last executing test programs: 3m0.440448762s ago: executing program 0 (id=1): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0x17) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3m0.152811814s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x4040000) 3m0.127457094s ago: executing program 0 (id=7): bpf$MAP_CREATE(0x0, 0x0, 0x48) sigaltstack(&(0x7f0000000600)={0x0, 0x80000002}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/4296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9420a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883f53b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725e78400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e0808657393921a4902c5340690bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eea61f766664e5e9c678dd5e8f7f07368b317b0e09580380717188b22574dc2b50cfe0d4c3ce4628ef8b90c4179be593b31bb716525863c2044781e7d79c5fb015c1cdef274fd95c943f4a31bd248b122e4c10c3b8f57d63615df5a7a14cac878cb10dc96e27fd49bfb2b1e711e2b0715d263b0bba3f396ab238b4bdc3a372ae821b5494dd8954d5dd9c2d894833e652e58bf110e4c0f4e364c3b4fc1b8262cf8d9651bbd9fd9fac5f2831e965935239b60f72a0194262077f2ad9b4d2dc036b8d1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x0) getdents(r2, &(0x7f0000001280)=""/4075, 0xffb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000022c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000001000000004000000", @ANYRES32, @ANYBLOB="b6405f974b0e3ef7dc068e88de4643835a4d0a7829a24e217d2c78ad8435e7fb73", @ANYRES64=0x0], 0x20) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x2, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x37bd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r4, 0x0, 0x4000000000004}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @dev}, &(0x7f00000003c0)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002280)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 2m59.03668619s ago: executing program 0 (id=26): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) semget$private(0x0, 0x0, 0x0) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 2m43.774162373s ago: executing program 32 (id=26): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) semget$private(0x0, 0x0, 0x0) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 3.178208684s ago: executing program 1 (id=4457): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000c00000000000012010000000300000003000093000000000e000000000001000200000007000000cb002871b6f73f98b3000008000000090000000200000000f2ffff080000000000000205000000"], &(0x7f00000003c0)=""/118, 0x67, 0x76, 0x0, 0x5, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0d00000000000000b1a2a436ffffff7f10010000", @ANYRES32=0x1, @ANYBLOB="f100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000ab03000200dc0043762c741669000000ee6febd6db74fd0d0000000000000000000016a6fa04ec67346817db342ced399274104ee6c2c6c000a9cb7a86d59ecc7d46aeb8a8ca46ce9e1be913ad4a38fa063bea06feef6d3856f9d42c13a8598fcf3f51ea73b4430da979d89d3300"/128], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="182000006fdb991b6774cf6249e3684d9af6d9d75601983300684b316dbd5221423a5b2dc1d05f28f106b5a33b8a896817e46c562448fd2ad556129400000000000000", @ANYRES32=r0, @ANYBLOB="0000000000040000"], &(0x7f00000002c0)='GPL\x00', 0x4d, 0x95, &(0x7f0000000640)=""/149, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock=0x21, r1, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[0xffffffffffffffff, r2], &(0x7f0000000840)=[{0x0, 0x2, 0x4, 0x7}, {0x3, 0x2}, {0x4, 0x3, 0xa, 0xa}], 0x10, 0x2, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@acl}, {@quota}]}, 0xfb, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000079, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000004040000000638a2bbd92b859bf12836b3", @ANYRES32, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000daf5be94bd4925210000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) syz_genetlink_get_family_id$smc(&(0x7f0000000540), r5) 2.966271665s ago: executing program 5 (id=4458): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$setlease(r7, 0x8, 0x0) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) close(r7) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r8, 0x4b65, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100c0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x10}}, 0x0) 2.863992836s ago: executing program 2 (id=4460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x4, 0x4}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480)=[{0xe0, 0x113, 0x8, "4d7b5302b13da92aa82d491ac46afab09a3c100e1a77f4c985faa9289f0ea5d0e6b8e6c31a5ebe72988d882df17a7678c4816f517899ae42533645b98285b1bc636db8136c9d7af5f6098959a4e25e3a863784f569a4f9147b231e5f402fd4e1f2633cdbb6b7e6a80953bdd51deb9b127e23690f7e24786d48262eb8f36e63ba0b4f2c781f802b02bbc1f1f62e7f5f2816ba337e2003b546c3a0d92b901707230413cfc986a50eb0cd70d51984f7daf6522146a4c22e113ddfeb410a4a5604e5dfb5d29229a3d3681f97346c418c"}, {0x88, 0x10c, 0x1, "747e5837a9af6aa21c4c364421a0d0b084ea47a68fe126b62d83900670539c9f068d052192507b1893d06b7b7fcc3cc48ce2e3e42437bacc0583f9336142ece020ccc4eb1bf4facd306c960b68b625ebb2343e254902633dc5d41016e8273d77b978da2f97beeccfcba86312cfd2fb1c19da3342"}, {0x40, 0x114, 0x7, "996211b1e780fe66a84bc6faa648e451192bfe56929fd168b97fbb1148fc8ae2e09f5b26c42a3187ef062376"}], 0x1a8}, 0x50) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x200) socket(0xa, 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 2.848564126s ago: executing program 5 (id=4461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="c0010000100013070000000000000000fe800000000000010000000000ff00bbfe8000000000000000000000000000bb00000000000000100a000000a30000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000002000004d432000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000004000000000000000000000000000000020004000000000000000000cf000200656362286369706865725f6e756c6c29"], 0x1c0}, 0x1, 0x0, 0x0, 0x4001}, 0x1000c080) 2.808107946s ago: executing program 5 (id=4462): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x4040000) 2.774476996s ago: executing program 5 (id=4463): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2BPQvYHd9WK72IsYsOu9iu1uA4rtbsBuWPCQsiVbD1btJG3y/QStKPLPc/4kFf7BSDwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ49Vct+yoEbQ2Ns1oXi0Km2OWZ63N6WY2cXNiv5KT/qdiURezWRe/fbj4Qvq/67qcvbusYvpS1N5bF96+963ZQm/9MQl9GZq2wafP9x7d73a3n5wgdkZTN/8qqXCCoDW/FcRh0Kyu+SaIQ7O6suLeXq/Hph40/Hgr7vhN40V+oRNGZsm7acqrq8vGL22FG621WrXh92be/V7FdVfMjxayAy2pFHvrQaMRtNZsTLo4jblrPv1pFuBXm8bsPOxuL09KMg0qnySoMimo4lYq5XKlUl65s3rnruvOHpvhphz3gI5FnPmHFl8zZ3fyBk6pkNb/fzpSQ0W1tKFNmaF/PNUUKVRzxPJcr/6/e9sf229//e9V+YvSD/LFl2Tr/5Xs3ZVR9X9ELkbGrjBsiTNi/nR/5vJWnuq59vRI99VVV9t6cgZtG5mrp23h12eSxz+SzOiINflqKVCsUIGaqto5Jp9jtKoVrcjVB1pXXbGM6grUkK9YW4rVkW8/UZ4i+aqqo1CRjJbk6aaMylrVqpZl5KukLYXaUEtrqqmq/yVJsqOHdr8vj9kK9YLKIwIW+oMqY1oaVf9/9kn2Oc3rv0v9f1Nln4OF/Cw2Lgb4Ckjy6/8pXX0x2QAAAAAAgBfBsf/67tjv7t+RlKgeNHz3VacFAAAAAADOkKNkQZflyP6kTe/I4fofAAAAAIDXjWPvsXMkLdof9TuHd0Kd5B8BZl5CigAAAAAA4JTsnf9X5qXEDlpxVc5U1/8AAAAAAOBr4Hd9Y+zP9sbYTXpf6xckxe0F56//WVA05+y3N7/j7FbTJdXdPObYLwA69UvO+XygXvsyL8m+8/zLTt5bPgjmwbiDn+9MGuvfiY4kMD/T38CIBJy055XZ/J0+1bVslWv5OPMP9gqyS7JeFutBwy95YeNeWdXq+ULH3+z88vHDX0nRwXbuPOxulz78uPvA5rKfztrfTRv9ZCCdwvCdcZjLMzvegr3nYtgWn1O91+XvW81Fx/br9rZ/RtXdQn9H4w7AYZ+/0fXsmF1fzGIX9w5G3E+3v5huf7lkD9nA1kdzzmEW5aNbPuxAjMiiaLO4kcXcWLqRvfTyS9spOMXvzkiV0vFjMJBFpT+LyfvC+e+xfTEui3xfLKdZ/C1taEQWy9NlceyIAMCrsnNYhewg5sfqbq889E5qX6ruTK7u7w9W92d/TBK7wow0m383MbaXotIz+pJj69C87Il19tKQM7qb15WiRpzR3VNUt7Svvxw+AylP+1gW/0+S5F7Z9vuHI1X1s3SFz0b2GzcqM+kuvP1s9+d2APzUR9sfbT+uVJZX3Pdc905Fc3Yz8pcZHc2U32wCAE7wjJ2JEc57upZFXHvw73ezqYGK982DnxSU9KE+VlcPdKv3CIGrw1td7PsZwq3sqlV9V63mwtv3zklHY8u6NfKqztbSvtjKQeyceqsMVurD2OUXfBQAAHi5rk+ow8Prf3Gg/t/SUhaxdGnodfdgLT/6hOBRseXJyb9/1nsDAIA3gx997ix2futEUdD+oLy6Wq521n0Thd6PTRTU1nwTtDp+5K1XW2u+aUdhJ/TChmlHWghqfmzijXY7jDqmHkamHcbBpn3yu8kf/R77zWqrE3hxu+FXY994YatTnZGpBbFn2hs/bATxuh/ZleO27wX1wKt2grBl4nAj8vySMbHv9wUGNb/VCepBOtky7ShoVqMt85OwsdH0Tc2PvShod8KsQduX1zFBqx5GTdtsScnUDzoEAOB19PT53qP73e72kzET+5ock0/MD2mQ75sBAPiKOSzXU6xUfIEJAQAAAAAAAAAAAAAAAAAAAACAY05y/99UE3PDbhaUDub84vyRtf6kYe04OuvEppkoTLtW75aIvUd/HxN87mBOb/f3x+y/tA381zekt+wcZXNmz76vc3ZvvLwD9/2dbI+OjEkXDl20cHAsZs/+r0M68fjPIxYlSZKMX31hcB/Oj9vAwYlZSU/mT3EIBk4TjJsBvIa+CAAA//9z/kFZ") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0}, &(0x7f0000001140)=0x14) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001180)={0x0, r0}, 0x8) syz_clone3(&(0x7f0000000480)={0x148000400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x18, 0x4, 0x11000, r1, 0x2, '\x00', r2, r3, 0x3, 0x5, 0x2, 0xb, @void, @value, @value=r4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x42000, 0x8) 2.650193736s ago: executing program 5 (id=4465): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x12) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) getcwd(0x0, 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_getevents(r2, 0x2, 0x8000000000000d6, &(0x7f0000000000)=[{}, {}], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x4) io_pgetevents(r2, 0xfe5d, 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x0, &(0x7f0000000380)={&(0x7f0000000340)={[0x535d592c]}, 0x8}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = msgget(0x0, 0x2c4) msgsnd(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2000, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1}, 0x0, 0x0, 0x1, 0x7, 0xd0e, 0x58e, 0xffff, 0x3, 0x9}) msgctl$IPC_RMID(r5, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x19, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESOCT, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @empty}, 0x3e) socket$inet_dccp(0x2, 0x6, 0x0) 2.469702547s ago: executing program 5 (id=4469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 2.407767968s ago: executing program 33 (id=4469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 2.212723179s ago: executing program 1 (id=4475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0x8000000e, 0x100000b, 0x59c, 0xffffffffffffffff}) 2.175232289s ago: executing program 1 (id=4476): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) setpriority(0x2, 0x0, 0x800) r2 = memfd_create(&(0x7f0000000640)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9cgME\x10o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xeax/Ob0E\xd5\xb7\xa4\xf8f\x12=\xcd/t3\xd9k<\xff{\xd2\xbd\xe6\v\xe0\xf9.@\x13\x89P\xd19\xaa\aE\xba\x90\xd3\x05CJ\xf8\xf7\x16Ly\xaf\xecM\r]h\xb5-$\xd6.\x05\xd6n\xd8 \x7f\xc6', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r8) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r5, 0xffffffffffffffff}}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000c80)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@quota}], [{@obj_type}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x95e}}, {@pcr={'pcr', 0x3d, 0x17}}, {@fowner_lt={'fowner<', r5}}, {@smackfshat={'smackfshat', 0x3d, '-O\'\'$&}'}}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r11, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket(0x10, 0x3, 0x6) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0x90}}, 0x0) 2.06136059s ago: executing program 3 (id=4477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) 2.053028749s ago: executing program 3 (id=4478): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r1, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 2.00604516s ago: executing program 3 (id=4479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 1.97284184s ago: executing program 3 (id=4480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x4, 0x4}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480)=[{0xe0, 0x113, 0x8, "4d7b5302b13da92aa82d491ac46afab09a3c100e1a77f4c985faa9289f0ea5d0e6b8e6c31a5ebe72988d882df17a7678c4816f517899ae42533645b98285b1bc636db8136c9d7af5f6098959a4e25e3a863784f569a4f9147b231e5f402fd4e1f2633cdbb6b7e6a80953bdd51deb9b127e23690f7e24786d48262eb8f36e63ba0b4f2c781f802b02bbc1f1f62e7f5f2816ba337e2003b546c3a0d92b901707230413cfc986a50eb0cd70d51984f7daf6522146a4c22e113ddfeb410a4a5604e5dfb5d29229a3d3681f97346c418c"}, {0x88, 0x10c, 0x1, "747e5837a9af6aa21c4c364421a0d0b084ea47a68fe126b62d83900670539c9f068d052192507b1893d06b7b7fcc3cc48ce2e3e42437bacc0583f9336142ece020ccc4eb1bf4facd306c960b68b625ebb2343e254902633dc5d41016e8273d77b978da2f97beeccfcba86312cfd2fb1c19da3342"}, {0x40, 0x114, 0x7, "996211b1e780fe66a84bc6faa648e451192bfe56929fd168b97fbb1148fc8ae2e09f5b26c42a3187ef062376"}], 0x1a8}, 0x50) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) close(0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x200) r4 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.93950705s ago: executing program 2 (id=4481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f4", 0x1}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\t&', 0x2, 0x11, 0x0, 0x0) 1.88420781s ago: executing program 1 (id=4482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='fib6_table_lookup\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) 1.86637514s ago: executing program 2 (id=4483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(0x0, &(0x7f0000000600)=@known='system.advise\x00', &(0x7f0000000640)=""/108, 0x6c) 1.801011341s ago: executing program 2 (id=4484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x4, 0x4}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480)=[{0xe0, 0x113, 0x8, "4d7b5302b13da92aa82d491ac46afab09a3c100e1a77f4c985faa9289f0ea5d0e6b8e6c31a5ebe72988d882df17a7678c4816f517899ae42533645b98285b1bc636db8136c9d7af5f6098959a4e25e3a863784f569a4f9147b231e5f402fd4e1f2633cdbb6b7e6a80953bdd51deb9b127e23690f7e24786d48262eb8f36e63ba0b4f2c781f802b02bbc1f1f62e7f5f2816ba337e2003b546c3a0d92b901707230413cfc986a50eb0cd70d51984f7daf6522146a4c22e113ddfeb410a4a5604e5dfb5d29229a3d3681f97346c418c"}, {0x88, 0x10c, 0x1, "747e5837a9af6aa21c4c364421a0d0b084ea47a68fe126b62d83900670539c9f068d052192507b1893d06b7b7fcc3cc48ce2e3e42437bacc0583f9336142ece020ccc4eb1bf4facd306c960b68b625ebb2343e254902633dc5d41016e8273d77b978da2f97beeccfcba86312cfd2fb1c19da3342"}, {0x40, 0x114, 0x7, "996211b1e780fe66a84bc6faa648e451192bfe56929fd168b97fbb1148fc8ae2e09f5b26c42a3187ef062376"}], 0x1a8}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) close(0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x200) r4 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.420592083s ago: executing program 4 (id=4485): unshare(0x64000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x40000400) socket$inet_udplite(0x2, 0x2, 0x88) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x9}, 0x8) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000009900"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r6, {}, {0xa}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000300)="8d0520c122fa2543c519cab536a77c50939fb322256dc3cbd6d2e7b801bcac2dbbc57c5066ce8d4f21e19ee482aa82c5fe9ad66a5ae12dc6328b53aa696baa382faf758c373672", &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000007e000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x18) shmctl$IPC_RMID(0x0, 0x0) 1.222704974s ago: executing program 1 (id=4486): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2220014, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2bc, &(0x7f0000000340)="$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") r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x0, 0x1, 0x20000000, 0x0, 0x3}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') setns(r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x680100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x90000000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x101) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) r5 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="d0", 0x1}], 0x1}, 0x4004890) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000100001800090400000103000000092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220d000000a0042b"], 