last executing test programs: 3m27.63306389s ago: executing program 1 (id=2794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 3m27.442032079s ago: executing program 1 (id=2795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1f, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000580), &(0x7f0000000840)=r4}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) mq_open(&(0x7f0000000a00)='trans=fd,', 0x40, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) shutdown(r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r2, 0x0, 0x1000, 0xc3, &(0x7f0000000280)="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", &(0x7f0000001280)=""/195, 0x6, 0x0, 0xad, 0x25, &(0x7f0000001380)="49cae4d5fbd800dc3e93fe644b116f6dc7eb057d2727ecd224239e397218613dee26c20cafccdeae25acca41d8ec359e22b93a72b50ac8ebc051f7a9e21d1a386b3510ad3abdebbfc33a327fdaa4f0ff9a95937ce7229ba22c88b02ba23c4e49cfafbd0e1bdd8d203671c3444a2c398b7924a4bfb350d0544e914fadbdbad7017dfb8d59ec7f5e2145d5f13cc380b243815f8c7535eb2f4626772cd56c0996b23d479cfbd763aadfa4ed37bee3", &(0x7f0000000080)="568dfc2db03bd48e4d0f5d78e950dc6f9f9be0fd9476e3084ca41c4ea5cbb1d795ea325e5d", 0x4, 0x0, 0x4}, 0x50) 3m26.561329457s ago: executing program 1 (id=2806): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000004c0)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x204, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x5}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2000000000000000}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x15390ade80a8f3d7, &(0x7f0000000f40)={[{@dax_always}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '5vmrt1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'dvmrp1\x00'}}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001100", @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES64=r5, @ANYRESOCT], 0xc0}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000440)) mount(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='afs\x00', 0x8088, &(0x7f0000000400)='^\x00') 3m25.553656366s ago: executing program 1 (id=2813): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m25.533415116s ago: executing program 1 (id=2814): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = dup(r0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000001380)={&(0x7f0000000300)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESDEC=r7], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38000000031400042cbd7000fcdbdf250900020073797a86320000000008004100736977001400337f128d16e9e383110076657468305f746f"], 0x38}}, 0x20040010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000c80)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait2(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x6, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000640)=ANY=[@ANYBLOB="ff00000000005bd84c6ee7870000a34d8abdc58049762fade27a08fbb96e33ca866986ef798a4f8b5e12211feaf81f42b5bd4b465aa3aacc1b743079af2e12e0736779b9dcf234606e4cf781a54f47d2311532c25350cf6cdcadce4646135728574085dd69f34be46799076d8646924f87abaaea898d5a170213de88b2207953e55d66a967eea854f30763e040a263b5492a75062f25b3e3851c6b9f6bf0e3acf6b1685c7a6873727d6afb3e53b48112d46dd2925607016f81bed060e155649d8c317cc32be8ce1392ea5eecc1a01d20a20f8fb440ce5ae3426b878a5ee0d158a5952571331a"], 0x8) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r11) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m24.419195603s ago: executing program 1 (id=2824): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800010, &(0x7f0000000300)=ANY=[], 0x0, 0x7ab, &(0x7f0000001b00)="$eJzs3U+MG2fZAPBn9ssm6VaKqn6f+kVRmk6SIiUi3dredMuqh+J6ZzfTeu2V7UWJEGqjZlOtsmmrVhU0B0ouLSAQ4sSx9Fr1wg2EBBIH4EoPXDggVeoJVQgEAiGkoBl7s///JNlN2vL7rep3PH7mnecdu/N4HM84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIGpOVSjWJZt6aO59urjHZac9s8fhSf79c1Wyx3oik+C8OHozD/VmH/2/54YeKmxNxtH/vaBwsmoNx7f6HHnjqf/cNLS2/RUK36/gO45KIbxVJXbm4uDj/2h4kchd99+e3vMg/bxS301kr77bzmfp0lubddjoxPl55/NxUN53Km1n3QreXzaSNTlbvtTv7B8/sWJqNXmjPtaYn680sPdU4nVYnJp58rFapjKfPjs5m9U633Xr82dFu41zebOat6TKmVvl6FDFPFi/E5/Je2svqM2l6eWFxfmy7VIug6qo5B1a9cI4++sDHb3z014X54gW5WSfJIP1atVqrVcefmHjiyUplX61SWz2jskbcjIihiCJiT160fIbszo4bdsHQoP5HM/JoxVycjzTSGCpvl/+GoxGT0Yl2zBT3fz+85vF19f8L92293pX1f6nKH15++EiU9f9Y/96xzer/uizu/O/soc16bX3Qz2blvNfjzbgWV+JiLMZizMdre5DRrv4N7W5/05FFK/LoRjvymIl6OScdzEljIsZjPCrxfJyLqehGGlORRzOy6MaF6EYvsvIV1YhOZFGPXrSjE2mcikacjjSqMRETMRZpZDEaF6Idc9GK6ZiMetnL5Vgot/vYmrwe+uYLP3vpdx+/W0zfDKpuMZCkeDNXBP1li6B15f4W6v9ShPr/eXNwsM/aafzu7bzhDt0o6/++e50GAAAAsIeS8tP3JCKG4+FyaipvZl+912kBAAAAu6j8XvPRohkuph6OpDj+r2wQ+eFdzw0AAADYHUl5jl0SESPxSH9q6XSpjT4EAAAAAD6Dyn//P1Y0IxFvlTMc/wMAAMDnzLc3u8b+R/sH19jtzh5IfvHn6HSGk+uz5x9NrtaLuPrV/+kvN2i+crPH3tSR5NCgk7IZ33ft/iQi9jWyo8nS1S//faDfflLeHlm+AOFm1/pPtkkgtk6gvBffi+P9mOOX+u2lpUf6axmZypvZaKPdfKqaDD4c6b3x8sI3ohz+d1ozh5K4vLA4P/riK4uXylyuF71cvzq4PHxyC7ncGGyBeHjjEQ+XJ2IM1jvSX29l5fiH+osPbb3OZOU6344T/ZgTI/12ZPX4DxbrrI4+VY16/dBQLzvfe+PGitEPsqhuPvKRnYz87TjZjzl56mS/2SCL2qosXl6fRW1lFmu3xd+G7iiLd4+/df7vv24n2dh2WYxtlcUOtgXAvdK/6s9yFbqvrEL/utFX1P81dffmdf1vZS93efldxtLyK2rdvtid6v52nOrHnOq/n9h3ZIO6Ulm9Rx+OiM6rC6/+ZrBHP/v+j378tWO//cnt1/X343Q/ZtDEg7/apMYWY/7+mqr6XrHEe5uut9usJTHc/+2DwrXHFq5efGn+pfmXa7Wx8crZSuWJWgyXbxUGjdoDwAa2/42dbSOSs9scVT948ysFo/FivBKLcSnOlGcbRMQjG/c6suJrCGe2OWodWfELL2e2ObZcjq2tjT1wMolNYsdWbLH//2HZ/GPvnhMA2GsntqnDO6n/Z7Y57l5dy0/3fzh36eg4Nq/lG/nSXm8QAPgvkHU+SUZ67ySdTj77fHViolrvncvSTrvxXNrJJ6ezNG/1sk7jXL01naWznXav3Vj64Hgy66bdudnZdqeXTrU76Wy7m58vf/k9Hfz0ezebqbd6eaM728zq3SxttFu9eqOXTubdRjo790wz757LOuXC3dmskU/ljXovb7fSbnuu08hG07SbZSsC88ms1cun8mKylc528pl653pENOdmsnQy6zY6+Wyv3e9waV15a6rdmSm7HV0//D/d7e0NAJ8Gr7957crFxcX5125v4g87Cb7XYwQAVlOlAQAAAAAAAAAAAADg02/96XrF3Fs6EXA4bvv0wdcPxJ2cffi5mVh6Nq598YPBxC70fCf93LfqOd0/SO/eb6hbnnjh6aevbBbzzFuHz/0xi9i+n43/T9noVNd3DkXs/+kP+nO+fLdG+mHsZBTrJm4kW8Tci70RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGztPwEAAP//GJhRPg==") 3m24.372197773s ago: executing program 32 (id=2824): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800010, &(0x7f0000000300)=ANY=[], 0x0, 0x7ab, &(0x7f0000001b00)="$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") 2.908121478s ago: executing program 0 (id=4918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000a40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[], 0xc7, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x0, 0x7ffc0001}]}) sysfs$2(0x2, 0x0, &(0x7f0000000400)=""/7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000850000000000000000000000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000280)={0x6, 0x0, 0x1, 0x0, 0x83, 0x7}) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, 0x0, 0xa00, 0x0) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8400, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@orlov}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}], [{@fowner_gt}, {@obj_user={'obj_user', 0x3d, '*$)\','}}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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") 2.746743167s ago: executing program 4 (id=4919): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x300001a, &(0x7f00000002c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313700373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf70c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f4d496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9ffffffffffffff7f561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2df3c2b99b9fa31631ad27727f740db9ca926ecd9e6acfc4b744d22d3e85db3344ba0f3569a01ae19d8256cc3d682862e2e75d21bcca3818a919c65f6cb43a798aacb568cffa05ae0f1f02ab2f0688f307aed6f31d08c066188ae0bd9059acda1341aafa899325e892764292e0a0c6f3ddce6b5d1bde7763d9e2cab5d13634e1202a28e323af77f83e82c5711a5fc53cd1b411d08f20623f92412c10e21f03910da72f0f08c0fe7bcf3440c1ed6f318fdf795c9faf2cc014b6f11e0ef4d6c39c3a5309a085f70a32af27d00"/1023, @ANYRES16, @ANYRESOCT, @ANYBLOB="bb959014fe42bd878edddb9788f4cec96dd69d130caf3587695510e2e5987ce4e8cbaff59efc3d3c58c0c3439984819fc27464bed0d18293eda9357efd79ab67bf796f5164692cf674a118050b7e8ff6eb204c5edb96fbd5ceda7b64ad7d0fea8dc14cc2c51d75c9d7f9da697eb093587e71b198fa9138a6df88de934750de851b955b1bdc4ab72d5ef6bd1f12dee6476705b678d54b3a090958e506f98abb503521dd4c874d61017a6ec5a772fa084b992fc638e44ebe8261b74243d71c88146ffffeb84b108e736f"], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.275892506s ago: executing program 2 (id=4923): munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@grpid}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 2.248426236s ago: executing program 3 (id=4924): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r1 = io_uring_setup(0x320c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) 2.210184495s ago: executing program 0 (id=4925): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) ioperm(0x2, 0x7ff, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100460086dd6000fbff00142fff00000000000000000000dfffac1e0001ff0200000000000000aac425b02efeb7e69f00000001000089064f075d39f1070ed20ae0dced6abded65ac610f5e49db3c0076e3e082fc3d9e06948d99696a65a247768109dd95c0e23e7fba57ebf886fe4be50157bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='sys_enter\x00', r3}, 0x18) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/67) modify_ldt$write2(0x11, &(0x7f0000000580)={0x9, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x541240, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x898, 0xd7, 0x6eb56ab4, 0x6, 0x1}, 0x14) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.075905535s ago: executing program 3 (id=4926): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="02030003100000000000000000"], 0x80}, 0x1, 0x7}, 0x0) 1.963253205s ago: executing program 3 (id=4927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x28) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x412101, 0x0) setns(r4, 0x20000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80800) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$eJzs3c9vU8kdAPDve/lJCCS0HNqqLZTS0gphJwYixIleWlUIqSrqqQdIExNFseModihJOYT/oVKRemr/hB4q9VCJU++97d72wh5WYnfRrshKe/DqPTshQBwChHgVfz7SxG/eOP7OxHozzjexJ4CedToi1iNiMCJuR8RY+3zSLnGtVbL7PXt6f2bj6f2ZJJrNm58leXt2LrZ9T+Zo+zGHI+L3v4n4U/Jq3Prq2sJ0pVJebteLjepSsb66dmG+Oj1XnisvlkpTk1MTVy5eLu3bWE9V//Xk1/PX//Df//zo8f/Xf/mXrFuj7bbt49hPraEPbMXJ9EfE9fcRrAv62uMZ7HZHeCtpRHwnIs7k1/9Y9OXPJgBwmDWbY9Ec214HAA67NM+BJWmhnQsYjTQtFFo5vJMxklZq9cb5O7WVxdlWrmw8BtI785XyRDtXOB4DSVafzI+f10sv1S9GxImI+OvQkbxemKlVZrv5wgcAetjRl9b/L4da6z8AcMgNd7sDAMCBs/4DQO+x/gNA77H+A0Dvsf4DQO95g/XfSwUAOCQs6gDQU35340ZWmhvtz7+evbu6slC7e2G2XF8oVFdmCjO15aXCXK02l39mT/V1j1ep1ZYmL8XKvWKjXG8U66trt6q1lcXGrfxzvW+VBw5kVADAbk6cevRhEhHrV4/kJbbt5WCthsMt7XYHgK7p63YHgK6x2xf0Lr/jAzts0fuCjv8i9HD/+wIcjHPfl/+HXiX/D71L/h96l/w/9K5mM7HnPwD0GDl+wN//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M2N5iVJC+29wEcjTQuFiGMRMR4DyZ35SnkiIo5HxAdDA0NZfbLbnQYA3lH6SdLe/+vc2NnR5+eH8q+DyVf5wWBE/PnvN/92b7rRWJ7Mzn++db7xsH2+1K0xAAC72VynN9fxTc+e3p/ZLAfZnye/am0umsXdaJdWS3/057fDMRARI18k7XpL9nqlbx/irz+IiO/tNP4kz42Mt3c+fTl+FvvYgcZPX4if5m2t2+xn8d196Av0mkfZ/HNtp+svjdP57c7X/3A+Q727zflv45X5L92a//o6zH+n9xrj0v9+27HtQcQP+neKn2zFTzrEP7vH+B/98MdnOrU1/xFxLnaOvz1WsVFdKtZX1y7MV6fnynPlxVJpanJq4srFy6VinqMubmaqX/Xp1fPHdxv/SIf4w68Z/8/2OP5/fn37jz/ZJf4vfrrz839yl/jZmvjzPcafHvl3x+27s/izHcb/uuf//B7jP/54bXaPdwUADkB9dW1hulIpLztwcDAHG82W3e7TjIhvQVd7+aDbMxPwvj2/6LvdEwAAAAAAAAAAAAAAoJM3fGPQYLzF24m6PUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr28CAAD//xlX3DU=") io_setup(0xe61, &(0x7f0000000040)) 1.939796055s ago: executing program 0 (id=4928): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) accept4$llc(r0, &(0x7f0000000040), &(0x7f0000000240)=0x10, 0x800) 1.871657815s ago: executing program 3 (id=4929): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x300001a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1023, @ANYRES16, @ANYRESOCT, @ANYBLOB="bb959014fe42bd878edddb9788f4cec96dd69d130caf3587695510e2e5987ce4e8cbaff59efc3d3c58c0c3439984819fc27464bed0d18293eda9357efd79ab67bf796f5164692cf674a118050b7e8ff6eb204c5edb96fbd5ceda7b64ad7d0fea8dc14cc2c51d75c9d7f9da697eb093587e71b198fa9138a6df88de934750de851b955b1bdc4ab72d5ef6bd1f12dee6476705b678d54b3a090958e506f98abb503521dd4c874d61017a6ec5a772fa084b992fc638e44ebe8261b74243d71c88146ffffeb84b108e736f"], 0xd, 0x2a0, &(0x7f0000000840)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.838363915s ago: executing program 2 (id=4930): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2000765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x9) syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b0000000000000000000000050000", @ANYRES32, @ANYBLOB="03c9ef0000000000001a0000000000000009394521ffd9236eb41983c627f8bde4311811cf0d82fd2adc0331a3e2e631c6da75d2f4c82ea3c4fa130e9e328f82d21a693e38ff3ef26c50b1acedffd8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000300000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="021200000200000000c08ef14bb7964753086dee816a9a0900000000000000"], 0x10}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0) 1.692428505s ago: executing program 4 (id=4931): shmdt(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0213000005000000000000000000000003"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:file_context_t:s0\x00', 0x24, 0x0) 1.635300184s ago: executing program 4 (id=4932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) syz_clone(0x8140000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.540472324s ago: executing program 4 (id=4934): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.264006043s ago: executing program 5 (id=4935): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xe5}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=']) stat(&(0x7f0000000140)='./file0\x00', 0x0) 1.251454103s ago: executing program 2 (id=4936): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES16], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800010, &(0x7f0000000300)=ANY=[], 0x0, 0x7ab, &(0x7f0000001b00)="$eJzs3U+MG2fZAPBn9ssm6VaKqn6f+kVRmk6SIiUi3dredMuqh+J6ZzfTeu2V7UWJEGqjZlOtsmmrVhU0B0ouLSAQ4sSx9Fr1wg2EBBIH4EoPXDggVeoJVQgEAiGkoBl7s///JNlN2vL7rep3PH7mnecdu/N4HM84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIGpOVSjWJZt6aO59urjHZac9s8fhSf79c1Wyx3oik+C8OHozD/VmH/2/54YeKmxNxtH/vaBwsmoNx7f6HHnjqf/cNLS2/RUK36/gO45KIbxVJXbm4uDj/2h4kchd99+e3vMg/bxS301kr77bzmfp0lubddjoxPl55/NxUN53Km1n3QreXzaSNTlbvtTv7B8/sWJqNXmjPtaYn680sPdU4nVYnJp58rFapjKfPjs5m9U633Xr82dFu41zebOat6TKmVvl6FDFPFi/E5/Je2svqM2l6eWFxfmy7VIug6qo5B1a9cI4++sDHb3z014X54gW5WSfJIP1atVqrVcefmHjiyUplX61SWz2jskbcjIihiCJiT160fIbszo4bdsHQoP5HM/JoxVycjzTSGCpvl/+GoxGT0Yl2zBT3fz+85vF19f8L92293pX1f6nKH15++EiU9f9Y/96xzer/uizu/O/soc16bX3Qz2blvNfjzbgWV+JiLMZizMdre5DRrv4N7W5/05FFK/LoRjvymIl6OScdzEljIsZjPCrxfJyLqehGGlORRzOy6MaF6EYvsvIV1YhOZFGPXrSjE2mcikacjjSqMRETMRZpZDEaF6Idc9GK6ZiMetnL5Vgot/vYmrwe+uYLP3vpdx+/W0zfDKpuMZCkeDNXBP1li6B15f4W6v9ShPr/eXNwsM/aafzu7bzhDt0o6/++e50GAAAAsIeS8tP3JCKG4+FyaipvZl+912kBAAAAu6j8XvPRohkuph6OpDj+r2wQ+eFdzw0AAADYHUl5jl0SESPxSH9q6XSpjT4EAAAAAD6Dyn//P1Y0IxFvlTMc/wMAAMDnzLc3u8b+R/sH19jtzh5IfvHn6HSGk+uz5x9NrtaLuPrV/+kvN2i+crPH3tSR5NCgk7IZ33ft/iQi9jWyo8nS1S//faDfflLeHlm+AOFm1/pPtkkgtk6gvBffi+P9mOOX+u2lpUf6axmZypvZaKPdfKqaDD4c6b3x8sI3ohz+d1ozh5K4vLA4P/riK4uXylyuF71cvzq4PHxyC7ncGGyBeHjjEQ+XJ2IM1jvSX29l5fiH+osPbb3OZOU6344T/ZgTI/12ZPX4DxbrrI4+VY16/dBQLzvfe+PGitEPsqhuPvKRnYz87TjZjzl56mS/2SCL2qosXl6fRW1lFmu3xd+G7iiLd4+/df7vv24n2dh2WYxtlcUOtgXAvdK/6s9yFbqvrEL/utFX1P81dffmdf1vZS93efldxtLyK2rdvtid6v52nOrHnOq/n9h3ZIO6Ulm9Rx+OiM6rC6/+ZrBHP/v+j378tWO//cnt1/X343Q/ZtDEg7/apMYWY/7+mqr6XrHEe5uut9usJTHc/+2DwrXHFq5efGn+pfmXa7Wx8crZSuWJWgyXbxUGjdoDwAa2/42dbSOSs9scVT948ysFo/FivBKLcSnOlGcbRMQjG/c6suJrCGe2OWodWfELL2e2ObZcjq2tjT1wMolNYsdWbLH//2HZ/GPvnhMA2GsntqnDO6n/Z7Y57l5dy0/3fzh36eg4Nq/lG/nSXm8QAPgvkHU+SUZ67ySdTj77fHViolrvncvSTrvxXNrJJ6ezNG/1sk7jXL01naWznXav3Vj64Hgy66bdudnZdqeXTrU76Wy7m58vf/k9Hfz0ezebqbd6eaM728zq3SxttFu9eqOXTubdRjo790wz757LOuXC3dmskU/ljXovb7fSbnuu08hG07SbZSsC88ms1cun8mKylc528pl653pENOdmsnQy6zY6+Wyv3e9waV15a6rdmSm7HV0//D/d7e0NAJ8Gr7957crFxcX5125v4g87Cb7XYwQAVlOlAQAAAAAAAAAAAADg02/96XrF3Fs6EXA4bvv0wdcPxJ2cffi5mVh6Nq598YPBxC70fCf93LfqOd0/SO/eb6hbnnjh6aevbBbzzFuHz/0xi9i+n43/T9noVNd3DkXs/+kP+nO+fLdG+mHsZBTrJm4kW8Tci70RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGztPwEAAP//GJhRPg==") r1 = getpgid(0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x800, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af51917cf4d2ea1846a4fedeea554a5b1de7f1939e8abff005597c8ef039a5be42200", 0x40000000000038}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x800, 0x3, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af51917cf4d2ea1846a4fed02a654a5b1de7f1939e8abff005597c8ef039a5be42200", 0x3d}, 0x60) r4 = syz_pidfd_open(r1, 0x0) keyctl$join(0x1, &(0x7f0000000900)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup2(r6, r5) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xe) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000040)) pidfd_getfd(r4, r8, 0x0) 1.057342233s ago: executing program 5 (id=4937): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r2, 0x0, 0xfffe80) fallocate(r1, 0x3, 0x5000000, 0x8000c62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) 1.046875433s ago: executing program 2 (id=4938): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) ioperm(0x2, 0x7ff, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100460086dd6000fbff00142fff00000000000000000000dfffac1e0001ff0200000000000000aac425b02efeb7e69f00000001000089064f075d39f1070ed20ae0dced6abded65ac610f5e49db3c0076e3e082fc3d9e06948d99696a65a247768109dd95c0e23e7fba57ebf886fe4be50157bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='sys_enter\x00', r3}, 0x18) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/67) modify_ldt$write2(0x11, &(0x7f0000000580)={0x9, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x541240, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x898, 0xd7, 0x6eb56ab4, 0x6, 0x1}, 0x14) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 903.287432ms ago: executing program 0 (id=4939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x28) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x412101, 