last executing test programs: 3.413458318s ago: executing program 4 (id=2192): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sync() 3.351154952s ago: executing program 4 (id=2193): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xa9eb, 0x8, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)=0x0) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}}, 0x0) 3.231229767s ago: executing program 0 (id=2197): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000900)={@local, 0x0}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x9, 0x1, {{0x1b, 0x4, 0x2, 0x2, 0x6c, 0x68, 0x0, 0xe5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0xd4}, @lsrr={0x83, 0xf, 0x58, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @generic={0x89, 0x11, "87d7ebec2764f15d9f49bf59a43f73"}, @timestamp={0x44, 0x4, 0xd8, 0x0, 0xb}, @generic={0x9e, 0xf, "1f9ba3e91d994d3c31a32d7e19"}, @timestamp_addr={0x44, 0x14, 0x3e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x47a}, {@multicast2, 0x677e}]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0xb, [{@multicast1, 0x7f95}]}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xfffffffffffffd64, &(0x7f0000000d40)={&(0x7f0000000e40)=ANY=[@ANYBLOB="780000003f1090936e30879eed305e66fa1b1c12a5e21eb153d7fa36dd2e76e7dd2e405f5af845a8fb00459c3dd51a112659f2e03e7c56e57ec3b307134bef367c22b888850ac7de899d0f1b67bc7a2e4fca7d6ca9c80886cd7b36431979b2aa5c19c95c60b8624c8e264d439e0e868c26b048", @ANYRES64=r2, @ANYBLOB="08ca0025bd00000100df250300edff6400018008a732d1329c84258f9e1f330a9c5557d654823959579319742e899e71e022a67bceae8c0747de4e865e6966d9827527c4ea31cdf34d7e85efcf7896cf271dbdd4bc292ff16981a789f46b5fd8afd4", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6272696467", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="14000200200000c7f762e5a113abb756f9ed"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) socket$packet(0x11, 0x3, 0x300) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.888169602s ago: executing program 4 (id=2199): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x18) 2.348765256s ago: executing program 0 (id=2209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82902, 0x5f) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) write(r1, &(0x7f0000000200)="d7", 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.222663312s ago: executing program 1 (id=2211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 2.190177543s ago: executing program 1 (id=2212): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (fail_nth: 2) 1.79565976s ago: executing program 4 (id=2215): preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) lchown(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.697963375s ago: executing program 1 (id=2216): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x9d29f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x110892, 0x7ff, 0x9, 0x6, 0xb, 0x2, 0xcde, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd5\xaa\xb7\x10\x80>\xbc \x1f\xa6\r\xd2=v\xd1\x14\x99\x1d\x7f\xc0\x8f\x88\x9a\x1f\xb9\xc5\xd7h^9\xb7\x8a\xac\xea\x93\x05\x80\xa9\xb3\x03\xbf\xb4\\\xc2\x86\a\xbbF>\x1dY]&\xce\x0e\x8c$\x1b\x10\x05\xda\xafs\xca-\xcd?q\x94Z\xd8\xfa\x17\xa3\x8f\x9a\xbc\xb5p/\xad\xfb\x80\xf2\xbb\x9d\xf1:\x82m\xc5\xadf\x98l\x9e\xe3;\x1dV\xe51P\xce\x1f\xbe\xb1\xbb\x99\'M\x90(\xccTa\xa1V\xf1\x84O\x87\xc2\xfc\xf3H\xf7\xfc\xc7\xc1F\'n\xd2\xe4M\r\x83\xd4s\xd5\xa4\xbf\xca\x8b\tZ\xc9\x14\x11F\xd2\x85F1\xb0k\x15\x14\xf1\x06\xc2\xc8g\xfb5c*9MYsX\xdc\xd7\xb6b\xa8\x9d}-\x9ab\x801\xdd\xa4\xfb\xaey\xb1v\xa8\x16ueE\x1e\xae\xfb\xf6I\x8c@\x91\xc9)N9\xfa\x05\x15\xb1\xfaB\xa8\x8a\xc5\xc4\xbf\x80\x19?\xfb\x15\xf2 \\\x8d9\';\xc3RY\xbd\x900\xb8\xcf>\x11h4+;\xe7\xf1n\xe1\xc3\x9d\x97L5\x82\xca\xee\x85Z\x99\x17\xa7c\xc4\x8c\xde\x12\xf1\xe1!\x90lL\x00\x00\x00\x00\x00\x00\x00\x00\xc0i\x9ac\x7f8\x91Kp\xad\a\xe7r\x7f\x87A\x17\xac\xe7\xeb\xf4\xfb\xcd\xef_\x02\xab\x8d\xfa\xc9\xd6\v\xe2\xe1\x1dL){\xf6G\x81\x8e\xee@ ^\x88\xd4\xc1\xa3\n{\xa5\x98YOg\x94\xc5D8\xb4`\x85\x13\xfbn\x8a\xc0\xfdrFm\xfc\xf7\xfd\xdcp\xac\xfbm+\x06F\xd2A\xff$\x1b\x12M\xba\x8a\x19M\xaf\xce\xe8\x15)aD\xd6x\x89\xb1\x8ad\xd0\xdc2\x81\x97\x19&\x8f\xd8\x1c\xed\"\xa1\xaf\x8e\x1f^\xcd\x80M\xfe\x7f\xeee\xe0\x833\xc4\xe5\xb9=\x84\xa6\xd9\xa2\x98\xb3\xc4Ll]]\xca\x9d\x89\"\xb5}W/De\x05\xf5\xa6\xca\x7fR8\x8dH\xbfJ)\x8c\'\x9b\xc8\xd42\xcb\x8c7a\x85\xe4\xdaM=z\xbd\xa0\xa6\xc0\x93z\xe5s8\xd4\xe3\xdb\xcdY\x94\x83d\x81\xeb\xbb\'e\xe5R\xbc\xdd\x8ax\xf3\xf3Yh\xb2\xaf\xaf\xe5\xfb3\x1ey\x1f\x9a\'\xc2\xf7\'Lf\x92\x88\n\xc2\x96\x1am\x18\xe5\":G\x90;2h\xc0\x1eCeJ\xc7\x04\xa2\xd9\xea\xa0\xe9\x01,\xecXo\xd3\xca\xa6\x85\x02\xe0@g\xad\x19o\xe3\xdd\x1fW\xee`\xc3\x99\x91\xda\xd7iE<\xc6\xb1\xc2\x84\xebJG\x857\xffb\xbe\xac/4d\xda\xec\x14\x0f.\xeb\xad\xf0\xd1\xa9\xe5*\x18c\x87\x1d\xa6\x05Z\x9e\x11\xafx(\xa2\x96\f\xd7\xe9\xcd2\xd6\xf5\x97\x17\xb6\xa2G\x15Y\xd2\xc7\xa1\xb5\x8e\xcb\xa0\xcd\xad\x82\xd2\xa5\xc4\xdd\x83\xb2\xe68$Y_hI\xe7g\x87-\f\xce\xdf5\x0e\xcb\x94\xba\xde]$\x1cT\xcd\xc4e\xed\xeb\xe2\xbb\f\xbb\xc6\xb5\x84\x93\x05x\xef@?\x01\xef)\xdb\x91\xa0\xce\xfe\xb3\xbb!\xd8\xaawyKw;a\xcd\xb7\xec\xf2\xed$\x1c\xdbUC\x1f\x9cb\xcc[\x93_<%VKr\xcb\xb7`\x93n+)\xb5\xbb\xb2\x9a<\xad\x94X\xa5\x92\x80\xb5=\x0fh\x1c\xef\xa1\xd2\x1a)W\xc6[ax<(\x1b\x90pO7\xb8\x15\x8f\xe0\xc2\x04\xc8[\x8d\xac\x00\fP\xbcK\xa7\xbc46\x86\xa6U>\xca\x14\xad\xf3C\xbe\xbc\x1c\x10>\x12\xdb\x0e\xba-\x1c(Y\x1c\xfb3\x80tl\x8dq+\xb1\x1f\xecs\xee\x10\xa9\x00R\x90\xd4u\xcdl\xd7\xf2\x82\xcbJ\\l\xd8\x1e\xf9\x8f\xac~\xa9\x92j\xe5\x81\x1d\x19\x922\x00\xd6\x06') utimes(0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0xa0002f5}) 1.650199437s ago: executing program 1 (id=2217): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000012c0)={{r3}, r4, 0x12, @unused=[0x8, 0x10001, 0x1, 0x8], @subvolid=0xfffffffffffffffa}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.516035992s ago: executing program 2 (id=2218): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES8=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRESOCT=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYRES16=r0], 0xa0}, 0x4004881) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 