0x0}, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000100)={'geneve1\x00', 0xd}) 1.158720634s ago: executing program 4 (id=4487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x58}}, 0x0) 1.120022334s ago: executing program 4 (id=4488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xdd0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(0x0, &(0x7f0000000600)=@known='system.advise\x00', &(0x7f0000000640)=""/108, 0x6c) 1.046172634s ago: executing program 4 (id=4489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 1.045158975s ago: executing program 3 (id=4490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") (fail_nth: 15) 1.044828624s ago: executing program 4 (id=4491): shutdown(0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x36) 916.740845ms ago: executing program 2 (id=4492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x4, 0x4}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480)=[{0xe0, 0x113, 0x8, "4d7b5302b13da92aa82d491ac46afab09a3c100e1a77f4c985faa9289f0ea5d0e6b8e6c31a5ebe72988d882df17a7678c4816f517899ae42533645b98285b1bc636db8136c9d7af5f6098959a4e25e3a863784f569a4f9147b231e5f402fd4e1f2633cdbb6b7e6a80953bdd51deb9b127e23690f7e24786d48262eb8f36e63ba0b4f2c781f802b02bbc1f1f62e7f5f2816ba337e2003b546c3a0d92b901707230413cfc986a50eb0cd70d51984f7daf6522146a4c22e113ddfeb410a4a5604e5dfb5d29229a3d3681f97346c418c"}, {0x88, 0x10c, 0x1, "747e5837a9af6aa21c4c364421a0d0b084ea47a68fe126b62d83900670539c9f068d052192507b1893d06b7b7fcc3cc48ce2e3e42437bacc0583f9336142ece020ccc4eb1bf4facd306c960b68b625ebb2343e254902633dc5d41016e8273d77b978da2f97beeccfcba86312cfd2fb1c19da3342"}, {0x40, 0x114, 0x7, "996211b1e780fe66a84bc6faa648e451192bfe56929fd168b97fbb1148fc8ae2e09f5b26c42a3187ef062376"}], 0x1a8}, 0x50) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x200) socket(0xa, 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 502.302977ms ago: executing program 1 (id=4493): unshare(0x64000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x40000400) socket$inet_udplite(0x2, 0x2, 0x88) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x9}, 0x8) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000009900"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r6, {}, {0xa}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000300)="8d0520c122fa2543c519cab536a77c50939fb322256dc3cbd6d2e7b801bcac2dbbc57c5066ce8d4f21e19ee482aa82c5fe9ad66a5ae12dc6328b53aa696baa382faf758c373672", &(0x7f00000001c0)=@tcp=r7, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000007e000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shmctl$IPC_RMID(0x0, 0x0) 465.939758ms ago: executing program 4 (id=4494): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="04000000000000007da28b2dd0526a0700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=')\x80', 0x0) 650.68µs ago: executing program 3 (id=4495): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="00000000031201003c0012800b00010062726964676500002c0002800800050001000000060027"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000040)={@local, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e74200", 0x2, 0x0, 0x80}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x400, &(0x7f00000001c0)={[{@delalloc}, {@data_err_ignore}, {@block_validity}]}, 0xee, 0x4f4, &(0x7f0000000940)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800), 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000100)=0xfd) 0s ago: executing program 2 (id=4496): poll(0x0, 0x0, 0x5e5b) shutdown(0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000600"], 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='fib6_table_lookup\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x36) kernel console output (not intermixed with test programs): ew feature flag, running e2fsck is recommended [ 159.269469][T13158] EXT4-fs (loop5): 1 truncate cleaned up [ 159.275683][T13158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.295126][T13158] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3344: corrupted xattr block 19: invalid header [ 159.308492][T13158] EXT4-fs (loop5): Remounting filesystem read-only [ 159.315020][T13158] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 159.324049][T13158] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 159.343175][T13158] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 159.354284][T13158] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 159.374784][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.469204][T13176] loop5: detected capacity change from 0 to 1024 [ 159.481053][T13176] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 159.509793][T13176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.613171][T13149] syz.2.3341 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 159.627304][T13149] CPU: 0 UID: 0 PID: 13149 Comm: syz.2.3341 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 159.638158][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.648228][T13149] Call Trace: [ 159.648237][T13149] [ 159.648244][T13149] dump_stack_lvl+0xf2/0x150 [ 159.648285][T13149] dump_stack+0x15/0x1a [ 159.663280][T13149] dump_header+0x83/0x2d0 [ 159.667664][T13149] oom_kill_process+0x341/0x4c0 [ 159.672501][T13149] out_of_memory+0x9af/0xbe0 [ 159.677076][T13149] ? css_next_descendant_pre+0x11c/0x140 [ 159.682697][T13149] mem_cgroup_out_of_memory+0x13e/0x190 [ 159.688310][T13149] try_charge_memcg+0x508/0x7f0 [ 159.693211][T13149] obj_cgroup_charge_pages+0xbd/0x1a0 [ 159.698569][T13149] __memcg_kmem_charge_page+0x9d/0x170 [ 159.704071][T13149] __alloc_pages_noprof+0x1bc/0x340 [ 159.709258][T13149] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 159.714735][T13149] alloc_pages_noprof+0xe1/0x100 [ 159.719690][T13149] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 159.725519][T13149] __kvmalloc_node_noprof+0x121/0x170 [ 159.730901][T13149] ? ip_set_alloc+0x1f/0x30 [ 159.735400][T13149] ip_set_alloc+0x1f/0x30 [ 159.739868][T13149] hash_netiface_create+0x273/0x730 [ 159.745131][T13149] ? __nla_parse+0x40/0x60 [ 159.749620][T13149] ? __pfx_hash_netiface_create+0x10/0x10 [ 159.755398][T13149] ip_set_create+0x359/0x8a0 [ 159.760009][T13149] ? memchr+0x1/0x50 [ 159.763965][T13149] ? __nla_parse+0x40/0x60 [ 159.768386][T13149] nfnetlink_rcv_msg+0x4a9/0x570 [ 159.773324][T13149] netlink_rcv_skb+0x12c/0x230 [ 159.778074][T13149] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 159.783609][T13149] nfnetlink_rcv+0x16c/0x15d0 [ 159.788281][T13149] ? kmem_cache_free+0xdc/0x2d0 [ 159.793155][T13149] ? nlmon_xmit+0x51/0x60 [ 159.797480][T13149] ? __kfree_skb+0x102/0x150 [ 159.802128][T13149] ? consume_skb+0x49/0x160 [ 159.806719][T13149] ? nlmon_xmit+0x51/0x60 [ 159.811105][T13149] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 159.816386][T13149] ? __dev_queue_xmit+0xb6e/0x2090 [ 159.821537][T13149] ? ref_tracker_free+0x3a5/0x410 [ 159.826555][T13149] ? __dev_queue_xmit+0x186/0x2090 [ 159.831685][T13149] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 159.837139][T13149] netlink_unicast+0x599/0x670 [ 159.841905][T13149] netlink_sendmsg+0x5cc/0x6e0 [ 159.846656][T13149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.852008][T13149] __sock_sendmsg+0x140/0x180 [ 159.856673][T13149] ____sys_sendmsg+0x312/0x410 [ 159.861423][T13149] __sys_sendmsg+0x19d/0x230 [ 159.866031][T13149] __x64_sys_sendmsg+0x46/0x50 [ 159.870780][T13149] x64_sys_call+0x2734/0x2dc0 [ 159.875483][T13149] do_syscall_64+0xc9/0x1c0 [ 159.880046][T13149] ? clear_bhb_loop+0x55/0xb0 [ 159.884752][T13149] ? clear_bhb_loop+0x55/0xb0 [ 159.889416][T13149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.895301][T13149] RIP: 0033:0x7f323199ff19 [ 159.899776][T13149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.919374][T13149] RSP: 002b:00007f3230017058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.927793][T13149] RAX: ffffffffffffffda RBX: 00007f3231b65fa0 RCX: 00007f323199ff19 [ 159.935756][T13149] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 159.943743][T13149] RBP: 00007f3231a13986 R08: 0000000000000000 R09: 0000000000000000 [ 159.951775][T13149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.959742][T13149] R13: 0000000000000000 R14: 00007f3231b65fa0 R15: 00007ffece10afe8 [ 159.967717][T13149] [ 159.971135][T13149] memory: usage 307200kB, limit 307200kB, failcnt 1317 [ 159.978346][T13149] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 159.986277][T13149] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 159.993557][T13149] Memory cgroup stats for /syz2: [ 159.993825][T13149] cache 0 [ 160.001726][T13149] rss 0 [ 160.004533][T13149] shmem 0 [ 160.007479][T13149] mapped_file 413696 [ 160.011366][T13149] dirty 0 [ 160.014355][T13149] writeback 0 [ 160.017654][T13149] workingset_refault_anon 391 [ 160.022341][T13149] workingset_refault_file 3017 [ 160.027146][T13149] swap 430080 [ 160.030420][T13149] swapcached 4096 [ 160.034030][T13149] pgpgin 150932 [ 160.037498][T13149] pgpgout 150931 [ 160.041032][T13149] pgfault 167547 [ 160.044553][T13149] pgmajfault 248 [ 160.048109][T13149] inactive_anon 0 [ 160.051737][T13149] active_anon 4096 [ 160.055466][T13149] inactive_file 0 [ 160.059151][T13149] active_file 0 [ 160.062590][T13149] unevictable 0 [ 160.066062][T13149] hierarchical_memory_limit 314572800 [ 160.071433][T13149] hierarchical_memsw_limit 9223372036854771712 [ 160.077607][T13149] total_cache 0 [ 160.081055][T13149] total_rss 0 [ 160.084397][T13149] total_shmem 0 [ 160.087902][T13149] total_mapped_file 413696 [ 160.092305][T13149] total_dirty 0 [ 160.095827][T13149] total_writeback 0 [ 160.099646][T13149] total_workingset_refault_anon 391 [ 160.104828][T13149] total_workingset_refault_file 3017 [ 160.110177][T13149] total_swap 430080 [ 160.113964][T13149] total_swapcached 4096 [ 160.118160][T13149] total_pgpgin 150932 [ 160.122215][T13149] total_pgpgout 150931 [ 160.126342][T13149] total_pgfault 167547 [ 160.130447][T13149] total_pgmajfault 248 [ 160.134519][T13149] total_inactive_anon 0 [ 160.138722][T13149] total_active_anon 4096 [ 160.142953][T13149] total_inactive_file 0 [ 160.147154][T13149] total_active_file 0 [ 160.151132][T13149] total_unevictable 0 [ 160.155183][T13149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3341,pid=13148,uid=0 [ 160.169885][T13149] Memory cgroup out of memory: Killed process 13148 (syz.2.3341) total-vm:93280kB, anon-rss:616kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 160.308063][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.279699][T13231] netlink: 'syz.2.3366': attribute type 12 has an invalid length. [ 161.287613][T13231] __nla_validate_parse: 4 callbacks suppressed [ 161.287623][T13231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3366'. [ 161.774859][T13244] FAULT_INJECTION: forcing a failure. [ 161.774859][T13244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.788058][T13244] CPU: 0 UID: 0 PID: 13244 Comm: syz.4.3370 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 161.798826][T13244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.808887][T13244] Call Trace: [ 161.812162][T13244] [ 161.815120][T13244] dump_stack_lvl+0xf2/0x150 [ 161.819723][T13244] dump_stack+0x15/0x1a [ 161.823882][T13244] should_fail_ex+0x223/0x230 [ 161.828574][T13244] should_fail+0xb/0x10 [ 161.832803][T13244] should_fail_usercopy+0x1a/0x20 [ 161.837853][T13244] _copy_from_iter+0xd5/0xd00 [ 161.842526][T13244] ? kmalloc_reserve+0x16e/0x190 [ 161.847509][T13244] ? __build_skb_around+0x196/0x1f0 [ 161.852778][T13244] ? __alloc_skb+0x21f/0x310 [ 161.857453][T13244] ? __virt_addr_valid+0x1ed/0x250 [ 161.862632][T13244] ? __check_object_size+0x364/0x520 [ 161.867917][T13244] netlink_sendmsg+0x460/0x6e0 [ 161.872687][T13244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.878070][T13244] __sock_sendmsg+0x140/0x180 [ 161.882743][T13244] ____sys_sendmsg+0x312/0x410 [ 161.887568][T13244] __sys_sendmsg+0x19d/0x230 [ 161.892160][T13244] __x64_sys_sendmsg+0x46/0x50 [ 161.896999][T13244] x64_sys_call+0x2734/0x2dc0 [ 161.901674][T13244] do_syscall_64+0xc9/0x1c0 [ 161.906211][T13244] ? clear_bhb_loop+0x55/0xb0 [ 161.910878][T13244] ? clear_bhb_loop+0x55/0xb0 [ 161.915545][T13244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.921503][T13244] RIP: 0033:0x7f85499bff19 [ 161.925983][T13244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.945585][T13244] RSP: 002b:00007f8548037058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.954023][T13244] RAX: ffffffffffffffda RBX: 00007f8549b85fa0 RCX: 00007f85499bff19 [ 161.962009][T13244] RDX: 0000000000000800 RSI: 0000000020000240 RDI: 0000000000000003 [ 161.970052][T13244] RBP: 00007f85480370a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.978070][T13244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.986031][T13244] R13: 0000000000000000 R14: 00007f8549b85fa0 R15: 00007ffc6f4fe168 [ 161.994045][T13244] [ 162.102885][T13246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13246 comm=syz.2.3369 [ 162.139626][T13268] loop5: detected capacity change from 0 to 256 [ 162.180455][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.180509][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.235025][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3382'. [ 162.264446][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'. [ 162.855978][T13310] loop5: detected capacity change from 0 to 512 [ 162.856101][T13310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.858313][T13310] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.858927][T13310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 162.858953][T13310] System zones: 0-2, 18-18, 34-34 [ 162.867081][T13310] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 162.867448][T13310] EXT4-fs (loop5): 1 truncate cleaned up [ 162.871845][T13310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.876858][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 162.877332][T13310] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3397: corrupted xattr block 19: invalid header [ 162.877591][T13310] EXT4-fs (loop5): Remounting filesystem read-only [ 162.877606][T13310] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 162.877632][T13310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 162.899528][T13310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 162.918038][T13310] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 162.934195][T13312] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 162.959766][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.085107][T13335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13335 comm=syz.2.3401 [ 163.462458][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3411'. [ 163.512618][T13379] xt_hashlimit: max too large, truncated to 1048576 [ 163.533121][T13372] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 163.552030][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 163.552045][ T29] audit: type=1326 audit(1733206305.158:13885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.582053][ T29] audit: type=1326 audit(1733206305.158:13886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.605649][ T29] audit: type=1326 audit(1733206305.158:13887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.629466][ T29] audit: type=1326 audit(1733206305.158:13888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.659541][ T29] audit: type=1326 audit(1733206305.268:13889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.683231][ T29] audit: type=1326 audit(1733206305.268:13890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.707010][ T29] audit: type=1326 audit(1733206305.268:13891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cdcc1e880 code=0x7ffc0000 [ 163.730646][ T29] audit: type=1326 audit(1733206305.268:13892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.754364][ T29] audit: type=1326 audit(1733206305.268:13893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.778078][ T29] audit: type=1326 audit(1733206305.268:13894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.1.