0x0) setns(r3, 0x20000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80800) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$eJzs3c9vU8kdAPDve/lJCCS0HNqqLZTS0gphJwYixIleWlUIqSrqqQdIExNFseModihJOYT/oVKRemr/hB4q9VCJU++97d72wh5WYnfRrshKe/DqPTshQBwChHgVfz7SxG/eOP7OxHozzjexJ4CedToi1iNiMCJuR8RY+3zSLnGtVbL7PXt6f2bj6f2ZJJrNm58leXt2LrZ9T+Zo+zGHI+L3v4n4U/Jq3Prq2sJ0pVJebteLjepSsb66dmG+Oj1XnisvlkpTk1MTVy5eLu3bWE9V//Xk1/PX//Df//zo8f/Xf/mXrFuj7bbt49hPraEPbMXJ9EfE9fcRrAv62uMZ7HZHeCtpRHwnIs7k1/9Y9OXPJgBwmDWbY9Ec214HAA67NM+BJWmhnQsYjTQtFFo5vJMxklZq9cb5O7WVxdlWrmw8BtI785XyRDtXOB4DSVafzI+f10sv1S9GxImI+OvQkbxemKlVZrv5wgcAetjRl9b/L4da6z8AcMgNd7sDAMCBs/4DQO+x/gNA77H+A0Dvsf4DQO95g/XfSwUAOCQs6gDQU35340ZWmhvtz7+evbu6slC7e2G2XF8oVFdmCjO15aXCXK02l39mT/V1j1ep1ZYmL8XKvWKjXG8U66trt6q1lcXGrfxzvW+VBw5kVADAbk6cevRhEhHrV4/kJbbt5WCthsMt7XYHgK7p63YHgK6x2xf0Lr/jAzts0fuCjv8i9HD/+wIcjHPfl/+HXiX/D71L/h96l/w/9K5mM7HnPwD0GDl+wN//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M2N5iVJC+29wEcjTQuFiGMRMR4DyZ35SnkiIo5HxAdDA0NZfbLbnQYA3lH6SdLe/+vc2NnR5+eH8q+DyVf5wWBE/PnvN/92b7rRWJ7Mzn++db7xsH2+1K0xAAC72VynN9fxTc+e3p/ZLAfZnye/am0umsXdaJdWS3/057fDMRARI18k7XpL9nqlbx/irz+IiO/tNP4kz42Mt3c+fTl+FvvYgcZPX4if5m2t2+xn8d196Av0mkfZ/HNtp+svjdP57c7X/3A+Q727zflv45X5L92a//o6zH+n9xrj0v9+27HtQcQP+neKn2zFTzrEP7vH+B/98MdnOrU1/xFxLnaOvz1WsVFdKtZX1y7MV6fnynPlxVJpanJq4srFy6VinqMubmaqX/Xp1fPHdxv/SIf4w68Z/8/2OP5/fn37jz/ZJf4vfrrz839yl/jZmvjzPcafHvl3x+27s/izHcb/uuf//B7jP/54bXaPdwUADkB9dW1hulIpLztwcDAHG82W3e7TjIhvQVd7+aDbMxPwvj2/6LvdEwAAAAAAAAAAAAAAoJM3fGPQYLzF24m6PUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr28CAAD//xlX3DU=") io_setup(0xe61, &(0x7f0000000040)) 779.291042ms ago: executing program 2 (id=4940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) 745.665052ms ago: executing program 0 (id=4941): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x200002000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00008000000000ecffffff0080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) fcntl$notify(r2, 0x402, 0x300) 712.987582ms ago: executing program 0 (id=4942): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x300001a, &(0x7f00000002c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313700373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf70c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f4d496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9ffffffffffffff7f561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2df3c2b99b9fa31631ad27727f740db9ca926ecd9e6acfc4b744d22d3e85db3344ba0f3569a01ae19d8256cc3d682862e2e75d21bcca3818a919c65f6cb43a798aacb568cffa05ae0f1f02ab2f0688f307aed6f31d08c066188ae0bd9059acda1341aafa899325e892764292e0a0c6f3ddce6b5d1bde7763d9e2cab5d13634e1202a28e323af77f83e82c5711a5fc53cd1b411d08f20623f92412c10e21f03910da72f0f08c0fe7bcf3440c1ed6f318fdf795c9faf2cc014b6f11e0ef4d6c39c3a5309a085f70a32af27d00"/1023, @ANYRES16, @ANYRESOCT, @ANYBLOB="bb959014fe42bd878edddb9788f4cec96dd69d130caf3587695510e2e5987ce4e8cbaff59efc3d3c58c0c3439984819fc27464bed0d18293eda9357efd79ab67bf796f5164692cf674a118050b7e8ff6eb204c5edb96fbd5ceda7b64ad7d0fea8dc14cc2c51d75c9d7f9da697eb093587e71b198fa9138a6df88de934750de851b955b1bdc4ab72d5ef6bd1f12dee6476705b678d54b3a090958e506f98abb503521dd4c874d61017a6ec5a772fa084b992fc638e44ebe8261b74243d71c88146ffffeb84b108e736f"], 0xd, 0x2a0, &(0x7f0000000840)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) 700.985252ms ago: executing program 2 (id=4943): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES8=r0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000003c0)=ANY=[], 0xff2e) 611.985012ms ago: executing program 4 (id=4944): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) syz_clone(0x8140000, 0x0, 0x0, 0x0, 0x0, 0x0) 574.325882ms ago: executing program 4 (id=4945): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x300001a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1023, @ANYRES16, @ANYRESOCT, @ANYBLOB="bb959014fe42bd878edddb9788f4cec96dd69d130caf3587695510e2e5987ce4e8cbaff59efc3d3c58c0c3439984819fc27464bed0d18293eda9357efd79ab67bf796f5164692cf674a118050b7e8ff6eb204c5edb96fbd5ceda7b64ad7d0fea8dc14cc2c51d75c9d7f9da697eb093587e71b198fa9138a6df88de934750de851b955b1bdc4ab72d5ef6bd1f12dee6476705b678d54b3a090958e506f98abb503521dd4c874d61017a6ec5a772fa084b992fc638e44ebe8261b74243d71c88146ffffeb84b108e736f"], 0xd, 0x2a0, &(0x7f0000000840)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 494.499501ms ago: executing program 3 (id=4946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0x6, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x5c}}, 0x40884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='locks_get_lock_context\x00', r0, 0x0, 0x4}, 0x18) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='f2fs_direct_IO_exit\x00', r1, 0x0, 0x101}, 0x18) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 436.970872ms ago: executing program 5 (id=4947): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f00000025c0), 0x0) 372.363841ms ago: executing program 3 (id=4948): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="b6a544332869eb19afb43282472d9085c606034c651338764a72d654a2b1ab995a715bd5407cb5e8cd25fe8084d71002bc7b97c85218ba8a3d25ebd83eab417842a7c2e3971c0b5894bf9387e71ea80b6b71535bba9bc231d63e8deba41a36f85c2b9546187c2d966ebe074e771712258e3f3932db31a42b926dfd9b23a7aad4c0d5a937f6e548fb6c3fe0462b6195567d3d45b1feeaf8c020a886fee409f883bec86f17de3c91e6480e1ed0272bf3a04b28447026c701386279aff5a7fb28ff3c", @ANYRESDEC=r1, @ANYRES32=r2, @ANYRES16=r1, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r5, 0x0, 0xfffe80) fallocate(r4, 0x3, 0x5000000, 0x8000c62) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 309.438881ms ago: executing program 5 (id=4949): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x20000000000000f4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000230000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000010634d617f4cebbb8dff2d91a1debcdb5b7949ca6fc3f308b64d4110b065de92d67a1ebceea6498e55fadfe74d3449946f7a7a0aa2c891f4231ee40ffea13ceae20a2ff51131e59615211b3605a1949675749b058dccb548f947d3861d0df3e19a88347bcb8f637d8b46943caf71506a9ddc25910744177886e871bf629b2c31b31a181bf41df23cd5240e089b528e69ee4104349e3379da733b902cc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62874, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r1, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}], [{@smackfsroot={'smackfsroot', 0x3d, '^{'}}, {@smackfshat={'smackfshat', 0x3d, 'L'}}, {@obj_user={'obj_user', 0x3d, 'dont_measure'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@dont_measure}, {@dont_measure}, {@uid_gt={'uid>', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x64, 0x63, 0x38, 0x32, 0x35, 0x33, 0x39], 0x2d, [0x36, 0x35, 0x61, 0x63], 0x2d, [0x65, 0x31, 0x34, 0x61], 0x2d, [0x36, 0x39, 0x61, 0x30], 0x2d, [0x30, 0x32, 0x64, 0x38, 0x66, 0x64, 0x65, 0x64]}}}, {@smackfsdef}]}, 0x1, 0x775, &(0x7f0000001fc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='.\x00') pivot_root(&(0x7f0000001f80)='./file0\x00', &(0x7f0000000180)='./file1\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x18) ioperm(0x7, 0xca, 0x5) time(0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x184000, &(0x7f00000004c0)=ANY=[@ANYBLOB='memory_localevents,memory_recursiveprot,context=sysadm_u,subj_role=\'*C-,smackfstransmute=9p\x00,euid<', @ANYRESDEC=r1, @ANYBLOB="2c6f626a5f726f0400000073757569642c6f626a5f757365723d5e2c5e2d2c00"]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000780)='f2fs_write_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffd4) r5 = socket(0xa, 0x40000000002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(r2) 136.741641ms ago: executing program 5 (id=4950): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20010, r0, 0x4859a000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}}, 0x0) 0s ago: executing program 5 (id=4951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x28) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x412101, 0x0) setns(r3, 0x20000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80800) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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") io_setup(0xe61, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 400.164240][T16205] ipt_REJECT: ECHOREPLY no longer supported. [ 400.226600][T16207] loop4: detected capacity change from 0 to 128 [ 400.448296][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 400.448314][ T29] audit: type=1326 audit(1737500128.463:30411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.478215][ T29] audit: type=1326 audit(1737500128.463:30412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.501855][ T29] audit: type=1326 audit(1737500128.463:30413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.525511][ T29] audit: type=1326 audit(1737500128.463:30414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.549247][ T29] audit: type=1326 audit(1737500128.463:30415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.572913][ T29] audit: type=1326 audit(1737500128.463:30416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.596448][ T29] audit: type=1326 audit(1737500128.463:30417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.620315][ T29] audit: type=1326 audit(1737500128.463:30418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.3.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 400.915044][T16221] No such timeout policy "syz0" [ 400.987733][T16223] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4559'. [ 401.155287][ T29] audit: type=1400 audit(1737500129.163:30419): avc: denied { block_suspend } for pid=16231 comm="syz.4.4563" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 401.165440][T16232] loop4: detected capacity change from 0 to 512 [ 401.222374][T16232] EXT4-fs (loop4): orphan cleanup on readonly fs [ 401.230655][T16232] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 401.315191][T16232] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 401.342112][T16232] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.4563: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 401.372867][ T29] audit: type=1326 audit(1737500129.373:30420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.3.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 401.428760][T16232] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4563: couldn't read orphan inode 13 (err -117) [ 401.453730][T16232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.543431][T16243] loop3: detected capacity change from 0 to 256 [ 401.607581][T12515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.888213][T16251] No such timeout policy "syz0" [ 402.135079][T16257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4572'. [ 402.227358][T16261] loop5: detected capacity change from 0 to 512 [ 402.258946][T16260] ipt_REJECT: ECHOREPLY no longer supported. [ 402.271356][T16261] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 402.293843][T16261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 402.313764][T16263] 9pnet_virtio: no channels available for device [ 402.319497][T16261] EXT4-fs (loop5): orphan cleanup on readonly fs [ 402.324504][T16263] hub 2-0:1.0: USB hub found [ 402.331550][T16263] hub 2-0:1.0: 8 ports detected [ 402.365424][T16266] loop0: detected capacity change from 0 to 128 [ 402.545295][T16261] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4574: bg 0: block 361: padding at end of block bitmap is not set [ 402.606959][T16261] EXT4-fs (loop5): Remounting filesystem read-only [ 402.620898][T16261] EXT4-fs (loop5): 1 truncate cleaned up [ 402.630965][T16261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 402.650071][T16261] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 402.656488][T16274] loop3: detected capacity change from 0 to 2048 [ 402.658108][T16261] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 402.675205][T16274] EXT4-fs: Ignoring removed bh option [ 402.679290][T16275] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 402.721648][T16278] loop2: detected capacity change from 0 to 256 [ 402.731400][T16278] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.731888][T16274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.771115][T16261] loop5: detected capacity change from 0 to 8192 [ 402.819096][T16281] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 402.834983][T16281] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1216 with error 28 [ 402.847704][T16281] EXT4-fs (loop3): This should not happen!! Data will be lost [ 402.847704][T16281] [ 402.857454][T16281] EXT4-fs (loop3): Total free blocks count 0 [ 402.863455][T16281] EXT4-fs (loop3): Free/Dirty block details [ 402.870153][T16281] EXT4-fs (loop3): free_blocks=2415919104 [ 402.876540][T16281] EXT4-fs (loop3): dirty_blocks=1232 [ 402.881882][T16281] EXT4-fs (loop3): Block reservation details [ 402.888011][T16281] EXT4-fs (loop3): i_reserved_data_blocks=77 [ 402.902919][T16284] No such timeout policy "syz0" [ 403.008961][ T359] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 403.072088][T16293] loop5: detected capacity change from 0 to 512 [ 403.106838][T16297] loop3: detected capacity change from 0 to 128 [ 403.117607][T16293] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 403.141487][T16297] bio_check_eod: 9599 callbacks suppressed [ 403.141506][T16297] syz.3.4586: attempt to access beyond end of device [ 403.141506][T16297] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 403.199089][T16297] syz.3.4586: attempt to access beyond end of device [ 403.199089][T16297] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 403.213128][T16297] syz.3.4586: attempt to access beyond end of device [ 403.213128][T16297] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 403.233533][T16297] syz.3.4586: attempt to access beyond end of device [ 403.233533][T16297] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 403.247213][T16297] syz.3.4586: attempt to access beyond end of device [ 403.247213][T16297] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 403.292638][T16297] syz.3.4586: attempt to access beyond end of device [ 403.292638][T16297] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 403.814969][T16311] loop5: detected capacity change from 0 to 2048 [ 403.823469][T16311] EXT4-fs: Ignoring removed bh option [ 403.831054][T16313] No such timeout policy "syz0" [ 403.853050][T16311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.947300][T16318] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 403.964951][T16318] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 672 with error 28 [ 403.977393][T16318] EXT4-fs (loop5): This should not happen!! Data will be lost [ 403.977393][T16318] [ 403.977413][T16318] EXT4-fs (loop5): Total free blocks count 0 [ 403.977428][T16318] EXT4-fs (loop5): Free/Dirty block details [ 403.977441][T16318] EXT4-fs (loop5): free_blocks=2415919104 [ 403.977462][T16318] EXT4-fs (loop5): dirty_blocks=688 [ 403.977479][T16318] EXT4-fs (loop5): Block reservation details [ 403.977490][T16318] EXT4-fs (loop5): i_reserved_data_blocks=43 [ 404.166015][ T3403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 404.247824][T16327] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4596'. [ 404.256573][T16329] ipt_REJECT: ECHOREPLY no longer supported. [ 404.298627][T16331] loop5: detected capacity change from 0 to 512 [ 404.308380][T16331] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 404.321080][T16332] loop0: detected capacity change from 0 to 128 [ 404.368751][T16335] loop5: detected capacity change from 0 to 128 [ 404.398338][T16335] syz.5.4599: attempt to access beyond end of device [ 404.398338][T16335] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 404.453581][T16335] syz.5.4599: attempt to access beyond end of device [ 404.453581][T16335] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 404.473187][T16335] syz.5.4599: attempt to access beyond end of device [ 404.473187][T16335] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 404.488892][T16335] syz.5.4599: attempt to access beyond end of device [ 404.488892][T16335] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 404.978789][T16346] No such timeout policy "syz0" [ 405.103715][T16352] loop3: detected capacity change from 0 to 256 [ 405.283011][T16358] loop0: detected capacity change from 0 to 256 [ 405.618070][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 405.618085][ T29] audit: type=1326 audit(1737500133.633:30550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 405.627466][T16352] syz.3.4606 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 405.652207][T16360] loop5: detected capacity change from 0 to 512 [ 405.662055][T16352] CPU: 1 UID: 0 PID: 16352 Comm: syz.3.4606 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 405.676837][ T29] audit: type=1326 audit(1737500133.673:30551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 405.678907][T16352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 405.678924][T16352] Call Trace: [ 405.678934][T16352] [ 405.702519][ T29] audit: type=1326 audit(1737500133.673:30552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 405.712465][T16352] dump_stack_lvl+0xf2/0x150 [ 405.715867][ T29] audit: type=1326 audit(1737500133.673:30553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 405.718679][T16352] dump_stack+0x15/0x1a [ 405.742230][ T29] audit: type=1326 audit(1737500133.673:30554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feaa5555d63 code=0x7ffc0000 [ 405.746744][T16352] dump_header+0x83/0x2d0 [ 405.770319][ T29] audit: type=1326 audit(1737500133.673:30555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feaa55547df code=0x7ffc0000 [ 405.774408][T16352] oom_kill_process+0x341/0x4c0 [ 405.797797][ T29] audit: type=1326 audit(1737500133.673:30556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feaa5555db7 code=0x7ffc0000 [ 405.802042][T16352] out_of_memory+0x9af/0xbe0 [ 405.825517][ T29] audit: type=1326 audit(1737500133.673:30557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feaa5554690 code=0x7ffc0000 [ 405.830201][T16352] ? css_next_descendant_pre+0x11c/0x140 [ 405.830285][T16352] mem_cgroup_out_of_memory+0x13e/0x190 [ 405.853741][ T29] audit: type=1326 audit(1737500133.673:30558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feaa555592b code=0x7ffc0000 [ 405.858265][T16352] try_charge_memcg+0x508/0x7f0 [ 405.881938][ T29] audit: type=1326 audit(1737500133.693:30559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feaa555498a code=0x7ffc0000 [ 405.887492][T16352] obj_cgroup_charge_pages+0xbd/0x1a0 [ 405.950432][T16352] __memcg_kmem_charge_page+0x9d/0x170 [ 405.950467][T16352] __alloc_pages_noprof+0x1bc/0x340 [ 405.950505][T16352] alloc_pages_mpol_noprof+0xb8/0x260 [ 405.950598][T16352] alloc_pages_noprof+0xe1/0x100 [ 405.950625][T16352] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 405.950674][T16352] __kvmalloc_node_noprof+0x121/0x170 [ 405.950761][T16352] ? ip_set_alloc+0x1f/0x30 [ 405.950796][T16352] ip_set_alloc+0x1f/0x30 [ 405.950828][T16352] hash_netiface_create+0x273/0x730 [ 405.950866][T16352] ? __nla_parse+0x40/0x60 [ 405.950976][T16352] ? __pfx_hash_netiface_create+0x10/0x10 [ 405.951011][T16352] ip_set_create+0x359/0x8a0 [ 405.951032][T16352] ? strnstr+0xe1/0x100 [ 405.951071][T16352] ? __nla_parse+0x40/0x60 [ 405.951147][T16352] nfnetlink_rcv_msg+0x4a9/0x570 [ 405.951205][T16352] netlink_rcv_skb+0x12c/0x230 [ 405.951232][T16352] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 405.951273][T16352] nfnetlink_rcv+0x16c/0x15d0 [ 405.951363][T16352] ? kmem_cache_free+0xdc/0x2d0 [ 405.951390][T16352] ? nlmon_xmit+0x51/0x60 [ 405.951414][T16352] ? __kfree_skb+0x102/0x150 [ 405.951437][T16352] ? consume_skb+0x49/0x160 [ 405.951459][T16352] ? nlmon_xmit+0x51/0x60 [ 405.951524][T16352] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 405.951553][T16352] ? __dev_queue_xmit+0xb6e/0x2090 [ 405.951578][T16352] ? rb_insert_color+0x263/0x290 [ 405.951608][T16352] ? ref_tracker_free+0x3a5/0x410 [ 405.951633][T16352] ? __dev_queue_xmit+0x186/0x2090 [ 405.951666][T16352] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 405.951759][T16352] netlink_unicast+0x599/0x670 [ 405.951787][T16352] netlink_sendmsg+0x5cc/0x6e0 [ 405.951888][T16352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.951917][T16352] __sock_sendmsg+0x140/0x180 [ 405.952031][T16352] ____sys_sendmsg+0x312/0x410 [ 405.952156][T16352] __sys_sendmsg+0x19d/0x230 [ 405.952203][T16352] __x64_sys_sendmsg+0x46/0x50 [ 405.952230][T16352] x64_sys_call+0x2734/0x2dc0 [ 405.952252][T16352] do_syscall_64+0xc9/0x1c0 [ 405.952350][T16352] ? clear_bhb_loop+0x55/0xb0 [ 405.952374][T16352] ? clear_bhb_loop+0x55/0xb0 [ 405.952398][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.952493][T16352] RIP: 0033:0x7f3126825d29 [ 405.952509][T16352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.952528][T16352] RSP: 002b:00007f3124e91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.952547][T16352] RAX: ffffffffffffffda RBX: 00007f3126a15fa0 RCX: 00007f3126825d29 [ 405.952562][T16352] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 405.952581][T16352] RBP: 00007f31268a1b08 R08: 0000000000000000 R09: 0000000000000000 [ 405.952594][T16352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.952659][T16352] R13: 0000000000000000 R14: 00007f3126a15fa0 R15: 00007ffd16e8c988 [ 405.952680][T16352] [ 405.953033][T16352] memory: usage 307200kB, limit 307200kB, failcnt 1021 [ 405.953050][T16352] memory+swap: usage 352852kB, limit 9007199254740988kB, failcnt 0 [ 405.953066][T16352] kmem: usage 270756kB, limit 9007199254740988kB, failcnt 0 [ 405.953077][T16352] Memory cgroup stats for /syz3: [ 405.966417][T16360] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 406.007271][T16362] loop4: detected capacity change from 0 to 128 [ 406.027273][T16352] cache 36564992 [ 406.280811][T16352] rss 737280 [ 406.284058][T16352] shmem 36564992 [ 406.287644][T16352] mapped_file 0 [ 406.291159][T16352] dirty 0 [ 406.294102][T16352] writeback 0 [ 406.297448][T16352] workingset_refault_anon 107 [ 406.302204][T16352] workingset_refault_file 4350 [ 406.307026][T16352] swap 46747648 [ 406.310544][T16352] swapcached 16384 [ 406.314265][T16352] pgpgin 906634 [ 406.317758][T16352] pgpgout 897523 [ 406.321307][T16352] pgfault 566160 [ 406.324900][T16352] pgmajfault 118 [ 406.328514][T16352] inactive_anon 37117952 [ 406.332770][T16352] active_anon 200704 [ 406.336759][T16352] inactive_file 0 [ 406.340451][T16352] active_file 0 [ 406.343922][T16352] unevictable 0 [ 406.347419][T16352] hierarchical_memory_limit 314572800 [ 406.352832][T16352] hierarchical_memsw_limit 9223372036854771712 [ 406.359048][T16352] total_cache 36564992 [ 406.363103][T16352] total_rss 737280 [ 406.366829][T16352] total_shmem 36564992 [ 406.370886][T16352] total_mapped_file 0 [ 406.374917][T16352] total_dirty 0 [ 406.378395][T16352] total_writeback 0 [ 406.382369][T16352] total_workingset_refault_anon 107 [ 406.387586][T16352] total_workingset_refault_file 4350 [ 406.392889][T16352] total_swap 46747648 [ 406.396894][T16352] total_swapcached 16384 [ 406.401239][T16352] total_pgpgin 906634 [ 406.405212][T16352] total_pgpgout 897523 [ 406.409332][T16352] total_pgfault 566160 [ 406.413398][T16352] total_pgmajfault 118 [ 406.417468][T16352] total_inactive_anon 37117952 [ 406.422221][T16352] total_active_anon 200704 [ 406.426641][T16352] total_inactive_file 0 [ 406.430786][T16352] total_active_file 0 [ 406.434759][T16352] total_unevictable 0 [ 406.438769][T16352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4606,pid=16351,uid=0 [ 406.453552][T16352] Memory cgroup out of memory: Killed process 16351 (syz.3.4606) total-vm:95432kB, anon-rss:788kB, file-rss:22264kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 406.555014][T16366] loop2: detected capacity change from 0 to 128 [ 406.696039][T16375] No such timeout policy "syz0" [ 406.958686][T16386] loop0: detected capacity change from 0 to 512 [ 406.967915][T16386] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 406.978306][T16386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 406.987805][T16386] EXT4-fs (loop0): orphan cleanup on readonly fs [ 406.994772][T16386] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4619: bg 0: block 361: padding at end of block bitmap is not set [ 407.011825][T16386] EXT4-fs (loop0): Remounting filesystem read-only [ 407.022645][T16386] EXT4-fs (loop0): 1 truncate cleaned up [ 407.030634][T16386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 407.042963][T16386] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 407.051713][T16386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 407.108438][T16386] loop0: detected capacity change from 0 to 8192 [ 407.421451][T16395] loop5: detected capacity change from 0 to 128 [ 407.642750][T16398] loop4: detected capacity change from 0 to 512 [ 407.660371][T16398] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 407.749092][T16404] No such timeout policy "syz0" [ 407.890250][T16406] loop4: detected capacity change from 0 to 512 [ 407.910349][T16406] journal_path: Non-blockdev passed as './bus' [ 407.916640][T16406] EXT4-fs: error: could not find journal device path [ 407.981593][T16419] loop2: detected capacity change from 0 to 512 [ 408.003392][T16419] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 408.034532][T16419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 408.052838][T16419] EXT4-fs (loop2): orphan cleanup on readonly fs [ 408.101237][T16419] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4631: bg 0: block 361: padding at end of block bitmap is not set [ 408.118975][T16419] EXT4-fs (loop2): Remounting filesystem read-only [ 408.170643][T16419] EXT4-fs (loop2): 1 truncate cleaned up [ 408.178022][T16419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 408.190222][T16419] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 408.197804][T16419] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 408.253095][T16427] loop5: detected capacity change from 0 to 256 [ 408.631269][T16419] loop2: detected capacity change from 0 to 8192 [ 408.641039][T16430] loop0: detected capacity change from 0 to 512 [ 408.648916][T16430] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 408.660472][T16430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 408.670409][T16430] EXT4-fs (loop0): orphan cleanup on readonly fs [ 408.702708][T16430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4634: bg 0: block 361: padding at end of block bitmap is not set [ 408.725296][T16430] EXT4-fs (loop0): Remounting filesystem read-only [ 408.771778][T16430] EXT4-fs (loop0): 1 truncate cleaned up [ 408.780592][T16430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 408.850014][T16427] syz.5.4633 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 408.864211][T16427] CPU: 1 UID: 0 PID: 16427 Comm: syz.5.4633 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 408.874746][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 408.884949][T16427] Call Trace: [ 408.888254][T16427] [ 408.891201][T16427] dump_stack_lvl+0xf2/0x150 [ 408.895858][T16427] dump_stack+0x15/0x1a [ 408.900188][T16427] dump_header+0x83/0x2d0 [ 408.904556][T16427] oom_kill_process+0x341/0x4c0 [ 408.909529][T16427] out_of_memory+0x9af/0xbe0 [ 408.914184][T16427] ? css_next_descendant_pre+0x11c/0x140 [ 408.919882][T16427] mem_cgroup_out_of_memory+0x13e/0x190 [ 408.925516][T16427] try_charge_memcg+0x508/0x7f0 [ 408.930585][T16427] obj_cgroup_charge_pages+0xbd/0x1a0 [ 408.936079][T16427] __memcg_kmem_charge_page+0x9d/0x170 [ 408.941605][T16427] __alloc_pages_noprof+0x1bc/0x340 [ 408.946906][T16427] alloc_pages_mpol_noprof+0xb8/0x260 [ 408.952300][T16427] alloc_pages_noprof+0xe1/0x100 [ 408.957336][T16427] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 408.963274][T16427] __kvmalloc_node_noprof+0x121/0x170 [ 408.968700][T16427] ? ip_set_alloc+0x1f/0x30 [ 408.973270][T16427] ip_set_alloc+0x1f/0x30 [ 408.977691][T16427] hash_netiface_create+0x273/0x730 [ 408.982962][T16427] ? __nla_parse+0x40/0x60 [ 408.987394][T16427] ? __pfx_hash_netiface_create+0x10/0x10 [ 408.993199][T16427] ip_set_create+0x359/0x8a0 [ 408.997826][T16427] ? strnstr+0xe1/0x100 [ 409.002062][T16427] ? __nla_parse+0x40/0x60 [ 409.006558][T16427] nfnetlink_rcv_msg+0x4a9/0x570 [ 409.011539][T16427] netlink_rcv_skb+0x12c/0x230 [ 409.016387][T16427] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 409.021875][T16427] nfnetlink_rcv+0x16c/0x15d0 [ 409.026583][T16427] ? kmem_cache_free+0xdc/0x2d0 [ 409.031446][T16427] ? nlmon_xmit+0x51/0x60 [ 409.035822][T16427] ? __kfree_skb+0x102/0x150 [ 409.040502][T16427] ? consume_skb+0x49/0x160 [ 409.045015][T16427] ? nlmon_xmit+0x51/0x60 [ 409.049417][T16427] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 409.054754][T16427] ? __dev_queue_xmit+0xb6e/0x2090 [ 409.059877][T16427] ? cmp_ex_search+0x56/0x70 [ 409.064519][T16427] ? ref_tracker_free+0x3a5/0x410 [ 409.069554][T16427] ? __dev_queue_xmit+0x186/0x2090 [ 409.074762][T16427] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 409.080343][T16427] netlink_unicast+0x599/0x670 [ 409.085216][T16427] netlink_sendmsg+0x5cc/0x6e0 [ 409.090003][T16427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.095316][T16427] __sock_sendmsg+0x140/0x180 [ 409.100057][T16427] ____sys_sendmsg+0x312/0x410 [ 409.104854][T16427] __sys_sendmsg+0x19d/0x230 [ 409.109473][T16427] __x64_sys_sendmsg+0x46/0x50 [ 409.114248][T16427] x64_sys_call+0x2734/0x2dc0 [ 409.118931][T16427] do_syscall_64+0xc9/0x1c0 [ 409.123483][T16427] ? clear_bhb_loop+0x55/0xb0 [ 409.128174][T16427] ? clear_bhb_loop+0x55/0xb0 [ 409.132919][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.138860][T16427] RIP: 0033:0x7feaa5555d29 [ 409.143284][T16427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.162984][T16427] RSP: 002b:00007feaa3bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.171404][T16427] RAX: ffffffffffffffda RBX: 00007feaa5745fa0 RCX: 00007feaa5555d29 [ 409.179505][T16427] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 409.187489][T16427] RBP: 00007feaa55d1b08 R08: 0000000000000000 R09: 0000000000000000 [ 409.195461][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.203534][T16427] R13: 0000000000000000 R14: 00007feaa5745fa0 R15: 00007ffca7ef59c8 [ 409.211586][T16427] [ 409.214728][T16427] memory: usage 307200kB, limit 307200kB, failcnt 295 [ 409.214959][T16430] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 409.221512][T16427] memory+swap: usage 315292kB, limit 9007199254740988kB, failcnt 0 [ 409.229146][T16430] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 409.236000][T16427] kmem: usage 230404kB, limit 9007199254740988kB, failcnt 0 [ 409.252488][T16427] Memory cgroup stats for /syz5: [ 409.254135][T16442] No such timeout policy "syz0" [ 409.275724][T16427] cache 77275136 [ 409.279416][T16427] rss 1048576 [ 409.282709][T16427] shmem 77275136 [ 409.286369][T16427] mapped_file 0 [ 409.289832][T16427] dirty 0 [ 409.292773][T16427] writeback 0 [ 409.296120][T16427] workingset_refault_anon 0 [ 409.300637][T16427] workingset_refault_file 178 [ 409.305402][T16427] swap 8286208 [ 409.308819][T16427] swapcached 315392 [ 409.312671][T16427] pgpgin 282376 [ 409.316363][T16427] pgpgout 263177 [ 409.319946][T16427] pgfault 234751 [ 409.323494][T16427] pgmajfault 9 [ 409.327195][T16427] inactive_anon 77582336 [ 409.331553][T16427] active_anon 1056768 [ 409.335593][T16427] inactive_file 0 [ 409.339598][T16427] active_file 0 [ 409.343193][T16427] unevictable 0 [ 409.346942][T16427] hierarchical_memory_limit 314572800 [ 409.352329][T16427] hierarchical_memsw_limit 9223372036854771712 [ 409.357186][T16430] loop0: detected capacity change from 0 to 8192 [ 409.358772][T16427] total_cache 77275136 [ 409.369216][T16427] total_rss 1048576 [ 409.373040][T16427] total_shmem 77275136 [ 409.377584][T16427] total_mapped_file 0 [ 409.382184][T16427] total_dirty 0 [ 409.385949][T16427] total_writeback 0 [ 409.389767][T16427] total_workingset_refault_anon 0 [ 409.394808][T16427] total_workingset_refault_file 178 [ 409.400546][T16427] total_swap 8286208 [ 409.404720][T16427] total_swapcached 315392 [ 409.409102][T16427] total_pgpgin 282376 [ 409.413118][T16427] total_pgpgout 263177 [ 409.417226][T16427] total_pgfault 234751 [ 409.421304][T16427] total_pgmajfault 9 [ 409.425240][T16427] total_inactive_anon 77582336 [ 409.430039][T16427] total_active_anon 1056768 [ 409.434547][T16427] total_inactive_file 0 [ 409.438808][T16427] total_active_file 0 [ 409.442798][T16427] total_unevictable 0 [ 409.446881][T16427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4633,pid=16426,uid=0 [ 409.461657][T16427] Memory cgroup out of memory: Killed process 16427 (syz.5.4633) total-vm:93516kB, anon-rss:920kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 409.598035][T16452] loop2: detected capacity change from 0 to 512 [ 409.629310][T16452] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 409.708450][T16452] EXT4-fs (loop2): 1 truncate cleaned up [ 409.714506][T16452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.717492][T16456] netlink: 'syz.3.4644': attribute type 12 has an invalid length. [ 409.734490][T16456] netlink: 'syz.3.4644': attribute type 29 has an invalid length. [ 409.742343][T16456] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4644'. [ 409.751469][T16456] netlink: 'syz.3.4644': attribute type 1 has an invalid length. [ 409.759230][T16456] netlink: 'syz.3.4644': attribute type 2 has an invalid length. [ 409.766992][T16456] netlink: 39 bytes leftover after parsing attributes in process `syz.3.4644'. [ 409.795125][T16461] cgroup: release_agent respecified [ 409.989948][T16474] loop3: detected capacity change from 0 to 512 [ 410.021350][T16474] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 410.036433][T16474] EXT4-fs (loop3): orphan cleanup on readonly fs [ 410.043078][T16474] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 410.059421][T16474] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 410.069908][T16474] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4650: bg 0: block 40: padding at end of block bitmap is not set [ 410.085931][T16474] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 410.095087][T16474] EXT4-fs (loop3): 1 truncate cleaned up [ 410.121041][T16474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.143252][T16474] netlink: 'syz.3.4650': attribute type 12 has an invalid length. [ 410.151274][T16474] netlink: 'syz.3.4650': attribute type 29 has an invalid length. [ 410.159141][T16474] netlink: 'syz.3.4650': attribute type 2 has an invalid length. [ 410.167032][T16474] netlink: 'syz.3.4650': attribute type 2 has an invalid length. [ 410.174763][T16474] netlink: 'syz.3.4650': attribute type 1 has an invalid length. [ 410.182522][T16474] netlink: 'syz.3.4650': attribute type 37 has an invalid length. [ 410.221377][T11911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.312424][T16485] loop4: detected capacity change from 0 to 512 [ 410.323269][T16485] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 410.338925][T16452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.348561][T16485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 410.357888][T16485] EXT4-fs (loop4): orphan cleanup on readonly fs [ 410.374424][T16485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4653: bg 0: block 361: padding at end of block bitmap is not set [ 410.390925][T16485] EXT4-fs (loop4): Remounting filesystem read-only [ 410.400425][T16485] EXT4-fs (loop4): 1 truncate cleaned up [ 410.409154][T16485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 410.421374][T16485] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 410.428480][T16485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 410.485632][T16494] loop3: detected capacity change from 0 to 128 [ 410.488424][T16485] loop4: detected capacity change from 0 to 8192 [ 410.512164][T16494] bio_check_eod: 3047 callbacks suppressed [ 410.512178][T16494] syz.3.4656: attempt to access beyond end of device [ 410.512178][T16494] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 410.569032][T16494] syz.3.4656: attempt to access beyond end of device [ 410.569032][T16494] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 410.583076][T16494] syz.3.4656: attempt to access beyond end of device [ 410.583076][T16494] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 410.595770][T16496] loop4: detected capacity change from 0 to 256 [ 410.596475][T16494] syz.3.4656: attempt to access beyond end of device [ 410.596475][T16494] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 410.615915][T16494] syz.3.4656: attempt to access beyond end of device [ 410.615915][T16494] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 410.629185][T16494] syz.3.4656: attempt to access beyond end of device [ 410.629185][T16494] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 410.630037][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 410.630053][ T29] audit: type=1400 audit(1737500138.653:30742): avc: denied { create } for pid=16495 comm="syz.4.4657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 410.683438][ T29] audit: type=1400 audit(1737500138.663:30743): avc: denied { execmem } for pid=16493 comm="syz.3.4656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 410.706493][T16499] loop5: detected capacity change from 0 to 256 [ 410.734558][T16499] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.759267][ T29] audit: type=1400 audit(1737500138.773:30744): avc: denied { create } for pid=16498 comm="syz.5.