1.467934575s ago: executing program 2 (id=2219): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") chdir(&(0x7f0000000140)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000900)={@local, 0x0}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x9, 0x1, {{0x1b, 0x4, 0x2, 0x2, 0x6c, 0x68, 0x0, 0xe5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0xd4}, @lsrr={0x83, 0xf, 0x58, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @generic={0x89, 0x11, "87d7ebec2764f15d9f49bf59a43f73"}, @timestamp={0x44, 0x4, 0xd8, 0x0, 0xb}, @generic={0x9e, 0xf, "1f9ba3e91d994d3c31a32d7e19"}, @timestamp_addr={0x44, 0x14, 0x3e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x47a}, {@multicast2, 0x677e}]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0xb, [{@multicast1, 0x7f95}]}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xfffffffffffffd64, &(0x7f0000000d40)={&(0x7f0000000e40)=ANY=[@ANYBLOB="780000003f1090936e30879eed305e66fa1b1c12a5e21eb153d7fa36dd2e76e7dd2e405f5af845a8fb00459c3dd51a112659f2e03e7c56e57ec3b307134bef367c22b888850ac7de899d0f1b67bc7a2e4fca7d6ca9c80886cd7b36431979b2aa5c19c95c60b8624c8e264d439e0e868c26b048", @ANYRES64=r2, @ANYBLOB="08ca0025bd00000100df250300edff6400018008a732d1329c84258f9e1f330a9c5557d654823959579319742e899e71e022a67bceae8c0747de4e865e6966d9827527c4ea31cdf34d7e85efcf7896cf271dbdd4bc292ff16981a789f46b5fd8afd4", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6272696467", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="14000200200000c7f762e5a113abb756f9ed"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) socket$packet(0x11, 0x3, 0x300) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1.383052908s ago: executing program 1 (id=2220): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES8=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRESOCT=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYRES16], 0xa0}, 0x4004881) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10042) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0x0, 0xffef}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8008014}, 0x4000) 1.324058351s ago: executing program 0 (id=2221): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10042) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x0, 0xffef}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8008014}, 0x4000) 1.232324535s ago: executing program 3 (id=2222): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x8000000, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) 721.076667ms ago: executing program 3 (id=2223): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 644.036861ms ago: executing program 3 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x10, 0x8000, 0x8, 0xfffffff5, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x65, 0x0, 0xd, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@lsrr={0x83, 0x17, 0xb7, [@local, @multicast1, @multicast2, @local, @remote]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7fffffff, 0x4, 0xfffffffe, 