xe8/0x140 [ 222.611906][T10719] dump_stack+0x15/0x1b [ 222.611923][T10719] should_fail_ex+0x265/0x280 [ 222.611940][T10719] should_failslab+0x8c/0xb0 [ 222.611962][T10719] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 222.612016][T10719] ? __d_alloc+0x3d/0x340 [ 222.612041][T10719] __d_alloc+0x3d/0x340 [ 222.612062][T10719] ? should_failslab+0x8c/0xb0 [ 222.612142][T10719] d_alloc_pseudo+0x1e/0x80 [ 222.612214][T10719] alloc_file_pseudo+0x71/0x160 [ 222.612239][T10719] ? security_inode_alloc+0x69/0x100 [ 222.612261][T10719] sock_alloc_file+0x9c/0x1e0 [ 222.612305][T10719] do_accept+0x1e4/0x3a0 [ 222.612341][T10719] __sys_accept4+0xbf/0x140 [ 222.612369][T10719] __x64_sys_accept4+0x51/0x60 [ 222.612460][T10719] x64_sys_call+0x2ed3/0x2ff0 [ 222.612556][T10719] do_syscall_64+0xd2/0x200 [ 222.612655][T10719] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 222.612674][T10719] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 222.612697][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.612719][T10719] RIP: 0033:0x7f1b740cebe9 [ 222.612776][T10719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.612790][T10719] RSP: 002b:00007f1b72b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 222.612814][T10719] RAX: ffffffffffffffda RBX: 00007f1b742f5fa0 RCX: 00007f1b740cebe9 [ 222.612826][T10719] RDX: 0000000000000000 RSI: 9999999999999999 RDI: 0000000000000003 [ 222.612909][T10719] RBP: 00007f1b72b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.612919][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.612930][T10719] R13: 00007f1b742f6038 R14: 00007f1b742f5fa0 R15: 00007ffc0143f9c8 [ 222.612948][T10719] [ 223.157990][T10735] lo speed is unknown, defaulting to 1000 [ 223.309445][T10738] loop6: detected capacity change from 0 to 512 [ 223.354455][T10738] ext4: Unknown parameter 'fsmagic' [ 223.430662][T10747] bond3: entered promiscuous mode [ 223.435931][T10747] bond3: entered allmulticast mode [ 223.441467][T10747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.455446][T10750] bond2: entered promiscuous mode [ 223.461535][T10750] bond2: entered allmulticast mode [ 223.472251][T10750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.261321][T10786] lo speed is unknown, defaulting to 1000 [ 224.549580][T10799] FAULT_INJECTION: forcing a failure. [ 224.549580][T10799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.563013][T10799] CPU: 1 UID: 0 PID: 10799 Comm: syz.1.2723 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.563039][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.563050][T10799] Call Trace: [ 224.563056][T10799] [ 224.563063][T10799] __dump_stack+0x1d/0x30 [ 224.563081][T10799] dump_stack_lvl+0xe8/0x140 [ 224.563119][T10799] dump_stack+0x15/0x1b [ 224.563133][T10799] should_fail_ex+0x265/0x280 [ 224.563195][T10799] should_fail+0xb/0x20 [ 224.563209][T10799] should_fail_usercopy+0x1a/0x20 [ 224.563227][T10799] strncpy_from_user+0x25/0x230 [ 224.563250][T10799] ? kmem_cache_alloc_noprof+0x186/0x310 [ 224.563322][T10799] ? getname_flags+0x80/0x3b0 [ 224.563343][T10799] getname_flags+0xae/0x3b0 [ 224.563389][T10799] __se_sys_move_mount+0x2d6/0x490 [ 224.563411][T10799] __x64_sys_move_mount+0x67/0x80 [ 224.563466][T10799] x64_sys_call+0xcfe/0x2ff0 [ 224.563580][T10799] do_syscall_64+0xd2/0x200 [ 224.563603][T10799] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.563693][T10799] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 224.563742][T10799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.563776][T10799] RIP: 0033:0x7fe0d9f6ebe9 [ 224.563790][T10799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.563805][T10799] RSP: 002b:00007fe0d89cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 224.563823][T10799] RAX: ffffffffffffffda RBX: 00007fe0da195fa0 RCX: 00007fe0d9f6ebe9 [ 224.563840][T10799] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 224.563857][T10799] RBP: 00007fe0d89cf090 R08: 0000000000000000 R09: 0000000000000000 [ 224.563868][T10799] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 224.563923][T10799] R13: 00007fe0da196038 R14: 00007fe0da195fa0 R15: 00007fff5058c5d8 [ 224.563940][T10799] [ 224.777180][T10769] syz.6.2710 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 224.791461][T10769] CPU: 0 UID: 0 PID: 10769 Comm: syz.6.2710 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.791492][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.791520][T10769] Call Trace: [ 224.791528][T10769] [ 224.791536][T10769] __dump_stack+0x1d/0x30 [ 224.791564][T10769] dump_stack_lvl+0xe8/0x140 [ 224.791585][T10769] dump_stack+0x15/0x1b [ 224.791602][T10769] dump_header+0x81/0x220 [ 224.791635][T10769] oom_kill_process+0x342/0x400 [ 224.791728][T10769] out_of_memory+0x979/0xb80 [ 224.791811][T10769] try_charge_memcg+0x5e6/0x9e0 [ 224.791913][T10769] obj_cgroup_charge_pages+0xa6/0x150 [ 224.791945][T10769] __memcg_kmem_charge_page+0x9f/0x170 [ 224.792007][T10769] __alloc_frozen_pages_noprof+0x188/0x360 [ 224.792044][T10769] alloc_pages_mpol+0xb3/0x250 [ 224.792130][T10769] alloc_pages_noprof+0x90/0x130 [ 224.792172][T10769] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 224.792215][T10769] __kvmalloc_node_noprof+0x30f/0x4e0 [ 224.792307][T10769] ? ip_set_alloc+0x1f/0x30 [ 224.792408][T10769] ? ip_set_alloc+0x1f/0x30 [ 224.792438][T10769] ? __kmalloc_cache_noprof+0x189/0x320 [ 224.792483][T10769] ip_set_alloc+0x1f/0x30 [ 224.792510][T10769] hash_netiface_create+0x282/0x740 [ 224.792586][T10769] ? __pfx_hash_netiface_create+0x10/0x10 [ 224.792620][T10769] ip_set_create+0x3cc/0x960 [ 224.792645][T10769] ? __nla_parse+0x40/0x60 [ 224.792665][T10769] nfnetlink_rcv_msg+0x4c3/0x590 [ 224.792710][T10769] netlink_rcv_skb+0x123/0x220 [ 224.792729][T10769] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.792843][T10769] nfnetlink_rcv+0x16b/0x1690 [ 224.792913][T10769] ? nlmon_xmit+0x4f/0x60 [ 224.792936][T10769] ? consume_skb+0x49/0x150 [ 224.792968][T10769] ? nlmon_xmit+0x4f/0x60 [ 224.792991][T10769] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 224.793014][T10769] ? __dev_queue_xmit+0x1200/0x2000 [ 224.793169][T10769] ? __dev_queue_xmit+0x182/0x2000 [ 224.793187][T10769] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 224.793244][T10769] ? ref_tracker_free+0x37d/0x3e0 [ 224.793268][T10769] ? __netlink_deliver_tap+0x4dc/0x500 [ 224.793357][T10769] netlink_unicast+0x5bd/0x690 [ 224.793391][T10769] netlink_sendmsg+0x58b/0x6b0 [ 224.793412][T10769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.793456][T10769] __sock_sendmsg+0x145/0x180 [ 224.793484][T10769] ____sys_sendmsg+0x31e/0x4e0 [ 224.793510][T10769] ___sys_sendmsg+0x17b/0x1d0 [ 224.793543][T10769] __x64_sys_sendmsg+0xd4/0x160 [ 224.793645][T10769] x64_sys_call+0x191e/0x2ff0 [ 224.793666][T10769] do_syscall_64+0xd2/0x200 [ 224.793690][T10769] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.793731][T10769] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 224.793752][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.793771][T10769] RIP: 0033:0x7f5ccf30ebe9 [ 224.793787][T10769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.793876][T10769] RSP: 002b:00007f5ccdd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.793974][T10769] RAX: ffffffffffffffda RBX: 00007f5ccf535fa0 RCX: 00007f5ccf30ebe9 [ 224.793986][T10769] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 224.794037][T10769] RBP: 00007f5ccf391e19 R08: 0000000000000000 