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 163.807491][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 164.036353][T13441] FAULT_INJECTION: forcing a failure. [ 164.036353][T13441] name failslab, interval 1, probability 0, space 0, times 0 [ 164.042647][T13444] netlink: 'syz.3.3428': attribute type 10 has an invalid length. [ 164.049011][T13441] CPU: 1 UID: 0 PID: 13441 Comm: syz.2.3427 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 164.049068][T13441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.077797][T13441] Call Trace: [ 164.081121][T13441] [ 164.084052][T13441] dump_stack_lvl+0xf2/0x150 [ 164.088762][T13441] dump_stack+0x15/0x1a [ 164.092939][T13441] should_fail_ex+0x223/0x230 [ 164.097624][T13441] should_failslab+0x8f/0xb0 [ 164.102238][T13441] kmem_cache_alloc_noprof+0x52/0x320 [ 164.107615][T13441] ? __inet_hash_connect+0xa05/0x1160 [ 164.113008][T13441] __inet_hash_connect+0xa05/0x1160 [ 164.118277][T13441] ? secure_ipv6_port_ephemeral+0xa4/0x130 [ 164.124107][T13441] inet6_hash_connect+0x72/0x80 [ 164.128976][T13441] tcp_v6_connect+0x9b0/0xc60 [ 164.133777][T13441] ? mod_objcg_state+0x2ea/0x4f0 [ 164.138764][T13441] __inet_stream_connect+0x162/0x790 [ 164.144088][T13441] ? tcp_sendmsg_fastopen+0x163/0x4f0 [ 164.149475][T13441] ? __kmalloc_cache_noprof+0x28c/0x320 [ 164.155032][T13441] tcp_sendmsg_fastopen+0x40e/0x4f0 [ 164.160249][T13441] tcp_sendmsg_locked+0x2513/0x2710 [ 164.165455][T13441] ? mntput_no_expire+0x70/0x3c0 [ 164.170542][T13441] ? __rcu_read_unlock+0x4e/0x70 [ 164.175567][T13441] ? avc_has_perm_noaudit+0x1cc/0x210 [ 164.180953][T13441] ? avc_has_perm+0xd4/0x160 [ 164.181402][T13449] ebt_limit: overflow, try lower: 570423552/2483027968 [ 164.185692][T13441] ? _raw_spin_unlock_bh+0x36/0x40 [ 164.197773][T13441] ? __pfx_tcp_sendmsg+0x10/0x10 [ 164.202717][T13441] tcp_sendmsg+0x30/0x50 [ 164.207208][T13441] inet6_sendmsg+0x77/0xd0 [ 164.211774][T13441] __sock_sendmsg+0x8b/0x180 [ 164.216524][T13441] __sys_sendto+0x1a8/0x230 [ 164.221039][T13441] __x64_sys_sendto+0x78/0x90 [ 164.225749][T13441] x64_sys_call+0x29fa/0x2dc0 [ 164.230434][T13441] do_syscall_64+0xc9/0x1c0 [ 164.235060][T13441] ? clear_bhb_loop+0x55/0xb0 [ 164.239792][T13441] ? clear_bhb_loop+0x55/0xb0 [ 164.244473][T13441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.250435][T13441] RIP: 0033:0x7f323199ff19 [ 164.254853][T13441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.274498][T13441] RSP: 002b:00007f3230017058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 164.282981][T13441] RAX: ffffffffffffffda RBX: 00007f3231b65fa0 RCX: 00007f323199ff19 [ 164.291049][T13441] RDX: 0000000000001001 RSI: 0000000020000240 RDI: 0000000000000003 [ 164.299039][T13441] RBP: 00007f32300170a0 R08: 0000000020b63fe4 R09: 000000000000001c [ 164.307016][T13441] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 164.314997][T13441] R13: 0000000000000000 R14: 00007f3231b65fa0 R15: 00007ffece10afe8 [ 164.322979][T13441] [ 164.334613][T13444] veth1_macvtap: left promiscuous mode [ 164.394982][T13453] xt_hashlimit: max too large, truncated to 1048576 [ 164.453047][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 164.767379][T13500] netlink: 'syz.3.3441': attribute type 10 has an invalid length. [ 164.954937][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 165.004744][T13521] syzkaller0: entered promiscuous mode [ 165.010285][T13521] syzkaller0: entered allmulticast mode [ 165.012841][T13525] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 165.326429][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 165.356268][T13572] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3459'. [ 165.644160][T13606] FAULT_INJECTION: forcing a failure. [ 165.644160][T13606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.657337][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.1.3472 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 165.668113][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.678189][T13606] Call Trace: [ 165.681468][T13606] [ 165.684401][T13606] dump_stack_lvl+0xf2/0x150 [ 165.689059][T13606] dump_stack+0x15/0x1a [ 165.693227][T13606] should_fail_ex+0x223/0x230 [ 165.697951][T13606] should_fail+0xb/0x10 [ 165.702167][T13606] should_fail_usercopy+0x1a/0x20 [ 165.707230][T13606] _copy_to_user+0x20/0xa0 [ 165.711769][T13606] simple_read_from_buffer+0xa0/0x110 [ 165.717276][T13606] proc_fail_nth_read+0xf9/0x140 [ 165.722240][T13606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.727784][T13606] vfs_read+0x1a2/0x700 [ 165.731943][T13606] ? __rcu_read_unlock+0x4e/0x70 [ 165.736882][T13606] ? __fget_files+0x17c/0x1c0 [ 165.741562][T13606] ksys_read+0xe8/0x1b0 [ 165.745853][T13606] __x64_sys_read+0x42/0x50 [ 165.750351][T13606] x64_sys_call+0x2874/0x2dc0 [ 165.755022][T13606] do_syscall_64+0xc9/0x1c0 [ 165.759518][T13606] ? clear_bhb_loop+0x55/0xb0 [ 165.764186][T13606] ? clear_bhb_loop+0x55/0xb0 [ 165.768855][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.774908][T13606] RIP: 0033:0x7f4cdcc1e92c [ 165.779316][T13606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.798955][T13606] RSP: 002b:00007f4cdb297050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.807425][T13606] RAX: ffffffffffffffda RBX: 00007f4cdcde5fa0 RCX: 00007f4cdcc1e92c [ 165.815460][T13606] RDX: 000000000000000f RSI: 00007f4cdb2970b0 RDI: 0000000000000005 [ 165.823502][T13606] RBP: 00007f4cdb2970a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.831480][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.839440][T13606] R13: 0000000000000000 R14: 00007f4cdcde5fa0 R15: 00007fff0e67f868 [ 165.847454][T13606] [ 165.991963][T13614] syzkaller0: entered promiscuous mode [ 165.997488][T13614] syzkaller0: entered allmulticast mode [ 166.086911][T13637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.087206][T13640] loop5: detected capacity change from 0 to 512 [ 166.095902][T13637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.102283][T13640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.116943][T13640] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.129612][T13640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 166.137806][T13640] System zones: 0-2, 18-18, 34-34 [ 166.143524][T13640] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 166.160033][T13640] EXT4-fs (loop5): 1 truncate cleaned up [ 166.166063][T13640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.191031][T13640] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3488: corrupted xattr block 19: invalid header [ 166.206130][T13640] EXT4-fs (loop5): Remounting filesystem read-only [ 166.212772][T13640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 166.222370][T13640] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 166.224378][T13650] xt_hashlimit: max too large, truncated to 1048576 [ 166.242790][T13640] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 166.252127][T13640] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 166.269503][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.292556][T13652] loop5: detected capacity change from 0 to 512 [ 166.303100][T13652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.312762][T13652] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.322585][T13652] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 166.330729][T13652] System zones: 0-2, 18-18, 34-34 [ 166.337095][T13652] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 166.351911][T13652] EXT4-fs (loop5): 1 truncate cleaned up [ 166.358065][T13652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.372043][T13652] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3493: corrupted xattr block 19: invalid header [ 166.386425][T13652] EXT4-fs (loop5): Remounting filesystem read-only [ 166.392960][T13652] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 166.402870][T13652] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 166.414463][T13665] __nla_validate_parse: 5 callbacks suppressed [ 166.414477][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'. [ 166.419087][T13652] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 166.439187][T13652] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 166.459033][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.614226][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3510'. [ 166.745746][T13718] netlink: 'syz.4.3520': attribute type 10 has an invalid length. [ 166.833539][T13729] syzkaller0: entered promiscuous mode [ 166.839172][T13729] syzkaller0: entered allmulticast mode [ 166.887737][T13742] FAULT_INJECTION: forcing a failure. [ 166.887737][T13742] name failslab, interval 1, probability 0, space 0, times 0 [ 166.900456][T13742] CPU: 1 UID: 0 PID: 13742 Comm: syz.4.3531 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 166.911283][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.921400][T13742] Call Trace: [ 166.924753][T13742] [ 166.927672][T13742] dump_stack_lvl+0xf2/0x150 [ 166.932260][T13742] dump_stack+0x15/0x1a [ 166.936484][T13742] should_fail_ex+0x223/0x230 [ 166.941222][T13742] should_failslab+0x8f/0xb0 [ 166.945884][T13742] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 166.952212][T13742] ? sidtab_sid2str_get+0xb8/0x140 [ 166.957339][T13742] kmemdup_noprof+0x2a/0x60 [ 166.961844][T13742] sidtab_sid2str_get+0xb8/0x140 [ 166.966779][T13742] security_sid_to_context_core+0x1eb/0x2f0 [ 166.972717][T13742] security_sid_to_context+0x27/0x30 [ 166.978004][T13742] selinux_lsmprop_to_secctx+0x2c/0x40 [ 166.983520][T13742] security_lsmprop_to_secctx+0x4a/0x90 [ 166.989082][T13742] audit_log_task_context+0x93/0x1c0 [ 166.994369][T13742] audit_log_task+0xf9/0x1c0 [ 166.998957][T13742] audit_seccomp+0x68/0x130 [ 167.003472][T13742] __seccomp_filter+0x6fa/0x1180 [ 167.008539][T13742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 167.014243][T13742] ? vfs_write+0x596/0x920 [ 167.018674][T13742] __secure_computing+0x9f/0x1c0 [ 167.023677][T13742] syscall_trace_enter+0xd1/0x1f0 [ 167.028863][T13742] ? fpregs_assert_state_consistent+0x83/0xa0 [ 167.035015][T13742] do_syscall_64+0xaa/0x1c0 [ 167.039517][T13742] ? clear_bhb_loop+0x55/0xb0 [ 167.044204][T13742] ? clear_bhb_loop+0x55/0xb0 [ 167.048875][T13742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.054842][T13742] RIP: 0033:0x7f85499bff19 [ 167.059250][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.078938][T13742] RSP: 002b:00007f8548037058 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 167.087344][T13742] RAX: ffffffffffffffda RBX: 00007f8549b85fa0 RCX: 00007f85499bff19 [ 167.095313][T13742] RDX: 0000000000000000 RSI: ffffffff80000200 RDI: ffffffffffffffff [ 167.103333][T13742] RBP: 00007f85480370a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.111648][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.119624][T13742] R13: 0000000000000000 R14: 00007f8549b85fa0 R15: 00007ffc6f4fe168 [ 167.127632][T13742] [ 167.160169][T13745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13745 comm=syz.2.3532 [ 167.194492][T13752] netlink: 'syz.4.3535': attribute type 10 has an invalid length. [ 167.220529][T13756] xt_hashlimit: max too large, truncated to 1048576 [ 167.288239][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3541'. [ 167.302862][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3541'. [ 167.651905][T13799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3556'. [ 167.676606][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'. [ 167.801324][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 167.942285][T13819] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 168.305665][T13839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3571'. [ 168.546443][T13848] loop5: detected capacity change from 0 to 512 [ 168.553123][T13848] EXT4-fs: inline encryption not supported [ 168.559190][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 168.559204][ T29] audit: type=1326 audit(1733206310.148:14382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 168.589459][ T29] audit: type=1326 audit(1733206310.168:14383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 168.613371][ T29] audit: type=1326 audit(1733206310.168:14384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 168.642960][ T29] audit: type=1326 audit(1733206310.248:14385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 168.666614][ T29] audit: type=1326 audit(1733206310.248:14386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 168.690198][ T29] audit: type=1326 audit(1733206310.248:14388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 168.705631][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 168.713947][ T29] audit: type=1326 audit(1733206310.248:14387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 168.746484][ T29] audit: type=1326 audit(1733206310.248:14389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 168.770208][ T29] audit: type=1326 audit(1733206310.248:14390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 168.793931][ T29] audit: type=1326 audit(1733206310.248:14391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 168.855412][T13848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.873871][T13848] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.902345][T13871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3584'. [ 168.957549][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.184838][T13897] syzkaller0: entered promiscuous mode [ 169.190389][T13897] syzkaller0: entered allmulticast mode [ 169.205624][T13899] loop5: detected capacity change from 0 to 512 [ 169.221928][T13899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.234811][T13899] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.250100][T13899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 169.258264][T13899] System zones: 0-2, 18-18, 34-34 [ 169.268142][T13899] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 169.297548][T13899] EXT4-fs (loop5): 1 truncate cleaned up [ 169.307731][T13899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.331215][T13899] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3595: corrupted xattr block 19: invalid header [ 169.353337][T13899] EXT4-fs (loop5): Remounting filesystem read-only [ 169.359889][T13899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 169.372623][T13899] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 169.389156][T13899] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 169.399971][T13899] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 169.431549][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.447381][T13910] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 169.447381][T13910] program syz.4.3599 not setting count and/or reply_len properly [ 169.620975][T13920] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 169.709778][T13946] xt_hashlimit: max too large, truncated to 1048576 [ 169.906639][T13973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13973 comm=syz.1.3614 [ 170.232208][T14008] syzkaller0: entered promiscuous mode [ 170.237885][T14008] syzkaller0: entered allmulticast mode [ 170.383184][T14026] FAULT_INJECTION: forcing a failure. [ 170.383184][T14026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.396540][T14026] CPU: 0 UID: 0 PID: 14026 Comm: syz.3.3624 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 170.407310][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.417399][T14026] Call Trace: [ 170.420667][T14026] [ 170.423592][T14026] dump_stack_lvl+0xf2/0x150 [ 170.428229][T14026] dump_stack+0x15/0x1a [ 170.432463][T14026] should_fail_ex+0x223/0x230 [ 170.437201][T14026] should_fail_alloc_page+0xfd/0x110 [ 170.442493][T14026] __alloc_pages_noprof+0x109/0x340 [ 