last executing test programs: 3m28.885223391s ago: executing program 1 (id=24): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000003ac0)=""/4123, 0x101b}, {&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000800)=""/187, 0xbb}], 0x4}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00'}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m27.914560795s ago: executing program 1 (id=29): execve(&(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESOCT, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000400000008000000010000000000000036497e6bcd5094", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x8, &(0x7f00000010c0)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) munlockall() write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40880) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[], 0x53) 3m27.821690757s ago: executing program 1 (id=30): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="6320c0"], 0xa) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000300)='./file0\x00', 0x21488b, &(0x7f00000001c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYRESDEC], 0x1, 0x660, &(0x7f0000000840)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x5161, &(0x7f0000000340)={0x0, 0xdb93, 0x20000, 0x0, 0xf0, 0x0, r2}, &(0x7f0000000100), &(0x7f00000004c0)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}]}}}]}, 0x3c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r1) close_range(r3, 0xffffffffffffffff, 0x0) 3m27.651840599s ago: executing program 1 (id=35): socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xfffe}}], {0x14, 0x10}}, 0x3c}}, 0x0) 3m19.461143598s ago: executing program 1 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) pipe2$9p(&(0x7f0000000680), 0x80800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x4000000, 0xc8, 0x7, 0x1c27, 0x8}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lchown(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) r6 = creat(&(0x7f00000004c0)='./bus\x00', 0xb7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff4414}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', r5, 0x0, r3, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r6, r3, r3, r3], &(0x7f0000000540)=[{0x3, 0x4, 0xb, 0x5}, {0x4, 0x1, 0x1}, {0x3, 0x3, 0x9, 0xc}, {0x0, 0x2, 0x3, 0x5}, {0x8, 0x4, 0x2}, {0x4, 0x1, 0x6, 0x7}, {0xffffffff, 0x6, 0x7, 0x6}, {0x3, 0x5, 0x6}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='f2fs_direct_IO_enter\x00', r4, 0x0, 0x100000001}, 0x18) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f0000000240)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 3m18.708488369s ago: executing program 1 (id=72): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x6, 0x23, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 3m18.67276365s ago: executing program 32 (id=72): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x6, 0x23, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 7.54038485s ago: executing program 2 (id=1520): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x3, @perf_config_ext={0x0, 0x10000}, 0x0, 0xfffffffd, 0x3, 0x0, 0x4, 0x1088f107, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) readv(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 6.84317364s ago: executing program 2 (id=1521): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00a300"/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@fwd={0x7}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x101, [{0x6, 0x5, 0x9}, {}, {0xa, 0x5, 0x40}, {0x0, 0x4, 0x8542}]}]}, {0x0, [0x61, 0x61, 0x2e, 0x5f, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x76, 0x0, 0x1, 0x7fff, 0x0, @void, @value}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) unlink(0x0) 4.895037979s ago: executing program 5 (id=1533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') unlinkat(r2, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@local, 0x0, 0x0, 0xfffd, 0x6, 0xa, 0x0, 0x80}, {0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x2b}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x4c}, 0x4d6, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x6}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x3502, 0xc5eea1c0500f3eb9, 0x1, 0x7, 0x5, 0x3, 0x5}]}]}, 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000600000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00800000010000007f7de78da76dd9b5"], 0x50) 4.528232674s ago: executing program 5 (id=1536): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair(0x1d, 0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) 4.12067024s ago: executing program 4 (id=1548): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x4000, 0x4) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r3, 0x380000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) open(0x0, 0x4040, 0xdc) flock(r2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='svc_xprt_enqueue\x00', r2, 0x0, 0xffffffffdffffff7}, 0x18) rseq(0x0, 0xffffffffffffffe2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.919079933s ago: executing program 4 (id=1540): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x3, @perf_config_ext={0x0, 0x10000}, 0x0, 0xfffffffd, 0x3, 0x0, 0x4, 0x1088f107, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) readv(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 3.889377373s ago: executing program 2 (id=1541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r7, {0x9, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x874f, 0x8, 0x2}, {0x0, 0x3, 0x5}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) 2.991840586s ago: executing program 3 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) r8 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x10000, &(0x7f0000000580)=[{0x8, 0x7ff, 0x5}, {0x5, 0x7, 0x6}, {0xd974, 0x3, 0xfffffffffffff000}, {0x8000, 0x401, 0x4}, {0x1ff, 0x4}, {0x7aed, 0x3, 0x2}, {0x9, 0x100000001, 0xe}, {0xffffffff, 0x4224, 0x7}], 0x8, 0xffffffffffff3539, 0x11, 0x28, 0x24, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000500), 0x66) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c1c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.948985417s ago: executing program 5 (id=1543): r0 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) lseek(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000080)=0x3f) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x0, 0x8000c62) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xae8, 0x863, 0x0) syz_io_uring_setup(0x654, &(0x7f0000000100)={0x0, 0x8502, 0x4, 0x2, 0x80}, &(0x7f0000000000), &(0x7f0000000080)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023896) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x810000, &(0x7f0000000600), 0x1, 0x56f, &(0x7f0000000640)="$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") 2.861281178s ago: executing program 3 (id=1544): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d590ec55ef26a26fcc803dc80f29d867fd38bf6f8fa8fe9f4ef442f1aed9e5f2dc8929a53d640783e1538d9baf8b89d3b7de25f8a0277bb5c66058377dfb570b964271ab75bad8fa6415c733011bd8165ec4b532befe58b402b781d587620e5af3bca138fa1650052d5ecd1e020b8cc79072b235957c0e46", 0x78}, {&(0x7f0000000380)="67ddca927a1eccd4ddde7571f57d4494b2ee50fc3ce320fe1f5f2464b6a49a93477987125b5ede9f27b18ebf86eb1ac915a5f91c44ad33d304ed8672fba709f3a52c5d4ca0730f98ce994afce1e61f6f09cc81d08ce033d6d3cbb7067ceb1a3910a31bec7374dc553ce1557a04bb90aa3655799c37c0780a314dc4e1e8db758dc632e0", 0x83}, {&(0x7f0000000440)="70df4a58b3821ccfacb4cde7fbb66a8e9fd1ba048462441cf7928397d00b2700f6c4ca77db170fd52146120122ef6822117c7369102bdfd3fb2928fb5a529371cda29f647dd457b3c2a08673df34d2545aef5d2783785604ad3a4618aebb510a8bf8b8be9214048cfaea75ad340d9f8a276e04dfd618180356296675b8dedf90891ba5a6f7af2a4b0817e4", 0x8b}, {&(0x7f0000000500)="7bfed43d73cc55cbaf67fefb2606e558c983f782cab122015f38f16b702494b2d8a5b4d9829f4c259e174fcdfc90a4f5046069956b126cd492e5513c95a8063e3f5382a457b13a5ba1eed2bbd5f63dd1afef6a67f61b50dd4a553e12194f589f067e32c80521fd954fd3e8b18b24b075e6a48f308f42d2f0e7a02e9f63139d", 0x7f}], 0x4, &(0x7f0000000a40)=[{0xc8, 0x6, 0x4, "f07b13063a663a6af149a791b52869a2041f0517d434cb426173cf41d253d4d75d63daf2353ae78f5dfa8e3310cc040eceba8c74632aed42dacf594a6266ad45792dbb58096241afdf83caf244d642764970f116b889cafa8761bd3162f8ceec994f9226e929b3cdab69e75af96b91f1d9f2ff8c95bdb682bccd21ad758ba34095df83a916bd6f7fb32ea45030c52f31fd41dffcb68d382a41c90ad70417b9c7f2d332efa69546edd398ef5253fce56dd0081c6b857712"}, {0x38, 0x114, 0x593a, "2fd9e58284a926f37ab5cfee8ac61a800781e5e8858ca161b3fee51d597a94e08480"}, {0x30, 0x114, 0x7f, "15b5ce97f194d3cbc1603e327cd2576cdb803ff566835684724b9fe66d3d"}, {0xa0, 0x6, 0x1c2d0d8b, "b08a0824b7eed4fd62fd0b2cd7ff11b2ad4519dd22db770e855acb41aeefadffd40a389b8d5176190f1a7b2d74e426e6a834fbb463e50e0f3c69c50d1a7c1817af4e95726278cc07833fe1edbb3ffa49fba62736bb95c72df595b9ed334492fd635f56e639a27960382c2ab4741455fe70adcda736a6fb55deff754aacfc30064285f1e8d3dd0e63fe012f74"}, {0xc8, 0xff, 0x4, "0855a9264ce288e7fcfc0f93b84522974cfe7b574ee5b8dfb67e30489b2cd898d296d8e1a98b8f7fbcfdad52b83be91cdf3f735059aa21533958b3bea0f8c6b97e9bd0389a8dfb7a46558caee3a68bea47b4e92e297bd1ff9f91b4202908a737212ec721594dc143fb8e51d4332987869a79bae27bc89ebf12f6bf798f29224c3ea8e514892fdd4de6b542ded45bb012c3183c25bedfde6d5ce788a79bbcf99c988a67c60af6407a1e8c201325445bf59b"}, {0xf0, 0x4, 0xb, "5a9c44c7ae7435308b0322c4efa5933204647379a7a8bdeba53a253f8304df0e7ea5586fcc1eb83f1f8c507129ebd1975449e63bc2b5bad13c0d52a5043f0732eb9a7f074ecafb2d9aafb4b504aa73e69aff3ee1157cb9b3914f8567d00dd7a1bced2e6862f573eeb0fcc9d129c897c509deeb6a8c354936d7948246c021f7f93a432ddc10f9ce9ea09239e8190d7b813d08a2aa67ffbd672cd9ccc83e5d871ea24889b6525babb914a3f52bd61007b14cca80403bf9cb7cdc9b4da98e087f62406f1c2951bdf71419f32309a6cda845e36b0e70d270ff2dd6fcea10"}, {0xb0, 0x115, 0x4, "d9b9e014763c3992fe0ebd4a7c42df618cc92e49ce947f726b99f2258df08bbe01d7eb1667f716a2ad1ee7877444d860227b496825fe3cfe2beefd45126326a77cc82440c777b69d13fa89ab1a3c96b3c6ec3ad4f0358039273b5d62636254da650966af70cb720bc34613d856be0297c5a154d06b497c31a0099f8733827413e01909788927e0304503cc706142bd606621bc583270cc7fa7973b548ae89a"}, {0x100, 0x10b, 0x8, "f928ae6a0dae8ac7d2e96e3ceaf16e5ba22c21718c31aa0e512072fc64143cd9badd88429de1e0706688b727fdad107d87d4583293e3d68bc27edfae54f9e3e8bbad5e685a20680b0cc03d6eb361fd58d1552ef92c4d15bbc44d02827e7b661438b435be88c1a71664c22a8ea30050a41838c1543b51acdc2480c00e2f2463e13a64104004da0580eb955b44d3da117f2fe5d0b7b206a9417595b3a1bd57b96ff0141593e71ee358a0043338c850a576955aef1064a46d1300da2b32ff85532fb70c2cc03fc4a924e02e6076a086ad0cc95c5c9e17fbe021904d9d556422d766478158cc570b94a8b6b8"}], 0x538}, 0x0, 0x1000, 0x0, {0x0, r3}}) chroot(&(0x7f0000000000)='./file0\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_io_uring_setup(0x43d5, &(0x7f0000000200)={0x0, 0xb18c, 0x80, 0x2, 0x2f1}, &(0x7f0000000280), 0xfffffffffffffffc) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x8880, 0x0) lseek(r6, 0x102, 0x2) getdents(r6, 0x0, 0x58) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@union={0x3, 0x2, 0x0, 0x5, 0x1, 0xb22, [{0x5, 0x2001}, {0x9, 0x1, 0x1d14b50a}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e]}}, 0x0, 0x43, 0x0, 0x8, 0xfffdffff, 0x0, @void, @value}, 0x28) r8 = socket$inet(0x2, 0x3, 0x6) r9 = dup3(r7, r8, 0x0) setsockopt$inet_int(r9, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 2.639733801s ago: executing program 2 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x5}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno']) creat(&(0x7f0000000600)='./file0\x00', 0xe5) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x4008804) 2.592168552s ago: executing program 5 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r5, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) 2.457454374s ago: executing program 3 (id=1549): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xff, 0x0, 0x8001, 0xdd2a, 0x2000}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4400000002060500f10de2cd44057eeb000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000040000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x10, 0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) 2.363478055s ago: executing program 2 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r3, 0x407, 0x100004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) utimes(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@nouid32}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x516, &(0x7f0000000f80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.328652976s ago: executing program 4 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) set_mempolicy(0x0, &(0x7f0000000700)=0xc00000000, 0x7) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r6, 0x15f1, 0xff98, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) mount(&(0x7f0000000640)=@sr0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='ocfs2_dlmfs\x00', 0x8, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180d0000209920702500000010000022ccf16c01291fff00000000bfa100000000000007010000f8ffffffb7ff000000000000b70300000000fd38850000007200000095000000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x4b, '\x00', r5, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r8, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="43640d000000000000effeffffffffff0000ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000000000000300000000030000000500000002000000030000000000000c04000000000000000000000105000000005f3061"], &(0x7f0000000280)=""/51, 0x50, 0x33, 0x1, 0x9, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 2.280952177s ago: executing program 0 (id=1552): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x4000, 0x4) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r3, 0x380000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) open(0x0, 0x4040, 0xdc) flock(r2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='svc_xprt_enqueue\x00', r2, 0x0, 0xffffffffdffffff7}, 0x18) rseq(0x0, 0xffffffffffffffe2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.024384431s ago: executing program 0 (id=1553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r5, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) 1.251117642s ago: executing program 4 (id=1554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') unlinkat(r2, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@local, 0x0, 0x0, 0xfffd, 0x6, 0xa, 0x0, 0x80}, {0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x2b}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x4c}, 0x4d6, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x6}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x3502, 0xc5eea1c0500f3eb9, 0x1, 0x7, 0x5, 0x3, 0x5}]}]}, 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000600000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00800000010000007f7de78da76dd9b5"], 0x50) 1.250070032s ago: executing program 3 (id=1564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = timerfd_create(0x0, 0x0) unshare(0x22020600) timerfd_settime(r1, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f040000000000005504000001ed0aff2400000017ffffffcc40000000000000730a00fe000000007704000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d900000000caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee633000000000000e5129722a6e1593a52ae80d4d800000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba690200937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2053c3c280acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f018720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455bc3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e37a1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstatfs(r3, &(0x7f0000000080)=""/179) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c0004802800018008000100666962001c00028008000240000000020800014000000014080003400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aab2e1a0de054148cb17f7cf9a6e90a570d934761a4aac1d45d575635b90b62248197ad7f40492354fad579534c7bedf1e53a9eee9bb4"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604070003050000000000000003000300060000000903000200000000fdffffff0e00000000402000"], 0x38) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 