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 410.804768][ T29] audit: type=1400 audit(1737500138.773:30745): avc: denied { map } for pid=16498 comm="syz.5.4658" path="socket:[50392]" dev="sockfs" ino=50392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 410.828975][ T29] audit: type=1400 audit(1737500138.773:30746): avc: denied { create } for pid=16498 comm="syz.5.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.848710][ T29] audit: type=1400 audit(1737500138.773:30747): avc: denied { connect } for pid=16498 comm="syz.5.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.868528][ T29] audit: type=1400 audit(1737500138.773:30748): avc: denied { listen } for pid=16498 comm="syz.5.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.888253][ T29] audit: type=1400 audit(1737500138.773:30749): avc: denied { setopt } for pid=16498 comm="syz.5.4658" lport=50424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.909105][ T29] audit: type=1400 audit(1737500138.773:30750): avc: denied { accept } for pid=16498 comm="syz.5.4658" lport=50424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.972769][ T29] audit: type=1400 audit(1737500138.983:30751): avc: denied { create } for pid=16504 comm="syz.0.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.100232][T16510] loop3: detected capacity change from 0 to 1024 [ 411.107684][T16510] EXT4-fs: Ignoring removed nobh option [ 411.119852][T16510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.189043][T16510] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.4662: Allocating blocks 481-513 which overlap fs metadata [ 411.253487][T16510] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.4662: Allocating blocks 497-513 which overlap fs metadata [ 411.273092][T16510] EXT4-fs (loop3): pa ffff888106123310: logic 352, phys. 465, len 3 [ 411.281369][T16510] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 411.343478][T11911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.459923][T16496] syz.4.4657 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 411.474096][T16496] CPU: 1 UID: 0 PID: 16496 Comm: syz.4.4657 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 411.484533][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 411.494666][T16496] Call Trace: [ 411.497972][T16496] [ 411.501010][T16496] dump_stack_lvl+0xf2/0x150 [ 411.505689][T16496] dump_stack+0x15/0x1a [ 411.509908][T16496] dump_header+0x83/0x2d0 [ 411.514281][T16496] oom_kill_process+0x341/0x4c0 [ 411.519160][T16496] out_of_memory+0x9af/0xbe0 [ 411.523779][T16496] ? css_next_descendant_pre+0x11c/0x140 [ 411.529467][T16496] mem_cgroup_out_of_memory+0x13e/0x190 [ 411.535057][T16496] try_charge_memcg+0x508/0x7f0 [ 411.539965][T16496] obj_cgroup_charge_pages+0xbd/0x1a0 [ 411.545361][T16496] __memcg_kmem_charge_page+0x9d/0x170 [ 411.550926][T16496] __alloc_pages_noprof+0x1bc/0x340 [ 411.556189][T16496] alloc_pages_mpol_noprof+0xb8/0x260 [ 411.561637][T16496] alloc_pages_noprof+0xe1/0x100 [ 411.566639][T16496] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 411.572495][T16496] __kvmalloc_node_noprof+0x121/0x170 [ 411.577919][T16496] ? ip_set_alloc+0x1f/0x30 [ 411.582537][T16496] ip_set_alloc+0x1f/0x30 [ 411.586948][T16496] hash_netiface_create+0x273/0x730 [ 411.592260][T16496] ? __nla_parse+0x40/0x60 [ 411.596751][T16496] ? __pfx_hash_netiface_create+0x10/0x10 [ 411.602559][T16496] ip_set_create+0x359/0x8a0 [ 411.607180][T16496] ? __nla_parse+0x40/0x60 [ 411.611627][T16496] nfnetlink_rcv_msg+0x4a9/0x570 [ 411.616709][T16496] netlink_rcv_skb+0x12c/0x230 [ 411.621568][T16496] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 411.627187][T16496] nfnetlink_rcv+0x16c/0x15d0 [ 411.631945][T16496] ? kmem_cache_free+0xdc/0x2d0 [ 411.636827][T16496] ? nlmon_xmit+0x51/0x60 [ 411.641314][T16496] ? __kfree_skb+0x102/0x150 [ 411.646001][T16496] ? consume_skb+0x49/0x160 [ 411.650616][T16496] ? nlmon_xmit+0x51/0x60 [ 411.654979][T16496] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 411.660300][T16496] ? __dev_queue_xmit+0xb6e/0x2090 [ 411.665428][T16496] ? ref_tracker_free+0x3a5/0x410 [ 411.670602][T16496] ? __dev_queue_xmit+0x186/0x2090 [ 411.675780][T16496] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 411.681321][T16496] netlink_unicast+0x599/0x670 [ 411.686119][T16496] netlink_sendmsg+0x5cc/0x6e0 [ 411.690956][T16496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.696266][T16496] __sock_sendmsg+0x140/0x180 [ 411.700998][T16496] ____sys_sendmsg+0x312/0x410 [ 411.705886][T16496] __sys_sendmsg+0x19d/0x230 [ 411.710599][T16496] __x64_sys_sendmsg+0x46/0x50 [ 411.715400][T16496] x64_sys_call+0x2734/0x2dc0 [ 411.720129][T16496] do_syscall_64+0xc9/0x1c0 [ 411.724664][T16496] ? clear_bhb_loop+0x55/0xb0 [ 411.729397][T16496] ? clear_bhb_loop+0x55/0xb0 [ 411.734093][T16496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.740127][T16496] RIP: 0033:0x7f5146585d29 [ 411.744700][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.764404][T16496] RSP: 002b:00007f5144bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.772829][T16496] RAX: ffffffffffffffda RBX: 00007f5146775fa0 RCX: 00007f5146585d29 [ 411.780809][T16496] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 411.788796][T16496] RBP: 00007f5146601b08 R08: 0000000000000000 R09: 0000000000000000 [ 411.796809][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.804832][T16496] R13: 0000000000000000 R14: 00007f5146775fa0 R15: 00007ffef438e908 [ 411.812826][T16496] [ 411.816110][T16496] memory: usage 307200kB, limit 307200kB, failcnt 2622 [ 411.822979][T16496] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 411.830921][T16496] kmem: usage 306352kB, limit 9007199254740988kB, failcnt 0 [ 411.838333][T16496] Memory cgroup stats for /syz4: [ 411.865882][T16496] cache 131072 [ 411.874312][T16496] rss 737280 [ 411.877562][T16496] shmem 131072 [ 411.880951][T16496] mapped_file 0 [ 411.884409][T16496] dirty 0 [ 411.887375][T16496] writeback 0 [ 411.890669][T16496] workingset_refault_anon 1949 [ 411.895444][T16496] workingset_refault_file 3077 [ 411.900259][T16496] swap 712704 [ 411.903546][T16496] swapcached 0 [ 411.907010][T16496] pgpgin 716534 [ 411.910540][T16496] pgpgout 716322 [ 411.914506][T16496] pgfault 488687 [ 411.918138][T16496] pgmajfault 337 [ 411.921686][T16496] inactive_anon 536576 [ 411.925809][T16496] active_anon 331776 [ 411.929726][T16496] inactive_file 0 [ 411.933440][T16496] active_file 0 [ 411.936956][T16496] unevictable 0 [ 411.940504][T16496] hierarchical_memory_limit 314572800 [ 411.945893][T16496] hierarchical_memsw_limit 9223372036854771712 [ 411.952067][T16496] total_cache 131072 [ 411.956013][T16496] total_rss 737280 [ 411.959744][T16496] total_shmem 131072 [ 411.963638][T16496] total_mapped_file 0 [ 411.967630][T16496] total_dirty 0 [ 411.971180][T16496] total_writeback 0 [ 411.974988][T16496] total_workingset_refault_anon 1949 [ 411.980306][T16496] total_workingset_refault_file 3077 [ 411.985751][T16496] total_swap 712704 [ 411.989641][T16496] total_swapcached 0 [ 411.993537][T16496] total_pgpgin 716534 [ 411.997582][T16496] total_pgpgout 716322 [ 412.001747][T16496] total_pgfault 488687 [ 412.005841][T16496] total_pgmajfault 337 [ 412.009916][T16496] total_inactive_anon 536576 [ 412.014548][T16496] total_active_anon 331776 [ 412.018993][T16496] total_inactive_file 0 [ 412.023150][T16496] total_active_file 0 [ 412.027195][T16496] total_unevictable 0 [ 412.031190][T16496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4657,pid=16495,uid=0 [ 412.046482][T16496] Memory cgroup out of memory: Killed process 16495 (syz.4.4657) total-vm:95564kB, anon-rss:916kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 412.210827][T16532] loop0: detected capacity change from 0 to 512 [ 412.238082][T16532] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 412.275931][T16532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 412.284120][T16532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 412.294814][T16532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4667: bg 0: block 361: padding at end of block bitmap is not set [ 412.310706][T16532] EXT4-fs (loop0): Remounting filesystem read-only [ 412.317566][T16532] EXT4-fs (loop0): 1 truncate cleaned up [ 412.323612][T16532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 412.335838][T16532] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 412.343957][T16532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 412.361190][T16538] loop2: detected capacity change from 0 to 2048 [ 412.398459][T16538] EXT4-fs: Ignoring removed bh option [ 412.410099][T16532] loop0: detected capacity change from 0 to 8192 [ 412.438511][T16538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.446641][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4670'. [ 412.629204][T16555] loop0: detected capacity change from 0 to 256 [ 412.711080][T16538] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 412.741528][ T3403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 412.754279][ T3403] EXT4-fs (loop2): This should not happen!! Data will be lost [ 412.754279][ T3403] [ 412.764129][ T3403] EXT4-fs (loop2): Total free blocks count 0 [ 412.770151][ T3403] EXT4-fs (loop2): Free/Dirty block details [ 412.776167][ T3403] EXT4-fs (loop2): free_blocks=2415919104 [ 412.781908][ T3403] EXT4-fs (loop2): dirty_blocks=6096 [ 412.787226][ T3403] EXT4-fs (loop2): Block reservation details [ 412.793213][ T3403] EXT4-fs (loop2): i_reserved_data_blocks=381 [ 412.920967][ T359] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2048 with max blocks 2048 with error 28 [ 413.158300][T16555] syz.0.4676 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 413.172803][T16555] CPU: 0 UID: 0 PID: 16555 Comm: syz.0.4676 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 413.183241][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 413.193387][T16555] Call Trace: [ 413.196672][T16555] [ 413.199603][T16555] dump_stack_lvl+0xf2/0x150 [ 413.204314][T16555] dump_stack+0x15/0x1a [ 413.208496][T16555] dump_header+0x83/0x2d0 [ 413.212850][T16555] oom_kill_process+0x341/0x4c0 [ 413.217744][T16555] out_of_memory+0x9af/0xbe0 [ 413.222343][T16555] ? css_next_descendant_pre+0x11c/0x140 [ 413.228021][T16555] mem_cgroup_out_of_memory+0x13e/0x190 [ 413.233758][T16555] try_charge_memcg+0x508/0x7f0 [ 413.238750][T16555] obj_cgroup_charge_pages+0xbd/0x1a0 [ 413.244167][T16555] __memcg_kmem_charge_page+0x9d/0x170 [ 413.249637][T16555] __alloc_pages_noprof+0x1bc/0x340 [ 413.254946][T16555] alloc_pages_mpol_noprof+0xb8/0x260 [ 413.260349][T16555] alloc_pages_noprof+0xe1/0x100 [ 413.265336][T16555] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 413.271171][T16555] __kvmalloc_node_noprof+0x121/0x170 [ 413.276615][T16555] ? ip_set_alloc+0x1f/0x30 [ 413.281240][T16555] ip_set_alloc+0x1f/0x30 [ 413.285627][T16555] hash_netiface_create+0x273/0x730 [ 413.290875][T16555] ? __nla_parse+0x40/0x60 [ 413.295312][T16555] ? __pfx_hash_netiface_create+0x10/0x10 [ 413.301093][T16555] ip_set_create+0x359/0x8a0 [ 413.305817][T16555] ? strnstr+0xe1/0x100 [ 413.310035][T16555] ? __nla_parse+0x40/0x60 [ 413.314481][T16555] nfnetlink_rcv_msg+0x4a9/0x570 [ 413.319477][T16555] netlink_rcv_skb+0x12c/0x230 [ 413.324267][T16555] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 413.329808][T16555] nfnetlink_rcv+0x16c/0x15d0 [ 413.334501][T16555] ? kmem_cache_free+0xdc/0x2d0 [ 413.339388][T16555] ? nlmon_xmit+0x51/0x60 [ 413.343745][T16555] ? __kfree_skb+0x102/0x150 [ 413.348397][T16555] ? consume_skb+0x49/0x160 [ 413.352947][T16555] ? nlmon_xmit+0x51/0x60 [ 413.357376][T16555] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 413.362717][T16555] ? __dev_queue_xmit+0xb6e/0x2090 [ 413.367842][T16555] ? ref_tracker_free+0x3a5/0x410 [ 413.372937][T16555] ? __dev_queue_xmit+0x186/0x2090 [ 413.378094][T16555] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 413.383604][T16555] netlink_unicast+0x599/0x670 [ 413.388387][T16555] netlink_sendmsg+0x5cc/0x6e0 [ 413.393241][T16555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.398534][T16555] __sock_sendmsg+0x140/0x180 [ 413.403295][T16555] ____sys_sendmsg+0x312/0x410 [ 413.408156][T16555] __sys_sendmsg+0x19d/0x230 [ 413.412941][T16555] __x64_sys_sendmsg+0x46/0x50 [ 413.417798][T16555] x64_sys_call+0x2734/0x2dc0 [ 413.422484][T16555] do_syscall_64+0xc9/0x1c0 [ 413.427081][T16555] ? clear_bhb_loop+0x55/0xb0 [ 413.431835][T16555] ? clear_bhb_loop+0x55/0xb0 [ 413.436619][T16555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.442543][T16555] RIP: 0033:0x7f2beeca5d29 [ 413.447048][T16555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.466686][T16555] RSP: 002b:00007f2bed317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.475273][T16555] RAX: ffffffffffffffda RBX: 00007f2beee95fa0 RCX: 00007f2beeca5d29 [ 413.483353][T16555] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 413.491376][T16555] RBP: 00007f2beed21b08 R08: 0000000000000000 R09: 0000000000000000 [ 413.499421][T16555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.507450][T16555] R13: 0000000000000000 R14: 00007f2beee95fa0 R15: 00007ffddb8444d8 [ 413.515481][T16555] [ 413.519117][T16555] memory: usage 307200kB, limit 307200kB, failcnt 4698 [ 413.526601][T16555] memory+swap: usage 313960kB, limit 9007199254740988kB, failcnt 0 [ 413.535019][T16555] kmem: usage 231176kB, limit 9007199254740988kB, failcnt 0 [ 413.542635][T16555] Memory cgroup stats for /syz0: [ 413.542919][T16555] cache 76734464 [ 413.551705][T16555] rss 868352 [ 413.554917][T16555] shmem 76734464 [ 413.558713][T16555] mapped_file 0 [ 413.562258][T16555] dirty 0 [ 413.565239][T16555] writeback 0 [ 413.568777][T16555] workingset_refault_anon 3934 [ 413.573555][T16555] workingset_refault_file 9388 [ 413.578686][T16555] swap 6922240 [ 413.582098][T16555] swapcached 245760 [ 413.586199][T16555] pgpgin 873223 [ 413.589659][T16555] pgpgout 854217 [ 413.593285][T16555] pgfault 583022 [ 413.597120][T16555] pgmajfault 594 [ 413.600676][T16555] inactive_anon 77357056 [ 413.604927][T16555] active_anon 491520 [ 413.609110][T16555] inactive_file 0 [ 413.612752][T16555] active_file 0 [ 413.616309][T16555] unevictable 0 [ 413.619782][T16555] hierarchical_memory_limit 314572800 [ 413.625157][T16555] hierarchical_memsw_limit 9223372036854771712 [ 413.631337][T16555] total_cache 76734464 [ 413.635407][T16555] total_rss 868352 [ 413.639159][T16555] total_shmem 76734464 [ 413.643241][T16555] total_mapped_file 0 [ 413.647237][T16555] total_dirty 0 [ 413.650698][T16555] total_writeback 0 [ 413.654493][T16555] total_workingset_refault_anon 3934 [ 413.659839][T16555] total_workingset_refault_file 9388 [ 413.665193][T16555] total_swap 6922240 [ 413.669120][T16555] total_swapcached 245760 [ 413.673438][T16555] total_pgpgin 873223 [ 413.677423][T16555] total_pgpgout 854217 [ 413.681489][T16555] total_pgfault 583022 [ 413.685675][T16555] total_pgmajfault 594 [ 413.689753][T16555] total_inactive_anon 77357056 [ 413.694526][T16555] total_active_anon 491520 [ 413.699010][T16555] total_inactive_file 0 [ 413.703216][T16555] total_active_file 0 [ 413.707296][T16555] total_unevictable 0 [ 413.711394][T16555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4676,pid=16554,uid=0 [ 413.726180][T16555] Memory cgroup out of memory: Killed process 16554 (syz.0.4676) total-vm:95564kB, anon-rss:788kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 414.094214][T16574] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4682'. [ 414.120403][T16577] loop0: detected capacity change from 0 to 512 [ 414.146608][T16577] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 414.186545][T16581] ipt_REJECT: ECHOREPLY no longer supported. [ 414.224267][T16588] loop5: detected capacity change from 0 to 764 [ 414.233771][T16588] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 414.261065][T16588] syzkaller0: entered allmulticast mode [ 414.270104][T16588] syzkaller0: left allmulticast mode [ 414.295276][T16581] loop3: detected capacity change from 0 to 128 [ 414.313410][T16577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 414.321662][T16577] EXT4-fs (loop0): orphan cleanup on readonly fs [ 414.329302][T16577] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4681: bg 0: block 361: padding at end of block bitmap is not set [ 414.372069][T16577] EXT4-fs (loop0): Remounting filesystem read-only [ 414.394323][T16577] EXT4-fs (loop0): 1 truncate cleaned up [ 414.403664][T16577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 414.417737][T16577] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 414.434002][T16577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 414.494691][T16577] loop0: detected capacity change from 0 to 8192 [ 414.518458][T16603] loop5: detected capacity change from 0 to 2048 [ 414.526161][T16603] EXT4-fs: Ignoring removed bh option [ 414.541279][T16603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.882632][ T3403] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 414.897711][ T3403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 414.910289][ T3403] EXT4-fs (loop5): This should not happen!! Data will be lost [ 414.910289][ T3403] [ 414.920019][ T3403] EXT4-fs (loop5): Total free blocks count 0 [ 414.926239][ T3403] EXT4-fs (loop5): Free/Dirty block details [ 414.932138][ T3403] EXT4-fs (loop5): free_blocks=2415919104 [ 414.937881][ T3403] EXT4-fs (loop5): dirty_blocks=8208 [ 414.943204][ T3403] EXT4-fs (loop5): Block reservation details [ 414.949259][ T3403] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 415.027707][ T3403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 415.051612][T16613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4696'. [ 415.191729][T16623] loop2: detected capacity change from 0 to 2048 [ 415.204296][T16623] EXT4-fs: Ignoring removed bh option [ 415.220165][T16623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.311392][T16630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 415.357335][T16630] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 288 with error 28 [ 415.369942][T16630] EXT4-fs (loop2): This should not happen!! Data will be lost [ 415.369942][T16630] [ 415.379611][T16630] EXT4-fs (loop2): Total free blocks count 0 [ 415.385878][T16630] EXT4-fs (loop2): Free/Dirty block details [ 415.392007][T16630] EXT4-fs (loop2): free_blocks=2415919104 [ 415.394974][T16633] loop4: detected capacity change from 0 to 512 [ 415.397760][T16630] EXT4-fs (loop2): dirty_blocks=304 [ 415.408037][T16633] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 415.409291][T16630] EXT4-fs (loop2): Block reservation details [ 415.424843][T16630] EXT4-fs (loop2): i_reserved_data_blocks=19 [ 415.435243][T16633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 415.449651][T16633] EXT4-fs (loop4): orphan cleanup on readonly fs [ 415.467548][T16637] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4695'. [ 415.468591][T16633] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4703: bg 0: block 361: padding at end of block bitmap is not set [ 415.494962][T16633] EXT4-fs (loop4): Remounting filesystem read-only [ 415.508837][T16633] EXT4-fs (loop4): 1 truncate cleaned up [ 415.514905][T16633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 415.528241][ T3403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 415.528317][T16633] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 415.549565][T16633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 415.581828][T16643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4707'. [ 415.641112][T16646] ipt_REJECT: ECHOREPLY no longer supported. [ 415.650905][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 415.650933][ T29] audit: type=1326 audit(1737500143.663:31002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2beeca5d29 code=0x7ffc0000 [ 415.681089][ T29] audit: type=1326 audit(1737500143.663:31003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f2beeca5d29 code=0x7ffc0000 [ 415.704809][ T29] audit: type=1326 audit(1737500143.663:31004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2beeca5d29 code=0x7ffc0000 [ 415.728942][ T29] audit: type=1326 audit(1737500143.663:31005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2beeca5d29 code=0x7ffc0000 [ 415.733784][T16650] loop2: detected capacity change from 0 to 128 [ 415.752624][ T29] audit: type=1326 audit(1737500143.663:31006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2beeca5d29 code=0x7ffc0000 [ 415.773185][T16633] loop4: detected capacity change from 0 to 8192 [ 415.782600][ T29] audit: type=1326 audit(1737500143.663:31007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2beeca5d29 code=0x7ffc0000 [ 415.884877][T16654] loop4: detected capacity change from 0 to 512 [ 415.892474][T16654] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 415.903658][T16654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 415.912037][T16654] EXT4-fs (loop4): orphan cleanup on readonly fs [ 415.919398][T16654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4709: bg 0: block 361: padding at end of block bitmap is not set [ 415.933930][T16654] EXT4-fs (loop4): Remounting filesystem read-only [ 415.941016][T16654] EXT4-fs (loop4): 1 truncate cleaned up [ 415.947259][T16654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 415.959323][T16654] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 415.966501][T16654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 416.013579][T16654] loop4: detected capacity change from 0 to 8192 [ 416.116580][ T29] audit: type=1400 audit(1737500144.133:31008): avc: denied { connect } for pid=16660 comm="syz.4.4712" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.140263][ T29] audit: type=1400 audit(1737500144.153:31009): avc: denied { write } for pid=16660 comm="syz.4.4712" path="socket:[50044]" dev="sockfs" ino=50044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.164162][ T29] audit: type=1400 audit(1737500144.153:31010): avc: denied { read } for pid=16660 comm="syz.4.4712" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.343320][ T29] audit: type=1326 audit(1737500144.353:31011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.3.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126825d29 code=0x7ffc0000 [ 416.423567][T16673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4715'. [ 416.494721][T16675] loop3: detected capacity change from 0 to 2048 [ 416.503093][T16675] EXT4-fs: Ignoring removed bh option [ 416.512840][T16679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4718'. [ 416.524768][T16675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.550049][T16684] loop0: detected capacity change from 0 to 512 [ 416.569778][T16684] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 416.586151][T16684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 416.589992][T16687] loop2: detected capacity change from 0 to 512 [ 416.601950][T16684] EXT4-fs (loop0): orphan cleanup on readonly fs [ 416.603611][T16689] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 416.623611][T16689] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 992 with error 28 [ 416.623789][T16687] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 416.636133][T16689] EXT4-fs (loop3): This should not happen!! Data will be lost [ 416.636133][T16689] [ 416.646705][T16684] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4719: bg 0: block 361: padding at end of block bitmap is not set [ 416.656033][T16689] EXT4-fs (loop3): Total free blocks count 0 [ 416.671341][T16684] EXT4-fs (loop0): Remounting filesystem read-only [ 416.676880][T16689] EXT4-fs (loop3): Free/Dirty block details [ 416.688909][T16684] EXT4-fs (loop0): 1 truncate cleaned up [ 416.689247][T16689] EXT4-fs (loop3): free_blocks=2415919104 [ 416.699377][T16684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 416.700614][T16689] EXT4-fs (loop3): dirty_blocks=1008 [ 416.713205][T16684] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 416.717793][T16689] EXT4-fs (loop3): Block reservation details [ 416.726487][T16684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 416.730292][T16689] EXT4-fs (loop3): i_reserved_data_blocks=63 [ 416.758223][T16687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 416.776984][T16687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 416.784015][T16687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4720: bg 0: block 361: padding at end of block bitmap is not set [ 416.804780][T16687] EXT4-fs (loop2): Remounting filesystem read-only [ 416.816469][T16687] EXT4-fs (loop2): 1 truncate cleaned up [ 416.822671][T16687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 416.824897][T16684] loop0: detected capacity change from 0 to 8192 [ 416.836105][T16687] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 416.849094][T16687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 416.864498][ T359] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 416.927595][T16687] loop2: detected capacity change from 0 to 8192 [ 417.014607][T16704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4726'. [ 417.090420][T16710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4729'. [ 417.124547][T16712] ipt_REJECT: ECHOREPLY no longer supported. [ 417.141165][T16715] loop2: detected capacity change from 0 to 2048 [ 417.148705][T16715] EXT4-fs: Ignoring removed bh option [ 417.157505][T16715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.188517][T16719] loop4: detected capacity change from 0 to 128 [ 417.225075][T16721] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 417.240422][T16721] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1472 with error 28 [ 417.253206][T16721] EXT4-fs (loop2): This should not happen!! Data will be lost [ 417.253206][T16721] [ 417.262900][T16721] EXT4-fs (loop2): Total free blocks count 0 [ 417.268976][T16721] EXT4-fs (loop2): Free/Dirty block details [ 417.274893][T16721] EXT4-fs (loop2): free_blocks=2415919104 [ 417.280650][T16721] EXT4-fs (loop2): dirty_blocks=1488 [ 417.286059][T16721] EXT4-fs (loop2): Block reservation details [ 417.292090][T16721] EXT4-fs (loop2): i_reserved_data_blocks=93 [ 417.353304][T16723] loop5: detected capacity change from 0 to 512 [ 417.360909][T16723] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 417.373661][T16723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 417.383889][T16723] EXT4-fs (loop5): orphan cleanup on readonly fs [ 417.391751][T16723] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4732: bg 0: block 361: padding at end of block bitmap is not set [ 417.392366][ T3403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 417.408219][T16723] EXT4-fs (loop5): Remounting filesystem read-only [ 417.426585][T16723] EXT4-fs (loop5): 1 truncate cleaned up [ 417.432770][T16723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 417.445568][T16723] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 417.452848][T16723] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 417.494128][T16726] netlink: 'syz.2.4733': attribute type 12 has an invalid length. [ 417.502115][T16726] netlink: 'syz.2.4733': attribute type 29 has an invalid length. [ 417.509969][T16726] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4733'. [ 417.519144][T16726] netlink: 'syz.2.4733': attribute type 1 has an invalid length. [ 417.526900][T16726] netlink: 'syz.2.4733': attribute type 2 has an invalid length. [ 417.533086][T16723] loop5: detected capacity change from 0 to 8192 [ 417.534642][T16726] netlink: 39 bytes leftover after parsing attributes in process `syz.2.4733'. [ 417.581768][T16728] loop2: detected capacity change from 0 to 256 [ 417.638875][T16730] No such timeout policy "syz0" [ 417.881416][T16738] loop3: detected capacity change from 0 to 2048 [ 417.889717][T16738] EXT4-fs: Ignoring removed bh option [ 417.913231][T16738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.960828][T16742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4739'. [ 417.978062][T11911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.119263][T16747] netlink: 'syz.0.4742': attribute type 12 has an invalid length. [ 418.127473][T16747] netlink: 'syz.0.4742': attribute type 29 has an invalid length. [ 418.129802][T16750] loop3: detected capacity change from 0 to 256 [ 418.135551][T16747] netlink: 'syz.0.4742': attribute type 1 has an invalid length. [ 418.149894][T16747] netlink: 'syz.0.4742': attribute type 2 has an invalid length. [ 418.163361][T16752] loop4: detected capacity change from 0 to 128 [ 418.207372][T16752] syz.4.4744: attempt to access beyond end of device [ 418.207372][T16752] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 418.258682][T16755] loop0: detected capacity change from 0 to 512 [ 418.277707][T16755] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 418.299382][T16752] syz.4.4744: attempt to access beyond end of device [ 418.299382][T16752] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 418.314598][T16752] syz.4.4744: attempt to access beyond end of device [ 418.314598][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.314850][T16755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 418.328014][T16752] syz.4.4744: attempt to access beyond end of device [ 418.328014][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.340124][T16728] syz.2.4734 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 418.348979][T16752] syz.4.4744: attempt to access beyond end of device [ 418.348979][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.362958][T16728] CPU: 0 UID: 0 PID: 16728 Comm: syz.2.4734 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 418.376829][T16752] syz.4.4744: attempt to access beyond end of device [ 418.376829][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.386756][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 418.386776][T16728] Call Trace: [ 418.386786][T16728] [ 418.386796][T16728] dump_stack_lvl+0xf2/0x150 [ 418.400057][T16752] syz.4.4744: attempt to access beyond end of device [ 418.400057][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.409995][T16728] dump_stack+0x15/0x1a [ 418.413380][T16752] syz.4.4744: attempt to access beyond end of device [ 418.413380][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.416229][T16728] dump_header+0x83/0x2d0 [ 418.420864][T16752] syz.4.4744: attempt to access beyond end of device [ 418.420864][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.433895][T16728] oom_kill_process+0x341/0x4c0 [ 418.433949][T16728] out_of_memory+0x9af/0xbe0 [ 418.433977][T16728] ? css_next_descendant_pre+0x11c/0x140 [ 418.438349][T16752] syz.4.4744: attempt to access beyond end of device [ 418.438349][T16752] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.451205][T16728] mem_cgroup_out_of_memory+0x13e/0x190 [ 418.502604][T16728] try_charge_memcg+0x508/0x7f0 [ 418.507514][T16728] obj_cgroup_charge_pages+0xbd/0x1a0 [ 418.512952][T16728] __memcg_kmem_charge_page+0x9d/0x170 [ 418.518506][T16728] __alloc_pages_noprof+0x1bc/0x340 [ 418.523748][T16728] alloc_pages_mpol_noprof+0xb8/0x260 [ 418.528815][T16755] EXT4-fs (loop0): orphan cleanup on readonly fs [ 418.529149][T16728] alloc_pages_noprof+0xe1/0x100 [ 418.540383][T16728] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 418.540450][T16728] __kvmalloc_node_noprof+0x121/0x170 [ 418.551694][T16728] ? ip_set_alloc+0x1f/0x30 [ 418.556276][T16728] ip_set_alloc+0x1f/0x30 [ 418.558433][T16755] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4745: bg 0: block 361: padding at end of block bitmap is not set [ 418.560702][T16728] hash_netiface_create+0x273/0x730 [ 418.580199][T16728] ? __nla_parse+0x40/0x60 [ 418.584675][T16728] ? __pfx_hash_netiface_create+0x10/0x10 [ 418.590467][T16728] ip_set_create+0x359/0x8a0 [ 418.595086][T16728] ? strnstr+0xe1/0x100 [ 418.599327][T16728] ? __nla_parse+0x40/0x60 [ 418.603782][T16728] nfnetlink_rcv_msg+0x4a9/0x570 [ 418.608834][T16728] netlink_rcv_skb+0x12c/0x230 [ 418.613626][T16728] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 418.619195][T16728] nfnetlink_rcv+0x16c/0x15d0 [ 418.623931][T16728] ? kmem_cache_free+0xdc/0x2d0 [ 418.628888][T16728] ? nlmon_xmit+0x51/0x60 [ 418.633258][T16728] ? __kfree_skb+0x102/0x150 [ 418.637951][T16728] ? consume_skb+0x49/0x160 [ 418.642479][T16728] ? nlmon_xmit+0x51/0x60 [ 418.646857][T16728] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 418.652196][T16728] ? __dev_queue_xmit+0xb6e/0x2090 [ 418.657334][T16728] ? ref_tracker_free+0x3a5/0x410 [ 418.662465][T16728] ? __dev_queue_xmit+0x186/0x2090 [ 418.667631][T16728] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 418.673123][T16728] netlink_unicast+0x599/0x670 [ 418.677942][T16728] netlink_sendmsg+0x5cc/0x6e0 [ 418.682735][T16728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.688119][T16728] __sock_sendmsg+0x140/0x180 [ 418.692830][T16728] ____sys_sendmsg+0x312/0x410 [ 418.697622][T16728] __sys_sendmsg+0x19d/0x230 [ 418.702334][T16728] __x64_sys_sendmsg+0x46/0x50 [ 418.707187][T16728] x64_sys_call+0x2734/0x2dc0 [ 418.711902][T16728] do_syscall_64+0xc9/0x1c0 [ 418.716484][T16728] ? clear_bhb_loop+0x55/0xb0 [ 418.721259][T16728] ? clear_bhb_loop+0x55/0xb0 [ 418.725997][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.731995][T16728] RIP: 0033:0x7f3e80495d29 [ 418.736457][T16728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.756088][T16728] RSP: 002b:00007f3e7eb07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.764553][T16728] RAX: ffffffffffffffda RBX: 00007f3e80685fa0 RCX: 00007f3e80495d29 [ 418.772551][T16728] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 418.780541][T16728] RBP: 00007f3e80511b08 R08: 0000000000000000 R09: 0000000000000000 [ 418.788577][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.796583][T16728] R13: 0000000000000000 R14: 00007f3e80685fa0 R15: 00007ffc70694fa8 [ 418.804685][T16728] [ 418.807946][T16728] memory: usage 307200kB, limit 307200kB, failcnt 1024 [ 418.814804][T16728] memory+swap: usage 370388kB, limit 9007199254740988kB, failcnt 0 [ 418.823040][T16728] kmem: usage 286392kB, limit 9007199254740988kB, failcnt 0 [ 418.830360][T16728] Memory cgroup stats for /syz2: [ 418.867186][T16755] EXT4-fs (loop0): Remounting filesystem read-only [ 