R09: 0000000000000000 [ 224.794048][T10769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.794060][T10769] R13: 00007f5ccf536038 R14: 00007f5ccf535fa0 R15: 00007ffc0c725448 [ 224.794077][T10769] [ 224.794084][T10769] memory: usage 307200kB, limit 307200kB, failcnt 149 [ 224.823981][T10802] 9pnet_fd: Insufficient options for proto=fd [ 224.825299][T10769] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 225.161725][T10769] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 225.169499][T10769] Memory cgroup stats for /syz6: [ 225.176895][T10769] cache 0 [ 225.184904][T10769] rss 0 [ 225.187809][T10769] shmem 0 [ 225.190773][T10769] mapped_file 0 [ 225.194645][T10769] dirty 0 [ 225.197579][T10769] writeback 0 [ 225.200873][T10769] workingset_refault_anon 3 [ 225.205465][T10769] workingset_refault_file 0 [ 225.209989][T10769] swap 184320 [ 225.213383][T10769] swapcached 4096 [ 225.217097][T10769] pgpgin 50551 [ 225.220492][T10769] pgpgout 50550 [ 225.224046][T10769] pgfault 22159 [ 225.227738][T10769] pgmajfault 4 [ 225.229045][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 225.229057][ T29] audit: type=1400 audit(1755990905.845:5383): avc: denied { mount } for pid=10807 comm="syz.5.2727" name="/" dev="ramfs" ino=37433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 225.231410][T10769] inactive_anon 0 [ 225.263708][T10769] active_anon 4096 [ 225.267570][T10769] inactive_file 0 [ 225.271244][T10769] active_file 0 [ 225.274759][T10769] unevictable 0 [ 225.278225][T10769] hierarchical_memory_limit 314572800 [ 225.284676][T10769] hierarchical_memsw_limit 9223372036854771712 [ 225.291084][T10769] total_cache 0 [ 225.294586][T10769] total_rss 0 [ 225.297873][T10769] total_shmem 0 [ 225.301449][T10769] total_mapped_file 0 [ 225.305577][T10769] total_dirty 0 [ 225.309144][T10769] total_writeback 0 [ 225.312970][T10769] total_workingset_refault_anon 3 [ 225.318953][T10769] total_workingset_refault_file 0 [ 225.324005][T10769] total_swap 184320 [ 225.327907][T10769] total_swapcached 4096 [ 225.332099][T10769] total_pgpgin 50551 [ 225.335994][T10769] total_pgpgout 50550 [ 225.339969][T10769] total_pgfault 22159 [ 225.342931][ T29] audit: type=1400 audit(1755990905.965:5384): avc: denied { mounton } for pid=10811 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 225.343988][T10769] total_pgmajfault 4 [ 225.370125][T10769] total_inactive_anon 0 [ 225.374483][T10769] total_active_anon 4096 [ 225.378790][T10769] total_inactive_file 0 [ 225.379772][ T29] audit: type=1400 audit(1755990905.985:5385): avc: denied { module_request } for pid=10811 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 225.383031][T10769] total_active_file 0 [ 225.383040][T10769] total_unevictable 0 [ 225.383047][T10769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2710,pid=10768,uid=0 [ 225.428050][T10769] Memory cgroup out of memory: Killed process 10768 (syz.6.2710) total-vm:93632kB, anon-rss:924kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 225.435961][ T29] audit: type=1400 audit(1755990906.055:5386): avc: denied { sys_module } for pid=10811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 225.531316][ T29] audit: type=1326 audit(1755990906.145:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.3.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3e70ebe9 code=0x7ffc0000 [ 225.555853][ T29] audit: type=1326 audit(1755990906.145:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.3.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3e70ebe9 code=0x7ffc0000 [ 225.579551][ T29] audit: type=1326 audit(1755990906.145:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.3.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3e70ebe9 code=0x7ffc0000 [ 225.603404][ T29] audit: type=1326 audit(1755990906.145:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.3.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3e70ebe9 code=0x7ffc0000 [ 225.627348][ T29] audit: type=1326 audit(1755990906.145:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.3.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3e70ebe9 code=0x7ffc0000 [ 225.652163][ T29] audit: type=1326 audit(1755990906.145:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.3.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3e70ebe9 code=0x7ffc0000 [ 225.720971][T10827] loop6: detected capacity change from 0 to 512 [ 225.736643][T10836] __nla_validate_parse: 6 callbacks suppressed [ 225.736660][T10836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2737'. [ 225.754283][T10827] ext4: Unknown parameter 'fsmagic' [ 225.772731][ T1450] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.794498][T10839] 9pnet_fd: Insufficient options for proto=fd [ 225.837020][ T1450] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.869405][T10811] lo speed is unknown, defaulting to 1000 [ 225.879041][ T1450] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.025105][ T1450] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.174062][T10853] lo speed is unknown, defaulting to 1000 [ 226.478443][T10855] loop5: detected capacity change from 0 to 512 [ 226.517095][T10855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.563155][ T1450] bond0 (unregistering): Released all slaves [ 226.593957][ T1450] bond1 (unregistering): Released all slaves [ 226.607718][ T1450] bond2 (unregistering): Released all slaves [ 226.617948][ T1450] bond3 (unregistering): Released all slaves [ 226.627598][ T1450] bond4 (unregistering): Released all slaves [ 226.637346][ T1450] bond5 (unregistering): Released all slaves [ 226.647261][ T1450] bond6 (unregistering): Released all slaves [ 226.657903][T10864] loop9: detected capacity change from 0 to 7 [ 226.660481][T10811] chnl_net:caif_netlink_parms(): no params data found [ 226.665543][T10864] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.680817][T10864] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.688902][T10864] loop9: unable to read partition table [ 226.703787][T10864] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 226.703787][T10864] ) failed (rc=-5) [ 226.726741][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.806565][T10875] 9pnet_fd: Insufficient options for proto=fd [ 226.843979][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.851105][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.859833][T10864] program syz.1.2746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.869549][T10811] bridge_slave_0: entered allmulticast mode [ 226.876744][T10811] bridge_slave_0: entered promiscuous mode [ 226.883782][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.890892][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.898750][T10811] bridge_slave_1: entered allmulticast mode [ 226.908922][T10811] bridge_slave_1: entered promiscuous mode [ 226.915002][T10889] loop3: detected capacity change from 0 to 512 [ 226.925333][T10871] lo speed is unknown, defaulting to 1000 [ 226.931808][T10889] ext4: Unknown parameter 'fsmagic' [ 226.949650][T10882] loop5: detected capacity change from 0 to 164 [ 226.976839][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.994232][ T1450] veth1_macvtap: left promiscuous mode [ 227.004210][ T1450] veth0_macvtap: left promiscuous mode [ 227.017182][ T1450] veth1_vlan: left promiscuous mode [ 227.026085][ T1450] veth0_vlan: left promiscuous mode [ 227.074864][T10896] loop6: detected capacity change from 0 to 512 [ 