0x2801, 0xffffffffffffffff, 0x6, '\x00', r1, r2, 0x1, 0x2, 0x4, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) stat(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 541.787265ms ago: executing program 1 (id=2225): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) fchdir(r2) symlink(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x50004, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 532.157546ms ago: executing program 0 (id=2226): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x0, 0xffef}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8008014}, 0x4000) 246.811238ms ago: executing program 3 (id=2227): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x9d29f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x110892, 0x7ff, 0x9, 0x6, 0xb, 0x2, 0xcde, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd5\xaa\xb7\x10\x80>\xbc \x1f\xa6\r\xd2=v\xd1\x14\x99\x1d\x7f\xc0\x8f\x88\x9a\x1f\xb9\xc5\xd7h^9\xb7\x8a\xac\xea\x93\x05\x80\xa9\xb3\x03\xbf\xb4\\\xc2\x86\a\xbbF>\x1dY]&\xce\x0e\x8c$\x1b\x10\x05\xda\xafs\xca-\xcd?q\x94Z\xd8\xfa\x17\xa3\x8f\x9a\xbc\xb5p/\xad\xfb\x80\xf2\xbb\x9d\xf1:\x82m\xc5\xadf\x98l\x9e\xe3;\x1dV\xe51P\xce\x1f\xbe\xb1\xbb\x99\'M\x90(\xccTa\xa1V\xf1\x84O\x87\xc2\xfc\xf3H\xf7\xfc\xc7\xc1F\'n\xd2\xe4M\r\x83\xd4s\xd5\xa4\xbf\xca\x8b\tZ\xc9\x14\x11F\xd2\x85F1\xb0k\x15\x14\xf1\x06\xc2\xc8g\xfb5c*9MYsX\xdc\xd7\xb6b\xa8\x9d}-\x9ab\x801\xdd\xa4\xfb\xaey\xb1v\xa8\x16ueE\x1e\xae\xfb\xf6I\x8c@\x91\xc9)N9\xfa\x05\x15\xb1\xfaB\xa8\x8a\xc5\xc4\xbf\x80\x19?\xfb\x15\xf2 \\\x8d9\';\xc3RY\xbd\x900\xb8\xcf>\x11h4+;\xe7\xf1n\xe1\xc3\x9d\x97L5\x82\xca\xee\x85Z\x99\x17\xa7c\xc4\x8c\xde\x12\xf1\xe1!\x90lL\x00\x00\x00\x00\x00\x00\x00\x00\xc0i\x9ac\x7f8\x91Kp\xad\a\xe7r\x7f\x87A\x17\xac\xe7\xeb\xf4\xfb\xcd\xef_\x02\xab\x8d\xfa\xc9\xd6\v\xe2\xe1\x1dL){\xf6G\x81\x8e\xee@ ^\x88\xd4\xc1\xa3\n{\xa5\x98YOg\x94\xc5D8\xb4`\x85\x13\xfbn\x8a\xc0\xfdrFm\xfc\xf7\xfd\xdcp\xac\xfbm+\x06F\xd2A\xff$\x1b\x12M\xba\x8a\x19M\xaf\xce\xe8\x15)aD\xd6x\x89\xb1\x8ad\xd0\xdc2\x81\x97\x19&\x8f\xd8\x1c\xed\"\xa1\xaf\x8e\x1f^\xcd\x80M\xfe\x7f\xeee\xe0\x833\xc4\xe5\xb9=\x84\xa6\xd9\xa2\x98\xb3\xc4Ll]]\xca\x9d\x89\"\xb5}W/De\x05\xf5\xa6\xca\x7fR8\x8dH\xbfJ)\x8c\'\x9b\xc8\xd42\xcb\x8c7a\x85\xe4\xdaM=z\xbd\xa0\xa6\xc0\x93z\xe5s8\xd4\xe3\xdb\xcdY\x94\x83d\x81\xeb\xbb\'e\xe5R\xbc\xdd\x8ax\xf3\xf3Yh\xb2\xaf\xaf\xe5\xfb3\x1ey\x1f\x9a\'\xc2\xf7\'Lf\x92\x88\n\xc2\x96\x1am\x18\xe5\":G\x90;2h\xc0\x1eCeJ\xc7\x04\xa2\xd9\xea\xa0\xe9\x01,\xecXo\xd3\xca\xa6\x85\x02\xe0@g\xad\x19o\xe3\xdd\x1fW\xee`\xc3\x99\x91\xda\xd7iE<\xc6\xb1\xc2\x84\xebJG\x857\xffb\xbe\xac/4d\xda\xec\x14\x0f.\xeb\xad\xf0\xd1\xa9\xe5*\x18c\x87\x1d\xa6\x05Z\x9e\x11\xafx(\xa2\x96\f\xd7\xe9\xcd2\xd6\xf5\x97\x17\xb6\xa2G\x15Y\xd2\xc7\xa1\xb5\x8e\xcb\xa0\xcd\xad\x82\xd2\xa5\xc4\xdd\x83\xb2\xe68$Y_hI\xe7g\x87-\f\xce\xdf5\x0e\xcb\x94\xba\xde]$\x1cT\xcd\xc4e\xed\xeb\xe2\xbb\f\xbb\xc6\xb5\x84\x93\x05x\xef@?\x01\xef)\xdb\x91\xa0\xce\xfe\xb3\xbb!