820.404318ms ago: executing program 3 (id=1555): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x20000007, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlockall(0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r2, r2, r2) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff14000212475400f6a13bb100c117080086dd4803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140), 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=""/15, 0x0, 0xf, 0x1, 0x4, 0x0, @void, @value}, 0x28) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x71, r6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0x1a400000}, 0x18) ioctl(r7, 0x8916, &(0x7f0000000000)) 644.770661ms ago: executing program 5 (id=1556): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40050) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ftruncate(r1, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001000000006980ee223cbb12166cd100000000000300000a"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r5, &(0x7f0000000fc0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @mpls={[{0x1}], @ipv6=@dccp_packet={0x4, 0x6, "80cc05", 0x3a4, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@hopopts={0x29, 0x45, '\x00', [@ra={0x5, 0x2, 0x8000}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x1, 0x2c, "04b046ab57e18db918f86a8c2d83fa5b58a41d20e707f3b87c7c44985a87cf120412a24f9b4d700ffbd84dc7"}, @generic={0x40, 0x1f6, "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"}]}, @srh={0x33, 0x8, 0x4, 0x4, 0x4, 0x40, 0x1, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x62, 0x2, 0x1, 0x5, 0x0, [@mcast2]}, @hopopts={0x6, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x26ad}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}, @fragment={0x33, 0x0, 0x4b, 0x0, 0x0, 0x2, 0x65}, @srh={0x3a, 0xa, 0x4, 0x5, 0xa1, 0x10, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x4e22, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9, 0x0, "d6c804", 0xe, "f19d16"}, "6ffd17951d1f5f00ae88bc48ceaedff66eeec53206c0e98a4b73be44f91a092677b9830cb7d741b7ffc68917e4a1ed7fc79354000c77817f5eb54b1b26e5168c35b8c0ed3a0cbfe1cca68dda80a2d8556f92265db43d079083c7208e3899a95bd230e1550d23708d665bf1b99147b614e508d3e6"}}}}}, 0x3de) 644.34131ms ago: executing program 2 (id=1557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r7, {0x9, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x874f, 0x8, 0x2}, {0x0, 0x3, 0x5}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) 571.811151ms ago: executing program 0 (id=1558): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4044845) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f00000005c0)=""/91, 0xfffffffffffffc5a, 0xfffffffffffffffd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f00000001c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x32}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x7, 0x200, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3801000010003306ffffffff00000080e0000002000000000000000000000000fe8000000000000000000000000000fd00000600000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d232000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000050000000000000000000000000000000000000002000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900"/210], 0x138}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 414.533474ms ago: executing program 0 (id=1559): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000e0ff"], 0x38}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x0, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff, 0xffffff00, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000e5002800000085000000610000b2b9402fbdc7b91dc158ea6d009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000380)=0x7ffd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7040000010000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)={0x18, 0x7a, 0x601, 0x4000000, 0x25dfdbfe, "", [@typed={0x7, 0x3ffc, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x41, 0xfffffffffffffffb, 0x0, 0x400, 0x9, 0x9}) r6 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) sendto$inet6(r7, &(0x7f0000000600)="0e0f37a033a7425bf80620640aaa806bf18eb044fee757be8c6f0cbc8a0f1d6833fd55cb2f6afeaeca7c6dee5a15b7918629ed610b92bbb1b578ff0c57f1d8e186845ed2e9fbfe2d02aa7c34e7047b7bc269e4b0425013ef02c57e1e2f7dff882ef72679748df5286c0de0107ca1a6326a88109648f84f14985e4750b430731e25ec06301a4d326598af952b5983a80baf643b8ded4d0c761eb33343a8c31911856f442445a64d2037bda1d54871b942139acd4355", 0xb5, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0x1, @mcast1, 0x2}, 0x1c) 260.718466ms ago: executing program 4 (id=1560): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001140), 0x103400, 0x0) pidfd_send_signal(r6, 0x2, &(0x7f0000001180)={0x2, 0x9, 0x2290}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r9 = syz_open_dev$sg(&(0x7f00000001c0), 0x7, 0x5a1440) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f0000000200)) faccessat(r8, &(0x7f0000000000)='./file0\x00', 0x5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 212.532547ms ago: executing program 0 (id=1561): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x3, @perf_config_ext={0x0, 0x10000}, 0x0, 0xfffffffd, 0x3, 0x0, 0x4, 0x1088f107, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) readv(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 63.123209ms ago: executing program 4 (id=1562): mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000004080000001000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r1, r0, 0x0, 0x7ffff000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x701}}, 0x24) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$rxrpc(r5, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 62.407459ms ago: executing program 5 (id=1573): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x40004) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 18.74306ms ago: executing program 3 (id=1563): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x4000, 0x4) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r3, 0x380000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) open(0x0, 0x4040, 0xdc) flock(r2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='svc_xprt_enqueue\x00', r2, 0x0, 0xffffffffdffffff7}, 0x18) rseq(0x0, 0xffffffffffffffe2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1565): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xff, 0x0, 0x8001, 0xdd2a, 0x2000}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4400000002060500f10de2cd44057eeb000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000040000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x10, 0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) kernel console output (not intermixed with test programs): 64216][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.649303][ T8076] tipc: Started in network mode [ 193.654239][ T8076] tipc: Node identity ac14140f, cluster identity 4711 [ 193.661401][ T8076] tipc: New replicast peer: 255.255.255.255 [ 193.667775][ T8076] tipc: Enabled bearer , priority 10 [ 193.688756][ T8080] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 193.850741][ T8090] serio: Serial port ptm0 [ 194.794156][ T8110] loop5: detected capacity change from 0 to 2048 [ 194.802007][ T3399] tipc: Node number set to 2886997007 [ 194.862347][ T8113] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 194.883871][ T8110] loop5: p1 < > p4 [ 194.889774][ T8110] loop5: p4 size 8388608 extends beyond EOD, truncated [ 194.974949][ T8117] __nla_validate_parse: 7 callbacks suppressed [ 194.974966][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 195.022185][ T8119] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 195.086264][ T8117] geneve1: left promiscuous mode [ 195.231683][ T8135] siw: device registration error -23 [ 195.268763][ T8117] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.277292][ T8117] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.285790][ T8117] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.294202][ T8117] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.306038][ T8117] team0: Port device geneve1 removed [ 195.346412][ T8130] lo speed is unknown, defaulting to 1000 [ 195.457443][ T8130] lo speed is unknown, defaulting to 1000 [ 195.626480][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 195.637515][ T8145] program syz.0.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.661759][ T8147] netlink: 'syz.5.1159': attribute type 13 has an invalid length. [ 195.669752][ T8147] netlink: 'syz.5.1159': attribute type 27 has an invalid length. [ 195.678501][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'. [ 195.920043][ T8160] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 195.926605][ T8160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.934269][ T8160] vhci_hcd vhci_hcd.0: Device attached [ 196.128866][ T8161] vhci_hcd: connection closed [ 196.129168][ T6169] vhci_hcd: stop threads [ 196.138181][ T6169] vhci_hcd: release socket [ 196.142607][ T6169] vhci_hcd: disconnect device [ 196.148096][ T3399] vhci_hcd: vhci_device speed not set [ 196.477590][ T8172] wireguard0: entered allmulticast mode [ 196.609978][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'. [ 196.618976][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'. [ 196.692139][ T8185] loop5: detected capacity change from 0 to 2048 [ 196.702548][ T8187] lo speed is unknown, defaulting to 1000 [ 196.709585][ T8187] lo speed is unknown, defaulting to 1000 [ 196.751339][ T8185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.774790][ T8185] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.785438][ T8189] siw: device registration error -23 [ 196.846827][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 196.846845][ T29] audit: type=1326 audit(1749266724.311:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3efea458e7 code=0x7ffc0000 [ 196.876704][ T29] audit: type=1326 audit(1749266724.311:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3efe9eab19 code=0x7ffc0000 [ 196.900125][ T29] audit: type=1326 audit(1749266724.311:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 197.102322][ T8198] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.109001][ T29] audit: type=1326 audit(1749266724.321:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3efea458e7 code=0x7ffc0000 [ 197.109057][ T29] audit: type=1326 audit(1749266724.321:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3efe9eab19 code=0x7ffc0000 [ 197.132381][ T8198] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 197.155700][ T29] audit: type=1326 audit(1749266724.321:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 197.163363][ T8198] audit: backlog limit exceeded [ 197.191751][ T29] audit: type=1326 audit(1749266724.331:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3efea458e7 code=0x7ffc0000 [ 197.259668][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 197.619352][ T8216] 9pnet_fd: Insufficient options for proto=fd [ 197.683627][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.759590][ T8224] loop5: detected capacity change from 0 to 1024 [ 197.912935][ T8224] EXT4-fs: Ignoring removed bh option [ 197.918383][ T8224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.945378][ T8224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.027506][ T8237] netlink: 'syz.4.1186': attribute type 5 has an invalid length. [ 198.374073][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.644172][ T8266] 9pnet_fd: Insufficient options for proto=fd [ 199.265426][ T8264] syz.2.1194 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 199.279779][ T8264] CPU: 1 UID: 0 PID: 8264 Comm: syz.2.1194 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 199.279806][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.279821][ T8264] Call Trace: [ 199.279828][ T8264] [ 199.279836][ T8264] __dump_stack+0x1d/0x30 [ 199.279925][ T8264] dump_stack_lvl+0xe8/0x140 [ 199.279948][ T8264] dump_stack+0x15/0x1b [ 199.279966][ T8264] dump_header+0x81/0x220 [ 199.280004][ T8264] oom_kill_process+0x334/0x3f0 [ 199.280050][ T8264] out_of_memory+0x979/0xb80 [ 199.280090][ T8264] try_charge_memcg+0x5e6/0x9e0 [ 199.280173][ T8264] obj_cgroup_charge_pages+0xa6/0x150 [ 199.280212][ T8264] __memcg_kmem_charge_page+0x9f/0x170 [ 199.280287][ T8264] __alloc_frozen_pages_noprof+0x188/0x360 [ 199.280336][ T8264] alloc_pages_mpol+0xb3/0x250 [ 199.280466][ T8264] alloc_pages_noprof+0x90/0x130 [ 199.280558][ T8264] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 199.280605][ T8264] __kvmalloc_node_noprof+0x30f/0x4e0 [ 199.280695][ T8264] ? ip_set_alloc+0x1f/0x30 [ 199.280728][ T8264] ? ip_set_alloc+0x1f/0x30 [ 199.280825][ T8264] ? __kmalloc_cache_noprof+0x189/0x320 [ 199.280856][ T8264] ip_set_alloc+0x1f/0x30 [ 199.280893][ T8264] hash_netiface_create+0x282/0x740 [ 199.281010][ T8264] ? __pfx_hash_netiface_create+0x10/0x10 [ 199.281055][ T8264] ip_set_create+0x3c9/0x960 [ 199.281139][ T8264] ? __nla_parse+0x40/0x60 [ 199.281165][ T8264] nfnetlink_rcv_msg+0x4c3/0x590 [ 199.281234][ T8264] ? selinux_capable+0x1f9/0x270 [ 199.281254][ T8264] netlink_rcv_skb+0x123/0x220 [ 199.281275][ T8264] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 199.281312][ T8264] nfnetlink_rcv+0x16b/0x1690 [ 199.281383][ T8264] ? __kfree_skb+0x109/0x150 [ 199.281424][ T8264] ? nlmon_xmit+0x4f/0x60 [ 199.281508][ T8264] ? consume_skb+0x49/0x150 [ 199.281527][ T8264] ? nlmon_xmit+0x4f/0x60 [ 199.281617][ T8264] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 199.281643][ T8264] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 199.281664][ T8264] ? __dev_queue_xmit+0x182/0x1fb0 [ 199.281803][ T8264] ? css_rstat_updated+0xcd/0x5b0 [ 199.281841][ T8264] ? ref_tracker_free+0x37d/0x3e0 [ 199.281884][ T8264] ? __netlink_deliver_tap+0x4dc/0x500 [ 199.281921][ T8264] netlink_unicast+0x5a1/0x670 [ 199.281974][ T8264] netlink_sendmsg+0x58b/0x6b0 [ 199.281999][ T8264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.282023][ T8264] __sock_sendmsg+0x145/0x180 [ 199.282053][ T8264] ____sys_sendmsg+0x31e/0x4e0 [ 199.282149][ T8264] ___sys_sendmsg+0x17b/0x1d0 [ 199.282264][ T8264] __x64_sys_sendmsg+0xd4/0x160 [ 199.282292][ T8264] x64_sys_call+0x2999/0x2fb0 [ 199.282316][ T8264] do_syscall_64+0xd2/0x200 [ 199.282411][ T8264] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.282439][ T8264] ? clear_bhb_loop+0x40/0x90 [ 199.282462][ T8264] ? clear_bhb_loop+0x40/0x90 [ 199.282485][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.282584][ T8264] RIP: 0033:0x7f285ef0e929 [ 199.282600][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.282619][ T8264] RSP: 002b:00007f285d577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.282658][ T8264] RAX: ffffffffffffffda RBX: 00007f285f135fa0 RCX: 00007f285ef0e929 [ 199.282671][ T8264] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 199.282683][ T8264] RBP: 00007f285ef90b39 R08: 0000000000000000 R09: 0000000000000000 [ 199.282695][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.282707][ T8264] R13: 0000000000000000 R14: 00007f285f135fa0 R15: 00007ffe42e921b8 [ 199.282727][ T8264] [ 199.282733][ T8264] memory: usage 307200kB, limit 307200kB, failcnt 882 [ 199.642655][ T8264] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 199.650612][ T8264] kmem: usage 295356kB, limit 9007199254740988kB, failcnt 0 [ 199.657934][ T8264] Memory cgroup stats for /syz2: [ 199.658553][ T8264] cache 11755520 [ 199.667116][ T8264] rss 208896 [ 199.670373][ T8264] shmem 11755520 [ 199.673950][ T8264] mapped_file 11755520 [ 199.678129][ T8264] dirty 0 [ 199.681093][ T8264] writeback 0 [ 199.684515][ T8264] workingset_refault_anon 230 [ 199.689270][ T8264] workingset_refault_file 1183 [ 199.694047][ T8264] swap 0 [ 199.696937][ T8264] swapcached 163840 [ 199.700802][ T8264] nr_memmap_boot_pages 238270 [ 199.705581][ T8264] pgpgin 235309 [ 199.709188][ T8264] pglazyfree 244172 [ 199.713023][ T8264] pgfault 211 [ 199.716331][ T8264] a_other 331776 [ 199.719945][ T8264] inactive_anon 11796480 [ 199.724276][ T8264] active_anon 0 [ 199.727815][ T8264] inactive_file 0 [ 199.731529][ T8264] active_file 0 [ 199.734998][ T8264] hierarchical_memory_limit 314572800 [ 199.740414][ T8264] hierarchical_memsw_limit 9223372036854771712 [ 199.746580][ T8264] total_cache 11755520 [ 199.750697][ T8264] total_rss 208896 [ 199.754434][ T8264] total_shmem 11755520 [ 199.758529][ T8264] total_mapped_file 11755520 [ 199.763146][ T8264] total_dirty 0 [ 199.766596][ T8264] total_writeback 0 [ 199.770451][ T8264] total_workingset_refault_anon 230 [ 199.775659][ T8264] total_workingset_refault_file 1183 [ 199.780976][ T8264] total_swap 0 [ 199.784453][ T8264] total_swapcached 163840 [ 199.788823][ T8264] total_nr_memmap_boot_pages 238270 [ 199.794018][ T8264] total_pgpgin 235309 [ 199.798094][ T8264] total_pglazyfree 244172 [ 199.802568][ T8264] total_pgfault 211 [ 199.806404][ T8264] total_a_other 331776 [ 199.810489][ T8264] total_inactive_anon 11796480 [ 199.815243][ T8264] total_active_anon 0 [ 199.819235][ T8264] total_inactive_file 0 [ 199.823395][ T8264] total_active_file 0 [ 199.827455][ T8264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1194,pid=8263,uid=0 [ 199.842060][ T8264] Memory cgroup out of memory: Killed process 8263 (syz.2.1194) total-vm:93752kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 200.085514][ T8290] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 200.094973][ T8280] loop5: detected capacity change from 0 to 512 [ 200.107612][ T8280] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.120280][ T8280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 200.128745][ T8280] EXT4-fs (loop5): orphan cleanup on readonly fs [ 200.132264][ T8296] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 200.143435][ T8280] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1199: bg 0: block 361: padding at end of block bitmap is not set [ 200.158345][ T8280] EXT4-fs (loop5): Remounting filesystem read-only [ 200.165313][ T8280] EXT4-fs (loop5): 1 truncate cleaned up [ 200.171568][ T8280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 200.803822][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 200.886816][ T8322] loop5: detected capacity change from 0 to 2048 [ 200.919122][ T8322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.931469][ T8322] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.222317][ T8317] syz.3.1209 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 201.236520][ T8317] CPU: 0 UID: 0 PID: 8317 Comm: syz.3.1209 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 201.236558][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.236574][ T8317] Call Trace: [ 201.236640][ T8317] [ 201.236647][ T8317] __dump_stack+0x1d/0x30 [ 201.236720][ T8317] dump_stack_lvl+0xe8/0x140 [ 201.236746][ T8317] dump_stack+0x15/0x1b [ 201.236761][ T8317] dump_header+0x81/0x220 [ 201.236790][ T8317] oom_kill_process+0x334/0x3f0 [ 201.236824][ T8317] out_of_memory+0x979/0xb80 [ 201.236928][ T8317] try_charge_memcg+0x5e6/0x9e0 [ 201.236954][ T8317] obj_cgroup_charge_pages+0xa6/0x150 [ 201.237120][ T8317] __memcg_kmem_charge_page+0x9f/0x170 [ 201.237150][ T8317] __alloc_frozen_pages_noprof+0x188/0x360 [ 201.237278][ T8317] alloc_pages_mpol+0xb3/0x250 [ 201.237309][ T8317] alloc_pages_noprof+0x90/0x130 [ 201.237338][ T8317] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 201.237454][ T8317] __kvmalloc_node_noprof+0x30f/0x4e0 [ 201.237482][ T8317] ? ip_set_alloc+0x1f/0x30 [ 201.237553][ T8317] ? ip_set_alloc+0x1f/0x30 [ 201.237582][ T8317] ? __kmalloc_cache_noprof+0x189/0x320 [ 201.237610][ T8317] ip_set_alloc+0x1f/0x30 [ 201.237639][ T8317] hash_netiface_create+0x282/0x740 [ 201.237736][ T8317] ? __pfx_hash_netiface_create+0x10/0x10 [ 201.237769][ T8317] ip_set_create+0x3c9/0x960 [ 201.237805][ T8317] nfnetlink_rcv_msg+0x4c3/0x590 [ 201.237922][ T8317] ? selinux_capable+0x1f9/0x270 [ 201.237940][ T8317] netlink_rcv_skb+0x123/0x220 [ 201.237957][ T8317] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 201.237988][ T8317] nfnetlink_rcv+0x16b/0x1690 [ 201.238047][ T8317] ? __kfree_skb+0x109/0x150 [ 201.238064][ T8317] ? nlmon_xmit+0x4f/0x60 [ 201.238085][ T8317] ? consume_skb+0x49/0x150 [ 201.238108][ T8317] ? nlmon_xmit+0x4f/0x60 [ 201.238129][ T8317] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 201.238150][ T8317] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 201.238168][ T8317] ? __dev_queue_xmit+0x182/0x1fb0 [ 201.238292][ T8317] ? ref_tracker_free+0x37d/0x3e0 [ 201.238341][ T8317] ? __netlink_deliver_tap+0x4dc/0x500 [ 201.238378][ T8317] netlink_unicast+0x5a1/0x670 [ 201.238420][ T8317] netlink_sendmsg+0x58b/0x6b0 [ 201.238506][ T8317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.238527][ T8317] __sock_sendmsg+0x145/0x180 [ 201.238552][ T8317] ____sys_sendmsg+0x31e/0x4e0 [ 201.238575][ T8317] ___sys_sendmsg+0x17b/0x1d0 [ 201.238628][ T8317] __x64_sys_sendmsg+0xd4/0x160 [ 201.238651][ T8317] x64_sys_call+0x2999/0x2fb0 [ 201.238671][ T8317] do_syscall_64+0xd2/0x200 [ 201.238717][ T8317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.238741][ T8317] ? clear_bhb_loop+0x40/0x90 [ 201.238760][ T8317] ? clear_bhb_loop+0x40/0x90 [ 201.238779][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.238798][ T8317] RIP: 0033:0x7ff97ca8e929 [ 201.238860][ T8317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.238876][ T8317] RSP: 002b:00007ff97b0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.238892][ T8317] RAX: ffffffffffffffda RBX: 00007ff97ccb5fa0 RCX: 00007ff97ca8e929 [ 201.238903][ T8317] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 201.238914][ T8317] RBP: 00007ff97cb10b39 R08: 0000000000000000 R09: 0000000000000000 [ 201.238980][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.239003][ T8317] R13: 0000000000000000 R14: 00007ff97ccb5fa0 R15: 00007ffca525f3f8 [ 201.239020][ T8317] [ 201.239026][ T8317] memory: usage 307200kB, limit 307200kB, failcnt 4264 [ 201.296727][ T8340] 9pnet_fd: Insufficient options for proto=fd [ 201.299474][ T8317] memory+swap: usage 351964kB, limit 9007199254740988kB, failcnt 0 [ 201.299494][ T8317] kmem: usage 260828kB, limit 9007199254740988kB, failcnt 0 [ 201.608691][ T8317] Memory cgroup stats for /syz3: [ 201.610057][ T8317] cache 46882816 [ 201.618730][ T8317] rss 376832 [ 201.622013][ T8317] shmem 46878720 [ 201.625579][ T8317] mapped_file 11759616 [ 201.629721][ T8317] dirty 4096 [ 201.632980][ T8317] writeback 0 [ 201.636339][ T8317] workingset_refault_anon 1203 [ 201.641093][ T8317] workingset_refault_file 788 [ 201.645860][ T8317] swap 45838336 [ 201.649439][ T8317] swapcached 192512 [ 201.653307][ T8317] nr_memmap_boot_pages 263598 [ 201.657978][ T8317] pgpgin 252013 [ 201.661446][ T8317] pglazyfree 257549 [ 201.665315][ T8317] pgfault 387 [ 201.668600][ T8317] a_other 36044800 [ 201.672371][ T8317] inactive_anon 11403264 [ 201.676639][ T8317] active_anon 4096 [ 201.680451][ T8317] inactive_file 0 [ 201.684175][ T8317] active_file 0 [ 201.687654][ T8317] hierarchical_memory_limit 314572800 [ 201.693099][ T8317] hierarchical_memsw_limit 9223372036854771712 [ 201.699262][ T8317] total_cache 46882816 [ 201.703406][ T8317] total_rss 376832 [ 201.707132][ T8317] total_shmem 46878720 [ 201.711263][ T8317] total_mapped_file 11759616 [ 201.715972][ T8317] total_dirty 4096 [ 201.719874][ T8317] total_writeback 0 [ 201.723773][ T8317] total_workingset_refault_anon 1203 [ 201.729071][ T8317] total_workingset_refault_file 788 [ 201.734307][ T8317] total_swap 45838336 [ 201.738353][ T8317] total_swapcached 192512 [ 201.742737][ T8317] total_nr_memmap_boot_pages 263598 [ 201.747987][ T8317] total_pgpgin 252013 [ 201.752027][ T8317] total_pglazyfree 257549 [ 201.756390][ T8317] total_pgfault 387 [ 201.760197][ T8317] total_a_other 36044800 [ 201.764526][ T8317] total_inactive_anon 11403264 [ 201.769361][ T8317] total_active_anon 4096 [ 201.773628][ T8317] total_inactive_file 0 [ 201.777834][ T8317] total_active_file 0 [ 201.781806][ T8317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1209,pid=8315,uid=0 [ 201.796727][ T8317] Memory cgroup out of memory: Killed process 8317 (syz.3.1209) total-vm:93752kB, anon-rss:1192kB, file-rss:22192kB, shmem-rss:11392kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 201.914135][ T8343] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 201.961362][ T8347] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 202.007533][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.044269][ T8355] program syz.2.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.059097][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 202.059126][ T29] audit: type=1400 audit(1749266729.535:7814): avc: denied { create } for pid=8352 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.085689][ T29] audit: type=1400 audit(1749266729.535:7815): avc: denied { read } for pid=8352 comm="syz.2.1220" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 202.109325][ T29] audit: type=1400 audit(1749266729.545:7816): avc: denied { ioctl } for pid=8352 comm="syz.2.1220" path="socket:[20993]" dev="sockfs" ino=20993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.132496][ T8360] __vm_enough_memory: pid: 8360, comm: syz.5.1218, bytes: 21200162635776 not enough memory for the allocation [ 202.134370][ T29] audit: type=1400 audit(1749266729.545:7817): avc: denied { ioctl } for pid=8352 comm="syz.2.1220" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 202.221085][ T29] audit: type=1326 audit(1749266729.705:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.1223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff97ca8e929 code=0x0 [ 202.265595][ T8360] loop5: detected capacity change from 0 to 512 [ 202.279682][ T8360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.355826][ T8360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 202.365561][ T8360] System zones: 1-12 [ 202.375446][ T8360] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1218: missing EA_INODE flag [ 202.389979][ T8360] EXT4-fs (loop5): Remounting filesystem read-only [ 202.397447][ T8360] EXT4-fs (loop5): 1 orphan inode deleted [ 202.412624][ T8360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.492747][ T8381] 9pnet_fd: Insufficient options for proto=fd [ 202.700909][ T29] audit: type=1400 audit(1749266729.785:7819): avc: denied { create } for pid=8353 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.720659][ T29] audit: type=1400 audit(1749266729.785:7820): avc: denied { connect } for pid=8353 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.903729][ T8386] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 202.947556][ T8391] loop4: detected capacity change from 0 to 2048 [ 202.958864][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.059477][ T29] audit: type=1326 audit(1749266730.537:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 203.060047][ T8391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.083119][ T29] audit: type=1326 audit(1749266730.537:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 203.095195][ T8391] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.118545][ T29] audit: type=1326 audit(1749266730.537:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 203.457138][ T8384] syz.2.1225 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 203.471329][ T8384] CPU: 0 UID: 0 PID: 8384 Comm: syz.2.1225 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 203.471392][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.471405][ T8384] Call Trace: [ 203.471412][ T8384] [ 203.471420][ T8384] __dump_stack+0x1d/0x30 [ 203.471442][ T8384] dump_stack_lvl+0xe8/0x140 [ 203.471469][ T8384] dump_stack+0x15/0x1b [ 203.471491][ T8384] dump_header+0x81/0x220 [ 203.471565][ T8384] oom_kill_process+0x334/0x3f0 [ 203.471679][ T8384] out_of_memory+0x979/0xb80 [ 203.471710][ T8384] try_charge_memcg+0x5e6/0x9e0 [ 203.471737][ T8384] obj_cgroup_charge_pages+0xa6/0x150 [ 203.471766][ T8384] __memcg_kmem_charge_page+0x9f/0x170 [ 203.471794][ T8384] __alloc_frozen_pages_noprof+0x188/0x360 [ 203.471851][ T8384] alloc_pages_mpol+0xb3/0x250 [ 203.471880][ T8384] alloc_pages_noprof+0x90/0x130 [ 203.471937][ T8384] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 203.472047][ T8384] __kvmalloc_node_noprof+0x30f/0x4e0 [ 203.472101][ T8384] ? ip_set_alloc+0x1f/0x30 [ 203.472130][ T8384] ? ip_set_alloc+0x1f/0x30 [ 203.472159][ T8384] ? __kmalloc_cache_noprof+0x189/0x320 [ 203.472186][ T8384] ip_set_alloc+0x1f/0x30 [ 203.472262][ T8384] hash_netiface_create+0x282/0x740 [ 203.472367][ T8384] ? __pfx_hash_netiface_create+0x10/0x10 [ 203.472397][ T8384] ip_set_create+0x3c9/0x960 [ 203.472425][ T8384] ? __nla_parse+0x40/0x60 [ 203.472446][ T8384] nfnetlink_rcv_msg+0x4c3/0x590 [ 203.472533][ T8384] ? selinux_capable+0x1f9/0x270 [ 203.472560][ T8384] netlink_rcv_skb+0x123/0x220 [ 203.472582][ T8384] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.472617][ T8384] nfnetlink_rcv+0x16b/0x1690 [ 203.472717][ T8384] ? __kfree_skb+0x109/0x150 [ 203.472734][ T8384] ? nlmon_xmit+0x4f/0x60 [ 203.472757][ T8384] ? consume_skb+0x49/0x150 [ 203.472773][ T8384] ? nlmon_xmit+0x4f/0x60 [ 203.472859][ T8384] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 203.472939][ T8384] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 203.473075][ T8384] ? __dev_queue_xmit+0x182/0x1fb0 [ 203.473093][ T8384] ? shmem_recalc_inode+0x19f/0x1c0 [ 203.473124][ T8384] ? ref_tracker_free+0x37d/0x3e0 [ 203.473221][ T8384] ? __netlink_deliver_tap+0x4dc/0x500 [ 203.473280][ T8384] netlink_unicast+0x5a1/0x670 [ 203.473321][ T8384] netlink_sendmsg+0x58b/0x6b0 [ 203.473343][ T8384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.473365][ T8384] __sock_sendmsg+0x145/0x180 [ 203.473417][ T8384] ____sys_sendmsg+0x31e/0x4e0 [ 203.473458][ T8384] ___sys_sendmsg+0x17b/0x1d0 [ 203.473490][ T8384] __x64_sys_sendmsg+0xd4/0x160 [ 203.473522][ T8384] x64_sys_call+0x2999/0x2fb0 [ 203.473541][ T8384] do_syscall_64+0xd2/0x200 [ 203.473560][ T8384] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.473583][ T8384] ? clear_bhb_loop+0x40/0x90 [ 203.473603][ T8384] ? clear_bhb_loop+0x40/0x90 [ 203.473649][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.473676][ T8384] RIP: 0033:0x7f285ef0e929 [ 203.473690][ T8384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.473714][ T8384] RSP: 002b:00007f285d577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.473882][ T8384] RAX: ffffffffffffffda RBX: 00007f285f135fa0 RCX: 00007f285ef0e929 [ 203.473893][ T8384] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 203.473904][ T8384] RBP: 00007f285ef90b39 R08: 0000000000000000 R09: 0000000000000000 [ 203.473914][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.473925][ T8384] R13: 0000000000000000 R14: 00007f285f135fa0 R15: 00007ffe42e921b8 [ 203.473941][ T8384] [ 203.473947][ T8384] memory: usage 307200kB, limit 307200kB, failcnt 988 [ 203.832150][ T8384] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 203.840165][ T8384] kmem: usage 295312kB, limit 9007199254740988kB, failcnt 0 [ 203.847535][ T8384] Memory cgroup stats for /syz2: [ 203.847848][ T8384] cache 11763712 [ 203.856437][ T8384] rss 208896 [ 203.859746][ T8384] shmem 11759616 [ 203.863312][ T8384] mapped_file 11759616 [ 203.867430][ T8384] dirty 4096 [ 203.870646][ T8384] writeback 0 [ 203.874014][ T8384] workingset_refault_anon 230 [ 203.878703][ T8384] workingset_refault_file 1184 [ 203.883470][ T8384] swap 0 [ 203.886358][ T8384] swapcached 163840 [ 203.890195][ T8384] nr_memmap_boot_pages 244959 [ 203.894922][ T8384] pgpgin 241996 [ 203.898394][ T8384] pglazyfree 251043 [ 203.902197][ T8384] pgfault 211 [ 203.905478][ T8384] a_other 6770688 [ 203.909136][ T8384] inactive_anon 5361664 [ 203.913335][ T8384] active_anon 4096 [ 203.917063][ T8384] inactive_file 0 [ 203.920741][ T8384] active_file 0 [ 203.924189][ T8384] hierarchical_memory_limit 314572800 [ 203.929612][ T8384] hierarchical_memsw_limit 9223372036854771712 [ 203.935842][ T8384] total_cache 11763712 [ 203.939934][ T8384] total_rss 208896 [ 203.943725][ T8384] total_shmem 11759616 [ 203.947813][ T8384] total_mapped_file 11759616 [ 203.952396][ T8384] total_dirty 4096 [ 203.956119][ T8384] total_writeback 