418.883496][T16728] cache 20779008 [ 418.887317][T16728] rss 528384 [ 418.890536][T16728] shmem 20779008 [ 418.894198][T16728] mapped_file 0 [ 418.897704][T16728] dirty 0 [ 418.900819][T16728] writeback 0 [ 418.904106][T16728] workingset_refault_anon 3 [ 418.908628][T16728] workingset_refault_file 7471 [ 418.913417][T16728] swap 64704512 [ 418.916942][T16728] swapcached 0 [ 418.920418][T16728] pgpgin 727901 [ 418.923876][T16728] pgpgout 722699 [ 418.927513][T16728] pgfault 524018 [ 418.931152][T16728] pgmajfault 45 [ 418.934631][T16728] inactive_anon 139264 [ 418.938734][T16728] active_anon 21168128 [ 418.942818][T16728] inactive_file 0 [ 418.946537][T16728] active_file 0 [ 418.950003][T16728] unevictable 0 [ 418.953465][T16728] hierarchical_memory_limit 314572800 [ 418.959018][T16728] hierarchical_memsw_limit 9223372036854771712 [ 418.965194][T16728] total_cache 20779008 [ 418.969328][T16728] total_rss 528384 [ 418.973055][T16728] total_shmem 20779008 [ 418.977158][T16728] total_mapped_file 0 [ 418.981192][T16728] total_dirty 0 [ 418.984663][T16728] total_writeback 0 [ 418.988524][T16728] total_workingset_refault_anon 3 [ 418.993598][T16728] total_workingset_refault_file 7471 [ 418.999011][T16728] total_swap 64704512 [ 419.003005][T16728] total_swapcached 0 [ 419.006956][T16728] total_pgpgin 727901 [ 419.010959][T16728] total_pgpgout 722699 [ 419.015170][T16728] total_pgfault 524018 [ 419.019276][T16728] total_pgmajfault 45 [ 419.019356][T16755] EXT4-fs (loop0): 1 truncate cleaned up [ 419.023248][T16728] total_inactive_anon 139264 [ 419.023259][T16728] total_active_anon 21168128 [ 419.023270][T16728] total_inactive_file 0 [ 419.029475][T16755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 419.033572][T16728] total_active_file 0 [ 419.033584][T16728] total_unevictable 0 [ 419.038239][T16755] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 419.042328][T16728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 419.061062][T16755] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 419.062205][T16728] ,cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4734,pid=16727,uid=0 [ 419.094876][T16728] Memory cgroup out of memory: Killed process 16727 (syz.2.4734) total-vm:93516kB, anon-rss:916kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 419.113097][T16760] No such timeout policy "syz0" [ 419.202796][T16755] loop0: detected capacity change from 0 to 8192 [ 419.350541][T16770] loop0: detected capacity change from 0 to 2048 [ 419.357659][T16770] EXT4-fs: Ignoring removed bh option [ 419.379594][T16770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.414056][T10793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.474599][T16777] loop0: detected capacity change from 0 to 764 [ 419.498961][T16777] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 419.519790][T16777] syzkaller0: entered allmulticast mode [ 419.527543][T16777] syzkaller0: left allmulticast mode [ 419.537758][T16785] loop2: detected capacity change from 0 to 512 [ 419.564014][T16785] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 419.588030][T16787] loop0: detected capacity change from 0 to 512 [ 419.594536][T16785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 419.602700][T16787] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 419.602722][T16787] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 419.620479][T16791] No such timeout policy "syz0" [ 419.627034][T16785] EXT4-fs (loop2): orphan cleanup on readonly fs [ 419.633860][T16787] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 419.644050][T16785] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4756: bg 0: block 361: padding at end of block bitmap is not set [ 419.660673][T16787] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 419.661178][T16785] EXT4-fs (loop2): Remounting filesystem read-only [ 419.674500][T16787] System zones: 0-2, 18-18, 34-34 [ 419.675776][T16785] EXT4-fs (loop2): 1 truncate cleaned up [ 419.686641][T16785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 419.698861][T16785] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 419.706370][T16785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 419.717140][T16787] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 419.741078][T16787] EXT4-fs (loop0): 1 truncate cleaned up [ 419.747568][T16787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.794389][T16798] loop3: detected capacity change from 0 to 512 [ 419.803433][T16798] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 419.826370][T16798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 419.834499][T16798] EXT4-fs (loop3): orphan cleanup on readonly fs [ 419.835434][T10793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.851169][T16798] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4761: bg 0: block 361: padding at end of block bitmap is not set [ 419.857511][T16785] loop2: detected capacity change from 0 to 8192 [ 419.873317][T16798] EXT4-fs (loop3): Remounting filesystem read-only [ 419.883684][T16798] EXT4-fs (loop3): 1 truncate cleaned up [ 419.890761][T16801] loop0: detected capacity change from 0 to 2048 [ 419.893446][T16798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 419.898191][T16801] EXT4-fs: Ignoring removed bh option [ 419.913115][T16798] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 419.923599][T16798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 419.958936][T16801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.968333][T16805] loop2: detected capacity change from 0 to 256 [ 420.011176][T16798] loop3: detected capacity change from 0 to 8192 [ 420.011945][T10793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.191192][T16814] loop5: detected capacity change from 0 to 512 [ 420.222732][T16814] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 420.374554][T16831] loop0: detected capacity change from 0 to 256 [ 420.411404][T16835] loop3: detected capacity change from 0 to 512 [ 420.428469][T16835] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 420.471884][T16835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 420.482181][T16835] EXT4-fs (loop3): orphan cleanup on readonly fs [ 420.499741][T16835] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4776: bg 0: block 361: padding at end of block bitmap is not set [ 420.529269][T16835] EXT4-fs (loop3): Remounting filesystem read-only [ 420.544877][T16835] EXT4-fs (loop3): 1 truncate cleaned up [ 420.559313][T16835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 420.575744][T16835] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 420.583021][T16835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 420.680563][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 420.680579][ T29] audit: type=1326 audit(1737500148.693:31355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 420.690926][T16835] loop3: detected capacity change from 0 to 8192 [ 420.723297][ T29] audit: type=1326 audit(1737500148.693:31356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 420.747252][ T29] audit: type=1326 audit(1737500148.693:31357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 420.770887][ T29] audit: type=1326 audit(1737500148.693:31358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 420.794540][ T29] audit: type=1400 audit(1737500148.693:31359): avc: denied { create } for pid=16839 comm="syz.5.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 420.814244][ T29] audit: type=1326 audit(1737500148.693:31360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 420.837957][ T29] audit: type=1326 audit(1737500148.693:31361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.5.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 420.861651][ T29] audit: type=1400 audit(1737500148.693:31362): avc: denied { connect } for pid=16839 comm="syz.5.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 420.881679][ T29] audit: type=1400 audit(1737500148.693:31363): avc: denied { name_connect } for pid=16839 comm="syz.5.4777" dest=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 420.903229][ T29] audit: type=1400 audit(1737500148.763:31364): avc: denied { setopt } for pid=16839 comm="syz.5.4777" laddr=fe80::e lport=53920 faddr=fe80::bb fport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 421.041043][T16846] loop4: detected capacity change from 0 to 764 [ 421.050133][T16846] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 421.129602][T16849] __nla_validate_parse: 4 callbacks suppressed [ 421.129655][T16849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4780'. [ 421.147102][T16846] syzkaller0: entered allmulticast mode [ 421.157099][T16846] syzkaller0: left allmulticast mode [ 421.233608][T16853] loop2: detected capacity change from 0 to 512 [ 421.242331][T16853] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 421.621462][T16876] loop5: detected capacity change from 0 to 764 [ 421.630961][T16876] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 421.660289][T16878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4792'. [ 421.779669][T16876] syzkaller0: entered allmulticast mode [ 421.810537][T16876] syzkaller0: left allmulticast mode [ 422.032629][T16885] loop0: detected capacity change from 0 to 512 [ 422.060798][T16885] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 422.108147][T16892] loop5: detected capacity change from 0 to 256 [ 422.220145][T16897] loop3: detected capacity change from 0 to 512 [ 422.252395][T16897] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 422.438730][T16904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4803'. [ 423.037607][T16920] loop3: detected capacity change from 0 to 764 [ 423.086656][T16920] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 423.121831][T16920] syzkaller0: entered allmulticast mode [ 423.134571][T16920] syzkaller0: left allmulticast mode [ 423.207531][T16924] loop3: detected capacity change from 0 to 512 [ 423.215240][T16924] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 423.298943][T16930] loop5: detected capacity change from 0 to 256 [ 423.734491][T16942] loop4: detected capacity change from 0 to 256 [ 423.842005][T16942] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 423.883047][T16944] loop0: detected capacity change from 0 to 512 [ 423.902546][T16944] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 423.920719][T16944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 423.933659][T16944] EXT4-fs (loop0): orphan cleanup on readonly fs [ 423.942406][T16944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4818: bg 0: block 361: padding at end of block bitmap is not set [ 423.959610][T16944] EXT4-fs (loop0): Remounting filesystem read-only [ 423.966633][T16944] EXT4-fs (loop0): 1 truncate cleaned up [ 423.972917][T16944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 423.986802][T16944] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 423.993811][T16944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 424.085500][T16944] loop0: detected capacity change from 0 to 8192 [ 424.280696][T16952] loop3: detected capacity change from 0 to 512 [ 424.292122][T16952] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 424.307975][T16954] loop0: detected capacity change from 0 to 764 [ 424.341459][T16954] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 424.373911][T16956] loop3: detected capacity change from 0 to 256 [ 424.378741][T16954] syzkaller0: entered allmulticast mode [ 424.387794][T16954] syzkaller0: left allmulticast mode [ 424.980172][T16956] syz.3.4822 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 424.994406][T16956] CPU: 0 UID: 0 PID: 16956 Comm: syz.3.4822 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 425.004905][T16956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 425.015065][T16956] Call Trace: [ 425.018384][T16956] [ 425.021380][T16956] dump_stack_lvl+0xf2/0x150 [ 425.026034][T16956] dump_stack+0x15/0x1a [ 425.030220][T16956] dump_header+0x83/0x2d0 [ 425.034565][T16956] oom_kill_process+0x341/0x4c0 [ 425.039450][T16956] out_of_memory+0x9af/0xbe0 [ 425.044172][T16956] ? css_next_descendant_pre+0x11c/0x140 [ 425.049921][T16956] mem_cgroup_out_of_memory+0x13e/0x190 [ 425.055546][T16956] try_charge_memcg+0x508/0x7f0 [ 425.060424][T16956] obj_cgroup_charge_pages+0xbd/0x1a0 [ 425.065822][T16956] __memcg_kmem_charge_page+0x9d/0x170 [ 425.071346][T16956] __alloc_pages_noprof+0x1bc/0x340 [ 425.076635][T16956] alloc_pages_mpol_noprof+0xb8/0x260 [ 425.082034][T16956] alloc_pages_noprof+0xe1/0x100 [ 425.087017][T16956] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 425.092866][T16956] __kvmalloc_node_noprof+0x121/0x170 [ 425.098391][T16956] ? ip_set_alloc+0x1f/0x30 [ 425.102914][T16956] ip_set_alloc+0x1f/0x30 [ 425.107267][T16956] hash_netiface_create+0x273/0x730 [ 425.112583][T16956] ? __nla_parse+0x40/0x60 [ 425.117151][T16956] ? __pfx_hash_netiface_create+0x10/0x10 [ 425.122898][T16956] ip_set_create+0x359/0x8a0 [ 425.127595][T16956] nfnetlink_rcv_msg+0x4a9/0x570 [ 425.132579][T16956] netlink_rcv_skb+0x12c/0x230 [ 425.137482][T16956] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 425.142976][T16956] nfnetlink_rcv+0x16c/0x15d0 [ 425.147741][T16956] ? kmem_cache_free+0xdc/0x2d0 [ 425.152794][T16956] ? nlmon_xmit+0x51/0x60 [ 425.157162][T16956] ? __kfree_skb+0x102/0x150 [ 425.161856][T16956] ? consume_skb+0x49/0x160 [ 425.166384][T16956] ? nlmon_xmit+0x51/0x60 [ 425.170778][T16956] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 425.176161][T16956] ? __dev_queue_xmit+0xb6e/0x2090 [ 425.181288][T16956] ? cmp_ex_search+0x56/0x70 [ 425.186018][T16956] ? ref_tracker_free+0x3a5/0x410 [ 425.191140][T16956] ? __dev_queue_xmit+0x186/0x2090 [ 425.196304][T16956] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 425.201804][T16956] netlink_unicast+0x599/0x670 [ 425.206605][T16956] netlink_sendmsg+0x5cc/0x6e0 [ 425.211409][T16956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.216733][T16956] __sock_sendmsg+0x140/0x180 [ 425.221530][T16956] ____sys_sendmsg+0x312/0x410 [ 425.226383][T16956] __sys_sendmsg+0x19d/0x230 [ 425.231082][T16956] __x64_sys_sendmsg+0x46/0x50 [ 425.235876][T16956] x64_sys_call+0x2734/0x2dc0 [ 425.240611][T16956] do_syscall_64+0xc9/0x1c0 [ 425.245321][T16956] ? clear_bhb_loop+0x55/0xb0 [ 425.250159][T16956] ? clear_bhb_loop+0x55/0xb0 [ 425.254894][T16956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.260816][T16956] RIP: 0033:0x7f3126825d29 [ 425.265228][T16956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.285004][T16956] RSP: 002b:00007f3124e91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.293671][T16956] RAX: ffffffffffffffda RBX: 00007f3126a15fa0 RCX: 00007f3126825d29 [ 425.301689][T16956] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 425.309754][T16956] RBP: 00007f31268a1b08 R08: 0000000000000000 R09: 0000000000000000 [ 425.317795][T16956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.325799][T16956] R13: 0000000000000000 R14: 00007f3126a15fa0 R15: 00007ffd16e8c988 [ 425.333882][T16956] [ 425.337271][T16956] memory: usage 307200kB, limit 307200kB, failcnt 1147 [ 425.344150][T16956] memory+swap: usage 352852kB, limit 9007199254740988kB, failcnt 0 [ 425.352802][T16956] kmem: usage 270236kB, limit 9007199254740988kB, failcnt 0 [ 425.360141][T16956] Memory cgroup stats for /syz3: [ 425.368277][T16956] cache 36564992 [ 425.376841][T16956] rss 1265664 [ 425.380153][T16956] shmem 36564992 [ 425.383703][T16956] mapped_file 0 [ 425.387202][T16956] dirty 0 [ 425.390138][T16956] writeback 0 [ 425.393489][T16956] workingset_refault_anon 107 [ 425.398232][T16956] workingset_refault_file 4417 [ 425.403000][T16956] swap 46747648 [ 425.406503][T16956] swapcached 16384 [ 425.410254][T16956] pgpgin 923334 [ 425.413737][T16956] pgpgout 914093 [ 425.417403][T16956] pgfault 580958 [ 425.420959][T16956] pgmajfault 123 [ 425.424507][T16956] inactive_anon 53248 [ 425.428568][T16956] active_anon 37793792 [ 425.432728][T16956] inactive_file 0 [ 425.436453][T16956] active_file 4096 [ 425.440189][T16956] unevictable 0 [ 425.443653][T16956] hierarchical_memory_limit 314572800 [ 425.449057][T16956] hierarchical_memsw_limit 9223372036854771712 [ 425.455498][T16956] total_cache 36564992 [ 425.459637][T16956] total_rss 1265664 [ 425.463449][T16956] total_shmem 36564992 [ 425.467543][T16956] total_mapped_file 0 [ 425.471606][T16956] total_dirty 0 [ 425.475070][T16956] total_writeback 0 [ 425.478925][T16956] total_workingset_refault_anon 107 [ 425.484190][T16956] total_workingset_refault_file 4417 [ 425.489551][T16956] total_swap 46747648 [ 425.493546][T16956] total_swapcached 16384 [ 425.497856][T16956] total_pgpgin 923334 [ 425.501854][T16956] total_pgpgout 914093 [ 425.505962][T16956] total_pgfault 580958 [ 425.510031][T16956] total_pgmajfault 123 [ 425.514147][T16956] total_inactive_anon 53248 [ 425.518745][T16956] total_active_anon 37793792 [ 425.523336][T16956] total_inactive_file 0 [ 425.527603][T16956] total_active_file 4096 [ 425.531852][T16956] total_unevictable 0 [ 425.535952][T16956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4822,pid=16955,uid=0 [ 425.550674][T16956] Memory cgroup out of memory: Killed process 16955 (syz.3.4822) total-vm:93516kB, anon-rss:916kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 425.645502][T16971] No such timeout policy "syz0" [ 426.057820][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 426.057838][ T29] audit: type=1400 audit(1737500154.063:31817): avc: denied { create } for pid=16975 comm="syz.0.4829" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 426.158900][ T29] audit: type=1400 audit(1737500154.173:31818): avc: denied { recv } for pid=3286 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.223 dest=44386 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 426.188111][ T29] audit: type=1400 audit(1737500154.173:31819): avc: denied { read write } for pid=11170 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.212855][ T29] audit: type=1400 audit(1737500154.173:31820): avc: denied { open } for pid=11170 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.225608][T16983] loop2: detected capacity change from 0 to 128 [ 426.237583][ T29] audit: type=1400 audit(1737500154.173:31821): avc: denied { ioctl } for pid=11170 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.260365][T16983] loop6: detected capacity change from 0 to 7 [ 426.269435][ T29] audit: type=1400 audit(1737500154.173:31822): avc: denied { unmount } for pid=11911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 426.282460][T16983] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.295665][ T29] audit: type=1400 audit(1737500154.173:31823): avc: denied { prog_load } for pid=16982 comm="syz.2.