227.097879][T10896] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 227.115880][T10896] EXT4-fs (loop6): 1 truncate cleaned up [ 227.129542][T10896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.146002][ T1450] pim6reg (unregistering): left allmulticast mode [ 227.155581][T10896] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.2754: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 227.184933][T10896] EXT4-fs (loop6): Remounting filesystem read-only [ 227.191522][T10896] EXT4-fs warning (device loop6): ext4_rename_delete:3731: inode #2: comm syz.6.2754: Deleting old file: nlink 5, error=-117 [ 227.267914][ T23] kernel write not supported for file /195/attr/exec (pid: 23 comm: kworker/1:0) [ 227.344045][ T9917] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.572438][ T31] smc: removing ib device syz! [ 227.625862][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.635838][ T3393] lo speed is unknown, defaulting to 1000 [ 227.642595][ T3393] infiniband syz0: ib_query_port failed (-19) [ 227.690789][T10913] 9pnet_fd: Insufficient options for proto=fd [ 227.703401][T10811] team0: Port device team_slave_0 added [ 227.722675][T10811] team0: Port device team_slave_1 added [ 227.765518][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.772698][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.800151][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.850715][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.858676][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.885514][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.934639][T10929] loop1: detected capacity change from 0 to 512 [ 227.951659][T10929] ext4: Unknown parameter 'fsmagic' [ 227.958780][T10901] syz.3.2756 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 227.970763][T10901] CPU: 1 UID: 0 PID: 10901 Comm: syz.3.2756 Not tainted syzkaller #0 PREEMPT(voluntary) [ 227.970847][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.970860][T10901] Call Trace: [ 227.970868][T10901] [ 227.970876][T10901] __dump_stack+0x1d/0x30 [ 227.970897][T10901] dump_stack_lvl+0xe8/0x140 [ 227.970919][T10901] dump_stack+0x15/0x1b [ 227.970933][T10901] dump_header+0x81/0x220 [ 227.970962][T10901] oom_kill_process+0x342/0x400 [ 227.970990][T10901] out_of_memory+0x979/0xb80 [ 227.971019][T10901] try_charge_memcg+0x5e6/0x9e0 [ 227.971048][T10901] charge_memcg+0x51/0xc0 [ 227.971067][T10901] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 227.971155][T10901] __read_swap_cache_async+0x1df/0x350 [ 227.971197][T10901] swap_cluster_readahead+0x277/0x3e0 [ 227.971228][T10901] swapin_readahead+0xde/0x6f0 [ 227.971283][T10901] ? __filemap_get_folio+0x4f7/0x6b0 [ 227.971384][T10901] ? swap_cache_get_folio+0x77/0x200 [ 227.971409][T10901] do_swap_page+0x301/0x2430 [ 227.971429][T10901] ? css_rstat_updated+0xb7/0x240 [ 227.971453][T10901] ? __pfx_default_wake_function+0x10/0x10 [ 227.971514][T10901] handle_mm_fault+0x9a5/0x2c20 [ 227.971540][T10901] do_user_addr_fault+0x636/0x1090 [ 227.971567][T10901] ? fpregs_restore_userregs+0xe2/0x1d0 [ 227.971663][T10901] ? switch_fpu_return+0xe/0x20 [ 227.971689][T10901] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 227.971716][T10901] exc_page_fault+0x62/0xa0 [ 227.971735][T10901] asm_exc_page_fault+0x26/0x30 [ 227.971824][T10901] RIP: 0033:0x7fec3e5e563c [ 227.971839][T10901] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 227.971856][T10901] RSP: 002b:00007ffe1a4c7ef0 EFLAGS: 00010206 [ 227.972121][T10901] RAX: 0000000000000000 RBX: 00007fec3e935fa0 RCX: 0000000000000000 [ 227.972134][T10901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556c2cc808 [ 227.972146][T10901] RBP: 00007fec3e937da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 227.972157][T10901] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000037a55 [ 227.972169][T10901] R13: 00007ffe1a4c7fe0 R14: ffffffffffffffff R15: 00007ffe1a4c8000 [ 227.972190][T10901] [ 228.195521][T10901] memory: usage 307200kB, limit 307200kB, failcnt 489 [ 228.202377][T10901] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 228.210286][T10901] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 228.217670][T10901] Memory cgroup stats for /syz3: [ 228.269641][T10901] cache 0 [ 228.277647][T10901] rss 4096 [ 228.280932][T10901] shmem 0 [ 228.284094][T10901] mapped_file 0 [ 228.287547][T10901] dirty 0 [ 228.290579][T10901] writeback 12288 [ 228.294358][T10901] workingset_refault_anon 357 [ 228.299780][T10901] workingset_refault_file 18216 [ 228.304868][T10901] swap 176128 [ 228.308232][T10901] swapcached 28672 [ 228.312119][T10901] pgpgin 479855 [ 228.315578][T10901] pgpgout 479847 [ 228.315608][T10940] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2767'. [ 228.319197][T10901] pgfault 264208 [ 228.319207][T10901] pgmajfault 234 [ 228.338932][T10901] inactive_anon 12288 [ 228.346254][T10901] active_anon 0 [ 228.349813][T10901] inactive_file 0 [ 228.356516][T10901] active_file 4096 [ 228.360397][T10901] unevictable 0 [ 228.366079][T10901] hierarchical_memory_limit 314572800 [ 228.371489][T10901] hierarchical_memsw_limit 9223372036854771712 [ 228.377801][T10901] total_cache 0 [ 228.381315][T10901] total_rss 4096 [ 228.383267][T10934] loop5: detected capacity change from 0 to 1024 [ 228.384850][T10901] total_shmem 0 [ 228.384858][T10901] total_mapped_file 0 [ 228.399241][T10901] total_dirty 0 [ 228.402642][T10934] EXT4-fs: Ignoring removed orlov option [ 228.402761][T10901] total_writeback 12288 [ 228.402769][T10901] total_workingset_refault_anon 357 [ 228.402776][T10901] total_workingset_refault_file 18216 [ 228.423342][T10901] total_swap 176128 [ 228.427159][T10901] total_swapcached 28672 [ 228.431438][T10901] total_pgpgin 479855 [ 228.435417][T10901] total_pgpgout 479847 [ 228.439502][T10901] total_pgfault 264208 [ 228.443319][T10934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.444020][T10901] total_pgmajfault 234 [ 228.460483][T10901] total_inactive_anon 12288 [ 228.465048][T10901] total_active_anon 0 [ 228.469701][T10901] total_inactive_file 0 [ 228.473981][T10901] total_active_file 4096 [ 228.478222][T10901] total_unevictable 0 [ 228.482262][T10901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2756,pid=10901,uid=0 [ 228.497298][T10901] Memory cgroup out of memory: Killed process 10901 (syz.3.2756) total-vm:93632kB, anon-rss:1072kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 228.601835][T10934] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 228.727673][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.913968][T10811] hsr_slave_0: entered promiscuous mode [ 228.959168][T10811] hsr_slave_1: entered promiscuous mode [ 228.995223][T10811] debugfs: 'hsr0' already exists in 'hsr' [ 229.001107][T10811] Cannot create hsr debugfs directory [ 229.023245][ T1450] IPVS: stop unused estimator thread 0... [ 229.172352][T10964] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2770'. [ 229.239849][T10970] loop9: detected capacity change from 0 to 7 [ 229.256064][T10970] Buffer I/O error on dev loop9, logical block 0, async page read [ 229.275881][T10970] Buffer I/O error on dev loop9, logical block 0, async page read [ 229.283905][T10970] loop9: unable to read partition table [ 229.307368][T10970] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 229.307368][T10970] ) failed (rc=-5) [ 229.362530][T10988] program syz.6.2771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.435207][T10985] loop3: detected capacity change from 0 to 164 [ 229.454528][T10993] bond3: entered promiscuous mode [ 229.460395][T10993] bond3: entered allmulticast mode [ 229.475010][T10993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.055262][T10811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.064192][T10811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.083290][T10811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.098818][T10811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.180225][T10811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.199813][T10811] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.214503][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.221716][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.240434][ T2090] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.247663][ T2090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.263413][T10811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.273909][T10811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.304324][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 230.304338][ T29] audit: type=1400 audit(1755990910.925:5585): avc: denied { sys_module } for pid=10811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.335051][T10811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.354566][T11051] loop5: detected capacity change from 0 to 512 [ 230.361339][T11051] ext4: Unknown parameter 'fsmagic' [ 230.505527][T10811] veth0_vlan: entered promiscuous mode [ 230.516518][T10811] veth1_vlan: entered promiscuous mode [ 230.535993][T10811] veth0_macvtap: entered promiscuous mode [ 230.546458][T10811] veth1_macvtap: entered promiscuous mode [ 230.566324][T10811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.596930][T11069] loop3: detected capacity change from 0 to 512 [ 230.605451][T10811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.625656][ T2090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.638538][ T29] audit: type=1400 audit(1755990911.235:5586): avc: denied { mount } for pid=11068 comm="syz.3.2787" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 230.669068][ T29] audit: type=1400 audit(1755990911.285:5587): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 230.699303][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.706574][ T29] audit: type=1326 audit(1755990911.315:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11072 comm="syz.6.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf30ebe9 code=0x7ffc0000 [ 230.718629][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.732038][ T29] audit: type=1326 audit(1755990911.315:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11072 comm="syz.6.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf30ebe9 code=0x7ffc0000 [ 230.764457][ T29] audit: type=1326 audit(1755990911.315:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11072 comm="syz.6.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ccf30ebe9 code=0x7ffc0000 [ 230.766104][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.788164][ T29] audit: type=1400 audit(1755990911.315:5591): avc: denied { mounton } for pid=10811 comm="syz-executor" path="/root/syzkaller.pGtTeQ/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 230.788191][ T29] audit: type=1400 audit(1755990911.315:5592): avc: denied { mount } for pid=10811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 230.788212][ T29] audit: type=1400 audit(1755990911.315:5593): avc: denied { mount } for pid=10811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 230.866750][ T29] audit: type=1400 audit(1755990911.315:5594): avc: denied { mounton } for pid=10811 comm="syz-executor" path="/root/syzkaller.pGtTeQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 230.913016][T11079] loop3: detected capacity change from 0 to 1024 [ 230.919693][T11079] EXT4-fs: Ignoring removed oldalloc option [ 230.946464][T11079] ext4: Unknown parameter 'fsuuid' [ 231.033167][T11086] 9pnet_fd: Insufficient options for proto=fd [ 231.227072][T11101] syzkaller0: entered promiscuous mode [ 231.232606][T11101] syzkaller0: entered allmulticast mode [ 231.311804][T11121] loop5: detected capacity change from 0 to 164 [ 231.377187][T11133] 9pnet_fd: Insufficient options for proto=fd [ 231.422279][T11135] lo speed is unknown, defaulting to 1000 [ 231.422339][T11137] SELinux: policydb version 3968 does not match my version range 15-35 [ 231.428209][T11135] lo speed is unknown, defaulting to 1000 [ 231.428373][T11135] lo speed is unknown, defaulting to 1000 [ 231.481759][T11137] SELinux: failed to load policy [ 231.487617][T11135] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 231.497269][T11135] lo speed is unknown, defaulting to 1000 [ 231.549993][T11135] lo speed is unknown, defaulting to 1000 [ 231.595473][T11146] loop1: detected capacity change from 0 to 512 [ 231.672886][T11146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.712616][ T2090] bond0 (unregistering): Released all slaves [ 231.721236][ T2090] bond1 (unregistering): Released all slaves [ 231.729920][ T2090] bond2 (unregistering): Released all slaves [ 231.745328][T11104] chnl_net:caif_netlink_parms(): no params data found [ 231.757986][T11135] lo speed is unknown, defaulting to 1000 [ 231.780436][T11135] lo speed is unknown, defaulting to 1000 [ 231.799520][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.812318][T11135] lo speed is unknown, defaulting to 1000 [ 231.828348][T11135] lo speed is unknown, defaulting to 1000 [ 231.873370][T11135] lo speed is unknown, defaulting to 1000 [ 231.879289][T11104] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.886747][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.897773][T11104] bridge_slave_0: entered allmulticast mode [ 231.919582][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2818'. [ 231.941707][T11104] bridge_slave_0: entered promiscuous mode [ 231.977397][T11159] loop5: detected capacity change from 0 to 512 [ 231.984797][T11159] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.993012][T11159] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.004240][ T2090] hsr_slave_0: left promiscuous mode [ 232.010546][ T2090] hsr_slave_1: left promiscuous mode [ 232.017820][T11159] EXT4-fs (loop5): 1 truncate cleaned up [ 232.025230][T11159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.109629][T11138] syz.0.2813 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 232.121007][T11138] CPU: 1 UID: 0 PID: 11138 Comm: syz.0.2813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.121057][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.121068][T11138] Call Trace: [ 232.121075][T11138] [ 232.121083][T11138] __dump_stack+0x1d/0x30 [ 232.121104][T11138] dump_stack_lvl+0xe8/0x140 [ 232.121123][T11138] dump_stack+0x15/0x1b [ 232.121154][T11138] dump_header+0x81/0x220 [ 232.121265][T11138] oom_kill_process+0x342/0x400 [ 232.121307][T11138] out_of_memory+0x979/0xb80 [ 232.121372][T11138] try_charge_memcg+0x5e6/0x9e0 [ 232.121395][T11138] charge_memcg+0x51/0xc0 [ 232.121409][T11138] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 232.121507][T11138] __read_swap_cache_async+0x1df/0x350 [ 232.121533][T11138] swap_cluster_readahead+0x277/0x3e0 [ 232.121635][T11138] swapin_readahead+0xde/0x6f0 [ 232.121731][T11138] ? __filemap_get_folio+0x4f7/0x6b0 [ 232.121764][T11138] ? swap_cache_get_folio+0x77/0x200 [ 232.121788][T11138] do_swap_page+0x301/0x2430 [ 232.121839][T11138] ? css_rstat_updated+0xb7/0x240 [ 232.121881][T11138] ? __pfx_default_wake_function+0x10/0x10 [ 232.121905][T11138] handle_mm_fault+0x9a5/0x2c20 [ 232.121935][T11138] do_user_addr_fault+0x636/0x1090 [ 232.122004][T11138] ? fpregs_restore_userregs+0xad/0x1d0 [ 232.122087][T11138] ? switch_fpu_return+0xe/0x20 [ 232.122133][T11138] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 232.122157][T11138] exc_page_fault+0x62/0xa0 [ 232.122200][T11138] asm_exc_page_fault+0x26/0x30 [ 232.122220][T11138] RIP: 0033:0x7fa6f9da563c [ 232.122241][T11138] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 232.122257][T11138] RSP: 002b:00007ffd32b4bfe0 EFLAGS: 00010206 [ 232.122271][T11138] RAX: 0000000000000000 RBX: 00007fa6fa0f5fa0 RCX: 0000000000000000 [ 232.122282][T11138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555591fba808 [ 232.122292][T11138] RBP: 00007fa6fa0f7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 232.122302][T11138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000038b45 [ 232.122312][T11138] R13: 00007ffd32b4c0d0 R14: ffffffffffffffff R15: 00007ffd32b4c0f0 [ 232.122378][T11138] [ 232.344426][T11138] memory: usage 307200kB, limit 307200kB, failcnt 5943 [ 232.351316][T11138] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 232.359460][T11138] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 232.367484][T11138] Memory cgroup stats for /syz0: [ 232.382701][T11138] cache 0 [ 232.390796][T11138] rss 0 [ 232.393632][T11138] shmem 0 [ 232.396562][T11138] mapped_file 0 [ 232.400108][T11138] dirty 0 [ 232.402824][T11104] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.403140][T11138] writeback 8192 [ 232.403147][T11138] workingset_refault_anon 742 [ 232.410271][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.413848][T11138] workingset_refault_file 18624 [ 232.413855][T11138] swap 172032 [ 232.413861][T11138] swapcached 8192 [ 232.413868][T11138] pgpgin 583906 [ 232.413896][T11138] pgpgout 583904 [ 232.413902][T11138] pgfault 307892 [ 232.443040][T11104] bridge_slave_1: entered allmulticast mode [ 232.444517][T11138] pgmajfault 522 [ 232.448595][T11104] bridge_slave_1: entered promiscuous mode [ 232.454055][T11138] inactive_anon 8192 [ 232.454066][T11138] active_anon 0 [ 232.454072][T11138] inactive_file 0 [ 232.454095][T11138] active_file 0 [ 232.478188][T11138] unevictable 0 [ 232.481873][T11138] hierarchical_memory_limit 314572800 [ 232.487291][T11138] hierarchical_memsw_limit 9223372036854771712 [ 232.493768][T11138] total_cache 0 [ 232.497354][T11138] total_rss 0 [ 232.500670][T11138] total_shmem 0 [ 232.504324][T11138] total_mapped_file 0 [ 232.508409][T11138] total_dirty 0 [ 232.511907][T11138] total_writeback 8192 [ 232.516163][T11138] total_workingset_refault_anon 742 [ 232.521481][T11138] total_workingset_refault_file 18624 [ 232.526863][T11138] total_swap 172032 [ 232.530675][T11138] total_swapcached 8192 [ 232.534928][T11138] total_pgpgin 583906 [ 232.539019][T11138] total_pgpgout 583904 [ 232.543243][T11138] total_pgfault 307892 [ 232.547313][T11138] total_pgmajfault 522 [ 232.551421][T11138] total_inactive_anon 8192 [ 232.555957][T11138] total_active_anon 0 [ 232.559937][T11138] total_inactive_file 0 [ 232.564139][T11138] total_active_file 0 [ 232.568161][T11138] total_unevictable 0 [ 232.572184][T11138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2813,pid=11138,uid=0 [ 232.587806][T11138] Memory cgroup out of memory: Killed process 11138 (syz.0.2813) total-vm:93560kB, anon-rss:940kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 232.639633][T11104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.658775][T11104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.697610][T11168] 9pnet_fd: Insufficient options for proto=fd [ 232.705570][T11104] team0: Port device team_slave_0 added [ 232.712401][T11104] team0: Port device team_slave_1 added [ 232.759323][T11104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.766524][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.793203][T11104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.828499][T11104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.835710][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.861725][T11104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.929422][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.946558][ T2090] IPVS: stop unused estimator thread 0... [ 232.955360][T11104] hsr_slave_0: entered promiscuous mode [ 232.963663][T11104] hsr_slave_1: entered promiscuous mode [ 232.976320][T11174] loop5: detected capacity change from 0 to 512 [ 232.983645][T11174] ext4: Unknown parameter 'fsmagic' [ 233.067286][T11179] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2826'. [ 233.114821][T11175] lo speed is unknown, defaulting to 1000 [ 233.219508][T11177] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 233.351072][T11177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2825'. [ 233.690051][T11190] loop1: detected capacity change from 0 to 164 [ 233.701017][T11194] 9pnet_fd: Insufficient options for proto=fd [ 233.744289][T11202] loop5: detected capacity change from 0 to 512 [ 233.751297][T11202] ext4: Unknown parameter 'fsmagic' [ 233.827093][ T3393] lo speed is unknown, defaulting to 1000 [ 233.940754][T11209] lo speed is unknown, defaulting to 1000 [ 234.016729][T11104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.028683][T11104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.042100][T11104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.052796][T11104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.111958][T11104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.129388][T11104] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.142233][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.149591][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.180214][T11104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.190715][T11104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.206025][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.213182][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.266918][T11104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.341294][T11104] veth0_vlan: entered promiscuous mode [ 234.352322][T11104] veth1_vlan: entered promiscuous mode [ 234.371336][T11104] veth0_macvtap: entered promiscuous mode [ 234.380407][T11104] veth1_macvtap: entered promiscuous mode [ 234.406112][T11104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.416859][T11104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.427484][ T168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.438037][ T168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.449361][ T168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.463011][ T168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.499449][T11236] loop0: detected capacity change from 0 to 164 [ 234.507798][T11236] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 234.514249][T11238] bond1: entered promiscuous mode [ 234.521242][T11238] bond1: entered allmulticast mode [ 234.527148][T11238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.542637][T11241] 9pnet_fd: Insufficient options for proto=fd [ 234.577198][T11243] loop0: detected capacity change from 0 to 164 [ 234.672593][T11253] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2849'. [ 234.697735][T11255] loop1: detected capacity