170.447741][T14026] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 170.453111][T14026] alloc_pages_noprof+0xe1/0x100 [ 170.458047][T14026] alloc_skb_with_frags+0x19a/0x450 [ 170.463251][T14026] sock_alloc_send_pskb+0x435/0x4f0 [ 170.468457][T14026] ? mntput+0x49/0x70 [ 170.472440][T14026] tun_get_user+0xa33/0x25b0 [ 170.477039][T14026] ? _parse_integer+0x27/0x30 [ 170.481723][T14026] ? ref_tracker_alloc+0x1f5/0x2f0 [ 170.486885][T14026] tun_chr_write_iter+0x188/0x240 [ 170.491952][T14026] vfs_write+0x77f/0x920 [ 170.496225][T14026] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 170.501853][T14026] ksys_write+0xe8/0x1b0 [ 170.506103][T14026] __x64_sys_write+0x42/0x50 [ 170.510736][T14026] x64_sys_call+0x287e/0x2dc0 [ 170.515428][T14026] do_syscall_64+0xc9/0x1c0 [ 170.519932][T14026] ? clear_bhb_loop+0x55/0xb0 [ 170.524659][T14026] ? clear_bhb_loop+0x55/0xb0 [ 170.529329][T14026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.535277][T14026] RIP: 0033:0x7fc81c78e9cf [ 170.539688][T14026] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 170.559384][T14026] RSP: 002b:00007fc81ae07020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 170.567820][T14026] RAX: ffffffffffffffda RBX: 00007fc81c955fa0 RCX: 00007fc81c78e9cf [ 170.575789][T14026] RDX: 000000000000112e RSI: 0000000020002080 RDI: 00000000000000c8 [ 170.583856][T14026] RBP: 00007fc81ae070a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.591819][T14026] R10: 000000000000112e R11: 0000000000000293 R12: 0000000000000001 [ 170.599813][T14026] R13: 0000000000000000 R14: 00007fc81c955fa0 R15: 00007ffc6695a158 [ 170.607788][T14026] [ 170.702632][T14030] FAULT_INJECTION: forcing a failure. [ 170.702632][T14030] name failslab, interval 1, probability 0, space 0, times 0 [ 170.715349][T14030] CPU: 0 UID: 0 PID: 14030 Comm: syz.3.3626 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 170.726179][T14030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.736241][T14030] Call Trace: [ 170.739693][T14030] [ 170.742632][T14030] dump_stack_lvl+0xf2/0x150 [ 170.747254][T14030] dump_stack+0x15/0x1a [ 170.751477][T14030] should_fail_ex+0x223/0x230 [ 170.756162][T14030] should_failslab+0x8f/0xb0 [ 170.760841][T14030] kmem_cache_alloc_noprof+0x52/0x320 [ 170.766245][T14030] ? __inet_hash_connect+0xa05/0x1160 [ 170.771660][T14030] __inet_hash_connect+0xa05/0x1160 [ 170.776900][T14030] ? secure_ipv6_port_ephemeral+0xa4/0x130 [ 170.782718][T14030] inet6_hash_connect+0x72/0x80 [ 170.787577][T14030] tcp_v6_connect+0x9b0/0xc60 [ 170.792276][T14030] ? mod_objcg_state+0x3a7/0x4f0 [ 170.797241][T14030] __inet_stream_connect+0x162/0x790 [ 170.802553][T14030] ? tcp_sendmsg_fastopen+0x163/0x4f0 [ 170.808013][T14030] ? should_failslab+0x8f/0xb0 [ 170.812857][T14030] ? __kmalloc_cache_noprof+0x186/0x320 [ 170.818413][T14030] tcp_sendmsg_fastopen+0x40e/0x4f0 [ 170.823643][T14030] tcp_sendmsg_locked+0x2513/0x2710 [ 170.828849][T14030] ? perf_tp_event+0xfc1/0x1000 [ 170.833733][T14030] ? mntput_no_expire+0x70/0x3c0 [ 170.838750][T14030] ? __rcu_read_unlock+0x4e/0x70 [ 170.844103][T14030] ? avc_has_perm_noaudit+0x1cc/0x210 [ 170.849645][T14030] ? avc_has_perm+0xd4/0x160 [ 170.854256][T14030] ? _raw_spin_unlock_bh+0x36/0x40 [ 170.859460][T14030] ? __pfx_tcp_sendmsg+0x10/0x10 [ 170.864402][T14030] tcp_sendmsg+0x30/0x50 [ 170.868674][T14030] inet6_sendmsg+0x77/0xd0 [ 170.873163][T14030] __sock_sendmsg+0x8b/0x180 [ 170.877849][T14030] __sys_sendto+0x1a8/0x230 [ 170.882367][T14030] __x64_sys_sendto+0x78/0x90 [ 170.887096][T14030] x64_sys_call+0x29fa/0x2dc0 [ 170.891782][T14030] do_syscall_64+0xc9/0x1c0 [ 170.896288][T14030] ? clear_bhb_loop+0x55/0xb0 [ 170.900986][T14030] ? clear_bhb_loop+0x55/0xb0 [ 170.905658][T14030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.911576][T14030] RIP: 0033:0x7fc81c78ff19 [ 170.915990][T14030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.935648][T14030] RSP: 002b:00007fc81ae07058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.944150][T14030] RAX: ffffffffffffffda RBX: 00007fc81c955fa0 RCX: 00007fc81c78ff19 [ 170.952127][T14030] RDX: 0000000000001001 RSI: 0000000020000240 RDI: 0000000000000004 [ 170.960157][T14030] RBP: 00007fc81ae070a0 R08: 0000000020b63fe4 R09: 000000000000001c [ 170.968166][T14030] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 170.976149][T14030] R13: 0000000000000000 R14: 00007fc81c955fa0 R15: 00007ffc6695a158 [ 170.984129][T14030] [ 171.056750][T14037] syzkaller0: entered promiscuous mode [ 171.062271][T14037] syzkaller0: entered allmulticast mode [ 171.094308][T14045] netlink: 'syz.1.3633': attribute type 10 has an invalid length. [ 171.281271][T14067] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 171.330357][T14065] netlink: 'syz.1.3640': attribute type 4 has an invalid length. [ 171.845328][T14084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14084 comm=syz.4.3642 [ 172.174368][T14121] syzkaller0: entered promiscuous mode [ 172.179964][T14121] syzkaller0: entered allmulticast mode [ 172.238703][T14123] bridge0: entered promiscuous mode [ 172.244010][T14123] macvlan3: entered promiscuous mode [ 172.258191][T14123] bridge0: port 3(macvlan3) entered blocking state [ 172.264829][T14123] bridge0: port 3(macvlan3) entered disabled state [ 172.279226][T14123] macvlan3: entered allmulticast mode [ 172.284648][T14123] bridge0: entered allmulticast mode [ 172.292852][T14123] macvlan3: left allmulticast mode [ 172.298027][T14123] bridge0: left allmulticast mode [ 172.303932][T14123] bridge0: left promiscuous mode [ 172.315023][T14130] netem: unknown loss type 5 [ 172.319646][T14130] netem: change failed [ 172.335598][T14129] __nla_validate_parse: 14 callbacks suppressed [ 172.335612][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3651'. [ 172.404548][T14144] loop5: detected capacity change from 0 to 1024 [ 172.423657][T14144] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 172.466942][T14144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.896393][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3666'. [ 172.931273][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3666'. [ 173.244767][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.354384][T14195] netlink: 'syz.2.3675': attribute type 3 has an invalid length. [ 173.378400][T14202] loop5: detected capacity change from 0 to 512 [ 173.415589][T14202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.436775][T14202] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.436783][T14212] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 173.457280][T14202] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 173.465496][T14202] System zones: 0-2, 18-18, 34-34 [ 173.470982][T14202] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 173.488220][T14202] EXT4-fs (loop5): 1 truncate cleaned up [ 173.494315][T14202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.526685][T14202] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3678: corrupted xattr block 19: invalid header [ 173.568476][T14202] EXT4-fs (loop5): Remounting filesystem read-only [ 173.575064][T14202] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 173.616011][T14202] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 173.654995][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 173.655010][ T29] audit: type=1326 audit(1733206315.268:14695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.700922][T14202] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 173.719977][ T29] audit: type=1326 audit(1733206315.268:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.743716][ T29] audit: type=1326 audit(1733206315.268:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.767401][ T29] audit: type=1326 audit(1733206315.268:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.791089][ T29] audit: type=1326 audit(1733206315.268:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.814814][ T29] audit: type=1326 audit(1733206315.268:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.838470][ T29] audit: type=1326 audit(1733206315.268:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.862163][ T29] audit: type=1326 audit(1733206315.268:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.885890][ T29] audit: type=1326 audit(1733206315.268:14703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.909535][ T29] audit: type=1326 audit(1733206315.268:14704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 173.915475][T14202] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 173.975161][T14242] ebt_among: dst integrity fail: 101 [ 174.103398][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.131754][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3698'. [ 174.494000][T14276] loop5: detected capacity change from 0 to 512 [ 174.520418][T14276] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 174.547793][T14279] FAULT_INJECTION: forcing a failure. [ 174.547793][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 174.560515][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.2.3708 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 174.571284][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.581344][T14279] Call Trace: [ 174.584662][T14279] [ 174.587584][T14279] dump_stack_lvl+0xf2/0x150 [ 174.592245][T14279] dump_stack+0x15/0x1a [ 174.596413][T14279] should_fail_ex+0x223/0x230 [ 174.601153][T14279] should_failslab+0x8f/0xb0 [ 174.605762][T14279] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 174.612222][T14279] ? sidtab_sid2str_get+0xb8/0x140 [ 174.617378][T14279] kmemdup_noprof+0x2a/0x60 [ 174.622119][T14279] sidtab_sid2str_get+0xb8/0x140 [ 174.627134][T14279] security_sid_to_context_core+0x1eb/0x2f0 [ 174.633028][T14279] security_sid_to_context+0x27/0x30 [ 174.638362][T14279] selinux_lsmprop_to_secctx+0x2c/0x40 [ 174.643828][T14279] security_lsmprop_to_secctx+0x4a/0x90 [ 174.649486][T14279] audit_log_task_context+0x93/0x1c0 [ 174.654788][T14279] audit_log_task+0xf9/0x1c0 [ 174.659436][T14279] audit_seccomp+0x68/0x130 [ 174.663948][T14279] __seccomp_filter+0x6fa/0x1180 [ 174.668998][T14279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.674640][T14279] ? vfs_write+0x596/0x920 [ 174.679100][T14279] ? __schedule+0x6fa/0x930 [ 174.683613][T14279] __secure_computing+0x9f/0x1c0 [ 174.688647][T14279] syscall_trace_enter+0xd1/0x1f0 [ 174.693764][T14279] do_syscall_64+0xaa/0x1c0 [ 174.698275][T14279] ? clear_bhb_loop+0x55/0xb0 [ 174.702946][T14279] ? clear_bhb_loop+0x55/0xb0 [ 174.707619][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.713728][T14279] RIP: 0033:0x7f323199ff19 [ 174.718143][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.737764][T14279] RSP: 002b:00007f3230017058 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 174.746254][T14279] RAX: ffffffffffffffda RBX: 00007f3231b65fa0 RCX: 00007f323199ff19 [ 174.754281][T14279] RDX: 0000000000000800 RSI: 0000000000001000 RDI: 0000000000000000 [ 174.762259][T14279] RBP: 00007f32300170a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.770251][T14279] R10: 00000000202a2000 R11: 0000000000000246 R12: 0000000000000001 [ 174.778285][T14279] R13: 0000000000000000 R14: 00007f3231b65fa0 R15: 00007ffece10afe8 [ 174.786271][T14279] [ 174.796718][T14276] EXT4-fs (loop5): 1 truncate cleaned up [ 174.810918][T14276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.866310][T14276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14276 comm=syz.5.3707 [ 175.084584][T14303] program syz.4.3718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.098332][T14303] pimreg: entered allmulticast mode [ 175.123639][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3720'. [ 175.138579][T14312] xt_hashlimit: max too large, truncated to 1048576 [ 175.388864][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.565701][T14352] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14352 comm=syz.4.3737 [ 175.612032][T14359] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.311115][T14431] xt_hashlimit: max too large, truncated to 1048576 [ 176.336722][T14434] program syz.3.3771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.436868][T14440] xt_hashlimit: max too large, truncated to 1048576 [ 176.753104][T14447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3775'. [ 176.769617][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 176.880977][T14449] xt_hashlimit: max too large, truncated to 1048576 [ 176.942305][T14457] Cannot find add_set index 65534 as target [ 177.182182][T14474] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 177.278243][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3789'. [ 177.298941][T14481] xt_hashlimit: max too large, truncated to 1048576 [ 177.313129][T14479] loop5: detected capacity change from 0 to 512 [ 177.354368][T14479] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 177.439888][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3793'. [ 177.481045][T14493] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 177.529151][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3799'. [ 177.549315][T14510] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 177.797866][T14556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3811'. [ 177.848762][T14563] loop5: detected capacity change from 0 to 512 [ 177.857335][T14563] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 177.882941][T14563] EXT4-fs (loop5): 1 truncate cleaned up [ 177.889156][T14563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.905730][T14563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14563 comm=syz.5.3813 [ 177.953773][T14581] bond1: entered promiscuous mode [ 177.958882][T14581] bond1: entered allmulticast mode [ 177.966022][T14581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.976597][T14581] bond1 (unregistering): Released all slaves [ 178.001743][T14589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3820'. [ 178.036435][T14585] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.117631][T14592] ebt_limit: overflow, try lower: 570423552/2483027968 [ 178.344252][T14625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.344788][T14625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.631006][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3846'. [ 178.664738][T14651] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 178.797618][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.825916][T14678] loop5: detected capacity change from 0 to 512 [ 178.826123][T14678] EXT4-fs: inline encryption not supported [ 178.843572][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'. [ 178.875971][T14678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.919393][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 178.919408][ T29] audit: type=1326 audit(1733206320.528:15201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.919484][ T29] audit: type=1326 audit(1733206320.528:15202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.919519][ T29] audit: type=1326 audit(1733206320.528:15203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.919716][ T29] audit: type=1326 audit(1733206320.528:15204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.919895][ T29] audit: type=1326 audit(1733206320.528:15205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.920015][ T29] audit: type=1326 audit(1733206320.528:15206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.920092][ T29] audit: type=1326 audit(1733206320.528:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.920218][ T29] audit: type=1326 audit(1733206320.528:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.920425][ T29] audit: type=1326 audit(1733206320.528:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.920451][ T29] audit: type=1326 audit(1733206320.528:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14690 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 