\xd8\xaawyKw;a\xcd\xb7\xec\xf2\xed$\x1c\xdbUC\x1f\x9cb\xcc[\x93_<%VKr\xcb\xb7`\x93n+)\xb5\xbb\xb2\x9a<\xad\x94X\xa5\x92\x80\xb5=\x0fh\x1c\xef\xa1\xd2\x1a)W\xc6[ax<(\x1b\x90pO7\xb8\x15\x8f\xe0\xc2\x04\xc8[\x8d\xac\x00\fP\xbcK\xa7\xbc46\x86\xa6U>\xca\x14\xad\xf3C\xbe\xbc\x1c\x10>\x12\xdb\x0e\xba-\x1c(Y\x1c\xfb3\x80tl\x8dq+\xb1\x1f\xecs\xee\x10\xa9\x00R\x90\xd4u\xcdl\xd7\xf2\x82\xcbJ\\l\xd8\x1e\xf9\x8f\xac~\xa9\x92j\xe5\x81\x1d\x19\x922\x00\xd6\x06') utimes(0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0xa0002f5}) 245.606709ms ago: executing program 2 (id=2228): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xb10000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) pipe(&(0x7f00000004c0)) io_setup(0x2, &(0x7f0000002400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x83) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) pivot_root(&(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 208.0659ms ago: executing program 0 (id=2229): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x40000) listen(0xffffffffffffffff, 0x1) sync_file_range(r1, 0x2, 0x5, 0x7) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000000000000000000000000000000000e5ff0000748d7b2f42d76ad8c6129ae49514ec82990b5fb6b254e019321b65761654361024dc91408d782da5728e4fc988360c0ff992acdcea6eecb7cf83565967664e8c62edc671e0364100a2852a42da89be"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x7, 0x3, 0x9, 0x0, 0xfffffffffffffff7, 0x8804, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xc, 0x7}, 0x11248, 0x401, 0xffffd162, 0x2, 0xffff, 0xad, 0x1000, 0x0, 0x6b6132a5, 0x0, 0x881}, 0x0, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x29, 0x6, 0x0, 0x8, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_bp={0x0, 0x6}, 0x8c34, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x1, 0x0, 0x2000000020000006}, 0x0, 0x1, r2, 0x2) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x11) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x4}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 189.444561ms ago: executing program 3 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 113.257444ms ago: executing program 0 (id=2231): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82902, 0x5f) write(0xffffffffffffffff, &(0x7f0000000200)="d7", 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 112.785584ms ago: executing program 4 (id=2232): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x20, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xc}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 106.596455ms ago: executing program 2 (id=2233): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES8=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRESOCT=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYRES16=r0], 0xa0}, 0x4004881) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 88.857525ms ago: executing program 4 (id=2234): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") stat(&(0x7f0000000600)='./file2\x00', &(0x7f0000000a40)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001180)={r4, 0x5, 0x7ff, 0x101, 0x2, 0x3}, &(0x7f00000011c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={r4, 