change from 0 to 512 [ 234.715443][T11255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.757454][T11265] 9pnet_fd: Insufficient options for proto=fd [ 234.857219][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.910578][T11273] loop6: detected capacity change from 0 to 164 [ 235.012898][T11294] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 235.025693][T11294] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2869'. [ 235.166006][T11304] lo speed is unknown, defaulting to 1000 [ 235.461321][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 235.461382][ T29] audit: type=1400 audit(1755990916.075:5851): avc: denied { allowed } for pid=11301 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 235.520356][ T29] audit: type=1400 audit(1755990916.115:5852): avc: denied { create } for pid=11301 comm="syz.0.2871" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.542048][ T29] audit: type=1400 audit(1755990916.115:5853): avc: denied { map } for pid=11301 comm="syz.0.2871" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.567132][ T29] audit: type=1400 audit(1755990916.115:5854): avc: denied { read write } for pid=11301 comm="syz.0.2871" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.592735][ T29] audit: type=1400 audit(1755990916.135:5855): avc: denied { unlink } for pid=9917 comm="syz-executor" name="file0" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 235.620986][ T29] audit: type=1400 audit(1755990916.135:5856): avc: denied { read write } for pid=9917 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.646194][ T29] audit: type=1400 audit(1755990916.135:5857): avc: denied { open } for pid=9917 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.671242][ T29] audit: type=1400 audit(1755990916.135:5858): avc: denied { ioctl } for pid=9917 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.761391][ T29] audit: type=1400 audit(1755990916.245:5859): avc: denied { create } for pid=11301 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.783676][ T29] audit: type=1400 audit(1755990916.245:5860): avc: denied { write } for pid=11301 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.785314][T11312] bond4: entered promiscuous mode [ 235.810316][T11312] bond4: entered allmulticast mode [ 235.861039][T11312] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.896062][T11320] loop1: detected capacity change from 0 to 512 [ 235.929449][T11320] ext4: Unknown parameter 'fsmagic' [ 235.938239][T11324] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2878'. [ 236.380741][T11348] netlink: 'syz.1.2888': attribute type 10 has an invalid length. [ 236.400719][T11348] team0: Device hsr_slave_0 failed to register rx_handler [ 236.547796][T11322] syz.0.2876 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 236.562291][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.0.2876 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.562309][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.562317][T11322] Call Trace: [ 236.562322][T11322] [ 236.562328][T11322] __dump_stack+0x1d/0x30 [ 236.562376][T11322] dump_stack_lvl+0xe8/0x140 [ 236.562404][T11322] dump_stack+0x15/0x1b [ 236.562414][T11322] dump_header+0x81/0x220 [ 236.562432][T11322] oom_kill_process+0x342/0x400 [ 236.562464][T11322] out_of_memory+0x979/0xb80 [ 236.562482][T11322] try_charge_memcg+0x5e6/0x9e0 [ 236.562527][T11322] obj_cgroup_charge_pages+0xa6/0x150 [ 236.562545][T11322] __memcg_kmem_charge_page+0x9f/0x170 [ 236.562638][T11322] __alloc_frozen_pages_noprof+0x188/0x360 [ 236.562660][T11322] alloc_pages_mpol+0xb3/0x250 [ 236.562794][T11322] alloc_pages_noprof+0x90/0x130 [ 236.562851][T11322] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 236.562890][T11322] __kvmalloc_node_noprof+0x30f/0x4e0 [ 236.562907][T11322] ? ip_set_alloc+0x1f/0x30 [ 236.563002][T11322] ? ip_set_alloc+0x1f/0x30 [ 236.563029][T11322] ? __kmalloc_cache_noprof+0x189/0x320 [ 236.563044][T11322] ip_set_alloc+0x1f/0x30 [ 236.563118][T11322] hash_netiface_create+0x282/0x740 [ 236.563136][T11322] ? __pfx_hash_netiface_create+0x10/0x10 [ 236.563154][T11322] ip_set_create+0x3cc/0x960 [ 236.563170][T11322] nfnetlink_rcv_msg+0x4c3/0x590 [ 236.563258][T11322] netlink_rcv_skb+0x123/0x220 [ 236.563275][T11322] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 236.563294][T11322] nfnetlink_rcv+0x16b/0x1690 [ 236.563309][T11322] ? nlmon_xmit+0x4f/0x60 [ 236.563376][T11322] ? consume_skb+0x49/0x150 [ 236.563386][T11322] ? nlmon_xmit+0x4f/0x60 [ 236.563399][T11322] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 236.563462][T11322] ? __dev_queue_xmit+0x1200/0x2000 [ 236.563474][T11322] ? __dev_queue_xmit+0x182/0x2000 [ 236.563485][T11322] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 236.563567][T11322] ? ref_tracker_free+0x37d/0x3e0 [ 236.563582][T11322] ? __netlink_deliver_tap+0x4dc/0x500 [ 236.563595][T11322] netlink_unicast+0x5bd/0x690 [ 236.563614][T11322] netlink_sendmsg+0x58b/0x6b0 [ 236.563696][T11322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.563714][T11322] __sock_sendmsg+0x145/0x180 [ 236.563889][T11322] ____sys_sendmsg+0x31e/0x4e0 [ 236.563909][T11322] ___sys_sendmsg+0x17b/0x1d0 [ 236.563928][T11322] __x64_sys_sendmsg+0xd4/0x160 [ 236.563942][T11322] x64_sys_call+0x191e/0x2ff0 [ 236.564010][T11322] do_syscall_64+0xd2/0x200 [ 236.564025][T11322] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.564038][T11322] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.564121][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.564134][T11322] RIP: 0033:0x7fa6f9ecebe9 [ 236.564144][T11322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.564153][T11322] RSP: 002b:00007fa6f8937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.564165][T11322] RAX: ffffffffffffffda RBX: 00007fa6fa0f5fa0 RCX: 00007fa6f9ecebe9 [ 236.564176][T11322] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 236.564183][T11322] RBP: 00007fa6f9f51e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.564190][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.564197][T11322] R13: 00007fa6fa0f6038 R14: 00007fa6fa0f5fa0 R15: 00007ffd32b4be78 [ 236.564207][T11322] [ 236.564210][T11322] memory: usage 307200kB, limit 307200kB, failcnt 6302 [ 236.907595][T11322] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 236.915577][T11322] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 236.922929][T11322] Memory cgroup stats for /syz0: [ 236.923120][T11322] cache 4096 [ 236.931364][T11322] rss 4096 [ 236.934461][T11322] shmem 0 [ 236.937405][T11322] mapped_file 4096 [ 236.941107][T11322] dirty 0 [ 236.944157][T11322] writeback 0 [ 236.947542][T11322] workingset_refault_anon 789 [ 236.952531][T11322] workingset_refault_file 19010 [ 236.957519][T11322] swap 188416 [ 236.960892][T11322] swapcached 4096 [ 236.964718][T11322] pgpgin 587955 [ 236.968170][T11322] pgpgout 587953 [ 236.971921][T11322] pgfault 316756 [ 236.975462][T11322] pgmajfault 551 [ 236.979068][T11322] inactive_anon 4096 [ 236.983068][T11322] active_anon 0 [ 236.986770][T11322] inactive_file 0 [ 236.990446][T11322] active_file 0 [ 236.993440][T11354] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2891'. [ 236.994031][T11322] unevictable 0 [ 237.006508][T11322] hierarchical_memory_limit 314572800 [ 237.012003][T11322] hierarchical_memsw_limit 9223372036854771712 [ 237.018227][T11322] total_cache 4096 [ 237.022053][T11322] total_rss 4096 [ 237.025920][T11322] total_shmem 