0 [ 203.960019][ T8384] total_workingset_refault_anon 230 [ 203.965266][ T8384] total_workingset_refault_file 1184 [ 203.970577][ T8384] total_swap 0 [ 203.973950][ T8384] total_swapcached 163840 [ 203.978301][ T8384] total_nr_memmap_boot_pages 244959 [ 203.983513][ T8384] total_pgpgin 241996 [ 203.987538][ T8384] total_pglazyfree 251043 [ 203.991905][ T8384] total_pgfault 211 [ 203.995717][ T8384] total_a_other 6770688 [ 203.999887][ T8384] total_inactive_anon 5361664 [ 204.004650][ T8384] total_active_anon 4096 [ 204.008915][ T8384] total_inactive_file 0 [ 204.013192][ T8384] total_active_file 0 [ 204.017311][ T8384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1225,pid=8383,uid=0 [ 204.031963][ T8384] Memory cgroup out of memory: Killed process 8384 (syz.2.1225) total-vm:93752kB, anon-rss:1064kB, file-rss:22192kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 204.244927][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.383465][ T8423] 9pnet_fd: Insufficient options for proto=fd [ 204.418235][ T8429] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 204.459088][ T8427] loop4: detected capacity change from 0 to 1024 [ 204.468031][ T8427] EXT4-fs: Ignoring removed bh option [ 204.473554][ T8427] EXT4-fs: inline encryption not supported [ 204.479492][ T8427] EXT4-fs: Ignoring removed i_version option [ 204.508790][ T8427] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.569148][ T8434] lo speed is unknown, defaulting to 1000 [ 204.575474][ T8434] lo speed is unknown, defaulting to 1000 [ 204.993708][ T8427] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.1237: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.009402][ T8427] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1237: Failed to acquire dquot type 0 [ 205.252225][ T8427] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1237: Freeing blocks not in datazone - block = 0, count = 4096 [ 205.361111][ T8427] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1237: Invalid inode bitmap blk 0 in block_group 0 [ 205.377468][ T6130] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.499381][ T8447] vhci_hcd: invalid port number 96 [ 205.504653][ T8447] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 205.514220][ T8427] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 205.522076][ T6130] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 0 [ 205.542283][ T8427] EXT4-fs (loop4): 1 orphan inode deleted [ 205.569909][ T8427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.607806][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1242'. [ 205.628431][ T8451] loop5: detected capacity change from 0 to 1024 [ 205.635209][ T8451] EXT4-fs: Ignoring removed bh option [ 205.640797][ T8451] EXT4-fs: inline encryption not supported [ 205.646717][ T8451] EXT4-fs: Ignoring removed i_version option [ 205.653260][ T8451] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.665042][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.665470][ T8451] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.1242: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.688772][ T8451] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1242: Failed to acquire dquot type 0 [ 205.700315][ T8451] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1242: Freeing blocks not in datazone - block = 0, count = 4096 [ 205.722757][ T8451] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1242: Invalid inode bitmap blk 0 in block_group 0 [ 205.736070][ T8451] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 205.744749][ T8451] EXT4-fs (loop5): 1 orphan inode deleted [ 205.751075][ T8451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.763834][ T12] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.806660][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 205.831869][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.271253][ T8461] syz.0.1245 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 206.285518][ T8461] CPU: 1 UID: 0 PID: 8461 Comm: syz.0.1245 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 206.285551][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.285564][ T8461] Call Trace: [ 206.285572][ T8461] [ 206.285581][ T8461] __dump_stack+0x1d/0x30 [ 206.285654][ T8461] dump_stack_lvl+0xe8/0x140 [ 206.285675][ T8461] dump_stack+0x15/0x1b [ 206.285693][ T8461] dump_header+0x81/0x220 [ 206.285775][ T8461] oom_kill_process+0x334/0x3f0 [ 206.285812][ T8461] out_of_memory+0x979/0xb80 [ 206.285848][ T8461] try_charge_memcg+0x5e6/0x9e0 [ 206.285880][ T8461] obj_cgroup_charge_pages+0xa6/0x150 [ 206.285993][ T8461] __memcg_kmem_charge_page+0x9f/0x170 [ 206.286027][ T8461] __alloc_frozen_pages_noprof+0x188/0x360 [ 206.286087][ T8461] alloc_pages_mpol+0xb3/0x250 [ 206.286190][ T8461] alloc_pages_noprof+0x90/0x130 [ 206.286249][ T8461] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 206.286363][ T8461] __kvmalloc_node_noprof+0x30f/0x4e0 [ 206.286395][ T8461] ? ip_set_alloc+0x1f/0x30 [ 206.286499][ T8461] ? ip_set_alloc+0x1f/0x30 [ 206.286533][ T8461] ? __kmalloc_cache_noprof+0x189/0x320 [ 206.286565][ T8461] ip_set_alloc+0x1f/0x30 [ 206.286642][ T8461] hash_netiface_create+0x282/0x740 [ 206.286681][ T8461] ? __pfx_hash_netiface_create+0x10/0x10 [ 206.286785][ T8461] ip_set_create+0x3c9/0x960 [ 206.286874][ T8461] ? __nla_parse+0x40/0x60 [ 206.286978][ T8461] nfnetlink_rcv_msg+0x4c3/0x590 [ 206.287084][ T8461] ? selinux_capable+0x1f9/0x270 [ 206.287105][ T8461] netlink_rcv_skb+0x123/0x220 [ 206.287127][ T8461] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.287166][ T8461] nfnetlink_rcv+0x16b/0x1690 [ 206.287197][ T8461] ? __kfree_skb+0x109/0x150 [ 206.287225][ T8461] ? nlmon_xmit+0x4f/0x60 [ 206.287250][ T8461] ? consume_skb+0x49/0x150 [ 206.287269][ T8461] ? nlmon_xmit+0x4f/0x60 [ 206.287293][ T8461] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 206.287319][ T8461] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 206.287355][ T8461] ? __dev_queue_xmit+0x182/0x1fb0 [ 206.287429][ T8461] ? shmem_recalc_inode+0x19f/0x1c0 [ 206.287464][ T8461] ? ref_tracker_free+0x37d/0x3e0 [ 206.287514][ T8461] ? __netlink_deliver_tap+0x4dc/0x500 [ 206.287621][ T8461] netlink_unicast+0x5a1/0x670 [ 206.287676][ T8461] netlink_sendmsg+0x58b/0x6b0 [ 206.287702][ T8461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.287726][ T8461] __sock_sendmsg+0x145/0x180 [ 206.287779][ T8461] ____sys_sendmsg+0x31e/0x4e0 [ 206.287807][ T8461] ___sys_sendmsg+0x17b/0x1d0 [ 206.287878][ T8461] __x64_sys_sendmsg+0xd4/0x160 [ 206.287906][ T8461] x64_sys_call+0x2999/0x2fb0 [ 206.287928][ T8461] do_syscall_64+0xd2/0x200 [ 206.287951][ T8461] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.287989][ T8461] ? clear_bhb_loop+0x40/0x90 [ 206.288011][ T8461] ? clear_bhb_loop+0x40/0x90 [ 206.288033][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.288135][ T8461] RIP: 0033:0x7fe9d4f6e929 [ 206.288153][ T8461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.288173][ T8461] RSP: 002b:00007fe9d35d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.288193][ T8461] RAX: ffffffffffffffda RBX: 00007fe9d5195fa0 RCX: 00007fe9d4f6e929 [ 206.288213][ T8461] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 206.288279][ T8461] RBP: 00007fe9d4ff0b39 R08: 0000000000000000 R09: 0000000000000000 [ 206.288292][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.288309][ T8461] R13: 0000000000000000 R14: 00007fe9d5195fa0 R15: 00007fffa16d8438 [ 206.288329][ T8461] [ 206.288336][ T8461] memory: usage 307200kB, limit 307200kB, failcnt 5259 [ 206.341000][ T8480] loop5: detected capacity change from 0 to 1024 [ 206.344373][ T8461] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 206.456926][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1249'. [ 206.461140][ T8461] kmem: usage 295524kB, limit 9007199254740988kB, failcnt 0 [ 206.685169][ T8461] Memory cgroup stats for /syz0: [ 206.685429][ T8461] cache 11759616 [ 206.693948][ T8461] rss 196608 [ 206.697218][ T8461] shmem 11759616 [ 206.700776][ T8461] mapped_file 11755520 [ 206.704962][ T8461] dirty 0 [ 206.707918][ T8461] writeback 0 [ 206.708197][ T8492] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 206.711205][ T8461] workingset_refault_anon 296 [ 206.711216][ T8461] workingset_refault_file 2468 [ 206.711226][ T8461] swap 360448 [ 206.711235][ T8461] swapcached 0 [ 206.737789][ T8461] nr_memmap_boot_pages 288145 [ 206.742627][ T8461] pgpgin 285226 [ 206.746118][ T8461] pglazyfree 272225 [ 206.749954][ T8461] pgfault 242 [ 206.753254][ T8461] a_other 258048 [ 206.756910][ T8461] inactive_anon 11698176 [ 206.761148][ T8461] active_anon 0 [ 206.764635][ T8461] inactive_file 0 [ 206.768302][ T8461] active_file 0 [ 206.771784][ T8461] hierarchical_memory_limit 314572800 [ 206.777154][ T8461] hierarchical_memsw_limit 9223372036854771712 [ 206.783335][ T8461] total_cache 11759616 [ 206.787553][ T8461] total_rss 196608 [ 206.791293][ T8461] total_shmem 11759616 [ 206.795392][ T8461] total_mapped_file 11755520 [ 206.799979][ T8461] total_dirty 0 [ 206.803489][ T8461] total_writeback 0 [ 206.807434][ T8461] total_workingset_refault_anon 296 [ 206.812648][ T8461] total_workingset_refault_file 2468 [ 206.817969][ T8461] total_swap 360448 [ 206.821848][ T8461] total_swapcached 0 [ 206.825847][ T8461] total_nr_memmap_boot_pages 288177 [ 206.831176][ T8461] total_pgpgin 285258 [ 206.835303][ T8461] total_pglazyfree 272233 [ 206.839773][ T8461] total_pgfault 242 [ 206.843669][ T8461] total_a_other 258048 [ 206.847753][ T8461] total_inactive_anon 11698176 [ 206.852566][ T8461] total_active_anon 0 [ 206.856542][ T8461] total_inactive_file 0 [ 206.860697][ T8461] total_active_file 0 [ 206.864736][ T8461] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1245,pid=8460,uid=0 [ 206.879580][ T8461] Memory cgroup out of memory: Killed process 8460 (syz.0.1245) total-vm:93752kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:11392kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 207.094106][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 207.094124][ T29] audit: type=1326 audit(1749266734.595:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 207.126889][ T29] audit: type=1326 audit(1749266734.625:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 207.370947][ T29] audit: type=1400 audit(1749266734.866:7985): avc: denied { read write } for pid=8500 comm="syz.5.1255" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.395847][ T29] audit: type=1400 audit(1749266734.866:7986): avc: denied { open } for pid=8500 comm="syz.5.1255" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.081977][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 208.091758][ T29] audit: type=1400 audit(1749266735.557:7987): avc: denied { name_bind } for pid=8511 comm="syz.3.1257" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 208.113060][ T29] audit: type=1400 audit(1749266735.557:7988): avc: denied { node_bind } for pid=8511 comm="syz.3.1257" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 208.134383][ T29] audit: type=1400 audit(1749266735.567:7989): avc: denied { read } for pid=8511 comm="syz.3.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 208.153751][ T29] audit: type=1400 audit(1749266735.567:7990): avc: denied { ioctl } for pid=8511 comm="syz.3.1257" path="socket:[22374]" dev="sockfs" ino=22374 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.178478][ T29] audit: type=1400 audit(1749266735.567:7991): avc: denied { connect } for pid=8511 comm="syz.3.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.198042][ T29] audit: type=1400 audit(1749266735.567:7992): avc: denied { write } for pid=8511 comm="syz.3.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.452445][ T8536] loop4: detected capacity change from 0 to 2048 [ 208.470696][ T8536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.483542][ T8536] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.931778][ T8534] syz.0.1263 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 208.945995][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.0.1263 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 208.946021][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.946038][ T8534] Call Trace: [ 208.946059][ T8534] [ 208.946069][ T8534] __dump_stack+0x1d/0x30 [ 208.946153][ T8534] dump_stack_lvl+0xe8/0x140 [ 208.946176][ T8534] dump_stack+0x15/0x1b [ 208.946190][ T8534] dump_header+0x81/0x220 [ 208.946272][ T8534] oom_kill_process+0x334/0x3f0 [ 208.946352][ T8534] out_of_memory+0x979/0xb80 [ 208.946381][ T8534] try_charge_memcg+0x5e6/0x9e0 [ 208.946408][ T8534] obj_cgroup_charge_pages+0xa6/0x150 [ 208.946499][ T8534] __memcg_kmem_charge_page+0x9f/0x170 [ 208.946528][ T8534] __alloc_frozen_pages_noprof+0x188/0x360 [ 208.946563][ T8534] alloc_pages_mpol+0xb3/0x250 [ 208.946647][ T8534] alloc_pages_noprof+0x90/0x130 [ 208.946695][ T8534] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 208.946816][ T8534] __kvmalloc_node_noprof+0x30f/0x4e0 [ 208.946844][ T8534] ? ip_set_alloc+0x1f/0x30 [ 208.946989][ T8534] ? ip_set_alloc+0x1f/0x30 [ 208.947116][ T8534] ? __kmalloc_cache_noprof+0x189/0x320 [ 208.947167][ T8534] ip_set_alloc+0x1f/0x30 [ 208.947274][ T8534] hash_netiface_create+0x282/0x740 [ 208.947307][ T8534] ? __pfx_hash_netiface_create+0x10/0x10 [ 208.947377][ T8534] ip_set_create+0x3c9/0x960 [ 208.947441][ T8534] ? __nla_parse+0x40/0x60 [ 208.947461][ T8534] nfnetlink_rcv_msg+0x4c3/0x590 [ 208.947570][ T8534] ? selinux_capable+0x1f9/0x270 [ 208.947669][ T8534] netlink_rcv_skb+0x123/0x220 [ 208.947686][ T8534] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 208.947719][ T8534] nfnetlink_rcv+0x16b/0x1690 [ 208.947745][ T8534] ? __kfree_skb+0x109/0x150 [ 208.947762][ T8534] ? nlmon_xmit+0x4f/0x60 [ 208.947855][ T8534] ? consume_skb+0x49/0x150 [ 208.947906][ T8534] ? nlmon_xmit+0x4f/0x60 [ 208.947939][ T8534] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 208.947964][ T8534] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 208.948047][ T8534] ? __dev_queue_xmit+0x182/0x1fb0 [ 208.948068][ T8534] ? shmem_recalc_inode+0x19f/0x1c0 [ 208.948095][ T8534] ? css_rstat_updated+0xcd/0x5b0 [ 208.948136][ T8534] ? ref_tracker_free+0x37d/0x3e0 [ 208.948248][ T8534] ? __netlink_deliver_tap+0x4dc/0x500 [ 208.948283][ T8534] netlink_unicast+0x5a1/0x670 [ 208.948316][ T8534] netlink_sendmsg+0x58b/0x6b0 [ 208.948338][ T8534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.948359][ T8534] __sock_sendmsg+0x145/0x180 [ 208.948421][ T8534] ____sys_sendmsg+0x31e/0x4e0 [ 208.948444][ T8534] ___sys_sendmsg+0x17b/0x1d0 [ 208.948543][ T8534] __x64_sys_sendmsg+0xd4/0x160 [ 208.948567][ T8534] x64_sys_call+0x2999/0x2fb0 [ 208.948618][ T8534] do_syscall_64+0xd2/0x200 [ 208.948637][ T8534] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.948667][ T8534] ? clear_bhb_loop+0x40/0x90 [ 208.948764][ T8534] ? clear_bhb_loop+0x40/0x90 [ 208.948784][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.948803][ T8534] RIP: 0033:0x7fe9d4f6e929 [ 208.948893][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.948910][ T8534] RSP: 002b:00007fe9d35d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.948958][ T8534] RAX: ffffffffffffffda RBX: 00007fe9d5195fa0 RCX: 00007fe9d4f6e929 [ 208.948975][ T8534] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 208.948993][ T8534] RBP: 00007fe9d4ff0b39 R08: 0000000000000000 R09: 0000000000000000 [ 208.949004][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.949015][ T8534] R13: 0000000000000000 R14: 00007fe9d5195fa0 R15: 00007fffa16d8438 [ 208.949032][ T8534] [ 209.303912][ T8534] memory: usage 307200kB, limit 307200kB, failcnt 5464 [ 209.310923][ T8534] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 209.318885][ T8534] kmem: usage 295520kB, limit 9007199254740988kB, failcnt 0 [ 209.326209][ T8534] Memory cgroup stats for /syz0: [ 209.342238][ T8534] cache 11759616 [ 209.350855][ T8534] rss 196608 [ 209.354016][ T8544] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 209.354050][ T8534] shmem 11759616 [ 209.354061][ T8534] mapped_file 11755520 [ 209.369389][ T8534] dirty 0 [ 209.372336][ T8534] writeback 0 [ 209.375669][ T8534] workingset_refault_anon 296 [ 209.380452][ T8534] workingset_refault_file 2469 [ 209.385264][ T8534] swap 360448 [ 209.388576][ T8534] swapcached 0 [ 209.392031][ T8534] nr_memmap_boot_pages 294318 [ 209.393746][ T8546] pimreg: entered allmulticast mode [ 209.396723][ T8534] pgpgin 291399 [ 209.396734][ T8534] pglazyfree 278631 [ 209.409290][ T8534] pgfault 246 [ 209.412650][ T8534] a_other 8093696 [ 209.416437][ T8534] inactive_anon 3862528 [ 209.420655][ T8534] active_anon 0 [ 209.421417][ T8546] pimreg: left allmulticast mode [ 209.424129][ T8534] inactive_file 0 [ 209.424140][ T8534] active_file 0 [ 209.436372][ T8534] hierarchical_memory_limit 314572800 [ 209.441865][ T8534] hierarchical_memsw_limit 9223372036854771712 [ 209.446332][ T8548] loop5: detected capacity change from 0 to 512 [ 209.448042][ T8534] total_cache 11759616 [ 209.448078][ T8534] total_rss 196608 [ 209.457180][ T8548] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 209.458383][ T8534] total_shmem 11759616 [ 209.462288][ T8548] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1267: invalid indirect mapped block 2683928664 (level 1) [ 209.470056][ T8534] total_mapped_file 11755520 [ 209.470127][ T8534] total_dirty 0 [ 209.475027][ T8548] EXT4-fs (loop5): Remounting filesystem read-only [ 209.488110][ T8534] total_writeback 0 [ 209.488137][ T8534] total_workingset_refault_anon 296 [ 209.493145][ T8548] EXT4-fs (loop5): 1 truncate cleaned up [ 209.496164][ T8534] total_workingset_refault_file 2469 [ 209.503183][ T8548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.506506][ T8534] total_swap 360448 [ 209.506517][ T8534] total_swapcached 0 [ 209.543037][ T8534] total_nr_memmap_boot_pages 294350 [ 209.548305][ T8534] total_pgpgin 291431 [ 209.552321][ T8534] total_pglazyfree 278639 [ 209.556646][ T8534] total_pgfault 246 [ 209.560502][ T8534] total_a_other 8093696 [ 209.564649][ T8534] total_inactive_anon 3862528 [ 209.569334][ T8534] total_active_anon 0 [ 209.573316][ T8534] total_inactive_file 0 [ 209.577489][ T8534] total_active_file 0 [ 209.581459][ T8534] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1263,pid=8533,uid=0 [ 209.596188][ T8534] Memory cgroup out of memory: Killed process 8534 (syz.0.1263) total-vm:93752kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:11392kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 209.630277][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.662489][ T8554] netlink: 'syz.5.1268': attribute type 10 has an invalid length. [ 209.683969][ T8554] netlink: 'syz.5.1268': attribute type 10 has an invalid length. [ 209.692162][ T8554] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1268'. [ 209.722957][ T8560] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 209.859668][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.935235][ T8571] lo speed is unknown, defaulting to 1000 [ 209.958500][ T8571] lo speed is unknown, defaulting to 1000 [ 210.070142][ T8576] lo speed is unknown, defaulting to 1000 [ 210.081171][ T8579] netlink: 9412 bytes leftover after parsing attributes in process `+}[@'. [ 210.091335][ T8576] lo speed is unknown, defaulting to 1000 [ 210.573613][ T8594] bond1: (slave ip6gretap1): Removing an active aggregator [ 210.708754][ T8594] bond1: (slave ip6gretap1): Releasing backup interface [ 210.715861][ T8594] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 8a:b2:55:a3:99:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 210.868001][ T8594] bond1: (slave veth5): Releasing backup interface [ 210.926402][ T8596] geneve2: entered promiscuous mode [ 210.931684][ T8596] geneve2: entered allmulticast mode [ 210.957661][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 211.059962][ T8610] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 211.107838][ T8613] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 211.170863][ T8615] loop4: detected capacity change from 0 to 2048 [ 211.206808][ T8615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.244531][ T8615] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.395266][ T8630] tmpfs: Bad value for 'mpol' [ 211.864435][ T8617] syz.2.1286 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 211.878680][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.2.1286 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 211.878714][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.878727][ T8617] Call Trace: [ 211.878733][ T8617] [ 211.878741][ T8617] __dump_stack+0x1d/0x30 [ 211.878762][ T8617] dump_stack_lvl+0xe8/0x140 [ 211.878871][ T8617] dump_stack+0x15/0x1b [ 211.878892][ T8617] dump_header+0x81/0x220 [ 211.879008][ T8617] oom_kill_process+0x334/0x3f0 [ 211.879039][ T8617] out_of_memory+0x979/0xb80 [ 211.879075][ T8617] try_charge_memcg+0x5e6/0x9e0 [ 211.879110][ T8617] obj_cgroup_charge_pages+0xa6/0x150 [ 211.879153][ T8617] __memcg_kmem_charge_page+0x9f/0x170 [ 211.879270][ T8617] __alloc_frozen_pages_noprof+0x188/0x360 [ 211.879466][ T8617] alloc_pages_mpol+0xb3/0x250 [ 211.879509][ T8617] alloc_pages_noprof+0x90/0x130 [ 211.879598][ T8617] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 211.879666][ T8617] __kvmalloc_node_noprof+0x30f/0x4e0 [ 211.879705][ T8617] ? ip_set_alloc+0x1f/0x30 [ 211.879808][ T8617] ? ip_set_alloc+0x1f/0x30 [ 211.879872][ T8617] ? __kmalloc_cache_noprof+0x189/0x320 [ 211.879904][ T8617] ip_set_alloc+0x1f/0x30 [ 211.879949][ T8617] hash_netiface_create+0x282/0x740 [ 211.880057][ T8617] ? __pfx_hash_netiface_create+0x10/0x10 [ 211.880101][ T8617] ip_set_create+0x3c9/0x960 [ 211.880131][ T8617] ? __nla_parse+0x40/0x60 [ 211.880228][ T8617] nfnetlink_rcv_msg+0x4c3/0x590 [ 211.880284][ T8617] ? selinux_capable+0x1f9/0x270 [ 211.880305][ T8617] netlink_rcv_skb+0x123/0x220 [ 211.880325][ T8617] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 211.880443][ T8617] nfnetlink_rcv+0x16b/0x1690 [ 211.880477][ T8617] ? __kfree_skb+0x109/0x150 [ 211.880510][ T8617] ? nlmon_xmit+0x4f/0x60 [ 211.880534][ T8617] ? consume_skb+0x49/0x150 [ 211.880560][ T8617] ? nlmon_xmit+0x4f/0x60 [ 211.880592][ T8617] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 211.880692][ T8617] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 211.880715][ T8617] ? __dev_queue_xmit+0x182/0x1fb0 [ 211.880746][ T8617] ? shmem_recalc_inode+0x19f/0x1c0 [ 211.880860][ T8617] ? ref_tracker_free+0x37d/0x3e0 [ 211.880971][ T8617] ? __netlink_deliver_tap+0x4dc/0x500 [ 211.881002][ T8617] netlink_unicast+0x5a1/0x670 [ 211.881045][ T8617] netlink_sendmsg+0x58b/0x6b0 [ 211.881076][ T8617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.881184][ T8617] __sock_sendmsg+0x145/0x180 [ 211.881221][ T8617] ____sys_sendmsg+0x31e/0x4e0 [ 211.881254][ T8617] ___sys_sendmsg+0x17b/0x1d0 [ 211.881301][ T8617] __x64_sys_sendmsg+0xd4/0x160 [ 211.881332][ T8617] x64_sys_call+0x2999/0x2fb0 [ 211.881436][ T8617] do_syscall_64+0xd2/0x200 [ 211.881464][ T8617] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.881492][ T8617] ? clear_bhb_loop+0x40/0x90 [ 211.881547][ T8617] ? clear_bhb_loop+0x40/0x90 [ 211.881597][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.881624][ T8617] RIP: 0033:0x7f285ef0e929 [ 211.881644][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.881687][ T8617] RSP: 002b:00007f285d577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.881711][ T8617] RAX: ffffffffffffffda RBX: 00007f285f135fa0 RCX: 00007f285ef0e929 [ 211.881725][ T8617] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 211.881818][ T8617] RBP: 00007f285ef90b39 R08: 0000000000000000 R09: 0000000000000000 [ 211.881834][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.881846][ T8617] R13: 0000000000000000 R14: 00007f285f135fa0 R15: 00007ffe42e921b8 [ 211.881865][ T8617] [ 211.881885][ T8617] memory: usage 307200kB, limit 307200kB, failcnt 1058 [ 212.239692][ T8617] memory+swap: usage 307024kB, limit 9007199254740988kB, failcnt 0 [ 212.247611][ T8617] kmem: usage 294976kB, limit 9007199254740988kB, failcnt 0 [ 212.254914][ T8617] Memory cgroup stats for /syz2: [ 212.255275][ T8617] cache 11763712 [ 212.263878][ T8617] rss 372736 [ 212.267098][ T8617] shmem 11759616 [ 212.270716][ T8617] mapped_file 11759616 [ 212.274938][ T8617] dirty 4096 [ 212.278168][ T8617] writeback 0 [ 212.281446][ T8617] workingset_refault_anon 230 [ 212.286263][ T8617] workingset_refault_file 1184 [ 212.291116][ T8617] swap 0 [ 212.294047][ T8617] swapcached 163840 [ 212.297848][ T8617] nr_memmap_boot_pages 257286 [ 212.302569][ T8617] pgpgin 254283 [ 212.306072][ T8617] pglazyfree 264077 [ 212.309867][ T8617] pgfault 211 [ 212.313248][ T8617] a_other 2727936 [ 212.316997][ T8617] inactive_anon 9568256 [ 212.321180][ T8617] active_anon 4096 [ 212.325023][ T8617] inactive_file 0 [ 212.328653][ T8617] active_file 0 [ 212.332164][ T8617] hierarchical_memory_limit 314572800 [ 212.337633][ T8617] hierarchical_memsw_limit 9223372036854771712 [ 212.343906][ T8617] total_cache 11763712 [ 212.348058][ T8617] total_rss 372736 [ 212.351773][ T8617] total_shmem 11759616 [ 212.355904][ T8617] total_mapped_file 11759616 [ 212.360508][ T8617] total_dirty 4096 [ 212.364272][ T8617] total_writeback 0 [ 212.368087][ T8617] total_workingset_refault_anon 230 [ 212.373335][ T8617] total_workingset_refault_file 1184 [ 212.378753][ T8617] total_swap 0 [ 212.382121][ T8617] total_swapcached 163840 [ 212.386542][ T8617] total_nr_memmap_boot_pages 257286 [ 212.391807][ T8617] total_pgpgin 254283 [ 212.395807][ T8617] total_pglazyfree 264077 [ 212.400128][ T8617] total_pgfault 211 [ 212.404003][ T8617] total_a_other 2727936 [ 212.408215][ T8617] total_inactive_anon 9568256 [ 212.412906][ T8617] total_active_anon 4096 [ 212.417146][ T8617] total_inactive_file 0 [ 212.421349][ T8617] total_active_file 0 [ 212.425397][ T8617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1286,pid=8616,uid=0 [ 212.439993][ T8617] Memory cgroup out of memory: Killed process 8617 (syz.2.1286) total-vm:93752kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 212.653504][ T8646] lo speed is unknown, defaulting to 1000 [ 212.659674][ T8646] lo speed is unknown, defaulting to 1000 [ 212.687529][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.696278][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 212.696296][ T29] audit: type=1400 audit(1749266740.194:8149): avc: denied { write } for pid=8645 comm="syz.0.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 212.775075][ T8648] siw: device registration error -23 [ 212.788629][ T8650] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 212.819319][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 212.829432][ T29] audit: type=1326 audit(1749266740.324:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 212.852964][ T29] audit: type=1326 audit(1749266740.324:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 212.876493][ T29] audit: type=1326 audit(1749266740.324:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 212.899939][ T29] audit: type=1326 audit(1749266740.324:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 212.923401][ T29] audit: type=1326 audit(1749266740.324:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 212.946786][ T29] audit: type=1326 audit(1749266740.324:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 212.970214][ T29] audit: type=1326 audit(1749266740.324:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 212.993603][ T29] audit: type=1326 audit(1749266740.324:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 213.017078][ T29] audit: type=1326 audit(1749266740.324:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 213.097634][ T8661] netlink: 'syz.3.1294': attribute type 10 has an invalid length. [ 213.105653][ T8661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1294'. [ 213.116595][ T8661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.124905][ T8661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.133216][ T8661] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.145371][ T8661] geneve1: entered promiscuous mode [ 213.151503][ T8661] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 213.164426][ T8661] team0: Failed to send options change via netlink (err -105) [ 213.172238][ T8661] team0: Port device geneve1 added [ 213.181186][ T8656] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.414105][ T8656] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.480687][ T8656] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.599041][ T8677] lo speed is unknown, defaulting to 1000 [ 214.605230][ T8677] lo speed is unknown, defaulting to 1000 [ 214.612574][ T8680] loop5: detected capacity change from 0 to 512 [ 214.634745][ T8683] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 214.656329][ T8680] ext4: Bad value for 'debug_want_extra_isize' [ 214.731069][ T8656] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.743457][ T8656] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.762952][ T8656] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.806040][ T8656] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.832169][ T8689] loop5: detected capacity change from 0 to 2048 [ 214.871674][ T8695] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 214.902555][ T8689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.915106][ T8689] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.027280][ T8703] lo speed is unknown, defaulting to 1000 [ 215.057664][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.103952][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.112228][ T8703] lo speed is unknown, defaulting to 1000 [ 215.152001][ T8696] SELinux: failed to load policy [ 215.301417][ T8707] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 215.696866][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 215.960054][ T8438] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 216.136339][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.170841][ T8727] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 216.254179][ T8729] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 216.488837][ T8740] binfmt_misc: register: failed to install interpreter file ./file2 [ 216.529788][ T8743] lo speed is unknown, defaulting to 1000 [ 216.536207][ T8743] lo speed is unknown, defaulting to 1000 [ 216.672318][ T8747] sd 0:0:1:0: device reset [ 216.978074][ T8746] siw: device registration error -23 [ 217.291312][ T8763] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1326'. [ 217.388255][ T8773] loop4: detected capacity change from 0 to 512 [ 217.395190][ T8774] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 217.423980][ T8754] SELinux: failed to load policy [ 217.430336][ T8776] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 217.513743][ T8778] loop5: detected capacity change from 0 to 512 [ 217.708711][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 217.708729][ T29] audit: type=1326 audit(1749266745.221:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 217.738462][ T29] audit: type=1326 audit(1749266745.221:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 217.826541][ T8778] loop5: detected capacity change from 0 to 1024 [ 217.863818][ T8787] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1333'. [ 217.885333][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x1 [ 217.892905][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.900469][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.907905][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.915406][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.922821][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.930286][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x4 [ 217.937772][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.945161][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.952565][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.960014][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x2 [ 217.967410][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.974861][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.982309][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x4 [ 