178.928428][T14678] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.214510][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.262635][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3856'. [ 179.390760][T14738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.435022][T14738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.543708][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3865'. [ 180.067148][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3872'. [ 180.340529][T14795] ebt_limit: overflow, try lower: 570423552/2483027968 [ 180.369578][T14801] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 180.425246][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3887'. [ 180.473001][T14806] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 180.614577][T14813] syzkaller0: entered promiscuous mode [ 180.620143][T14813] syzkaller0: entered allmulticast mode [ 180.733646][T14860] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 180.910322][T14886] syzkaller0: entered promiscuous mode [ 180.915892][T14886] syzkaller0: entered allmulticast mode [ 181.089705][T14923] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 181.525888][T15006] syzkaller0: entered promiscuous mode [ 181.531427][T15006] syzkaller0: entered allmulticast mode [ 181.588967][T15030] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 181.623577][T15036] xt_TCPMSS: Only works on TCP SYN packets [ 181.699758][T15045] xt_hashlimit: max too large, truncated to 1048576 [ 181.975959][T15087] FAULT_INJECTION: forcing a failure. [ 181.975959][T15087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.989085][T15087] CPU: 1 UID: 0 PID: 15087 Comm: syz.4.3965 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 181.999910][T15087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.010049][T15087] Call Trace: [ 182.013341][T15087] [ 182.016296][T15087] dump_stack_lvl+0xf2/0x150 [ 182.020919][T15087] dump_stack+0x15/0x1a [ 182.025123][T15087] should_fail_ex+0x223/0x230 [ 182.029896][T15087] should_fail+0xb/0x10 [ 182.034052][T15087] should_fail_usercopy+0x1a/0x20 [ 182.039162][T15087] _copy_from_user+0x1e/0xb0 [ 182.043834][T15087] move_addr_to_kernel+0x82/0x120 [ 182.048909][T15087] __sys_connect+0x67/0x1b0 [ 182.053553][T15087] __x64_sys_connect+0x41/0x50 [ 182.058513][T15087] x64_sys_call+0x22a7/0x2dc0 [ 182.063201][T15087] do_syscall_64+0xc9/0x1c0 [ 182.067709][T15087] ? clear_bhb_loop+0x55/0xb0 [ 182.072401][T15087] ? clear_bhb_loop+0x55/0xb0 [ 182.077088][T15087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.083064][T15087] RIP: 0033:0x7f85499bff19 [ 182.087593][T15087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.107235][T15087] RSP: 002b:00007f8548037058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 182.115662][T15087] RAX: ffffffffffffffda RBX: 00007f8549b85fa0 RCX: 00007f85499bff19 [ 182.123701][T15087] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000009 [ 182.131767][T15087] RBP: 00007f85480370a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.139783][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.147779][T15087] R13: 0000000000000000 R14: 00007f8549b85fa0 R15: 00007ffc6f4fe168 [ 182.155785][T15087] [ 182.519302][T15157] xt_hashlimit: max too large, truncated to 1048576 [ 182.552155][T15158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15158 comm=syz.4.3986 [ 182.679718][T15171] __nla_validate_parse: 18 callbacks suppressed [ 182.679735][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3991'. [ 182.775221][T15173] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3992'. [ 182.832296][T15180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3995'. [ 183.167130][T15209] Invalid ELF header magic: != ELF [ 183.559737][T15235] loop5: detected capacity change from 0 to 1024 [ 183.579411][T15235] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 183.642564][T15235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.705782][T15246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15246 comm=syz.2.4021 [ 184.351724][T15251] syz.1.4022 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 184.365976][T15251] CPU: 0 UID: 0 PID: 15251 Comm: syz.1.4022 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 184.376822][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.386968][T15251] Call Trace: [ 184.390263][T15251] [ 184.393209][T15251] dump_stack_lvl+0xf2/0x150 [ 184.397826][T15251] dump_stack+0x15/0x1a [ 184.402055][T15251] dump_header+0x83/0x2d0 [ 184.406404][T15251] oom_kill_process+0x341/0x4c0 [ 184.411354][T15251] out_of_memory+0x9af/0xbe0 [ 184.415964][T15251] ? css_next_descendant_pre+0x11c/0x140 [ 184.421654][T15251] mem_cgroup_out_of_memory+0x13e/0x190 [ 184.427240][T15251] try_charge_memcg+0x508/0x7f0 [ 184.432150][T15251] obj_cgroup_charge_pages+0xbd/0x1a0 [ 184.437535][T15251] __memcg_kmem_charge_page+0x9d/0x170 [ 184.443088][T15251] __alloc_pages_noprof+0x1bc/0x340 [ 184.448312][T15251] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 184.453709][T15251] alloc_pages_noprof+0xe1/0x100 [ 184.458710][T15251] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 184.464590][T15251] __kvmalloc_node_noprof+0x121/0x170 [ 184.470066][T15251] ? ip_set_alloc+0x1f/0x30 [ 184.474703][T15251] ip_set_alloc+0x1f/0x30 [ 184.479039][T15251] hash_netiface_create+0x273/0x730 [ 184.484338][T15251] ? __nla_parse+0x40/0x60 [ 184.488797][T15251] ? __pfx_hash_netiface_create+0x10/0x10 [ 184.494549][T15251] ip_set_create+0x359/0x8a0 [ 184.499198][T15251] ? memchr+0x1/0x50 [ 184.503187][T15251] ? __nla_parse+0x40/0x60 [ 184.507611][T15251] nfnetlink_rcv_msg+0x4a9/0x570 [ 184.512670][T15251] netlink_rcv_skb+0x12c/0x230 [ 184.517459][T15251] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 184.522947][T15251] nfnetlink_rcv+0x16c/0x15d0 [ 184.527619][T15251] ? kmem_cache_free+0xdc/0x2d0 [ 184.532581][T15251] ? nlmon_xmit+0x51/0x60 [ 184.536912][T15251] ? __kfree_skb+0x102/0x150 [ 184.541495][T15251] ? consume_skb+0x49/0x160 [ 184.545989][T15251] ? nlmon_xmit+0x51/0x60 [ 184.550370][T15251] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 184.555646][T15251] ? __dev_queue_xmit+0xb6e/0x2090 [ 184.560752][T15251] ? ref_tracker_free+0x3a5/0x410 [ 184.565777][T15251] ? __dev_queue_xmit+0x186/0x2090 [ 184.570947][T15251] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 184.576489][T15251] netlink_unicast+0x599/0x670 [ 184.581252][T15251] netlink_sendmsg+0x5cc/0x6e0 [ 184.586090][T15251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.591373][T15251] __sock_sendmsg+0x140/0x180 [ 184.596120][T15251] ____sys_sendmsg+0x312/0x410 [ 184.600884][T15251] __sys_sendmsg+0x19d/0x230 [ 184.605478][T15251] __x64_sys_sendmsg+0x46/0x50 [ 184.610331][T15251] x64_sys_call+0x2734/0x2dc0 [ 184.615099][T15251] do_syscall_64+0xc9/0x1c0 [ 184.619638][T15251] ? clear_bhb_loop+0x55/0xb0 [ 184.624307][T15251] ? clear_bhb_loop+0x55/0xb0 [ 184.628978][T15251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.634993][T15251] RIP: 0033:0x7f4cdcc1ff19 [ 184.639432][T15251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.659035][T15251] RSP: 002b:00007f4cdb297058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.667457][T15251] RAX: ffffffffffffffda RBX: 00007f4cdcde5fa0 RCX: 00007f4cdcc1ff19 [ 184.675420][T15251] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 184.683429][T15251] RBP: 00007f4cdcc93986 R08: 0000000000000000 R09: 0000000000000000 [ 184.691412][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.699459][T15251] R13: 0000000000000000 R14: 00007f4cdcde5fa0 R15: 00007fff0e67f868 [ 184.707427][T15251] [ 184.710778][T15251] memory: usage 307200kB, limit 307200kB, failcnt 2140 [ 184.718158][T15251] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 184.726081][T15251] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 184.728642][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.733350][T15251] Memory cgroup stats for /syz1: [ 184.758524][T15251] cache 0 [ 184.766459][T15251] rss 0 [ 184.769218][T15251] shmem 0 [ 184.772191][T15251] mapped_file 0 [ 184.775761][T15251] dirty 0 [ 184.778757][T15251] writeback 0 [ 184.782025][T15251] workingset_refault_anon 607 [ 184.786821][T15251] workingset_refault_file 4677 [ 184.791632][T15251] swap 229376 [ 184.795010][T15251] swapcached 8192 [ 184.798645][T15251] pgpgin 397449 [ 184.802095][T15251] pgpgout 397447 [ 184.805708][T15251] pgfault 321449 [ 184.809248][T15251] pgmajfault 370 [ 184.812842][T15251] inactive_anon 8192 [ 184.816831][T15251] active_anon 0 [ 184.820290][T15251] inactive_file 0 [ 184.823113][T15280] syzkaller0: entered promiscuous mode [ 184.823943][T15251] active_file 0 [ 184.829381][T15280] syzkaller0: entered allmulticast mode [ 184.832850][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4033'. [ 184.838500][T15251] unevictable 0 [ 184.850897][T15251] hierarchical_memory_limit 314572800 [ 184.856399][T15251] hierarchical_memsw_limit 9223372036854771712 [ 184.862601][T15251] total_cache 0 [ 184.863288][T15281] xt_CT: No such helper "netbios-ns" [ 184.866090][T15251] total_rss 0 [ 184.866099][T15251] total_shmem 0 [ 184.878099][T15251] total_mapped_file 0 [ 184.882106][T15251] total_dirty 0 [ 184.885635][T15251] total_writeback 0 [ 184.889515][T15251] total_workingset_refault_anon 607 [ 184.894748][T15251] total_workingset_refault_file 4677 [ 184.900044][T15251] total_swap 229376 [ 184.903850][T15251] total_swapcached 8192 [ 184.908025][T15251] total_pgpgin 397452 [ 184.912040][T15251] total_pgpgout 397450 [ 184.916275][T15251] total_pgfault 321474 [ 184.920337][T15251] total_pgmajfault 370 [ 184.924449][T15251] total_inactive_anon 8192 [ 184.928876][T15251] total_active_anon 0 [ 184.932899][T15251] total_inactive_file 0 [ 184.937085][T15251] total_active_file 0 [ 184.941083][T15251] total_unevictable 0 [ 184.945132][T15251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4022,pid=15250,uid=0 [ 184.959836][T15251] Memory cgroup out of memory: Killed process 15250 (syz.1.4022) total-vm:93280kB, anon-rss:616kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 185.013519][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4033'. [ 185.155234][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.186250][T15304] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4043'. [ 185.206983][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.233729][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 185.233800][ T29] audit: type=1326 audit(1733206326.838:15457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.268709][ T29] audit: type=1326 audit(1733206326.878:15458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.292415][ T29] audit: type=1326 audit(1733206326.878:15459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.316102][ T29] audit: type=1326 audit(1733206326.878:15460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.340052][ T29] audit: type=1326 audit(1733206326.898:15461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.363829][ T29] audit: type=1326 audit(1733206326.898:15462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.387799][ T29] audit: type=1326 audit(1733206326.898:15463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.394042][T15324] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 185.411452][ T29] audit: type=1326 audit(1733206326.898:15464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.411480][ T29] audit: type=1326 audit(1733206326.898:15465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.419762][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4051'. [ 185.442174][ T29] audit: type=1326 audit(1733206326.898:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85499bff19 code=0x7ffc0000 [ 185.511522][T15318] loop5: detected capacity change from 0 to 512 [ 185.559491][T15337] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 185.566099][T15337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.573540][T15337] vhci_hcd vhci_hcd.0: Device attached [ 185.589898][T15318] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 185.596684][T15337] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4055'. [ 185.609731][T15327] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4055'. [ 185.632198][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4051'. [ 185.644933][T15346] ebt_limit: overflow, try lower: 570423552/2483027968 [ 185.755050][T15358] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 185.763522][ T9] vhci_hcd: vhci_device speed not set [ 185.770647][T15338] vhci_hcd: connection closed [ 185.779213][ T28] vhci_hcd: stop threads [ 185.788360][ T28] vhci_hcd: release socket [ 185.792777][ T28] vhci_hcd: disconnect device [ 185.844237][ T9] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 185.851761][ T9] usb 9-1: enqueue for inactive port 0 [ 185.864881][ T9] usb 9-1: enqueue for inactive port 0 [ 185.874107][ T9] usb 9-1: enqueue for inactive port 0 [ 185.968996][T15374] syzkaller0: entered promiscuous mode [ 185.974495][T15374] syzkaller0: entered allmulticast mode [ 186.085380][T15387] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 186.117176][T15389] loop5: detected capacity change from 0 to 256 [ 186.148556][T15389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.160329][T15389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.254915][ T9] vhci_hcd: vhci_device speed not set [ 186.704379][T15413] xt_hashlimit: max too large, truncated to 1048576 [ 186.747354][T15415] syzkaller0: entered promiscuous mode [ 186.752945][T15415] syzkaller0: entered allmulticast mode [ 186.957508][T15436] ebt_limit: overflow, try lower: 570423552/2483027968 [ 187.008049][T15439] loop5: detected capacity change from 0 to 256 [ 187.025865][T15439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.034400][T15439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.444895][T15457] syzkaller0: entered promiscuous mode [ 187.450523][T15457] syzkaller0: entered allmulticast mode [ 187.531191][T15463] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 187.712445][T12086] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 187.723471][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 187.734426][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.744524][T12086] Call Trace: [ 187.747806][T12086] [ 187.750744][T12086] dump_stack_lvl+0xf2/0x150 [ 187.755348][T12086] dump_stack+0x15/0x1a [ 187.759564][T12086] dump_header+0x83/0x2d0 [ 187.763896][T12086] oom_kill_process+0x341/0x4c0 [ 187.768741][T12086] out_of_memory+0x9af/0xbe0 [ 187.773346][T12086] ? css_next_descendant_pre+0x11c/0x140 [ 187.778999][T12086] mem_cgroup_out_of_memory+0x13e/0x190 [ 187.784550][T12086] try_charge_memcg+0x508/0x7f0 [ 187.789431][T12086] charge_memcg+0x50/0xc0 [ 187.793756][T12086] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 187.799789][T12086] __read_swap_cache_async+0x236/0x480 [ 187.805246][T12086] swap_cluster_readahead+0x279/0x3f0 [ 187.810718][T12086] swapin_readahead+0xe4/0x6f0 [ 187.815494][T12086] ? swap_cache_get_folio+0x77/0x210 [ 187.820775][T12086] do_swap_page+0x31b/0x2550 [ 187.825378][T12086] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 187.830849][T12086] ? __rcu_read_lock+0x36/0x50 [ 187.835634][T12086] ? __pfx_default_wake_function+0x10/0x10 [ 187.841440][T12086] handle_mm_fault+0x8e4/0x2ac0 [ 187.846303][T12086] exc_page_fault+0x3b9/0x650 [ 187.850978][T12086] asm_exc_page_fault+0x26/0x30 [ 187.855908][T12086] RIP: 0033:0x7f85499f2785 [ 187.860311][T12086] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d be ed 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 187.879981][T12086] RSP: 002b:00007ffc6f4fe4a8 EFLAGS: 00010246 [ 187.886038][T12086] RAX: 0000000000000000 RBX: 00000000000001e3 RCX: 00007f85499f2783 [ 187.893997][T12086] RDX: 00007ffc6f4fe4c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.901959][T12086] RBP: 00007ffc6f4fe51c R08: 0000000026a81fd0 