0 [ 237.029555][T11322] total_mapped_file 4096 [ 237.033856][T11322] total_dirty 0 [ 237.037318][T11322] total_writeback 0 [ 237.041193][T11322] total_workingset_refault_anon 789 [ 237.046593][T11322] total_workingset_refault_file 19010 [ 237.052063][T11322] total_swap 188416 [ 237.055894][T11322] total_swapcached 4096 [ 237.060049][T11322] total_pgpgin 587955 [ 237.064062][T11322] total_pgpgout 587953 [ 237.068138][T11322] total_pgfault 316756 [ 237.072235][T11322] total_pgmajfault 551 [ 237.076467][T11322] total_inactive_anon 4096 [ 237.081055][T11322] total_active_anon 0 [ 237.085064][T11322] total_inactive_file 0 [ 237.089556][T11322] total_active_file 0 [ 237.093948][T11322] total_unevictable 0 [ 237.098065][T11322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2876,pid=11321,uid=0 [ 237.113124][T11322] Memory cgroup out of memory: Killed process 11321 (syz.0.2876) total-vm:95680kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 237.142660][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 237.166999][T11359] loop5: detected capacity change from 0 to 128 [ 237.194915][T11359] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.212603][T11359] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.244572][ T7478] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.309563][T11371] loop5: detected capacity change from 0 to 4096 [ 237.314657][T11369] syzkaller0: entered promiscuous mode [ 237.322289][T11369] syzkaller0: entered allmulticast mode [ 237.331121][T11371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.429688][T11375] bond5: entered promiscuous mode [ 237.434823][T11375] bond5: entered allmulticast mode [ 237.440477][T11375] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.518094][T11380] 9pnet: Could not find request transport: fd0x0000000000000004 [ 237.638876][ T7478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.661210][T11386] FAULT_INJECTION: forcing a failure. [ 237.661210][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 237.673999][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.0.2904 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.674027][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.674083][T11386] Call Trace: [ 237.674089][T11386] [ 237.674096][T11386] __dump_stack+0x1d/0x30 [ 237.674159][T11386] dump_stack_lvl+0xe8/0x140 [ 237.674250][T11386] dump_stack+0x15/0x1b [ 237.674266][T11386] should_fail_ex+0x265/0x280 [ 237.674287][T11386] should_failslab+0x8c/0xb0 [ 237.674346][T11386] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 237.674371][T11386] ? sidtab_sid2str_get+0xa0/0x130 [ 237.674446][T11386] kmemdup_noprof+0x2b/0x70 [ 237.674471][T11386] sidtab_sid2str_get+0xa0/0x130 [ 237.674493][T11386] security_sid_to_context_core+0x1eb/0x2e0 [ 237.674511][T11386] security_sid_to_context+0x27/0x40 [ 237.674526][T11386] avc_audit_post_callback+0x10f/0x520 [ 237.674599][T11386] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 237.674624][T11386] common_lsm_audit+0x1bb/0x230 [ 237.674712][T11386] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 237.674778][T11386] slow_avc_audit+0x104/0x140 [ 237.674844][T11386] avc_has_perm+0x13a/0x180 [ 237.674869][T11386] sel_write_avc_cache_threshold+0xae/0x1c0 [ 237.674936][T11386] vfs_writev+0x403/0x8b0 [ 237.674958][T11386] ? __pfx_sel_write_avc_cache_threshold+0x10/0x10 [ 237.674985][T11386] ? mutex_lock+0xd/0x30 [ 237.675074][T11386] do_writev+0xe7/0x210 [ 237.675096][T11386] __x64_sys_writev+0x45/0x50 [ 237.675118][T11386] x64_sys_call+0x1e9a/0x2ff0 [ 237.675136][T11386] do_syscall_64+0xd2/0x200 [ 237.675203][T11386] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 237.675274][T11386] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.675293][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.675311][T11386] RIP: 0033:0x7fa6f9ecebe9 [ 237.675324][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.675418][T11386] RSP: 002b:00007fa6f8937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 237.675435][T11386] RAX: ffffffffffffffda RBX: 00007fa6fa0f5fa0 RCX: 00007fa6f9ecebe9 [ 237.675445][T11386] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000005 [ 237.675460][T11386] RBP: 00007fa6f8937090 R08: 0000000000000000 R09: 0000000000000000 [ 237.675548][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.675557][T11386] R13: 00007fa6fa0f6038 R14: 00007fa6fa0f5fa0 R15: 00007ffd32b4be78 [ 237.675571][T11386] [ 237.949193][T11388] loop5: detected capacity change from 0 to 164 [ 237.966188][T11390] loop0: detected capacity change from 0 to 256 [ 238.136987][T11404] syzkaller0: entered promiscuous mode [ 238.142723][T11404] syzkaller0: entered allmulticast mode [ 238.252516][T11406] lo speed is unknown, defaulting to 1000 [ 238.271815][T11407] program syz.5.2910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.854806][T11400] syz.0.2909 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 238.866290][T11400] CPU: 1 UID: 0 PID: 11400 Comm: syz.0.2909 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.866354][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.866364][T11400] Call Trace: [ 238.866371][T11400] [ 238.866378][T11400] __dump_stack+0x1d/0x30 [ 238.866452][T11400] dump_stack_lvl+0xe8/0x140 [ 238.866469][T11400] dump_stack+0x15/0x1b [ 238.866485][T11400] dump_header+0x81/0x220 [ 238.866515][T11400] oom_kill_process+0x342/0x400 [ 238.866625][T11400] out_of_memory+0x979/0xb80 [ 238.866655][T11400] try_charge_memcg+0x5e6/0x9e0 [ 238.866679][T11400] charge_memcg+0x51/0xc0 [ 238.866708][T11400] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 238.866729][T11400] __read_swap_cache_async+0x1df/0x350 [ 238.866761][T11400] swap_cluster_readahead+0x277/0x3e0 [ 238.866790][T11400] swapin_readahead+0xde/0x6f0 [ 238.866823][T11400] ? __filemap_get_folio+0x4f7/0x6b0 [ 238.866852][T11400] ? __rcu_read_unlock+0x34/0x70 [ 238.866920][T11400] ? swap_cache_get_folio+0x77/0x200 [ 238.866950][T11400] do_swap_page+0x301/0x2430 [ 238.867039][T11400] ? css_rstat_updated+0xb7/0x240 [ 238.867062][T11400] ? __pfx_default_wake_function+0x10/0x10 [ 238.867085][T11400] handle_mm_fault+0x9a5/0x2c20 [ 238.867110][T11400] do_user_addr_fault+0x636/0x1090 [ 238.867199][T11400] exc_page_fault+0x62/0xa0 [ 238.867290][T11400] asm_exc_page_fault+0x26/0x30 [ 238.867367][T11400] RIP: 0033:0x7fa6f9da563c [ 238.867381][T11400] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 238.867395][T11400] RSP: 002b:00007ffd32b4bfe0 EFLAGS: 00010287 [ 238.867415][T11400] RAX: 0000000000000000 RBX: 00007fa6fa0f6090 RCX: 0000000000000000 [ 238.867445][T11400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555591fba808 [ 238.867458][T11400] RBP: 00007fa6fa0f7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 238.867512][T11400] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003a531 [ 238.867538][T11400] R13: 00007ffd32b4c0d0 R14: ffffffffffffffff R15: 00007ffd32b4c0f0 [ 238.867556][T11400] [ 238.867563][T11400] memory: usage 307200kB, limit 307200kB, failcnt 6741 [ 238.942997][T11400] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 238.943032][T11400] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 238.943043][T11400] Memory cgroup stats for /syz0: [ 239.106025][T11400] cache 0 [ 239.113954][T11400] rss 0 [ 239.116710][T11400] shmem 0 [ 239.119722][T11400] mapped_file 0 [ 239.123210][T11400] dirty 0 [ 239.126326][T11400] writeback 4096 [ 