217.989720][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 217.997116][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.004489][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x2 [ 218.011912][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.019379][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.026817][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.034206][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.041711][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.049148][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.056587][ T3416] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 218.112696][ T29] audit: type=1400 audit(1749266745.281:8376): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 218.133012][ T29] audit: type=1326 audit(1749266745.571:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3efea4d290 code=0x7ffc0000 [ 218.156462][ T29] audit: type=1326 audit(1749266745.581:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 218.180003][ T29] audit: type=1326 audit(1749266745.581:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efea4e929 code=0x7ffc0000 [ 218.228231][ T8778] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 218.281407][ T8789] lo speed is unknown, defaulting to 1000 [ 218.291940][ T3416] hid-generic 0006:0000:0000.0008: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 218.301932][ T8789] lo speed is unknown, defaulting to 1000 [ 218.364083][ T8796] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 218.371981][ T8796] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1337'. [ 218.494334][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1338'. [ 218.503551][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1338'. [ 218.516775][ T8802] loop4: detected capacity change from 0 to 512 [ 218.557191][ T8802] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 218.573983][ T8802] EXT4-fs: error: could not find journal device path [ 218.581620][ T29] audit: type=1326 audit(1749266746.061:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 218.605109][ T29] audit: type=1326 audit(1749266746.061:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 218.628672][ T29] audit: type=1326 audit(1749266746.061:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 218.651704][ T29] audit: type=1326 audit(1749266746.061:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 218.680454][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1338'. [ 218.689588][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1338'. [ 218.833255][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 219.190788][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1338'. [ 219.199930][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1338'. [ 219.306411][ T8824] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 219.315991][ T8820] loop5: detected capacity change from 0 to 164 [ 219.354292][ T8820] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 219.752744][ T8842] loop4: detected capacity change from 0 to 2048 [ 219.789821][ T8842] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.866274][ T8842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.919202][ T8847] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 219.986822][ T3416] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 220.027829][ T3416] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.038061][ T3389] Process accounting resumed [ 220.057001][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 234: padding at end of block bitmap is not set [ 220.140636][ T12] EXT4-fs (loop4): Remounting filesystem read-only [ 220.165520][ T8849] lo speed is unknown, defaulting to 1000 [ 220.171849][ T8849] lo speed is unknown, defaulting to 1000 [ 220.193813][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.401005][ T8855] loop4: detected capacity change from 0 to 764 [ 220.802489][ T8857] syzkaller1: entered promiscuous mode [ 220.808020][ T8857] syzkaller1: entered allmulticast mode [ 221.296696][ T8866] lo speed is unknown, defaulting to 1000 [ 221.319774][ T8866] lo speed is unknown, defaulting to 1000 [ 221.663691][ T8882] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 221.782728][ T8886] loop5: detected capacity change from 0 to 128 [ 221.790593][ T8886] msdos: Unknown parameter '¿¤' [ 221.848547][ T8889] loop5: detected capacity change from 0 to 1024 [ 221.856225][ T8889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.864979][ T8889] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 221.890896][ T8889] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 222.003770][ T8889] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1361: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.023709][ T8889] EXT4-fs (loop5): Remounting filesystem read-only [ 222.030895][ T8889] EXT4-fs (loop5): 1 orphan inode deleted [ 222.667075][ T8889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.840265][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 222.840296][ T29] audit: type=1326 audit(1749266750.326:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.055917][ T8904] lo speed is unknown, defaulting to 1000 [ 223.076363][ T8907] tipc: Started in network mode [ 223.081356][ T8907] tipc: Node identity ac14140f, cluster identity 4711 [ 223.089127][ T8907] tipc: Enabled bearer , priority 10 [ 223.095704][ T8904] lo speed is unknown, defaulting to 1000 [ 223.105418][ T29] audit: type=1326 audit(1749266750.576:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.128981][ T29] audit: type=1326 audit(1749266750.576:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.152500][ T29] audit: type=1326 audit(1749266750.576:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.176038][ T29] audit: type=1326 audit(1749266750.576:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.199587][ T29] audit: type=1326 audit(1749266750.576:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.223219][ T29] audit: type=1326 audit(1749266750.576:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.246810][ T29] audit: type=1326 audit(1749266750.576:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.270296][ T29] audit: type=1326 audit(1749266750.576:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.293759][ T29] audit: type=1326 audit(1749266750.586:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67960e929 code=0x7ffc0000 [ 223.383534][ T8908] siw: device registration error -23 [ 223.508809][ T8917] lo speed is unknown, defaulting to 1000 [ 223.515579][ T8917] lo speed is unknown, defaulting to 1000 [ 223.536050][ T8921] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 223.546348][ T8921] SELinux: failed to load policy [ 223.615380][ T8925] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 223.637767][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.006479][ T8937] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 224.030044][ T8924] siw: device registration error -23 [ 224.079093][ T3416] tipc: Node number set to 2886997007 [ 224.142475][ T8938] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 224.150280][ T8938] __nla_validate_parse: 2 callbacks suppressed [ 224.150293][ T8938] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1373'. [ 224.172749][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1374'. [ 224.541015][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 224.579861][ T8953] loop4: detected capacity change from 0 to 512 [ 224.616849][ T8951] vlan0: entered allmulticast mode [ 224.622432][ T8951] macvtap0: entered allmulticast mode [ 224.669821][ T8953] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 224.719578][ T8953] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #17: comm syz.4.1379: corrupted in-inode xattr: invalid ea_ino [ 224.762177][ T8957] loop5: detected capacity change from 0 to 1024 [ 224.807025][ T8957] EXT4-fs: Ignoring removed nobh option [ 224.812762][ T8957] EXT4-fs: Ignoring removed bh option [ 224.850150][ T8953] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1379: couldn't read orphan inode 17 (err -117) [ 224.892746][ T8953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.907503][ T8957] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1380: bad orphan inode 32767 [ 224.918859][ T8957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.087835][ T3399] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 225.125766][ T8970] SELinux: syz.3.1381 (8970) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 225.144564][ T8957] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.1380: iget: bad i_size value: 576460752303423498 [ 225.158077][ T3399] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.175538][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.213694][ T8974] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 225.231706][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.338580][ T8984] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 226.369150][ T9009] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 226.387341][ T9011] loop4: detected capacity change from 0 to 512 [ 226.409110][ T9011] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 226.437093][ T9011] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 226.453659][ T9011] EXT4-fs (loop4): 1 truncate cleaned up [ 226.462042][ T9011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.645074][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.690522][ T9027] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1395'. [ 226.899460][ T9036] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 227.021397][ T3399] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 227.029898][ T3399] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.434492][ T9051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9051 comm=syz.5.1404 [ 227.447096][ T9051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9051 comm=syz.5.1404 [ 227.528086][ T9063] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 228.289221][ T9071] loop4: detected capacity change from 0 to 2048 [ 228.312630][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 228.312645][ T29] audit: type=1400 audit(1749266755.831:8773): avc: denied { read } for pid=9068 comm="syz.3.1410" dev="nsfs" ino=4026532842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.340130][ T29] audit: type=1400 audit(1749266755.831:8774): avc: denied { open } for pid=9068 comm="syz.3.1410" path="net:[4026532842]" dev="nsfs" ino=4026532842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.392335][ T9071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.394153][ T29] audit: type=1400 audit(1749266755.831:8775): avc: denied { create } for pid=9068 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.405602][ T9071] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.425062][ T29] audit: type=1400 audit(1749266755.861:8776): avc: denied { write } for pid=9068 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.455963][ T29] audit: type=1400 audit(1749266755.871:8777): avc: denied { read } for pid=9068 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.476484][ T29] audit: type=1400 audit(1749266755.871:8778): avc: denied { prog_load } for pid=9068 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 228.495543][ T29] audit: type=1400 audit(1749266755.871:8779): avc: denied { bpf } for pid=9068 comm="syz.3.1410" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.516179][ T29] audit: type=1400 audit(1749266755.871:8780): avc: denied { perfmon } for pid=9068 comm="syz.3.1410" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.537150][ T29] audit: type=1400 audit(1749266755.871:8781): avc: denied { prog_run } for pid=9068 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 228.556219][ T29] audit: type=1400 audit(1749266755.871:8782): avc: denied { mounton } for pid=9070 comm="syz.4.1411" path="/283/file1" dev="tmpfs" ino=1557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.675436][ T8959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 229.195608][ T9096] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 230.344117][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.574197][ T9123] loop4: detected capacity change from 0 to 512 [ 231.580852][ T9123] EXT4-fs: Ignoring removed i_version option [ 231.624016][ T9125] program syz.3.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.398547][ T9123] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.419685][ T9123] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1424: bg 0: block 131: padding at end of block bitmap is not set [ 232.508860][ T9123] EXT4-fs (loop4): Remounting filesystem read-only [ 232.517274][ T9123] EXT4-fs (loop4): 1 truncate cleaned up [ 232.530594][ T9123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.649532][ T9158] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 232.762481][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.762816][ T9164] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 233.790150][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 233.790168][ T29] audit: type=1400 audit(1749266761.315:8896): avc: denied { create } for pid=9173 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.852956][ T9176] netlink: 'syz.5.1438': attribute type 1 has an invalid length. [ 233.860809][ T9176] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1438'. [ 233.906709][ T29] audit: type=1400 audit(1749266761.395:8897): avc: denied { write } for pid=9173 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.926887][ T29] audit: type=1400 audit(1749266761.395:8898): avc: denied { nlmsg_write } for pid=9173 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.975726][ T29] audit: type=1326 audit(1749266761.495:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 233.999329][ T29] audit: type=1326 audit(1749266761.495:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 234.022844][ T29] audit: type=1326 audit(1749266761.495:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 234.046332][ T29] audit: type=1326 audit(1749266761.495:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 234.069770][ T29] audit: type=1326 audit(1749266761.495:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 234.093307][ T29] audit: type=1326 audit(1749266761.495:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 234.116752][ T29] audit: type=1326 audit(1749266761.495:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x7ffc0000 [ 234.202137][ T9182] lo speed is unknown, defaulting to 1000 [ 234.281585][ T9182] lo speed is unknown, defaulting to 1000 [ 234.385066][ T9188] loop4: detected capacity change from 0 to 8192 [ 234.531846][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 234.814036][ T9203] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 234.876753][ T9182] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 234.884450][ T9182] FAT-fs (loop4): Filesystem has been set read-only [ 235.032060][ T9208] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 236.402315][ T9238] lo speed is unknown, defaulting to 1000 [ 236.419032][ T9238] lo speed is unknown, defaulting to 1000 [ 236.656846][ T9247] 9pnet_fd: Insufficient options for proto=fd [ 236.675895][ T9246] lo speed is unknown, defaulting to 1000 [ 236.698066][ T9246] lo speed is unknown, defaulting to 1000 [ 236.794353][ T9253] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 236.802346][ T9253] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1455'. [ 236.877641][ T9256] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 237.218552][ T9262] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 237.238293][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 237.247345][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 237.258385][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 237.272874][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.328925][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.564655][ T9276] netlink: 'syz.0.1463': attribute type 16 has an invalid length. [ 237.572600][ T9276] netlink: 'syz.0.1463': attribute type 17 has an invalid length. [ 237.778604][ T9276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.934805][ T9283] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 238.355472][ T9293] program syz.0.1468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.732444][ T9301] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 238.818859][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 238.818876][ T29] audit: type=1326 audit(1749266766.349:9238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ef0e929 code=0x7ffc0000 [ 238.848660][ T29] audit: type=1326 audit(1749266766.349:9239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ef0e929 code=0x7ffc0000 [ 238.904370][ T29] audit: type=1326 audit(1749266766.369:9240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f285ef0e929 code=0x7ffc0000 [ 238.928003][ T29] audit: type=1326 audit(1749266766.369:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f285ef0e963 code=0x7ffc0000 [ 238.951341][ T29] audit: type=1326 audit(1749266766.369:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f285ef0d3df code=0x7ffc0000 [ 238.974583][ T29] audit: type=1326 audit(1749266766.379:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f285ef0e9b7 code=0x7ffc0000 [ 238.998177][ T29] audit: type=1326 audit(1749266766.379:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f285ef0d290 code=0x7ffc0000 [ 239.021679][ T29] audit: type=1326 audit(1749266766.379:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f285ef0d58a code=0x7ffc0000 [ 239.045020][ T29] audit: type=1326 audit(1749266766.389:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ef0e929 code=0x7ffc0000 [ 239.068452][ T29] audit: type=1326 audit(1749266766.389:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285ef0e929 code=0x7ffc0000 [ 239.158452][ T9308] netlink: 'syz.4.1473': attribute type 4 has an invalid length. [ 239.171781][ T9306] veth0_vlan: entered allmulticast mode [ 239.310903][ T9306] lo speed is unknown, defaulting to 1000 [ 239.321325][ T9306] lo speed is unknown, defaulting to 1000 [ 239.733774][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.741511][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.749034][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.756432][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.764064][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.771581][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.779023][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.786437][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.793928][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.801363][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.808910][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.816318][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.823771][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.831210][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.838638][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.846112][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.853554][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.861118][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.868538][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.876016][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.883598][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.891047][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.898469][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.905868][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.913344][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.920825][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.928264][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.935670][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.943132][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.950564][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.958022][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.965424][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.973022][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.980475][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.987934][ T3399] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 240.008812][ T3399] hid-generic 0000:0004:0000.000C: hidraw0: HID v0.02 Device [syz0] on syz1 [ 240.207461][ T9336] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1481'. [ 240.236665][ T9333] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1481'. [ 240.360447][ T9339] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 240.984815][ T9333] loop4: detected capacity change from 0 to 164 [ 241.013964][ T9333] syz.4.1481: attempt to access beyond end of device [ 241.013964][ T9333] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 241.056456][ T9333] syz.4.1481: attempt to access beyond end of device [ 241.056456][ T9333] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 241.107188][ T9346] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 241.115125][ T9346] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1484'. [ 241.174682][ T9354] loop4: detected capacity change from 0 to 1024 [ 241.181797][ T9354] EXT4-fs: Ignoring removed nobh option [ 241.187519][ T9354] EXT4-fs: Ignoring removed bh option [ 241.217466][ T9354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.271800][ T9354] program syz.4.1485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.351523][ T9365] SELinux: syz.5.1487 (9365) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 241.551717][ T9375] 9pnet_fd: Insufficient options for proto=fd [ 241.597262][ T9375] loop5: detected capacity change from 0 to 128 [ 241.644160][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.644160][ T9375] loop5: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 241.704658][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.704658][ T9375] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 241.726661][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.726661][ T9375] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 241.771045][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.771045][ T9375] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 241.790797][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.790797][ T9375] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 241.831902][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.831902][ T9375] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 241.865576][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.865576][ T9375] loop5: rw=2049, sector=273, nr_sectors = 9 limit=128 [ 241.889822][ T9375] syz.5.1490: attempt to access beyond end of device [ 241.889822][ T9375] loop5: rw=2049, sector=289, nr_sectors = 80 limit=128 [ 242.113745][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.130793][ T9388] loop5: detected capacity change from 0 to 512 [ 242.183882][ T9390] lo speed is unknown, defaulting to 1000 [ 242.193189][ T9390] lo speed is unknown, defaulting to 1000 [ 242.270942][ T9393] siw: device registration error -23 [ 243.413844][ T9415] lo speed is unknown, defaulting to 1000 [ 243.425014][ T9419] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1502'. [ 243.487116][ T9423] netlink: 'syz.4.1504': attribute type 16 has an invalid length. [ 243.495071][ T9423] netlink: 'syz.4.1504': attribute type 17 has an invalid length. [ 243.560214][ T9427] 9pnet_fd: Insufficient options for proto=fd [ 243.570855][ T9415] lo speed is unknown, defaulting to 1000 [ 243.585728][ T9414] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1502'. [ 243.681404][ T9423] lo: left promiscuous mode [ 243.695414][ T9423] tunl0: left promiscuous mode [ 243.701363][ T9423] gre0: left promiscuous mode [ 243.721849][ T9414] loop5: detected capacity change from 0 to 164 [ 243.734697][ T9423] gretap0: left promiscuous mode [ 243.740973][ T9423] erspan0: left promiscuous mode [ 243.747621][ T9423] ip_vti0: left promiscuous mode [ 243.753706][ T9423] ip6_vti0: left promiscuous mode [ 243.760599][ T9423] sit0: left promiscuous mode [ 243.767590][ T9423] ip6tnl0: left promiscuous mode [ 243.775356][ T9423] ip6gre0: left promiscuous mode [ 243.782329][ T9423] ip6gretap0: left promiscuous mode [ 243.789345][ T9423] vcan0: left promiscuous mode [ 243.795268][ T9423] bond0: left promiscuous mode [ 243.801639][ T9423] team0: left promiscuous mode [ 243.807752][ T9423] dummy0: left promiscuous mode [ 243.813940][ T9423] nlmon0: left promiscuous mode [ 243.822915][ T9423] 0ªX¹¦À: left allmulticast mode [ 243.828056][ T9423] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 243.875251][ T9421] siw: device registration error -23 [ 243.884002][ T9422] lo speed is unknown, defaulting to 1000 [ 243.891052][ T9422] lo speed is unknown, defaulting to 1000 [ 243.965751][ T9437] lo speed is unknown, defaulting to 1000 [ 243.974889][ T9437] lo speed is unknown, defaulting to 1000 [ 244.040057][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 244.040071][ T29] audit: type=1400 audit(1749266771.572:9423): avc: denied { read write } for pid=9442 comm="syz.3.1509" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.049501][ T9431] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 244.070492][ T29] audit: type=1400 audit(1749266771.572:9424): avc: denied { open } for pid=9442 comm="syz.3.1509" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.102504][ T9440] siw: device registration error -23 [ 244.347160][ T9455] loop4: detected capacity change from 0 to 164 [ 244.358150][ T9455] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 244.380765][ T9455] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 244.392895][ T29] audit: type=1326 audit(1749266771.922:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.0.1514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x0 [ 244.699516][ T29] audit: type=1326 audit(1749266772.232:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.0.1514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d4f6e929 code=0x0 [ 244.875351][ T29] audit: type=1400 audit(1749266772.413:9427): avc: denied { name_bind } for pid=9469 comm="syz.5.1516" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 244.900190][ T29] audit: type=1400 audit(1749266772.433:9428): avc: denied { bind } for pid=9469 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.951776][ T9445] syz.2.1510 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 244.966117][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.2.1510 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 244.966264][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.966287][ T9445] Call Trace: [ 244.966295][ T9445] [ 244.966305][ T9445] __dump_stack+0x1d/0x30 [ 244.966324][ T9445] dump_stack_lvl+0xe8/0x140 [ 244.966417][ T9445] dump_stack+0x15/0x1b [ 244.966444][ T9445] dump_header+0x81/0x220 [ 244.966482][ T9445] oom_kill_process+0x334/0x3f0 [ 244.966533][ T9445] out_of_memory+0x979/0xb80 [ 244.966606][ T9445] try_charge_memcg+0x5e6/0x9e0 [ 244.966638][ T9445] obj_cgroup_charge_pages+0xa6/0x150 [ 244.966712][ T9445] __memcg_kmem_charge_page+0x9f/0x170 [ 244.966854][ T9445] __alloc_frozen_pages_noprof+0x188/0x360 [ 244.966954][ T9445] alloc_pages_mpol+0xb3/0x250 [ 244.967016][ T9445] alloc_pages_noprof+0x90/0x130 [ 244.967080][ T9445] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 244.967135][ T9445] __kvmalloc_node_noprof+0x30f/0x4e0 [ 244.967227][ T9445] ? ip_set_alloc+0x1f/0x30 [ 244.967267][ T9445] ? ip_set_alloc+0x1f/0x30 [ 244.967305][ T9445] ? hash_netiface_create+0x21b/0x740 [ 244.967357][ T9445] ? __kmalloc_cache_noprof+0x189/0x320 [ 244.967391][ T9445] ip_set_alloc+0x1f/0x30 [ 244.967430][ T9445] hash_netiface_create+0x282/0x740 [ 244.967511][ T9445] ? __pfx_hash_netiface_create+0x10/0x10 [ 244.967563][ T9445] ip_set_create+0x3c9/0x960 [ 244.967666][ T9445] ? __nla_parse+0x40/0x60 [ 244.967774][ T9445] nfnetlink_rcv_msg+0x4c3/0x590 [ 244.967849][ T9445] ? selinux_capable+0x1f9/0x270 [ 244.967884][ T9445] netlink_rcv_skb+0x123/0x220 [ 244.967904][ T9445] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 244.967939][ T9445] nfnetlink_rcv+0x16b/0x1690 [ 244.967986][ T9445] ? __kfree_skb+0x109/0x150 [ 244.968010][ T9445] ? nlmon_xmit+0x4f/0x60 [ 244.968048][ T9445] ? consume_skb+0x49/0x150 [ 244.968071][ T9445] ? nlmon_xmit+0x4f/0x60 [ 244.968101][ T9445] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 244.968178][ T9445] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 244.968222][ T9445] ? __dev_queue_xmit+0x182/0x1fb0 [ 244.968243][ T9445] ? shmem_recalc_inode+0x19f/0x1c0 [ 244.968353][ T9445] ? ref_tracker_free+0x37d/0x3e0 [ 244.968394][ T9445] ? __netlink_deliver_tap+0x4dc/0x500 [ 244.968503][ T9445] netlink_unicast+0x5a1/0x670 [ 244.968553][ T9445] netlink_sendmsg+0x58b/0x6b0 [ 244.968585][ T9445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.968728][ T9445] __sock_sendmsg+0x145/0x180 [ 244.968803][ T9445] ____sys_sendmsg+0x31e/0x4e0 [ 244.968836][ T9445] ___sys_sendmsg+0x17b/0x1d0 [ 244.968881][ T9445] __x64_sys_sendmsg+0xd4/0x160 [ 244.968976][ T9445] x64_sys_call+0x2999/0x2fb0 [ 244.969004][ T9445] do_syscall_64+0xd2/0x200 [ 244.969032][ T9445] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.969164][ T9445] ? clear_bhb_loop+0x40/0x90 [ 244.969190][ T9445] ? clear_bhb_loop+0x40/0x90 [ 244.969217][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.969244][ T9445] RIP: 0033:0x7f285ef0e929 [ 244.969263][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.969348][ T9445] RSP: 002b:00007f285d577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.969371][ T9445] RAX: ffffffffffffffda RBX: 00007f285f135fa0 RCX: 00007f285ef0e929 [ 244.969387][ T9445] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 244.969402][ T9445] RBP: 00007f285ef90b39 R08: 0000000000000000 R09: 0000000000000000 [ 244.969414][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.969425][ T9445] R13: 0000000000000000 R14: 00007f285f135fa0 R15: 00007ffe42e921b8 [ 244.969455][ T9445] [ 244.969465][ T9445] memory: usage 307200kB, limit 307200kB, failcnt 1215 [ 245.333086][ T9445] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 245.341031][ T9445] kmem: usage 294832kB, limit 9007199254740988kB, failcnt 0 [ 245.348347][ T9445] Memory cgroup stats for /syz2: [ 245.370610][ T9471] lo speed is unknown, defaulting to 1000 [ 245.382811][ T9471] lo speed is unknown, defaulting to 1000 [ 245.803290][ T9445] cache 11763712 [ 245.806906][ T9445] rss 487424 [ 245.810137][ T9445] shmem 11759616 [ 245.813749][ T9445] mapped_file 11759616 [ 245.817887][ T9445] dirty 4096 [ 245.821097][ T9445] writeback 0 [ 245.824425][ T9445] workingset_refault_anon 230 [ 245.829115][ T9445] workingset_refault_file 1281 [ 245.833932][ T9445] swap 0 [ 245.836838][ T9445] swapcached 163840 [ 245.840690][ T9445] nr_memmap_boot_pages 321484 [ 245.845423][ T9445] pgpgin 318453 [ 245.848973][ T9445] pglazyfree 323752 [ 245.852804][ T9445] pgfault 215 [ 245.856322][ T9445] a_other 4116480 [ 245.859975][ T9445] inactive_anon 8294400 [ 245.864235][ T9445] active_anon 4096 [ 245.868004][ T9445] inactive_file 0 [ 245.871651][ T9445] active_file 0 [ 245.875264][ T9445] hierarchical_memory_limit 314572800 [ 245.876586][ T29] audit: type=1400 audit(1749266773.383:9429): avc: denied { listen } for pid=9469 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.880649][ T9445] hierarchical_memsw_limit 9223372036854771712 [ 245.880662][ T9445] total_cache 11763712 [ 245.880670][ T9445] total_rss 487424 [ 245.880678][ T9445] total_shmem 11759616 [ 245.880684][ T9445] total_mapped_file 11759616 [ 245.880692][ T9445] total_dirty 4096 [ 245.880700][ T9445] total_writeback 0 [ 245.880706][ T9445] total_workingset_refault_anon 230 [ 245.880746][ T9445] total_workingset_refault_file 1281 [ 245.880757][ T9445] total_swap 0 [ 245.880765][ T9445] total_swapcached 163840 [ 245.880779][ T9445] total_nr_memmap_boot_pages 321484 [ 245.880788][ T9445] total_pgpgin 318453 [ 245.880797][ T9445] total_pglazyfree 323752 [ 245.880805][ T9445] total_pgfault 215 [ 245.880813][ T9445] total_a_other 4116480 [ 245.880833][ T9445] total_inactive_anon 8294400 [ 245.880861][ T9445] total_active_anon 