R09: 7fffffffffffffff [ 187.909920][T12086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 187.917884][T12086] R13: 000000000002db0b R14: 000000000002dace R15: 00007ffc6f4fe570 [ 187.925880][T12086] [ 187.929025][T12086] memory: usage 307200kB, limit 307200kB, failcnt 1385 [ 187.935922][T12086] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 187.943833][T12086] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 187.951161][T12086] Memory cgroup stats for /syz4: [ 187.952567][T12086] cache 0 [ 187.960464][T12086] rss 0 [ 187.963326][T12086] shmem 0 [ 187.966282][T12086] mapped_file 0 [ 187.969735][T12086] dirty 0 [ 187.972665][T12086] writeback 0 [ 187.976004][T12086] workingset_refault_anon 584 [ 187.980676][T12086] workingset_refault_file 5953 [ 187.985493][T12086] swap 380928 [ 187.988777][T12086] swapcached 8192 [ 187.992410][T12086] pgpgin 380335 [ 187.995903][T12086] pgpgout 380333 [ 187.999503][T12086] pgfault 290790 [ 188.003108][T12086] pgmajfault 344 [ 188.006679][T12086] inactive_anon 8192 [ 188.010575][T12086] active_anon 0 [ 188.014103][T12086] inactive_file 0 [ 188.017789][T12086] active_file 0 [ 188.021246][T12086] unevictable 0 [ 188.024745][T12086] hierarchical_memory_limit 314572800 [ 188.030173][T12086] hierarchical_memsw_limit 9223372036854771712 [ 188.036347][T12086] total_cache 0 [ 188.039923][T12086] total_rss 0 [ 188.043203][T12086] total_shmem 0 [ 188.046718][T12086] total_mapped_file 0 [ 188.050696][T12086] total_dirty 0 [ 188.054149][T12086] total_writeback 0 [ 188.058112][T12086] total_workingset_refault_anon 584 [ 188.059850][T15491] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 188.063290][T12086] total_workingset_refault_file 5953 [ 188.075718][T12086] total_swap 380928 [ 188.079522][T12086] total_swapcached 8192 [ 188.083671][T12086] total_pgpgin 380340 [ 188.087684][T12086] total_pgpgout 380338 [ 188.091764][T12086] total_pgfault 290801 [ 188.095862][T12086] total_pgmajfault 344 [ 188.099947][T12086] total_inactive_anon 8192 [ 188.104359][T12086] total_active_anon 0 [ 188.108385][T12086] total_inactive_file 0 [ 188.112537][T12086] total_active_file 0 [ 188.116649][T12086] total_unevictable 0 [ 188.120632][T12086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4102,pid=15441,uid=0 [ 188.123398][T15497] loop5: detected capacity change from 0 to 512 [ 188.135424][T12086] Memory cgroup out of memory: Killed process 15441 (syz.4.4102) total-vm:93280kB, anon-rss:616kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 188.154799][T15497] EXT4-fs: inline encryption not supported [ 188.196069][T15495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.204812][T15495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.206681][T15497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.225309][T15497] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.274439][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.413947][T15506] ebt_limit: overflow, try lower: 570423552/2483027968 [ 188.798119][T15527] __nla_validate_parse: 4 callbacks suppressed [ 188.798134][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4132'. [ 188.872273][T15533] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4135'. [ 189.185628][T15543] xt_hashlimit: max too large, truncated to 1048576 [ 189.314981][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'. [ 189.327550][T15551] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 189.374293][T15548] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 189.563860][T15575] syzkaller0: entered promiscuous mode [ 189.569411][T15575] syzkaller0: entered allmulticast mode [ 189.609131][T15582] xt_hashlimit: max too large, truncated to 1048576 [ 189.667862][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4151'. [ 189.774250][T15589] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 189.976060][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'. [ 189.993464][T15634] xt_hashlimit: max too large, truncated to 1048576 [ 190.175525][T15663] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 190.233204][T15667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4169'. [ 190.244639][T15675] xt_hashlimit: max too large, truncated to 1048576 [ 190.254911][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 190.254926][ T29] audit: type=1326 audit(1733206331.858:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.254991][ T29] audit: type=1326 audit(1733206331.858:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.255016][ T29] audit: type=1326 audit(1733206331.858:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.255090][ T29] audit: type=1326 audit(1733206331.858:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.255112][ T29] audit: type=1326 audit(1733206331.858:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.256539][ T29] audit: type=1326 audit(1733206331.868:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.270769][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4169'. [ 190.446410][ T29] audit: type=1326 audit(1733206332.028:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.446507][ T29] audit: type=1326 audit(1733206332.028:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.446532][ T29] audit: type=1326 audit(1733206332.028:15896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.446558][ T29] audit: type=1326 audit(1733206332.028:15897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.5.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 190.779852][T15700] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 190.981444][T15709] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 190.988045][T15709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.995617][T15709] vhci_hcd vhci_hcd.0: Device attached [ 191.184910][ T3380] vhci_hcd: vhci_device speed not set [ 191.244912][ T3380] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 191.619096][T15702] syz.2.4182 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 191.633263][T15702] CPU: 1 UID: 0 PID: 15702 Comm: syz.2.4182 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 191.644033][T15702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.654203][T15702] Call Trace: [ 191.657510][T15702] [ 191.660448][T15702] dump_stack_lvl+0xf2/0x150 [ 191.665105][T15702] dump_stack+0x15/0x1a [ 191.669282][T15702] dump_header+0x83/0x2d0 [ 191.673627][T15702] oom_kill_process+0x341/0x4c0 [ 191.678601][T15702] out_of_memory+0x9af/0xbe0 [ 191.683201][T15702] ? css_next_descendant_pre+0x11c/0x140 [ 191.688840][T15702] mem_cgroup_out_of_memory+0x13e/0x190 [ 191.694428][T15702] try_charge_memcg+0x508/0x7f0 [ 191.699354][T15702] obj_cgroup_charge_pages+0xbd/0x1a0 [ 191.704728][T15702] __memcg_kmem_charge_page+0x9d/0x170 [ 191.710206][T15702] __alloc_pages_noprof+0x1bc/0x340 [ 191.715418][T15702] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 191.720816][T15702] alloc_pages_noprof+0xe1/0x100 [ 191.725751][T15702] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 191.731681][T15702] __kvmalloc_node_noprof+0x121/0x170 [ 191.737076][T15702] ? ip_set_alloc+0x1f/0x30 [ 191.741643][T15702] ip_set_alloc+0x1f/0x30 [ 191.746004][T15702] hash_netiface_create+0x273/0x730 [ 191.751204][T15702] ? __nla_parse+0x40/0x60 [ 191.755620][T15702] ? __pfx_hash_netiface_create+0x10/0x10 [ 191.761336][T15702] ip_set_create+0x359/0x8a0 [ 191.766024][T15702] ? memchr+0x1/0x50 [ 191.769952][T15702] ? __nla_parse+0x40/0x60 [ 191.774366][T15702] nfnetlink_rcv_msg+0x4a9/0x570 [ 191.779364][T15702] netlink_rcv_skb+0x12c/0x230 [ 191.784159][T15702] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.789656][T15702] nfnetlink_rcv+0x16c/0x15d0 [ 191.794407][T15702] ? kmem_cache_free+0xdc/0x2d0 [ 191.799255][T15702] ? nlmon_xmit+0x51/0x60 [ 191.803577][T15702] ? __kfree_skb+0x102/0x150 [ 191.808177][T15702] ? consume_skb+0x49/0x160 [ 191.812673][T15702] ? nlmon_xmit+0x51/0x60 [ 191.816994][T15702] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 191.822407][T15702] ? __dev_queue_xmit+0xb6e/0x2090 [ 191.827511][T15702] ? ref_tracker_free+0x3a5/0x410 [ 191.832613][T15702] ? __dev_queue_xmit+0x186/0x2090 [ 191.837721][T15702] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 191.843177][T15702] netlink_unicast+0x599/0x670 [ 191.847949][T15702] netlink_sendmsg+0x5cc/0x6e0 [ 191.852709][T15702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.857988][T15702] __sock_sendmsg+0x140/0x180 [ 191.862700][T15702] ____sys_sendmsg+0x312/0x410 [ 191.867465][T15702] __sys_sendmsg+0x19d/0x230 [ 191.872058][T15702] __x64_sys_sendmsg+0x46/0x50 [ 191.876826][T15702] x64_sys_call+0x2734/0x2dc0 [ 191.881576][T15702] do_syscall_64+0xc9/0x1c0 [ 191.886110][T15702] ? clear_bhb_loop+0x55/0xb0 [ 191.890778][T15702] ? clear_bhb_loop+0x55/0xb0 [ 191.895443][T15702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.901401][T15702] RIP: 0033:0x7f323199ff19 [ 191.905805][T15702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.925462][T15702] RSP: 002b:00007f3230017058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.933865][T15702] RAX: ffffffffffffffda RBX: 00007f3231b65fa0 RCX: 00007f323199ff19 [ 191.941830][T15702] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 191.949798][T15702] RBP: 00007f3231a13986 R08: 0000000000000000 R09: 0000000000000000 [ 191.957846][T15702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.965809][T15702] R13: 0000000000000000 R14: 00007f3231b65fa0 R15: 00007ffece10afe8 [ 191.973821][T15702] [ 191.977008][T15702] memory: usage 307104kB, limit 307200kB, failcnt 2181 [ 191.977123][T15710] vhci_hcd: connection reset by peer [ 191.983847][T15702] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 191.997178][T15702] kmem: usage 306968kB, limit 9007199254740988kB, failcnt 0 [ 191.999690][ T28] vhci_hcd: stop threads [ 192.004502][T15702] Memory cgroup stats for /syz2: [ 192.008877][ T28] vhci_hcd: release socket [ 192.018249][ T28] vhci_hcd: disconnect device [ 192.023868][T15702] cache 126976 [ 192.027284][T15702] rss 4096 [ 192.030365][T15702] shmem 0 [ 192.033296][T15702] mapped_file 413696 [ 192.037239][T15702] dirty 0 [ 192.040223][T15702] writeback 0 [ 192.043613][T15702] workingset_refault_anon 432 [ 192.048317][T15702] workingset_refault_file 5092 [ 192.053245][T15702] swap 385024 [ 192.056548][T15702] swapcached 28672 [ 192.060265][T15702] pgpgin 296372 [ 192.063722][T15702] pgpgout 296334 [ 192.067300][T15702] pgfault 310615 [ 192.070857][T15702] pgmajfault 316 [ 192.074400][T15702] inactive_anon 0 [ 192.078071][T15702] active_anon 28672 [ 192.082071][T15702] inactive_file 0 [ 192.085807][T15702] active_file 4096 [ 192.089531][T15702] unevictable 122880 [ 192.093485][T15702] hierarchical_memory_limit 314572800 [ 192.098924][T15702] hierarchical_memsw_limit 9223372036854771712 [ 192.105126][T15702] total_cache 126976 [ 192.109040][T15702] total_rss 4096 [ 192.112616][T15702] total_shmem 0 [ 192.116112][T15702] total_mapped_file 413696 [ 192.120624][T15702] total_dirty 0 [ 192.124079][T15702] total_writeback 0 [ 192.127974][T15702] total_workingset_refault_anon 432 [ 192.133190][T15702] total_workingset_refault_file 5092 [ 192.138767][T15702] total_swap 385024 [ 192.142569][T15702] total_swapcached 28672 [ 192.146930][T15702] total_pgpgin 296372 [ 192.150934][T15702] total_pgpgout 296334 [ 192.155065][T15702] total_pgfault 310615 [ 192.159198][T15702] total_pgmajfault 316 [ 192.163257][T15702] total_inactive_anon 0 [ 192.167900][T15702] total_active_anon 28672 [ 192.172264][T15702] total_inactive_file 0 [ 192.172273][T15702] total_active_file 4096 [ 192.172310][T15702] total_unevictable 122880 [ 192.172319][T15702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4182,pid=15701,uid=0 [ 192.172391][T15702] Memory cgroup out of memory: Killed process 15701 (syz.2.4182) total-vm:95328kB, anon-rss:744kB, file-rss:22532kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 192.533018][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4191'. [ 192.630383][T15741] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4193'. [ 192.765921][T15732] netlink: 'syz.2.4190': attribute type 10 has an invalid length. [ 192.779974][T15732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.920802][T15760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.941413][T15760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.025046][T15762] xt_hashlimit: max too large, truncated to 1048576 [ 193.196210][T15770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15770 comm=syz.4.4206 [ 193.212978][T15771] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 193.219675][T15771] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.227246][T15771] vhci_hcd vhci_hcd.0: Device attached [ 193.446993][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4207'. [ 193.502580][T15784] netlink: 'syz.3.4211': attribute type 10 has an invalid length. [ 193.511511][T15784] batman_adv: batadv0: Adding interface: macvlan0 [ 193.518006][T15784] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.543968][T15784] batman_adv: batadv0: Interface activated: macvlan0 [ 193.662813][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.672651][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.695542][T15801] xt_hashlimit: max too large, truncated to 1048576 [ 193.762928][T15805] ebt_limit: overflow, try lower: 570423552/2483027968 [ 193.819590][T15811] __nla_validate_parse: 4 callbacks suppressed [ 193.819609][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4222'. [ 193.842560][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'. [ 193.971251][T15772] vhci_hcd: connection closed [ 193.975974][ T2203] vhci_hcd: stop threads [ 193.985057][ T2203] vhci_hcd: release socket [ 193.989473][ T2203] vhci_hcd: disconnect device [ 194.014589][T15818] bridge_slave_0: left allmulticast mode [ 194.020354][T15818] bridge_slave_0: left promiscuous mode [ 194.026007][T15818] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.037486][T15818] bridge_slave_1: left allmulticast mode [ 194.043152][T15818] bridge_slave_1: left promiscuous mode [ 194.048880][T15818] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.063853][T15818] bond0: (slave bond_slave_0): Releasing backup interface [ 194.073781][T15818] bond0: (slave bond_slave_1): Releasing backup interface [ 194.085735][T15818] team0: Port device team_slave_0 removed [ 194.096566][T15818] team0: Port device team_slave_1 removed [ 194.103864][T15818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.111418][T15818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.120876][T15818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.128528][T15818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.213445][T15823] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4227'. [ 194.247715][T15831] xt_hashlimit: max too large, truncated to 1048576 [ 194.270322][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4232'. [ 194.445420][T15849] syzkaller0: entered promiscuous mode [ 194.450977][T15849] syzkaller0: entered allmulticast mode [ 194.515206][T15854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.534894][T15854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.571352][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4242'. [ 194.702051][T15872] loop5: detected capacity change from 0 to 512 [ 194.710418][T15872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.724148][T15872] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.741184][T15872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 194.749520][T15872] System zones: 0-2, 18-18, 34-34 [ 194.757217][T15872] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 194.775965][T15872] EXT4-fs (loop5): 1 truncate cleaned up [ 194.793434][T15872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.815638][T15872] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4249: corrupted xattr block 19: invalid header [ 194.829390][T15872] EXT4-fs (loop5): Remounting filesystem read-only [ 194.836302][T15872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 194.864926][T15872] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 194.884803][T15872] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 194.904477][T15872] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 194.931220][T12387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.074421][T15883] xt_hashlimit: max too large, truncated to 1048576 [ 195.115734][T15885] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 195.173977][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4257'. [ 195.396513][T15914] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 195.445961][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 195.445976][ T29] audit: type=1326 audit(1733206337.058:16239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.446116][ T29] audit: type=1326 audit(1733206337.058:16240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.448524][ T29] audit: type=1326 audit(1733206337.058:16241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.448685][ T29] audit: type=1326 audit(1733206337.058:16242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.449261][ T29] audit: type=1326 audit(1733206337.058:16243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.449930][ T29] audit: type=1326 audit(1733206337.058:16244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.450134][ T29] audit: type=1326 audit(1733206337.058:16245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.451356][ T29] audit: type=1326 audit(1733206337.058:16246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.452143][ T29] audit: type=1326 audit(1733206337.058:16247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.453912][ T29] audit: type=1326 audit(1733206337.058:16248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15916 comm="syz.2.