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.305283][T16983] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.323024][ T29] audit: type=1400 audit(1737500154.173:31824): avc: denied { bpf } for pid=16982 comm="syz.2.4831" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.323109][ T29] audit: type=1400 audit(1737500154.173:31825): avc: denied { perfmon } for pid=16982 comm="syz.2.4831" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.331202][T16983] loop6: unable to read partition table [ 426.337599][T16983] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 426.337599][T16983] ) failed (rc=-5) [ 426.352108][ T29] audit: type=1400 audit(1737500154.203:31826): avc: denied { prog_run } for pid=16982 comm="syz.2.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.419472][T16987] loop3: detected capacity change from 0 to 256 [ 426.428275][T16986] loop5: detected capacity change from 0 to 512 [ 426.449766][T16986] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 426.509047][T16992] loop5: detected capacity change from 0 to 256 [ 426.748148][T16996] loop0: detected capacity change from 0 to 128 [ 426.821001][T16996] bio_check_eod: 5247 callbacks suppressed [ 426.821018][T16996] syz.0.4837: attempt to access beyond end of device [ 426.821018][T16996] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 426.912883][T17003] syz.0.4837: attempt to access beyond end of device [ 426.912883][T17003] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 426.931821][T17003] syz.0.4837: attempt to access beyond end of device [ 426.931821][T17003] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 426.945866][T17003] syz.0.4837: attempt to access beyond end of device [ 426.945866][T17003] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 426.959601][T17003] syz.0.4837: attempt to access beyond end of device [ 426.959601][T17003] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 426.974262][T17003] syz.0.4837: attempt to access beyond end of device [ 426.974262][T17003] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 427.005082][T17003] syz.0.4837: attempt to access beyond end of device [ 427.005082][T17003] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 427.050609][T17007] loop4: detected capacity change from 0 to 2048 [ 427.075362][T17007] EXT4-fs: Ignoring removed bh option [ 427.179975][T17007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.203591][T17007] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 427.209727][T16987] syz.3.4833 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 427.232604][T16987] CPU: 0 UID: 0 PID: 16987 Comm: syz.3.4833 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 427.243045][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 427.253193][T16987] Call Trace: [ 427.256489][T16987] [ 427.259488][T16987] dump_stack_lvl+0xf2/0x150 [ 427.264218][T16987] dump_stack+0x15/0x1a [ 427.268489][T16987] dump_header+0x83/0x2d0 [ 427.272847][T16987] oom_kill_process+0x341/0x4c0 [ 427.277863][T16987] out_of_memory+0x9af/0xbe0 [ 427.282472][T16987] ? css_next_descendant_pre+0x11c/0x140 [ 427.288233][T16987] mem_cgroup_out_of_memory+0x13e/0x190 [ 427.293904][T16987] try_charge_memcg+0x508/0x7f0 [ 427.298839][T16987] obj_cgroup_charge_pages+0xbd/0x1a0 [ 427.304250][T16987] __memcg_kmem_charge_page+0x9d/0x170 [ 427.309793][T16987] __alloc_pages_noprof+0x1bc/0x340 [ 427.315052][T16987] alloc_pages_mpol_noprof+0xb8/0x260 [ 427.320485][T16987] alloc_pages_noprof+0xe1/0x100 [ 427.325445][T16987] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 427.331281][T16987] __kvmalloc_node_noprof+0x121/0x170 [ 427.336735][T16987] ? ip_set_alloc+0x1f/0x30 [ 427.341328][T16987] ip_set_alloc+0x1f/0x30 [ 427.345724][T16987] hash_netiface_create+0x273/0x730 [ 427.350941][T16987] ? __nla_parse+0x40/0x60 [ 427.355466][T16987] ? __pfx_hash_netiface_create+0x10/0x10 [ 427.361271][T16987] ip_set_create+0x359/0x8a0 [ 427.366033][T16987] ? strnstr+0xe1/0x100 [ 427.370222][T16987] ? __nla_parse+0x40/0x60 [ 427.374725][T16987] nfnetlink_rcv_msg+0x4a9/0x570 [ 427.379726][T16987] netlink_rcv_skb+0x12c/0x230 [ 427.384526][T16987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 427.390077][T16987] nfnetlink_rcv+0x16c/0x15d0 [ 427.394818][T16987] ? kmem_cache_free+0xdc/0x2d0 [ 427.399672][T16987] ? nlmon_xmit+0x51/0x60 [ 427.404024][T16987] ? __kfree_skb+0x102/0x150 [ 427.408616][T16987] ? consume_skb+0x49/0x160 [ 427.413159][T16987] ? nlmon_xmit+0x51/0x60 [ 427.417489][T16987] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 427.422804][T16987] ? __dev_queue_xmit+0xb6e/0x2090 [ 427.428071][T16987] ? ref_tracker_free+0x3a5/0x410 [ 427.433205][T16987] ? __dev_queue_xmit+0x186/0x2090 [ 427.438340][T16987] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 427.443863][T16987] netlink_unicast+0x599/0x670 [ 427.448730][T16987] netlink_sendmsg+0x5cc/0x6e0 [ 427.453527][T16987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.458849][T16987] __sock_sendmsg+0x140/0x180 [ 427.463574][T16987] ____sys_sendmsg+0x312/0x410 [ 427.468366][T16987] __sys_sendmsg+0x19d/0x230 [ 427.473044][T16987] __x64_sys_sendmsg+0x46/0x50 [ 427.477834][T16987] x64_sys_call+0x2734/0x2dc0 [ 427.482611][T16987] do_syscall_64+0xc9/0x1c0 [ 427.487155][T16987] ? clear_bhb_loop+0x55/0xb0 [ 427.491867][T16987] ? clear_bhb_loop+0x55/0xb0 [ 427.496586][T16987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.502495][T16987] RIP: 0033:0x7f3126825d29 [ 427.506910][T16987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.526706][T16987] RSP: 002b:00007f3124e91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.535120][T16987] RAX: ffffffffffffffda RBX: 00007f3126a15fa0 RCX: 00007f3126825d29 [ 427.543187][T16987] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 427.551177][T16987] RBP: 00007f31268a1b08 R08: 0000000000000000 R09: 0000000000000000 [ 427.559226][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.567216][T16987] R13: 0000000000000000 R14: 00007f3126a15fa0 R15: 00007ffd16e8c988 [ 427.575198][T16987] [ 427.578431][T16987] memory: usage 307200kB, limit 307200kB, failcnt 1274 [ 427.586249][T16987] memory+swap: usage 352852kB, limit 9007199254740988kB, failcnt 0 [ 427.594393][T16987] kmem: usage 270228kB, limit 9007199254740988kB, failcnt 0 [ 427.601855][T16987] Memory cgroup stats for /syz3: [ 427.603635][T12515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.606106][T16987] cache 36564992 [ 427.621323][T16987] rss 1269760 [ 427.624613][T16987] shmem 36564992 [ 427.628215][T16987] mapped_file 0 [ 427.631738][T16987] dirty 0 [ 427.634678][T16987] writeback 0 [ 427.638038][T16987] workingset_refault_anon 107 [ 427.642784][T16987] workingset_refault_file 4419 [ 427.647790][T16987] swap 46747648 [ 427.651266][T16987] swapcached 16384 [ 427.655000][T16987] pgpgin 923415 [ 427.658507][T16987] pgpgout 914173 [ 427.662064][T16987] pgfault 581094 [ 427.665702][T16987] pgmajfault 125 [ 427.669506][T16987] inactive_anon 37797888 [ 427.674098][T16987] active_anon 53248 [ 427.677963][T16987] inactive_file 4096 [ 427.681888][T16987] active_file 0 [ 427.685375][T17016] loop2: detected capacity change from 0 to 256 [ 427.691698][T16987] unevictable 0 [ 427.695176][T16987] hierarchical_memory_limit 314572800 [ 427.700591][T16987] hierarchical_memsw_limit 9223372036854771712 [ 427.706802][T16987] total_cache 36564992 [ 427.710893][T16987] total_rss 1269760 [ 427.714763][T16987] total_shmem 36564992 [ 427.718917][T16987] total_mapped_file 0 [ 427.722995][T16987] total_dirty 0 [ 427.726502][T16987] total_writeback 0 [ 427.730319][T16987] total_workingset_refault_anon 107 [ 427.735932][T16987] total_workingset_refault_file 4419 [ 427.741583][T16987] total_swap 46747648 [ 427.745581][T16987] total_swapcached 16384 [ 427.749881][T16987] total_pgpgin 923415 [ 427.753886][T16987] total_pgpgout 914173 [ 427.758001][T16987] total_pgfault 581094 [ 427.762099][T16987] total_pgmajfault 125 [ 427.766262][T16987] total_inactive_anon 37797888 [ 427.771046][T16987] total_active_anon 53248 [ 427.775472][T16987] total_inactive_file 4096 [ 427.779957][T16987] total_active_file 0 [ 427.783965][T16987] total_unevictable 0 [ 427.787990][T16987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4833,pid=16985,uid=0 [ 427.803204][T16987] Memory cgroup out of memory: Killed process 16985 (syz.3.4833) total-vm:93516kB, anon-rss:916kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 427.918428][T17021] loop0: detected capacity change from 0 to 512 [ 427.927778][T17021] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 428.392870][T17028] loop5: detected capacity change from 0 to 256 [ 428.423819][T17028] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 428.609685][T17039] loop3: detected capacity change from 0 to 256 [ 428.802425][T17052] loop4: detected capacity change from 0 to 512 [ 428.811634][T17052] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 428.828764][T17054] loop2: detected capacity change from 0 to 128 [ 428.900048][T17054] syz.2.4857: attempt to access beyond end of device [ 428.900048][T17054] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 428.994079][T17054] syz.2.4857: attempt to access beyond end of device [ 428.994079][T17054] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 429.017155][T17054] syz.2.4857: attempt to access beyond end of device [ 429.017155][T17054] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 429.074178][T17061] loop4: detected capacity change from 0 to 2048 [ 429.081195][T17061] ext4: Unknown parameter 'smackfsroot' [ 429.815240][T17075] loop0: detected capacity change from 0 to 256 [ 430.008780][T17080] loop3: detected capacity change from 0 to 256 [ 430.156441][T17084] loop4: detected capacity change from 0 to 2048 [ 430.163392][T17084] ext4: Unknown parameter 'smackfsroot' [ 430.294278][T17088] loop4: detected capacity change from 0 to 512 [ 430.305397][T17088] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 430.681486][T17075] syz.0.4864 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 430.695774][T17075] CPU: 1 UID: 0 PID: 17075 Comm: syz.0.4864 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 430.706231][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.716400][T17075] Call Trace: [ 430.719696][T17075] [ 430.722651][T17075] dump_stack_lvl+0xf2/0x150 [ 430.727335][T17075] dump_stack+0x15/0x1a [ 430.731539][T17075] dump_header+0x83/0x2d0 [ 430.735907][T17075] oom_kill_process+0x341/0x4c0 [ 430.740784][T17075] out_of_memory+0x9af/0xbe0 [ 430.745400][T17075] mem_cgroup_out_of_memory+0x13e/0x190 [ 430.751082][T17075] try_charge_memcg+0x508/0x7f0 [ 430.756057][T17075] obj_cgroup_charge_pages+0xbd/0x1a0 [ 430.761544][T17075] __memcg_kmem_charge_page+0x9d/0x170 [ 430.767155][T17075] __alloc_pages_noprof+0x1bc/0x340 [ 430.772396][T17075] alloc_pages_mpol_noprof+0xb8/0x260 [ 430.777806][T17075] alloc_pages_noprof+0xe1/0x100 [ 430.782835][T17075] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 430.788719][T17075] __kvmalloc_node_noprof+0x121/0x170 [ 430.794157][T17075] ? ip_set_alloc+0x1f/0x30 [ 430.798705][T17075] ip_set_alloc+0x1f/0x30 [ 430.803068][T17075] hash_netiface_create+0x273/0x730 [ 430.808325][T17075] ? __nla_parse+0x40/0x60 [ 430.812774][T17075] ? __pfx_hash_netiface_create+0x10/0x10 [ 430.818564][T17075] ip_set_create+0x359/0x8a0 [ 430.823160][T17075] ? __schedule+0x6fa/0x930 [ 430.827738][T17075] ? __pfx_ip_set_create+0x10/0x10 [ 430.832872][T17075] nfnetlink_rcv_msg+0x4a9/0x570 [ 430.837886][T17075] netlink_rcv_skb+0x12c/0x230 [ 430.842737][T17075] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 430.848242][T17075] nfnetlink_rcv+0x16c/0x15d0 [ 430.852980][T17075] ? kmem_cache_free+0xdc/0x2d0 [ 430.857904][T17075] ? nlmon_xmit+0x51/0x60 [ 430.862306][T17075] ? __kfree_skb+0x102/0x150 [ 430.866965][T17075] ? consume_skb+0x49/0x160 [ 430.871480][T17075] ? nlmon_xmit+0x51/0x60 [ 430.875826][T17075] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 430.881257][T17075] ? __dev_queue_xmit+0xb6e/0x2090 [ 430.886431][T17075] ? ref_tracker_free+0x3a5/0x410 [ 430.891510][T17075] ? __dev_queue_xmit+0x186/0x2090 [ 430.896644][T17075] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 430.902123][T17075] netlink_unicast+0x599/0x670 [ 430.906918][T17075] netlink_sendmsg+0x5cc/0x6e0 [ 430.911719][T17075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.917033][T17075] __sock_sendmsg+0x140/0x180 [ 430.921745][T17075] ____sys_sendmsg+0x312/0x410 [ 430.926665][T17075] __sys_sendmsg+0x19d/0x230 [ 430.931319][T17075] __x64_sys_sendmsg+0x46/0x50 [ 430.936104][T17075] x64_sys_call+0x2734/0x2dc0 [ 430.941008][T17075] do_syscall_64+0xc9/0x1c0 [ 430.945528][T17075] ? clear_bhb_loop+0x55/0xb0 [ 430.950233][T17075] ? clear_bhb_loop+0x55/0xb0 [ 430.954989][T17075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.960902][T17075] RIP: 0033:0x7f2beeca5d29 [ 430.965325][T17075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.984955][T17075] RSP: 002b:00007f2bed317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.993410][T17075] RAX: ffffffffffffffda RBX: 00007f2beee95fa0 RCX: 00007f2beeca5d29 [ 431.001386][T17075] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 431.009363][T17075] RBP: 00007f2beed21b08 R08: 0000000000000000 R09: 0000000000000000 [ 431.017337][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.025312][T17075] R13: 0000000000000000 R14: 00007f2beee95fa0 R15: 00007ffddb8444d8 [ 431.033354][T17075] [ 431.036654][T17075] memory: usage 307200kB, limit 307200kB, failcnt 4847 [ 431.043534][T17075] memory+swap: usage 313960kB, limit 9007199254740988kB, failcnt 0 [ 431.051479][T17075] kmem: usage 231172kB, limit 9007199254740988kB, failcnt 0 [ 431.058942][T17075] Memory cgroup stats for /syz0: [ 431.116039][T17075] cache 76734464 [ 431.124590][T17075] rss 872448 [ 431.127856][T17075] shmem 76734464 [ 431.131441][T17075] mapped_file 0 [ 431.134904][T17075] dirty 0 [ 431.137978][T17075] writeback 0 [ 431.141357][T17075] workingset_refault_anon 3934 [ 431.146249][T17075] workingset_refault_file 9433 [ 431.151031][T17075] swap 6922240 [ 431.154413][T17075] swapcached 245760 [ 431.158271][T17075] pgpgin 892177 [ 431.161740][T17075] pgpgout 873170 [ 431.165295][T17075] pgfault 605571 [ 431.168893][T17075] pgmajfault 601 [ 431.172446][T17075] inactive_anon 77508608 [ 431.176722][T17075] active_anon 344064 [ 431.180710][T17075] inactive_file 0 [ 431.184766][T17075] active_file 0 [ 431.188361][T17075] unevictable 0 [ 431.191916][T17075] hierarchical_memory_limit 314572800 [ 431.197525][T17075] hierarchical_memsw_limit 9223372036854771712 [ 431.203690][T17075] total_cache 76734464 [ 431.208083][T17075] total_rss 872448 [ 431.211880][T17075] total_shmem 76734464 [ 431.216298][T17075] total_mapped_file 0 [ 431.220290][T17075] total_dirty 0 [ 431.222635][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 431.222652][ T29] audit: type=1400 audit(1737500159.213:31976): avc: denied { create } for pid=17101 comm="syz.2.4875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.223748][T17075] total_writeback 0 [ 431.229973][ T29] audit: type=1400 audit(1737500159.213:31977): avc: denied { write } for pid=17101 comm="syz.2.4875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.230021][ T29] audit: type=1400 audit(1737500159.213:31978): avc: denied { read } for pid=17101 comm="syz.2.4875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.296903][T17075] total_workingset_refault_anon 3934 [ 431.302265][T17075] total_workingset_refault_file 9433 [ 431.307697][T17075] total_swap 6922240 [ 431.311672][T17075] total_swapcached 245760 [ 431.316040][T17075] total_pgpgin 892177 [ 431.320032][T17075] total_pgpgout 873170 [ 431.324135][T17075] total_pgfault 605571 [ 431.328243][T17075] total_pgmajfault 601 [ 431.332321][T17075] total_inactive_anon 77508608 [ 431.337107][T17075] total_active_anon 344064 [ 431.341538][T17075] total_inactive_file 0 [ 431.345740][T17075] total_active_file 0 [ 431.349741][T17075] total_unevictable 0 [ 431.353725][T17075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4864,pid=17074,uid=0 [ 431.368581][T17075] Memory cgroup out of memory: Killed process 17074 (syz.0.4864) total-vm:95432kB, anon-rss:916kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 431.535250][ T29] audit: type=1326 audit(1737500159.543:31979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 431.662797][T17116] loop5: detected capacity change from 0 to 512 [ 431.722029][T17116] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 431.738257][ T29] audit: type=1326 audit(1737500159.733:31980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 431.762132][ T29] audit: type=1326 audit(1737500159.733:31981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 431.785789][ T29] audit: type=1326 audit(1737500159.733:31982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 431.876079][ T29] audit: type=1326 audit(1737500159.883:31983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 431.899789][ T29] audit: type=1326 audit(1737500159.883:31984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 431.923676][ T29] audit: type=1326 audit(1737500159.883:31985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 432.067406][T17129] loop4: detected capacity change from 0 to 512 [ 432.077249][T17129] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 432.089797][T17129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 432.100216][T17133] loop5: detected capacity change from 0 to 256 [ 432.110835][T17133] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.141820][T17129] EXT4-fs (loop4): orphan cleanup on readonly fs [ 432.188030][T17129] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4886: bg 0: block 361: padding at end of block bitmap is not set [ 432.203297][T17129] EXT4-fs (loop4): Remounting filesystem read-only [ 432.236348][T17129] EXT4-fs (loop4): 1 truncate cleaned up [ 432.251747][T17129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 432.295610][T17149] loop0: detected capacity change from 0 to 256 [ 432.300614][T17129] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 432.305529][T17148] loop2: detected capacity change from 0 to 512 [ 432.309637][T17129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 432.334687][T17148] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 432.486637][T17129] loop4: detected capacity change from 0 to 8192 [ 432.818104][T17162] loop2: detected capacity change from 0 to 256 [ 433.474122][T17180] loop0: detected capacity change from 0 to 2048 [ 433.482616][T17180] EXT4-fs: Ignoring removed bh option [ 433.500800][T17180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.575026][T17185] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 433.593289][T17185] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1344 with error 28 [ 433.605943][T17185] EXT4-fs (loop0): This should not happen!! Data will be lost [ 433.605943][T17185] [ 433.615593][T17185] EXT4-fs (loop0): Total free blocks count 0 [ 433.621645][T17185] EXT4-fs (loop0): Free/Dirty block details [ 433.627573][T17185] EXT4-fs (loop0): free_blocks=2415919104 [ 433.633356][T17185] EXT4-fs (loop0): dirty_blocks=1360 [ 433.638727][T17185] EXT4-fs (loop0): Block reservation details [ 433.644806][T17185] EXT4-fs (loop0): i_reserved_data_blocks=85 [ 433.744007][T17188] loop4: detected capacity change from 0 to 128 [ 433.797415][T17188] bio_check_eod: 63 callbacks suppressed [ 433.797433][T17188] syz.4.4907: attempt to access beyond end of device [ 433.797433][T17188] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 433.842732][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 433.887573][T17189] syz.4.4907: attempt to access beyond end of device [ 433.887573][T17189] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 433.901665][T17189] syz.4.4907: attempt to access beyond end of device [ 433.901665][T17189] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 433.927166][T17189] syz.4.4907: attempt to access beyond end of device [ 433.927166][T17189] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 435.149273][T17227] loop4: detected capacity change from 0 to 256 [ 435.190393][T17229] loop2: detected capacity change from 0 to 2048 [ 435.203745][T17222] loop0: detected capacity change from 0 to 8192 [ 435.207049][T17229] EXT4-fs: Ignoring removed bh option [ 435.239464][T17229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.295306][T17222] loop0: detected capacity change from 0 to 2048 [ 435.312697][ T11] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 435.330270][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 126 with error 28 [ 435.342758][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 435.342758][ T11] [ 435.352457][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 435.358498][ T11] EXT4-fs (loop2): Free/Dirty block details [ 435.364391][ T11] EXT4-fs (loop2): free_blocks=2415919104 [ 435.370169][ T11] EXT4-fs (loop2): dirty_blocks=144 [ 435.375421][ T11] EXT4-fs (loop2): Block reservation details [ 435.381434][ T11] EXT4-fs (loop2): i_reserved_data_blocks=9 [ 435.395835][T17235] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 435.418403][T17222] loop0: p1 < > p4 [ 435.423485][T17222] loop0: p4 size 8388608 extends beyond EOD, truncated [ 435.747972][T17249] loop2: detected capacity change from 0 to 512 [ 435.754651][T17249] journal_path: Non-blockdev passed as './bus' [ 435.760943][T17249] EXT4-fs: error: could not find journal device path [ 435.853850][T17252] loop3: detected capacity change from 0 to 512 [ 435.861930][T17252] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 435.932575][T17257] loop3: detected capacity change from 0 to 256 [ 435.948634][T17259] loop2: detected capacity change from 0 to 512 [ 435.966038][T17259] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 435.978822][T17259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 435.987146][T17259] EXT4-fs (loop2): orphan cleanup on readonly fs [ 435.994117][T17259] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4930: bg 0: block 361: padding at end of block bitmap is not set [ 436.009113][T17259] EXT4-fs (loop2): Remounting filesystem read-only [ 436.017995][T17259] EXT4-fs (loop2): 1 truncate cleaned up [ 436.024303][T17259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 436.037772][T17259] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 436.044914][T17259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 436.157473][T17266] loop5: detected capacity change from 0 to 764 [ 436.171783][T17266] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 436.208539][T17259] loop2: detected capacity change from 0 to 8192 [ 436.235211][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 436.235231][ T29] audit: type=1400 audit(1737500164.243:32272): avc: denied { mount } for pid=17264 comm="syz.5.4933" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 436.264179][ T29] audit: type=1326 audit(1737500164.243:32273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feaa5554690 code=0x7ffc0000 [ 436.287970][ T29] audit: type=1326 audit(1737500164.243:32274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feaa5554690 code=0x7ffc0000 [ 436.311725][ T29] audit: type=1326 audit(1737500164.243:32275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 436.335339][ T29] audit: type=1326 audit(1737500164.243:32276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 436.359435][ T29] audit: type=1326 audit(1737500164.333:32277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 436.383113][ T29] audit: type=1326 audit(1737500164.333:32278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 436.406861][ T29] audit: type=1326 audit(1737500164.333:32279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feaa5554690 code=0x7ffc0000 [ 436.430605][ T29] audit: type=1326 audit(1737500164.333:32280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7feaa5557557 code=0x7ffc0000 [ 436.454218][ T29] audit: type=1326 audit(1737500164.333:32281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.5.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaa5555d29 code=0x7ffc0000 [ 436.532713][T17273] 9pnet_fd: Insufficient options for proto=fd [ 436.552864][T17276] loop2: detected capacity change from 0 to 764 [ 436.562425][T17276] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 436.812541][T17280] loop5: detected capacity change from 0 to 2048 [ 436.866524][T17280] EXT4-fs: Ignoring removed bh option [ 436.952195][T17280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.955359][T17286] loop0: detected capacity change from 0 to 512 [ 436.976071][T17286] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 437.066796][T17296] loop0: detected capacity change from 0 to 256 [ 437.071533][T17297] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 437.101175][T17297] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 352 with error 28 [ 437.114160][T17297] EXT4-fs (loop5): This should not happen!! Data will be lost [ 437.114160][T17297] [ 437.124289][T17297] EXT4-fs (loop5): Total free blocks count 0 [ 437.130598][T17297] EXT4-fs (loop5): Free/Dirty block details [ 437.136581][T17297] EXT4-fs (loop5): free_blocks=2415919104 [ 437.142312][T17297] EXT4-fs (loop5): dirty_blocks=368 [ 437.147600][T17297] EXT4-fs (loop5): Block reservation details [ 437.153847][T17297] EXT4-fs (loop5): i_reserved_data_blocks=23 [ 437.212990][T17304] loop4: detected capacity change from 0 to 256 [ 437.285624][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 437.340227][T17308] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4946'. [ 437.448047][T17314] loop5: detected capacity change from 0 to 2048 [ 437.464277][T17314] ext4: Unknown parameter 'smackfsroot' [ 437.696299][T17296] syz.0.4942 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 437.710466][T17296] CPU: 0 UID: 0 PID: 17296 Comm: syz.0.4942 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 437.720945][T17296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 437.731112][T17296] Call Trace: [ 437.734503][T17296] [ 437.737457][T17296] dump_stack_lvl+0xf2/0x150 [ 437.742150][T17296] dump_stack+0x15/0x1a [ 437.746385][T17296] dump_header+0x83/0x2d0 [ 437.750950][T17296] oom_kill_process+0x341/0x4c0 [ 437.755914][T17322] loop5: detected capacity change from 0 to 512 [ 437.756000][T17296] ================================================================== [ 437.770282][T17296] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 437.776915][T17296] [ 437.779256][T17296] write to 0xffffffff8667b1c0 of 8 bytes by task 17322 on cpu 1: [ 437.780422][T17322] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 437.786978][T17296] data_alloc+0x291/0x2c0 [ 437.787011][T17296] prb_reserve+0x85e/0xb60 [ 437.804359][T17296] vprintk_store+0x558/0x870 [ 437.808980][T17296] vprintk_emit+0x15e/0x680 [ 437.813513][T17296] vprintk_default+0x26/0x30 [ 437.818142][T17296] vprintk+0x75/0x80 [ 437.822122][T17296] _printk+0x7a/0xa0 [ 437.826018][T17296] set_capacity_and_notify+0x151/0x200 [ 437.831487][T17296] loop_set_size+0x2e/0x70 [ 437.835913][T17296] loop_configure+0x8bd/0xa50 [ 437.840601][T17296] lo_ioctl+0x607/0x1400 [ 437.844935][T17296] blkdev_ioctl+0x359/0x450 [ 437.849468][T17296] __se_sys_ioctl+0xc9/0x140 [ 437.854097][T17296] __x64_sys_ioctl+0x43/0x50 [ 437.858701][T17296] x64_sys_call+0x1690/0x2dc0 [ 437.863399][T17296] do_syscall_64+0xc9/0x1c0 [ 437.867917][T17296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.873828][T17296] [ 437.876151][T17296] read to 0xffffffff8667b1c0 of 8 bytes by task 17296 on cpu 0: [ 437.883786][T17296] prb_reserve+0x235/0xb60 [ 437.888221][T17296] vprintk_store+0x558/0x870 [ 437.892844][T17296] vprintk_emit+0x15e/0x680 [ 437.897371][T17296] vprintk_default+0x26/0x30 [ 437.902095][T17296] vprintk+0x75/0x80 [ 437.906007][T17296] _printk+0x7a/0xa0 [ 437.909932][T17296] show_trace_log_lvl+0x380/0x400 [ 437.914986][T17296] dump_stack_lvl+0xf2/0x150 [ 437.919629][T17296] dump_stack+0x15/0x1a [ 437.923811][T17296] dump_header+0x83/0x2d0 [ 437.928246][T17296] oom_kill_process+0x341/0x4c0 [ 437.933201][T17296] out_of_memory+0x9af/0xbe0 [ 437.937826][T17296] mem_cgroup_out_of_memory+0x13e/0x190 [ 437.943404][T17296] try_charge_memcg+0x508/0x7f0 [ 437.948274][T17296] obj_cgroup_charge_pages+0xbd/0x1a0 [ 437.953712][T17296] __memcg_kmem_charge_page+0x9d/0x170 [ 437.959174][T17296] __alloc_pages_noprof+0x1bc/0x340 [ 437.964384][T17296] alloc_pages_mpol_noprof+0xb8/0x260 [ 437.969778][T17296] alloc_pages_noprof+0xe1/0x100 [ 437.974720][T17296] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 437.980538][T17296] __kvmalloc_node_noprof+0x121/0x170 [ 437.985922][T17296] ip_set_alloc+0x1f/0x30 [ 437.990275][T17296] hash_netiface_create+0x273/0x730 [ 437.995506][T17296] ip_set_create+0x359/0x8a0 [ 438.000101][T17296] nfnetlink_rcv_msg+0x4a9/0x570 [ 438.005049][T17296] netlink_rcv_skb+0x12c/0x230 [ 438.009906][T17296] nfnetlink_rcv+0x16c/0x15d0 [ 438.014595][T17296] netlink_unicast+0x599/0x670 [ 438.019361][T17296] netlink_sendmsg+0x5cc/0x6e0 [ 438.024159][T17296] __sock_sendmsg+0x140/0x180 [ 438.028860][T17296] ____sys_sendmsg+0x312/0x410 [ 438.033642][T17296] __sys_sendmsg+0x19d/0x230 [ 438.038245][T17296] __x64_sys_sendmsg+0x46/0x50 [ 438.043024][T17296] x64_sys_call+0x2734/0x2dc0 [ 438.047699][T17296] do_syscall_64+0xc9/0x1c0 [ 438.052215][T17296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.058122][T17296] [ 438.060436][T17296] value changed: 0x00000000000123f0 -> 0x00000000000b0a10 [ 438.067558][T17296] [ 438.069882][T17296] Reported by Kernel Concurrency Sanitizer on: [ 438.076038][T17296] CPU: 0 UID: 0 PID: 17296 Comm: syz.0.4942 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 438.086459][T17296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 438.096510][T17296] ================================================================== [ 437.755842][T17296] out_of_memory+0x9af/0xbe0 [ 438.109165][T17296] ? css_next_descendant_pre+0x11c/0x140 [ 438.114809][T17296] mem_cgroup_out_of_memory+0x13e/0x190 [ 438.120423][T17296] try_charge_memcg+0x508/0x7f0 [ 438.125299][T17296] obj_cgroup_charge_pages+0xbd/0x1a0 [ 438.130679][T17296] __memcg_kmem_charge_page+0x9d/0x170 [ 438.136289][T17296] __alloc_pages_noprof+0x1bc/0x340 [ 438.141520][T17296] alloc_pages_mpol_noprof+0xb8/0x260 [ 438.146994][T17296] alloc_pages_noprof+0xe1/0x100 [ 438.152006][T17296] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 438.157876][T17296] __kvmalloc_node_noprof+0x121/0x170 [ 438.163331][T17296] ? ip_set_alloc+0x1f/0x30 [ 438.167934][T17296] ip_set_alloc+0x1f/0x30 [ 438.172342][T17296] hash_netiface_create+0x273/0x730 [ 438.177550][T17296] ? __nla_parse+0x40/0x60 [ 438.181985][T17296] ? __pfx_hash_netiface_create+0x10/0x10 [ 438.187771][T17296] ip_set_create+0x359/0x8a0 [ 438.192389][T17296] ? __schedule+0x6fa/0x930 [ 438.196991][T17296] ? __pfx_ip_set_create+0x10/0x10 [ 438.202141][T17296] nfnetlink_rcv_msg+0x4a9/0x570 [ 438.207123][T17296] netlink_rcv_skb+0x12c/0x230 [ 438.211893][T17296] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 438.217387][T17296] nfnetlink_rcv+0x16c/0x15d0 [ 438.222156][T17296] ? kmem_cache_free+0xdc/0x2d0 [ 438.227027][T17296] ? nlmon_xmit+0x51/0x60 [ 438.231369][T17296] ? __kfree_skb+0x102/0x150 [ 438.236020][T17296] ? consume_skb+0x49/0x160 [ 438.240534][T17296] ? nlmon_xmit+0x51/0x60 [ 438.244881][T17296] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 438.250236][T17296] ? __dev_queue_xmit+0xb6e/0x2090 [ 438.255590][T17296] ? ref_tracker_free+0x3a5/0x410 [ 438.260691][T17296] ? __dev_queue_xmit+0x186/0x2090 [ 438.265997][T17296] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 438.271525][T17296] netlink_unicast+0x599/0x670 [ 438.276317][T17296] netlink_sendmsg+0x5cc/0x6e0 [ 438.281237][T17296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.286556][T17296] __sock_sendmsg+0x140/0x180 [ 438.291244][T17296] ____sys_sendmsg+0x312/0x410 [ 438.296169][T17296] __sys_sendmsg+0x19d/0x230 [ 438.300836][T17296] __x64_sys_sendmsg+0x46/0x50 [ 438.305608][T17296] x64_sys_call+0x2734/0x2dc0 [ 438.310302][T17296] do_syscall_64+0xc9/0x1c0 [ 438.314861][T17296] ? clear_bhb_loop+0x55/0xb0 [ 438.319541][T17296] ? clear_bhb_loop+0x55/0xb0 [ 438.324217][T17296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.330106][T17296] RIP: 0033:0x7f2beeca5d29 [ 438.334534][T17296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.354227][T17296] RSP: 002b:00007f2bed317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.362685][T17296] RAX: ffffffffffffffda RBX: 00007f2beee95fa0 RCX: 00007f2beeca5d29 [ 438.370696][T17296] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 438.378738][T17296] RBP: 00007f2beed21b08 R08: 0000000000000000 R09: 0000000000000000 [ 438.386742][T17296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.394761][T17296] R13: 0000000000000000 R14: 00007f2beee95fa0 R15: 00007ffddb8444d8 [ 438.402738][T17296] [ 438.405978][T17296] memory: usage 307200kB, limit 307200kB, failcnt 5012 [ 438.413697][T17296] memory+swap: usage 313960kB, limit 9007199254740988kB, failcnt 0 [ 438.421808][T17296] kmem: usage 231004kB, limit 9007199254740988kB, failcnt 0 [ 438.429132][T17296] Memory cgroup stats for /syz0: [ 438.429843][T17296] cache 76734464 [ 438.438433][T17296] rss 1044480 [ 438.441768][T17296] shmem 76734464 [ 438.445394][T17296] mapped_file 0 [ 438.448910][T17296] dirty 0 [ 438.451851][T17296] writeback 0 [ 438.455140][T17296] workingset_refault_anon 3934 [ 438.459919][T17296] workingset_refault_file 9444 [ 438.464694][T17296] swap 6922240 [ 438.468102][T17296] swapcached 245760 [ 438.471917][T17296] pgpgin 895842 [ 438.475558][T17296] pgpgout 876793 [ 438.479484][T17296] pgfault 611086 [ 438.483105][T17296] pgmajfault 605 [ 438.487078][T17296] inactive_anon 77225984 [ 438.491407][T17296] active_anon 798720 [ 438.495304][T17296] inactive_file 0 [ 438.499215][T17296] active_file 0 [ 438.502707][T17296] unevictable 0 [ 438.506469][T17296] hierarchical_memory_limit 314572800 [ 438.511868][T17296] hierarchical_memsw_limit 9223372036854771712 [ 438.518206][T17296] total_cache 76734464 [ 438.522264][T17296] total_rss 1044480 [ 438.526345][T17296] total_shmem 76734464 [ 438.530417][T17296] total_mapped_file 0 [ 438.534388][T17296] total_dirty 0 [ 438.538046][T17296] total_writeback 0 [ 438.541844][T17296] total_workingset_refault_anon 3934 [ 438.547409][T17296] total_workingset_refault_file 9444 [ 438.552684][T17296] total_swap 6922240 [ 438.556849][T17296] total_swapcached 245760 [ 438.561193][T17296] total_pgpgin 895842 [ 438.565219][T17296] total_pgpgout 876793 [ 438.569329][T17296] total_pgfault 611086 [ 438.573411][T17296] total_pgmajfault 605 [ 438.577524][T17296] total_inactive_anon 77225984 [ 438.582347][T17296] total_active_anon 798720 [ 438.586791][T17296] total_inactive_file 0 [ 438.590941][T17296] total_active_file 0 [ 438.594910][T17296] total_unevictable 0 [ 438.598951][T17296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4942,pid=17295,uid=0 [ 438.613850][T17296] Memory cgroup out of memory: Killed process 17295 (syz.0.4942) total-vm:93384kB, anon-rss:916kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000