0x3}, 0x8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x232, 0xffffff01, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c060000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x2c020400) socket$netlink(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f00000005c0)={0x2}) r8 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) sendmsg$nl_netfilter(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xac, 0x14, 0x5, 0x3, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x8}, [@generic="13a58312c28476ec2f6f75bc7c5245fec7f87aa9f2fbc45289c4fa2773bc8ab850401de39e097b54119e7b64fb36dedc6ba138b99ed5437878", @generic="d0b0d290f857a180f0a40ee9600761f5a8f991e744a4968f83f292a8c1bc049817b7215eddc0cda588ca77004c386eafaf3fa1b95589767b0e6873735689cb02facfb849fde0d233b33f564c", @nested={0x10, 0x123, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x13a}]}, @generic]}, 0xac}, 0x1, 0x0, 0x0, 0x4004080}, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") 87.968296ms ago: executing program 3 (id=2235): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x2) clock_gettime(0x0, &(0x7f0000000080)) write$evdev(r0, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = mq_open(&(0x7f0000000880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYBLOB="20000000000b97dc0000000000000000030000030b0001006d616e676c650000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8082) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x80000000006}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync() 71.419797ms ago: executing program 2 (id=2236): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x9d29f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x110892, 0x7ff, 0x9, 0x6, 0xb, 0x2, 0xcde, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd5\xaa\xb7\x10\x80>\xbc \x1f\xa6\r\xd2=v\xd1\x14\x99\x1d\x7f\xc0\x8f\x88\x9a\x1f\xb9\xc5\xd7h^9\xb7\x8a\xac\xea\x93\x05\x80\xa9\xb3\x03\xbf\xb4\\\xc2\x86\a\xbbF>\x1dY]&\xce\x0e\x8c$\x1b\x10\x05\xda\xafs\xca-\xcd?q\x94Z\xd8\xfa\x17\xa3\x8f\x9a\xbc\xb5p/\xad\xfb\x80\xf2\xbb\x9d\xf1:\x82m\xc5\xadf\x98l\x9e\xe3;\x1dV\xe51P\xce\x1f\xbe\xb1\xbb\x99\'M\x90(\xccTa\xa1V\xf1\x84O\x87\xc2\xfc\xf3H\xf7\xfc\xc7\xc1F\'n\xd2\xe4M\r\x83\xd4s\xd5\xa4\xbf\xca\x8b\tZ\xc9\x14\x11F\xd2\x85F1\xb0k\x15\x14\xf1\x06\xc2\xc8g\xfb5c*9MYsX\xdc\xd7\xb6b\xa8\x9d}-\x9ab\x801\xdd\xa4\xfb\xaey\xb1v\xa8\x16ueE\x1e\xae\xfb\xf6I\x8c@\x91\xc9)N9\xfa\x05\x15\xb1\xfaB\xa8\x8a\xc5\xc4\xbf\x80\x19?\xfb\x15\xf2 \\\x8d9\';\xc3RY\xbd\x900\xb8\xcf>\x11h4+;\xe7\xf1n\xe1\xc3\x9d\x97L5\x82\xca\xee\x85Z\x99\x17\xa7c\xc4\x8c\xde\x12\xf1\xe1!