4096 [ 245.901685][ T29] audit: type=1400 audit(1749266773.383:9430): avc: denied { setopt } for pid=9469 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.906918][ T9445] total_inactive_file 0 [ 245.906929][ T9445] total_active_file 0 [ 245.906939][ T9445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1510,pid=9444,uid=0 [ 246.022290][ T9445] Memory cgroup out of memory: Killed process 9445 (syz.2.1510) total-vm:93752kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 246.118695][ T9480] loop4: detected capacity change from 0 to 512 [ 246.153409][ T9480] ext4: Unknown parameter 'fsmagic' [ 246.163745][ T9481] loop5: detected capacity change from 0 to 2048 [ 246.210853][ T9481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.223065][ T9481] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.379867][ T9492] lo speed is unknown, defaulting to 1000 [ 246.393441][ T9492] lo speed is unknown, defaulting to 1000 [ 246.871984][ T9493] siw: device registration error -23 [ 247.024575][ T9496] lo speed is unknown, defaulting to 1000 [ 247.047406][ T9496] lo speed is unknown, defaulting to 1000 [ 247.081480][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.165318][ T9506] loop5: detected capacity change from 0 to 512 [ 247.196173][ T9501] siw: device registration error -23 [ 247.211252][ T9500] lo speed is unknown, defaulting to 1000 [ 247.316526][ T29] audit: type=1400 audit(1749266774.784:9431): avc: denied { write } for pid=9507 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.318459][ T9500] lo speed is unknown, defaulting to 1000 [ 247.409423][ T9504] siw: device registration error -23 [ 247.553904][ T9498] lo speed is unknown, defaulting to 1000 [ 247.647680][ T29] audit: type=1400 audit(1749266775.094:9432): avc: denied { firmware_load } for pid=9505 comm="syz.5.1523" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 247.727579][ T9498] lo speed is unknown, defaulting to 1000 [ 248.476708][ T9524] lo speed is unknown, defaulting to 1000 [ 248.488814][ T9529] netlink: 'syz.3.1529': attribute type 21 has an invalid length. [ 248.496845][ T9529] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.531487][ T9524] lo speed is unknown, defaulting to 1000 [ 248.789108][ T9528] siw: device registration error -23 [ 248.812633][ T9547] x_tables: duplicate entry at hook 2 [ 248.827340][ T9547] netlink: 'syz.3.1530': attribute type 21 has an invalid length. [ 248.978990][ T9554] netlink: 'syz.5.1533': attribute type 27 has an invalid length. [ 249.000696][ T9554] 0ªX¹¦À: left allmulticast mode [ 249.008343][ T9554] veth0_vlan: left allmulticast mode [ 249.036062][ T9554] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 249.049018][ T9554] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 249.068900][ T3416] lo speed is unknown, defaulting to 1000 [ 249.074842][ T3416] syz0: Port: 1 Link ACTIVE [ 249.129853][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.138957][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.151969][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.182193][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.191238][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.200228][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.243473][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.252581][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.278938][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 249.298461][ T9563] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 249.356061][ T9567] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 249.377712][ T6148] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 249.388303][ T9563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.399503][ T9566] loop5: detected capacity change from 0 to 2048 [ 249.416615][ T9566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.429624][ T9566] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.491281][ T6122] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 249.502057][ T9563] veth7: entered promiscuous mode [ 249.509255][ T9563] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 249.806748][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 249.970179][ T9581] lo speed is unknown, defaulting to 1000 [ 249.978530][ T9581] lo speed is unknown, defaulting to 1000 [ 250.057830][ T9586] siw: device registration error -23 [ 250.074510][ T9583] syzkaller0: entered promiscuous mode [ 250.080025][ T9583] syzkaller0: entered allmulticast mode [ 250.107726][ T9566] syz.5.1536 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 250.121895][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.5.1536 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 250.121933][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.121985][ T9566] Call Trace: [ 250.121994][ T9566] [ 250.122004][ T9566] __dump_stack+0x1d/0x30 [ 250.122025][ T9566] dump_stack_lvl+0xe8/0x140 [ 250.122079][ T9566] dump_stack+0x15/0x1b [ 250.122101][ T9566] dump_header+0x81/0x220 [ 250.122142][ T9566] oom_kill_process+0x334/0x3f0 [ 250.122245][ T9566] out_of_memory+0x979/0xb80 [ 250.122276][ T9566] try_charge_memcg+0x5e6/0x9e0 [ 250.122302][ T9566] obj_cgroup_charge_pages+0xa6/0x150 [ 250.122332][ T9566] __memcg_kmem_charge_page+0x9f/0x170 [ 250.122424][ T9566] __alloc_frozen_pages_noprof+0x188/0x360 [ 250.122519][ T9566] alloc_pages_mpol+0xb3/0x250 [ 250.122622][ T9566] alloc_pages_noprof+0x90/0x130 [ 250.122691][ T9566] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 250.122784][ T9566] __kvmalloc_node_noprof+0x30f/0x4e0 [ 250.122810][ T9566] ? ip_set_alloc+0x1f/0x30 [ 250.122839][ T9566] ? ip_set_alloc+0x1f/0x30 [ 250.122887][ T9566] ? __kmalloc_cache_noprof+0x189/0x320 [ 250.122913][ T9566] ip_set_alloc+0x1f/0x30 [ 250.122939][ T9566] hash_netiface_create+0x282/0x740 [ 250.123003][ T9566] ? __pfx_hash_netiface_create+0x10/0x10 [ 250.123034][ T9566] ip_set_create+0x3c9/0x960 [ 250.123052][ T9566] ? save_fpregs_to_fpstate+0x100/0x160 [ 250.123096][ T9566] nfnetlink_rcv_msg+0x4c3/0x590 [ 250.123152][ T9566] ? selinux_capable+0x1f9/0x270 [ 250.123173][ T9566] netlink_rcv_skb+0x123/0x220 [ 250.123215][ T9566] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 250.123255][ T9566] nfnetlink_rcv+0x16b/0x1690 [ 250.123281][ T9566] ? __kfree_skb+0x109/0x150 [ 250.123343][ T9566] ? nlmon_xmit+0x4f/0x60 [ 250.123439][ T9566] ? consume_skb+0x49/0x150 [ 250.123495][ T9566] ? nlmon_xmit+0x4f/0x60 [ 250.123516][ T9566] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 250.123610][ T9566] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 250.123627][ T9566] ? __dev_queue_xmit+0x182/0x1fb0 [ 250.123651][ T9566] ? ref_tracker_free+0x37d/0x3e0 [ 250.123703][ T9566] ? __netlink_deliver_tap+0x4dc/0x500 [ 250.123725][ T9566] netlink_unicast+0x5a1/0x670 [ 250.123818][ T9566] netlink_sendmsg+0x58b/0x6b0 [ 250.123838][ T9566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.123857][ T9566] __sock_sendmsg+0x145/0x180 [ 250.123880][ T9566] ____sys_sendmsg+0x31e/0x4e0 [ 250.123912][ T9566] ___sys_sendmsg+0x17b/0x1d0 [ 250.123929][ T9566] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 250.123991][ T9566] __x64_sys_sendmsg+0xd4/0x160 [ 250.124012][ T9566] x64_sys_call+0x2999/0x2fb0 [ 250.124111][ T9566] do_syscall_64+0xd2/0x200 [ 250.124166][ T9566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 250.124188][ T9566] ? clear_bhb_loop+0x40/0x90 [ 250.124241][ T9566] ? clear_bhb_loop+0x40/0x90 [ 250.124263][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.124289][ T9566] RIP: 0033:0x7fb67960e929 [ 250.124369][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.124393][ T9566] RSP: 002b:00007fb677c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.124412][ T9566] RAX: ffffffffffffffda RBX: 00007fb679835fa0 RCX: 00007fb67960e929 [ 250.124503][ T9566] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 250.124513][ T9566] RBP: 00007fb679690b39 R08: 0000000000000000 R09: 0000000000000000 [ 250.124569][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.124579][ T9566] R13: 0000000000000000 R14: 00007fb679835fa0 R15: 00007ffe0d8a0e48 [ 250.124595][ T9566] [ 250.124600][ T9566] memory: usage 307200kB, limit 307200kB, failcnt 3740 [ 250.158874][ T9589] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 250.162054][ T9566] memory+swap: usage 386284kB, limit 9007199254740988kB, failcnt 0 [ 250.162073][ T9566] kmem: usage 294372kB, limit 9007199254740988kB, failcnt 0 [ 250.162083][ T9566] Memory cgroup stats for /syz5: [ 250.162436][ T9566] cache 12824576 [ 250.516603][ T9566] rss 307200 [ 250.519856][ T9566] shmem 12804096 [ 250.523416][ T9566] mapped_file 11755520 [ 250.527474][ T9566] dirty 0 [ 250.530614][ T9566] writeback 0 [ 250.533918][ T9566] workingset_refault_anon 1066 [ 250.538671][ T9566] workingset_refault_file 4223 [ 250.543500][ T9566] swap 80982016 [ 250.546966][ T9566] swapcached 0 [ 250.550467][ T9566] nr_memmap_boot_pages 280140 [ 250.555326][ T9566] pgpgin 276933 [ 250.558780][ T9566] pglazyfree 254375 [ 250.562609][ T9566] pgfault 352 [ 250.565903][ T9566] a_other 221184 [ 250.569539][ T9566] inactive_anon 12890112 [ 250.573866][ T9566] active_anon 24576 [ 250.577712][ T9566] inactive_file 0 [ 250.581390][ T9566] active_file 0 [ 250.584936][ T9566] hierarchical_memory_limit 314572800 [ 250.590326][ T9566] hierarchical_memsw_limit 9223372036854771712 [ 250.596645][ T9566] total_cache 12824576 [ 250.600765][ T9566] total_rss 307200 [ 250.604478][ T9566] total_shmem 12804096 [ 250.608569][ T9566] total_mapped_file 11755520 [ 250.613203][ T9566] total_dirty 0 [ 250.616652][ T9566] total_writeback 0 [ 250.620528][ T9566] total_workingset_refault_anon 1066 [ 250.625804][ T9566] total_workingset_refault_file 4223 [ 250.631237][ T9566] total_swap 80982016 [ 250.635232][ T9566] total_swapcached 0 [ 250.639132][ T9566] total_nr_memmap_boot_pages 280140 [ 250.644348][ T9566] total_pgpgin 276933 [ 250.648359][ T9566] total_pglazyfree 254375 [ 250.652697][ T9566] total_pgfault 352 [ 250.656532][ T9566] total_a_other 221184 [ 250.660608][ T9566] total_inactive_anon 12890112 [ 250.665440][ T9566] total_active_anon 24576 [ 250.669787][ T9566] total_inactive_file 0 [ 250.674008][ T9566] total_active_file 0 [ 250.678054][ T9566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1536,pid=9565,uid=0 [ 250.692727][ T9566] Memory cgroup out of memory: Killed process 9566 (syz.5.1536) total-vm:93752kB, anon-rss:1192kB, file-rss:22440kB, shmem-rss:11392kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 250.877230][ T9589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.904798][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.916459][ T9591] bond1 (unregistering): Released all slaves [ 250.942177][ T9597] loop5: detected capacity change from 0 to 1024 [ 250.961614][ T9597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.976880][ T9597] netem: change failed [ 250.986069][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 250.986084][ T29] audit: type=1400 audit(1749266778.526:9441): avc: denied { read write } for pid=9596 comm="syz.5.1543" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.988616][ T9597] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1543: Allocating blocks 385-513 which overlap fs metadata [ 250.993290][ T29] audit: type=1400 audit(1749266778.526:9442): avc: denied { open } for pid=9596 comm="syz.5.1543" path="/278/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.052281][ T29] audit: type=1400 audit(1749266778.526:9443): avc: denied { mounton } for pid=9596 comm="syz.5.1543" path="/278/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 251.078443][ T9597] EXT4-fs (loop5): pa ffff888106aac150: logic 16, phys. 129, len 24 [ 251.086607][ T9597] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 251.106645][ T9597] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1 [ 251.118896][ T9597] EXT4-fs (loop5): This should not happen!! Data will be lost [ 251.118896][ T9597] [ 251.160987][ T29] audit: type=1400 audit(1749266778.666:9444): avc: denied { mount } for pid=9601 comm="syz.3.1544" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 251.177266][ T9604] lo speed is unknown, defaulting to 1000 [ 251.182882][ T29] audit: type=1400 audit(1749266778.666:9445): avc: denied { override_creds } for pid=9601 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 251.199129][ T9604] lo speed is unknown, defaulting to 1000 [ 251.265852][ T29] audit: type=1400 audit(1749266778.796:9446): avc: denied { remove_name } for pid=3767 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.289202][ T29] audit: type=1400 audit(1749266778.796:9447): avc: denied { rmdir } for pid=3767 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.312135][ T29] audit: type=1400 audit(1749266778.796:9448): avc: denied { unlink } for pid=3767 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.334811][ T29] audit: type=1400 audit(1749266778.796:9449): avc: denied { unlink } for pid=3767 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 251.357668][ T29] audit: type=1400 audit(1749266778.796:9450): avc: denied { unmount } for pid=3767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 251.379185][ T3767] Trying to write to read-only block-device loop5 [ 251.420166][ T3767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.430924][ T9608] siw: device registration error -23 [ 251.562618][ T9622] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 252.982623][ T9633] netlink: 'syz.4.1554': attribute type 27 has an invalid length. [ 253.180885][ T9642] loop5: detected capacity change from 0 to 128 [ 253.247840][ T9633] veth0_vlan: left allmulticast mode [ 253.274973][ T9633] veth7: left promiscuous mode [ 253.332953][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.382347][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.410991][ T9634] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 253.669602][ T9662] lo speed is unknown, defaulting to 1000 [ 253.675762][ T9662] lo speed is unknown, defaulting to 1000 [ 253.749497][ T9664] siw: device registration error -23 [ 253.800628][ T9666] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 253.815682][ T9668] loop4: detected capacity change from 0 to 1024 [ 253.827853][ T9668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.423567][ T9677] ================================================================== [ 254.431788][ T9677] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 254.439880][ T9677] [ 254.442221][ T9677] write to 0xffff888103d9c528 of 8 bytes by task 9668 on cpu 1: [ 254.449882][ T9677] filemap_splice_read+0x47e/0x6b0 [ 254.455020][ T9677] ext4_file_splice_read+0x8f/0xb0 [ 254.460184][ T9677] splice_direct_to_actor+0x26c/0x680 [ 254.465602][ T9677] do_splice_direct+0xda/0x150 [ 254.470401][ T9677] do_sendfile+0x380/0x650 [ 254.474866][ T9677] __x64_sys_sendfile64+0x105/0x150 [ 254.480117][ T9677] x64_sys_call+0xb39/0x2fb0 [ 254.484753][ T9677] do_syscall_64+0xd2/0x200 [ 254.489293][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.495216][ T9677] [ 254.497563][ T9677] write to 0xffff888103d9c528 of 8 bytes by task 9677 on cpu 0: [ 254.505301][ T9677] filemap_splice_read+0x47e/0x6b0 [ 254.510444][ T9677] ext4_file_splice_read+0x8f/0xb0 [ 254.515604][ T9677] splice_direct_to_actor+0x26c/0x680 [ 254.521010][ T9677] do_splice_direct+0xda/0x150 [ 254.525836][ T9677] do_sendfile+0x380/0x650 [ 254.530296][ T9677] __x64_sys_sendfile64+0x105/0x150 [ 254.535537][ T9677] x64_sys_call+0xb39/0x2fb0 [ 254.540193][ T9677] do_syscall_64+0xd2/0x200 [ 254.544732][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.550680][ T9677] [ 254.553029][ T9677] value changed: 0x0000000000005bd2 -> 0x0000000000005bf3 [ 254.560154][ T9677] [ 254.562499][ T9677] Reported by Kernel Concurrency Sanitizer on: [ 254.568678][ T9677] CPU: 0 UID: 0 PID: 9677 Comm: syz.4.1562 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 254.580794][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.590963][ T9677] ================================================================== [ 254.738330][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.