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323199ff19 code=0x7ffc0000 [ 195.529767][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4266'. [ 195.745890][T15922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.745952][T15922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.008961][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4269'. [ 196.113695][T15948] netlink: 'syz.2.4271': attribute type 10 has an invalid length. [ 196.121579][T15948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4271'. [ 196.164716][T15948] batman_adv: batadv0: Adding interface: macvlan0 [ 196.171262][T15948] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.224998][T15948] batman_adv: batadv0: Interface activated: macvlan0 [ 196.246436][T15969] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 196.277436][ T3380] usb 3-1: enqueue for inactive port 0 [ 196.295771][ T3380] usb 3-1: enqueue for inactive port 0 [ 196.348561][T15984] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4279'. [ 196.375646][ T3380] vhci_hcd: vhci_device speed not set [ 196.569100][T16002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.584150][T16002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.623706][T16010] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 196.745110][T16025] FAULT_INJECTION: forcing a failure. [ 196.745110][T16025] name failslab, interval 1, probability 0, space 0, times 0 [ 196.758071][T16025] CPU: 1 UID: 0 PID: 16025 Comm: syz.3.4296 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 196.768849][T16025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.778907][T16025] Call Trace: [ 196.782191][T16025] [ 196.785127][T16025] dump_stack_lvl+0xf2/0x150 [ 196.789749][T16025] dump_stack+0x15/0x1a [ 196.794035][T16025] should_fail_ex+0x223/0x230 [ 196.798727][T16025] should_failslab+0x8f/0xb0 [ 196.803404][T16025] __kmalloc_node_noprof+0xad/0x410 [ 196.808614][T16025] ? __kvmalloc_node_noprof+0x72/0x170 [ 196.814179][T16025] __kvmalloc_node_noprof+0x72/0x170 [ 196.819483][T16025] rhashtable_init_noprof+0x312/0x450 [ 196.824876][T16025] rhltable_init_noprof+0x1e/0x40 [ 196.829944][T16025] nf_tables_newtable+0x556/0xf20 [ 196.835031][T16025] nfnetlink_rcv+0xb3e/0x15d0 [ 196.839804][T16025] ? kmem_cache_free+0xdc/0x2d0 [ 196.844678][T16025] netlink_unicast+0x599/0x670 [ 196.849537][T16025] netlink_sendmsg+0x5cc/0x6e0 [ 196.854335][T16025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.859719][T16025] __sock_sendmsg+0x140/0x180 [ 196.864439][T16025] ____sys_sendmsg+0x312/0x410 [ 196.869276][T16025] __sys_sendmsg+0x19d/0x230 [ 196.873905][T16025] __x64_sys_sendmsg+0x46/0x50 [ 196.878685][T16025] x64_sys_call+0x2734/0x2dc0 [ 196.883398][T16025] do_syscall_64+0xc9/0x1c0 [ 196.887903][T16025] ? clear_bhb_loop+0x55/0xb0 [ 196.892587][T16025] ? clear_bhb_loop+0x55/0xb0 [ 196.897311][T16025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.903227][T16025] RIP: 0033:0x7fc81c78ff19 [ 196.907716][T16025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.927406][T16025] RSP: 002b:00007fc81ae07058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.935877][T16025] RAX: ffffffffffffffda RBX: 00007fc81c955fa0 RCX: 00007fc81c78ff19 [ 196.943904][T16025] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000004 [ 196.951882][T16025] RBP: 00007fc81ae070a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.959868][T16025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.967847][T16025] R13: 0000000000000000 R14: 00007fc81c955fa0 R15: 00007ffc6695a158 [ 196.975839][T16025] [ 197.208678][T16050] xt_hashlimit: max too large, truncated to 1048576 [ 197.379106][T16063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16063 comm=syz.2.4310 [ 197.957372][T16070] syzkaller0: entered promiscuous mode [ 197.962934][T16070] syzkaller0: entered allmulticast mode [ 198.051515][T16074] serio: Serial port ttyS3 [ 198.216518][T16087] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 198.372237][T16108] syzkaller0: entered promiscuous mode [ 198.377777][T16108] syzkaller0: entered allmulticast mode [ 198.492960][T16135] syzkaller0: entered promiscuous mode [ 198.498581][T16135] syzkaller0: entered allmulticast mode [ 198.826541][T16187] syzkaller0: entered promiscuous mode [ 198.832206][T16187] syzkaller0: entered allmulticast mode [ 198.913780][T16209] syzkaller0: entered promiscuous mode [ 198.919327][T16209] syzkaller0: entered allmulticast mode [ 198.922208][T16210] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.116861][T16226] __nla_validate_parse: 13 callbacks suppressed [ 199.116917][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 199.341874][T16255] syzkaller0: entered promiscuous mode [ 199.347444][T16255] syzkaller0: entered allmulticast mode [ 199.392317][T16256] syzkaller0: entered promiscuous mode [ 199.397880][T16256] syzkaller0: entered allmulticast mode [ 199.638328][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4363'. [ 199.824283][T16308] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 199.919472][T16310] syzkaller0: entered promiscuous mode [ 199.926693][T16310] syzkaller0: entered allmulticast mode [ 200.058916][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4376'. [ 200.417083][T16381] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4383'. [ 200.494891][T16390] serio: Serial port ttyS3 [ 200.503200][T16397] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4387'. [ 200.537968][T16398] syzkaller0: entered promiscuous mode [ 200.543512][T16398] syzkaller0: entered allmulticast mode [ 200.634900][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4389'. [ 200.705378][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4390'. [ 200.812269][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 200.812285][ T29] audit: type=1326 audit(1733206342.418:16544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.2.4392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323199ff19 code=0x0 [ 201.029417][ T29] audit: type=1326 audit(1733206342.638:16545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16442 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.083597][ T29] audit: type=1326 audit(1733206342.658:16546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16442 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.107263][ T29] audit: type=1326 audit(1733206342.658:16547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16442 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.130970][ T29] audit: type=1326 audit(1733206342.668:16548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16442 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.185726][T16455] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4398'. [ 201.223378][ T29] audit: type=1326 audit(1733206342.828:16549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.228180][T16464] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4401'. [ 201.268691][ T29] audit: type=1326 audit(1733206342.858:16550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.292459][ T29] audit: type=1326 audit(1733206342.858:16551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.316114][ T29] audit: type=1326 audit(1733206342.858:16552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.339704][ T29] audit: type=1326 audit(1733206342.858:16553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5727ff19 code=0x7ffc0000 [ 201.376463][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'. [ 201.467250][T16468] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 201.544685][T16482] syzkaller0: entered promiscuous mode [ 201.550320][T16482] syzkaller0: entered allmulticast mode [ 201.645232][T16506] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 201.777323][T16528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16528 comm=syz.4.4418 [ 201.858892][T16537] syzkaller0: entered promiscuous mode [ 201.864410][T16537] syzkaller0: entered allmulticast mode [ 201.980931][T16550] ebt_limit: overflow, try lower: 570423552/2483027968 [ 202.122250][T16553] netlink: 'syz.2.4429': attribute type 10 has an invalid length. [ 202.133426][T16553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.387760][T16573] syzkaller0: entered promiscuous mode [ 202.393332][T16573] syzkaller0: entered allmulticast mode [ 202.471812][T16577] FAULT_INJECTION: forcing a failure. [ 202.471812][T16577] name failslab, interval 1, probability 0, space 0, times 0 [ 202.484542][T16577] CPU: 1 UID: 0 PID: 16577 Comm: syz.1.4440 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 202.495315][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.505378][T16577] Call Trace: [ 202.508680][T16577] [ 202.511623][T16577] dump_stack_lvl+0xf2/0x150 [ 202.516277][T16577] dump_stack+0x15/0x1a [ 202.520518][T16577] should_fail_ex+0x223/0x230 [ 202.525198][T16577] should_failslab+0x8f/0xb0 [ 202.529954][T16577] kmem_cache_alloc_noprof+0x52/0x320 [ 202.535389][T16577] ? alloc_empty_file+0xd0/0x200 [ 202.540338][T16577] alloc_empty_file+0xd0/0x200 [ 202.545129][T16577] path_openat+0x6a/0x1fa0 [ 202.549563][T16577] ? next_uptodate_folio+0x80b/0x890 [ 202.554981][T16577] ? percpu_counter_add_batch+0xc6/0x140 [ 202.560652][T16577] ? __rcu_read_unlock+0x34/0x70 [ 202.565683][T16577] ? filemap_map_pages+0x8c6/0xb30 [ 202.570823][T16577] ? cgroup_rstat_updated+0x9f/0x570 [ 202.576143][T16577] do_filp_open+0x107/0x230 [ 202.580666][T16577] do_sys_openat2+0xab/0x120 [ 202.585260][T16577] __x64_sys_openat+0xf3/0x120 [ 202.590103][T16577] x64_sys_call+0x2b30/0x2dc0 [ 202.594782][T16577] do_syscall_64+0xc9/0x1c0 [ 202.599426][T16577] ? clear_bhb_loop+0x55/0xb0 [ 202.604110][T16577] ? clear_bhb_loop+0x55/0xb0 [ 202.608787][T16577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.614778][T16577] RIP: 0033:0x7f4cdcc1e880 [ 202.619267][T16577] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 202.638895][T16577] RSP: 002b:00007f4cdb296b90 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 202.647421][T16577] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f4cdcc1e880 [ 202.655399][T16577] RDX: 0000000000101301 RSI: 00007f4cdb296c30 RDI: 00000000ffffff9c [ 202.663432][T16577] RBP: 00007f4cdb296c30 R08: 0000000000000000 R09: 0000000000000000 [ 202.671473][T16577] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 202.679437][T16577] R13: 0000000000000001 R14: 00007f4cdcde5fa0 R15: 00007fff0e67f868 [ 202.679461][T16577] [ 202.762838][T16546] syz.3.4427 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 202.773917][T16546] CPU: 0 UID: 0 PID: 16546 Comm: syz.3.4427 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 202.784708][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.794947][T16546] Call Trace: [ 202.798272][T16546] [ 202.801201][T16546] dump_stack_lvl+0xf2/0x150 [ 202.805848][T16546] dump_stack+0x15/0x1a [ 202.810151][T16546] dump_header+0x83/0x2d0 [ 202.814474][T16546] oom_kill_process+0x341/0x4c0 [ 202.819323][T16546] out_of_memory+0x9af/0xbe0 [ 202.824060][T16546] ? css_next_descendant_pre+0x11c/0x140 [ 202.829774][T16546] mem_cgroup_out_of_memory+0x13e/0x190 [ 202.835322][T16546] try_charge_memcg+0x508/0x7f0 [ 202.840246][T16546] charge_memcg+0x50/0xc0 [ 202.844590][T16546] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 202.850602][T16546] __read_swap_cache_async+0x236/0x480 [ 202.856060][T16546] swap_cluster_readahead+0x381/0x3f0 [ 202.861430][T16546] swapin_readahead+0xe4/0x6f0 [ 202.866240][T16546] ? __rcu_read_unlock+0x34/0x70 [ 202.871296][T16546] ? swap_cache_get_folio+0x77/0x210 [ 202.876577][T16546] do_swap_page+0x31b/0x2550 [ 202.881161][T16546] ? __rcu_read_lock+0x36/0x50 [ 202.885988][T16546] ? __pfx_default_wake_function+0x10/0x10 [ 202.891890][T16546] handle_mm_fault+0x8e4/0x2ac0 [ 202.896749][T16546] exc_page_fault+0x3b9/0x650 [ 202.901424][T16546] asm_exc_page_fault+0x26/0x30 [ 202.906293][T16546] RIP: 0033:0x7fc81c662888 [ 202.910699][T16546] Code: 31 d2 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 38 53 2f 00 00 0f 8e 99 fd ff ff e8 11 d7 fe ff 49 39 c4 72 64 0f 1f 40 00 <69> 3d 06 2e e2 00 e8 03 00 00 48 8d 1d 07 37 2f 00 e8 d2 d5 12 00 [ 202.930501][T16546] RSP: 002b:00007ffc6695a2c0 EFLAGS: 00010212 [ 202.936559][T16546] RAX: 00000000000317f2 RBX: 00007fc81c957ba0 RCX: 0000000000031510 [ 202.944544][T16546] RDX: 00000000000002e2 RSI: 00007ffc6695a2a0 RDI: 0000000000000001 [ 202.952507][T16546] RBP: 00007fc81c957ba0 R08: 000000002c0419eb R09: 7fffffffffffffff [ 202.960469][T16546] R10: 00007fc81c92a038 R11: 0000000000000010 R12: 0000000000031800 [ 202.968439][T16546] R13: 00007fc81c956080 R14: 0000000000000032 R15: ffffffffffffffff [ 202.976519][T16546] [ 202.979766][T16546] memory: usage 307200kB, limit 307200kB, failcnt 6978 [ 202.986748][T16546] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 202.994915][T16546] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 203.002286][T16546] Memory cgroup stats for /syz3: [ 203.009069][T16546] cache 0 [ 203.017040][T16546] rss 0 [ 203.019798][T16546] shmem 0 [ 203.022719][T16546] mapped_file 413696 [ 203.026649][T16546] dirty 0 [ 203.029732][T16546] writeback 0 [ 203.033018][T16546] workingset_refault_anon 154 [ 203.037731][T16546] workingset_refault_file 2236 [ 203.042543][T16546] swap 393216 [ 203.045948][T16546] swapcached 0 [ 203.049315][T16546] pgpgin 367050 [ 203.052849][T16546] pgpgout 367050 [ 203.056489][T16546] pgfault 339327 [ 203.060026][T16546] pgmajfault 130 [ 203.063619][T16546] inactive_anon 0 [ 203.067309][T16546] active_anon 0 [ 203.070832][T16546] inactive_file 0 [ 203.074493][T16546] active_file 0 [ 203.078010][T16546] unevictable 0 [ 203.081502][T16546] hierarchical_memory_limit 314572800 [ 203.086954][T16546] hierarchical_memsw_limit 9223372036854771712 [ 203.093114][T16546] total_cache 0 [ 203.096603][T16546] total_rss 0 [ 203.099880][T16546] total_shmem 0 [ 203.103316][T16546] total_mapped_file 413696 [ 203.107874][T16546] total_dirty 0 [ 203.111395][T16546] total_writeback 0 [ 