239.129884][T11400] workingset_refault_anon 820 [ 239.134687][T11400] workingset_refault_file 19434 [ 239.139540][T11400] swap 184320 [ 239.143305][T11400] swapcached 8192 [ 239.147330][T11400] pgpgin 588598 [ 239.150917][T11400] pgpgout 588596 [ 239.154558][T11400] pgfault 317140 [ 239.158279][T11400] pgmajfault 566 [ 239.161843][T11400] inactive_anon 8192 [ 239.165816][T11400] active_anon 0 [ 239.169475][T11400] inactive_file 0 [ 239.173140][T11400] active_file 0 [ 239.176588][T11400] unevictable 0 [ 239.180289][T11400] hierarchical_memory_limit 314572800 [ 239.185884][T11400] hierarchical_memsw_limit 9223372036854771712 [ 239.192065][T11400] total_cache 0 [ 239.195574][T11400] total_rss 0 [ 239.198892][T11400] total_shmem 0 [ 239.202597][T11400] total_mapped_file 0 [ 239.206780][T11400] total_dirty 0 [ 239.210531][T11400] total_writeback 4096 [ 239.214774][T11400] total_workingset_refault_anon 820 [ 239.220037][T11400] total_workingset_refault_file 19434 [ 239.225514][T11400] total_swap 184320 [ 239.229944][T11400] total_swapcached 8192 [ 239.234209][T11400] total_pgpgin 588598 [ 239.238234][T11400] total_pgpgout 588596 [ 239.242477][T11400] total_pgfault 317140 [ 239.246634][T11400] total_pgmajfault 566 [ 239.251132][T11400] total_inactive_anon 8192 [ 239.255669][T11400] total_active_anon 0 [ 239.259704][T11400] total_inactive_file 0 [ 239.263870][T11400] total_active_file 0 [ 239.267844][T11400] total_unevictable 0 [ 239.271836][T11400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2909,pid=11400,uid=0 [ 239.286662][T11400] Memory cgroup out of memory: Killed process 11400 (syz.0.2909) total-vm:93632kB, anon-rss:1072kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 239.535809][T11417] lo speed is unknown, defaulting to 1000 [ 239.821988][T11434] bond5: entered promiscuous mode [ 239.827301][T11434] bond5: entered allmulticast mode [ 239.851488][T11434] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.918468][T11437] syzkaller0: entered promiscuous mode [ 239.924723][T11437] syzkaller0: entered allmulticast mode [ 240.071779][T11446] lo speed is unknown, defaulting to 1000 [ 240.132028][T11455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2928'. [ 240.139473][T11446] program syz.5.2925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.306830][T11460] loop3: detected capacity change from 0 to 164 [ 240.610551][ T29] kauditd_printk_skb: 489 callbacks suppressed [ 240.610564][ T29] audit: type=1400 audit(1755990921.225:6350): avc: denied { read write } for pid=9917 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.641863][ T29] audit: type=1400 audit(1755990921.225:6351): avc: denied { open } for pid=9917 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.671589][ T29] audit: type=1400 audit(1755990921.295:6352): avc: denied { ioctl } for pid=9917 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.698213][T11470] ================================================================== [ 240.706564][T11470] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 240.717609][T11470] [ 240.719953][T11470] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 240.728264][T11470] tick_do_update_jiffies64+0x113/0x1c0 [ 240.733803][T11470] tick_nohz_handler+0x7f/0x2d0 [ 240.738711][T11470] __hrtimer_run_queues+0x20c/0x5a0 [ 240.743928][T11470] hrtimer_interrupt+0x21a/0x460 [ 240.748898][T11470] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 240.754903][T11470] sysvec_apic_timer_interrupt+0x6f/0x80 [ 240.760535][T11470] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.766597][T11470] console_flush_all+0x55b/0x730 [ 240.771613][T11470] console_unlock+0xa1/0x330 [ 240.776202][T11470] vprintk_emit+0x388/0x650 [ 240.780796][T11470] vprintk_default+0x26/0x30 [ 240.785373][T11470] vprintk+0x1d/0x30 [ 240.789314][T11470] _printk+0x79/0xa0 [ 240.793309][T11470] kauditd_hold_skb+0x1b1/0x1c0 [ 240.798168][T11470] kauditd_send_queue+0x270/0x2c0 [ 240.803360][T11470] kauditd_thread+0x421/0x630 [ 240.808240][T11470] kthread+0x486/0x510 [ 240.812395][T11470] ret_from_fork+0xda/0x150 [ 240.816903][T11470] ret_from_fork_asm+0x1a/0x30 [ 240.821839][T11470] [ 240.824155][T11470] read to 0xffffffff868099c0 of 8 bytes by task 11470 on cpu 1: [ 240.831868][T11470] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 240.838191][T11470] count_shadow_nodes+0x6a/0x230 [ 240.843509][T11470] do_shrink_slab+0x60/0x680 [ 240.848136][T11470] shrink_slab+0x448/0x760 [ 240.852583][T11470] shrink_node+0x6c3/0x2120 [ 240.857558][T11470] do_try_to_free_pages+0x3f6/0xcd0 [ 240.862790][T11470] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 240.868691][T11470] try_charge_memcg+0x358/0x9e0 [ 240.873722][T11470] obj_cgroup_charge_pages+0xa6/0x150 [ 240.879204][T11470] __memcg_kmem_charge_page+0x9f/0x170 [ 240.884672][T11470] __alloc_frozen_pages_noprof+0x188/0x360 [ 240.891267][T11470] alloc_pages_mpol+0xb3/0x250 [ 240.896077][T11470] alloc_pages_noprof+0x90/0x130 [ 240.901142][T11470] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 240.907175][T11470] __kvmalloc_node_noprof+0x30f/0x4e0 [ 240.912564][T11470] ip_set_alloc+0x1f/0x30 [ 240.916925][T11470] hash_netiface_create+0x282/0x740 [ 240.922122][T11470] ip_set_create+0x3cc/0x960 [ 240.926701][T11470] nfnetlink_rcv_msg+0x4c3/0x590 [ 240.931636][T11470] netlink_rcv_skb+0x123/0x220 [ 240.936492][T11470] nfnetlink_rcv+0x16b/0x1690 [ 240.941194][T11470] netlink_unicast+0x5bd/0x690 [ 240.945999][T11470] netlink_sendmsg+0x58b/0x6b0 [ 240.950756][T11470] __sock_sendmsg+0x145/0x180 [ 240.955428][T11470] ____sys_sendmsg+0x31e/0x4e0 [ 240.960212][T11470] ___sys_sendmsg+0x17b/0x1d0 [ 240.964878][T11470] __x64_sys_sendmsg+0xd4/0x160 [ 240.969729][T11470] x64_sys_call+0x191e/0x2ff0 [ 240.974758][T11470] do_syscall_64+0xd2/0x200 [ 240.979273][T11470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.985628][T11470] [ 240.988030][T11470] value changed: 0x00000000ffffe8a3 -> 0x00000000ffffe8a5 [ 240.995356][T11470] [ 240.997674][T11470] Reported by Kernel Concurrency Sanitizer on: [ 241.004248][T11470] CPU: 1 UID: 0 PID: 11470 Comm: syz.1.2934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.014232][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.025024][T11470] ================================================================== [ 241.033819][ T29] audit: type=1400 audit(1755990921.325:6353): avc: denied { prog_load } for pid=11473 comm="syz.6.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.054294][ T29] audit: type=1400 audit(1755990921.325:6354): avc: denied { bpf } for pid=11473 comm="syz.6.2936" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.076328][ T29] audit: type=1400 audit(1755990921.325:6355): avc: denied { perfmon } for pid=11473 comm="syz.6.2936" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.134149][ T29] audit: type=1400 audit(1755990921.755:6356): avc: denied { read write } for pid=10811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.158965][ T29] audit: type=1400 audit(1755990921.755:6357): avc: denied { open } for pid=10811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.183290][ T29] audit: type=1400 audit(1755990921.755:6358): avc: denied { ioctl } for pid=10811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=616 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.218992][ T29] audit: type=1400 audit(1755990921.835:6359): avc: denied { read write } for pid=9917 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1