203.115327][T16546] total_workingset_refault_anon 629 [ 203.120511][T16546] total_workingset_refault_file 3010 [ 203.125801][T16546] total_swap 393216 [ 203.129599][T16546] total_swapcached 0 [ 203.133469][T16546] total_pgpgin 538340 [ 203.137452][T16546] total_pgpgout 538340 [ 203.141510][T16546] total_pgfault 508004 [ 203.145585][T16546] total_pgmajfault 384 [ 203.149646][T16546] total_inactive_anon 0 [ 203.154250][T16546] total_active_anon 0 [ 203.158719][T16546] total_inactive_file 0 [ 203.162888][T16546] total_active_file 0 [ 203.166881][T16546] total_unevictable 0 [ 203.170902][T16546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4427,pid=16546,uid=0 [ 203.185575][T16546] Memory cgroup out of memory: Killed process 16546 (syz.3.4427) total-vm:95328kB, anon-rss:616kB, file-rss:22464kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 203.416967][T16600] syzkaller0: entered promiscuous mode [ 203.422486][T16600] syzkaller0: entered allmulticast mode [ 203.590845][T16611] loop5: detected capacity change from 0 to 128 [ 203.714168][T16613] syz.5.4456: attempt to access beyond end of device [ 203.714168][T16613] loop5: rw=2049, sector=388, nr_sectors = 8 limit=128 [ 203.744819][T16613] syz.5.4456: attempt to access beyond end of device [ 203.744819][T16613] loop5: rw=2049, sector=452, nr_sectors = 8 limit=128 [ 203.782992][T16613] syz.5.4456: attempt to access beyond end of device [ 203.782992][T16613] loop5: rw=2049, sector=476, nr_sectors = 8 limit=128 [ 203.803519][T16615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16615 comm=syz.1.4457 [ 203.825027][T16613] syz.5.4456: attempt to access beyond end of device [ 203.825027][T16613] loop5: rw=2049, sector=508, nr_sectors = 8 limit=128 [ 203.839652][T16613] syz.5.4456: attempt to access beyond end of device [ 203.839652][T16613] loop5: rw=2049, sector=532, nr_sectors = 8 limit=128 [ 203.854301][T16613] syz.5.4456: attempt to access beyond end of device [ 203.854301][T16613] loop5: rw=2049, sector=548, nr_sectors = 8 limit=128 [ 203.877190][T16613] syz.5.4456: attempt to access beyond end of device [ 203.877190][T16613] loop5: rw=2049, sector=572, nr_sectors = 8 limit=128 [ 203.890910][T16613] syz.5.4456: attempt to access beyond end of device [ 203.890910][T16613] loop5: rw=2049, sector=596, nr_sectors = 32 limit=128 [ 203.905838][T16613] syz.5.4456: attempt to access beyond end of device [ 203.905838][T16613] loop5: rw=2049, sector=636, nr_sectors = 8 limit=128 [ 203.919568][T16613] syz.5.4456: attempt to access beyond end of device [ 203.919568][T16613] loop5: rw=2049, sector=652, nr_sectors = 8 limit=128 [ 204.189658][T16631] loop5: detected capacity change from 0 to 164 [ 204.211659][T16631] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 204.305131][T12387] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 204.313478][T12387] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 204.331403][T12387] VFS: Lookup of '' in iso9660 loop5 would have caused loop [ 204.339050][T12387] VFS: Lookup of '' in iso9660 loop5 would have caused loop [ 204.389514][T16639] __nla_validate_parse: 7 callbacks suppressed [ 204.389529][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4467'. [ 204.566463][T16666] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4472'. [ 204.602007][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.688656][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.716462][T16686] netlink: 'syz.3.4473': attribute type 10 has an invalid length. [ 204.754740][T16686] team0: Cannot enslave team device to itself [ 204.766744][T16686] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.784813][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.905375][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.996217][T16671] chnl_net:caif_netlink_parms(): no params data found [ 205.046385][ T57] bridge_slave_1: left allmulticast mode [ 205.052098][ T57] bridge_slave_1: left promiscuous mode [ 205.057952][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.109087][ T57] bridge_slave_0: left allmulticast mode [ 205.114755][ T57] bridge_slave_0: left promiscuous mode [ 205.120673][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.201796][T16720] ebt_limit: overflow, try lower: 570423552/2483027968 [ 205.228302][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.234247][T16718] ebt_limit: overflow, try lower: 570423552/2483027968 [ 205.246155][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.256183][ T57] bond0 (unregistering): Released all slaves [ 205.337216][T16715] syzkaller0: entered promiscuous mode [ 205.342735][T16715] syzkaller0: entered allmulticast mode [ 205.409087][ T57] hsr_slave_0: left promiscuous mode [ 205.415354][ T57] hsr_slave_1: left promiscuous mode [ 205.423659][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.431132][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.441866][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.449392][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.461553][ T57] veth1_vlan: left promiscuous mode [ 205.466837][ T57] veth0_vlan: left promiscuous mode [ 205.534772][ T57] team0 (unregistering): Port device team_slave_1 removed [ 205.548697][ T57] team0 (unregistering): Port device team_slave_0 removed [ 205.644075][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.651259][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.658593][T16671] bridge_slave_0: entered allmulticast mode [ 205.665109][T16671] bridge_slave_0: entered promiscuous mode [ 205.672013][T16671] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.679349][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.686693][T16671] bridge_slave_1: entered allmulticast mode [ 205.693137][T16671] bridge_slave_1: entered promiscuous mode [ 205.699594][T16741] netlink: 'syz.4.4485': attribute type 10 has an invalid length. [ 205.710315][T16741] team0: Cannot enslave team device to itself [ 205.717475][T16741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 205.760500][T16743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.779088][T16671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.787242][T16743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.796223][T16671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.814770][T16747] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 205.829541][T16671] team0: Port device team_slave_0 added [ 205.838147][T16671] team0: Port device team_slave_1 added [ 205.865675][T16671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.872654][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.898727][T16671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.912480][T16671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.919501][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.945486][T16671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.994258][T16768] syzkaller0: entered promiscuous mode [ 205.999814][T16768] syzkaller0: entered allmulticast mode [ 206.048807][T16671] hsr_slave_0: entered promiscuous mode [ 206.055438][T16671] hsr_slave_1: entered promiscuous mode [ 206.101094][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 206.101109][ T29] audit: type=1326 audit(1733206347.708:16863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16770 comm="syz.2.4492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323199ff19 code=0x0 [ 206.136058][T16773] FAULT_INJECTION: forcing a failure. [ 206.136058][T16773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.149405][T16773] CPU: 1 UID: 0 PID: 16773 Comm: syz.3.4490 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 206.160221][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.170288][T16773] Call Trace: [ 206.173577][T16773] [ 206.176507][T16773] dump_stack_lvl+0xf2/0x150 [ 206.181122][T16773] dump_stack+0x15/0x1a [ 206.185322][T16773] should_fail_ex+0x223/0x230 [ 206.190004][T16773] should_fail_alloc_page+0xfd/0x110 [ 206.195423][T16773] __alloc_pages_noprof+0x109/0x340 [ 206.200634][T16773] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 206.206073][T16773] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 206.211454][T16773] handle_mm_fault+0xdd7/0x2ac0 [ 206.216394][T16773] exc_page_fault+0x3b9/0x650 [ 206.221251][T16773] asm_exc_page_fault+0x26/0x30 [ 206.226125][T16773] RIP: 0033:0x7fc81c6518e3 [ 206.230537][T16773] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 206.250156][T16773] RSP: 002b:00007fc81adc44c0 EFLAGS: 00010202 [ 206.256271][T16773] RAX: 0000000000001000 RBX: 00007fc81adc4560 RCX: 00007fc8129a5000 [ 206.264248][T16773] RDX: 00007fc81adc4700 RSI: 0000000000000000 RDI: 00007fc81adc4600 [ 206.272221][T16773] RBP: 00000000000000dc R08: 000000000000000a R09: 000000000000039e [ 206.280247][T16773] R10: 00000000000003c4 R11: 00007fc81adc4560 R12: 0000000000000001 [ 206.288244][T16773] R13: 00007fc81c818300 R14: 000000000000007f R15: 00007fc81adc4600 [ 206.296242][T16773] [ 206.299338][T16773] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 206.599772][ T29] audit: type=1326 audit(1733206348.208:16864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.634677][T16671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 206.646164][T16790] netlink: 'syz.1.4493': attribute type 10 has an invalid length. [ 206.660971][ T29] audit: type=1326 audit(1733206348.238:16865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.684601][ T29] audit: type=1326 audit(1733206348.238:16866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.709314][ T29] audit: type=1326 audit(1733206348.238:16867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.732926][ T29] audit: type=1326 audit(1733206348.238:16868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.756533][ T29] audit: type=1326 audit(1733206348.238:16869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.774961][T16790] team0: Cannot enslave team device to itself [ 206.780653][ T29] audit: type=1326 audit(1733206348.248:16870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.787704][T16790] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.810207][ T29] audit: type=1326 audit(1733206348.248:16871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.828572][T16671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 206.849154][ T29] audit: type=1326 audit(1733206348.248:16872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16778 comm="syz.1.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdcc1ff19 code=0x7ffc0000 [ 206.929022][T16802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4495'. [ 206.976549][T16671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.976681][T16802] ================================================================== [ 206.991338][T16802] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 206.997934][T16802] [ 207.000264][T16802] write to 0xffffffff86669778 of 8 bytes by task 16671 on cpu 1: [ 207.007983][T16802] data_alloc+0x291/0x2c0 [ 207.012320][T16802] prb_reserve+0x85e/0xb60 [ 207.016732][T16802] vprintk_store+0x558/0x870 [ 207.021324][T16802] vprintk_emit+0x15e/0x680 [ 207.025835][T16802] dev_vprintk_emit+0x1df/0x210 [ 207.030695][T16802] dev_printk_emit+0x82/0xb0 [ 207.035291][T16802] __netdev_printk+0x352/0x3e0 [ 207.040071][T16802] netdev_info+0x99/0xc0 [ 207.044329][T16802] dev_change_name+0x5a5/0x610 [ 207.049104][T16802] do_setlink+0x524/0x22c0 [ 207.053522][T16802] rtnl_newlink+0xd9a/0x1200 [ 207.058116][T16802] rtnetlink_rcv_msg+0x651/0x710 [ 207.063062][T16802] netlink_rcv_skb+0x12c/0x230 [ 207.067828][T16802] rtnetlink_rcv+0x1c/0x30 [ 207.072241][T16802] netlink_unicast+0x599/0x670 [ 207.077008][T16802] netlink_sendmsg+0x5cc/0x6e0 [ 207.081772][T16802] __sock_sendmsg+0x140/0x180 [ 207.086457][T16802] __sys_sendto+0x1a8/0x230 [ 207.090963][T16802] __x64_sys_sendto+0x78/0x90 [ 207.095638][T16802] x64_sys_call+0x29fa/0x2dc0 [ 207.100317][T16802] do_syscall_64+0xc9/0x1c0 [ 207.104821][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.110733][T16802] [ 207.113052][T16802] read to 0xffffffff86669778 of 8 bytes by task 16802 on cpu 0: [ 207.120680][T16802] prb_reserve+0x235/0xb60 [ 207.125116][T16802] vprintk_store+0x558/0x870 [ 207.129805][T16802] vprintk_emit+0x15e/0x680 [ 207.134316][T16802] vprintk_default+0x26/0x30 [ 207.138912][T16802] vprintk+0x75/0x80 [ 207.142978][T16802] _printk+0x7a/0xa0 [ 207.146902][T16802] __nla_validate_parse+0x1881/0x1e30 [ 207.152285][T16802] __nla_parse+0x40/0x60 [ 207.156539][T16802] rtnl_newlink+0xed/0x1200 [ 207.161040][T16802] rtnetlink_rcv_msg+0x651/0x710 [ 207.165978][T16802] netlink_rcv_skb+0x12c/0x230 [ 207.170755][T16802] rtnetlink_rcv+0x1c/0x30 [ 207.175194][T16802] netlink_unicast+0x599/0x670 [ 207.179965][T16802] netlink_sendmsg+0x5cc/0x6e0 [ 207.184740][T16802] __sock_sendmsg+0x140/0x180 [ 207.189436][T16802] ____sys_sendmsg+0x312/0x410 [ 207.194210][T16802] __sys_sendmsg+0x19d/0x230 [ 207.198805][T16802] __x64_sys_sendmsg+0x46/0x50 [ 207.203579][T16802] x64_sys_call+0x2734/0x2dc0 [ 207.208261][T16802] do_syscall_64+0xc9/0x1c0 [ 207.212774][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.218684][T16802] [ 207.221009][T16802] value changed: 0xfffffffffffcfd40 -> 0x000000000005aa10 [ 207.228120][T16802] [ 207.230449][T16802] Reported by Kernel Concurrency Sanitizer on: [ 207.236590][T16802] CPU: 0 UID: 0 PID: 16802 Comm: syz.3.4495 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 207.247353][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.257430][T16802] ================================================================== [ 206.976542][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4495'. [ 207.321993][T16814] syzkaller0: entered promiscuous mode [ 207.327586][T16814] syzkaller0: entered allmulticast mode [ 207.343319][T16671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 207.422704][T16671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.445459][T16671] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.455028][ T2203] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.462187][ T2203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.482286][T16671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.492669][T16671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.519862][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.526966][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.603745][T16671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.723912][T16671] veth0_vlan: entered promiscuous mode [ 207.733962][T16671] veth1_vlan: entered promiscuous mode [ 207.748764][T16671] veth0_macvtap: entered promiscuous mode [ 207.756502][T16671] veth1_macvtap: entered promiscuous mode [ 207.767469][T16671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.778020][T16671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.788005][T16671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.798486][T16671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.808394][T16671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.818840][T16671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.829482][T16671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.849015][T16671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.859553][T16671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.869371][T16671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.879845][T16671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.889768][T16671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.900292][T16671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.911002][T16671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.920580][T16671] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.929347][T16671] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.938154][T16671] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.946968][T16671] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0