\x90lL\x00\x00\x00\x00\x00\x00\x00\x00\xc0i\x9ac\x7f8\x91Kp\xad\a\xe7r\x7f\x87A\x17\xac\xe7\xeb\xf4\xfb\xcd\xef_\x02\xab\x8d\xfa\xc9\xd6\v\xe2\xe1\x1dL){\xf6G\x81\x8e\xee@ ^\x88\xd4\xc1\xa3\n{\xa5\x98YOg\x94\xc5D8\xb4`\x85\x13\xfbn\x8a\xc0\xfdrFm\xfc\xf7\xfd\xdcp\xac\xfbm+\x06F\xd2A\xff$\x1b\x12M\xba\x8a\x19M\xaf\xce\xe8\x15)aD\xd6x\x89\xb1\x8ad\xd0\xdc2\x81\x97\x19&\x8f\xd8\x1c\xed\"\xa1\xaf\x8e\x1f^\xcd\x80M\xfe\x7f\xeee\xe0\x833\xc4\xe5\xb9=\x84\xa6\xd9\xa2\x98\xb3\xc4Ll]]\xca\x9d\x89\"\xb5}W/De\x05\xf5\xa6\xca\x7fR8\x8dH\xbfJ)\x8c\'\x9b\xc8\xd42\xcb\x8c7a\x85\xe4\xdaM=z\xbd\xa0\xa6\xc0\x93z\xe5s8\xd4\xe3\xdb\xcdY\x94\x83d\x81\xeb\xbb\'e\xe5R\xbc\xdd\x8ax\xf3\xf3Yh\xb2\xaf\xaf\xe5\xfb3\x1ey\x1f\x9a\'\xc2\xf7\'Lf\x92\x88\n\xc2\x96\x1am\x18\xe5\":G\x90;2h\xc0\x1eCeJ\xc7\x04\xa2\xd9\xea\xa0\xe9\x01,\xecXo\xd3\xca\xa6\x85\x02\xe0@g\xad\x19o\xe3\xdd\x1fW\xee`\xc3\x99\x91\xda\xd7iE<\xc6\xb1\xc2\x84\xebJG\x857\xffb\xbe\xac/4d\xda\xec\x14\x0f.\xeb\xad\xf0\xd1\xa9\xe5*\x18c\x87\x1d\xa6\x05Z\x9e\x11\xafx(\xa2\x96\f\xd7\xe9\xcd2\xd6\xf5\x97\x17\xb6\xa2G\x15Y\xd2\xc7\xa1\xb5\x8e\xcb\xa0\xcd\xad\x82\xd2\xa5\xc4\xdd\x83\xb2\xe68$Y_hI\xe7g\x87-\f\xce\xdf5\x0e\xcb\x94\xba\xde]$\x1cT\xcd\xc4e\xed\xeb\xe2\xbb\f\xbb\xc6\xb5\x84\x93\x05x\xef@?\x01\xef)\xdb\x91\xa0\xce\xfe\xb3\xbb!\xd8\xaawyKw;a\xcd\xb7\xec\xf2\xed$\x1c\xdbUC\x1f\x9cb\xcc[\x93_<%VKr\xcb\xb7`\x93n+)\xb5\xbb\xb2\x9a<\xad\x94X\xa5\x92\x80\xb5=\x0fh\x1c\xef\xa1\xd2\x1a)W\xc6[ax<(\x1b\x90pO7\xb8\x15\x8f\xe0\xc2\x04\xc8[\x8d\xac\x00\fP\xbcK\xa7\xbc46\x86\xa6U>\xca\x14\xad\xf3C\xbe\xbc\x1c\x10>\x12\xdb\x0e\xba-\x1c(Y\x1c\xfb3\x80tl\x8dq+\xb1\x1f\xecs\xee\x10\xa9\x00R\x90\xd4u\xcdl\xd7\xf2\x82\xcbJ\\l\xd8\x1e\xf9\x8f\xac~\xa9\x92j\xe5\x81\x1d\x19\x922\x00\xd6\x06') utimes(0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, 0xffffffffffffffff, 0x0, 0x1d, 0x36}]) 0s ago: executing program 2 (id=2237): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000"], 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100e7000000fcffffff070000000c000180060001000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000b1114254d230513ef8ff00000000bfd2e19393a100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d0000009530cf66cde21b9c2dd3560e91da30b66a277a34966f00532590c6c7a2bff81bb0f2dd85ef7d2cdb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x4, 0x3e7}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = semget(0x3, 0x1, 0x20) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 300] 81276 pages reserved [ 136.564307][ T7313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.581055][ T7313] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 136.588898][ T7313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1334'. [ 136.608541][ T7313] xt_hashlimit: max too large, truncated to 1048576 [ 136.640541][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 136.658194][ T7323] rdma_rxe: rxe_newlink: failed to add lo [ 136.713094][ T7317] lo speed is unknown, defaulting to 1000 [ 136.734464][ T7317] lo speed is unknown, defaulting to 1000 [ 137.119589][ T7330] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 137.175865][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 137.389189][ T7340] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 137.413814][ T7340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.424135][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 137.434691][ T7340] bond3 (unregistering): Released all slaves [ 137.738447][ T7347] netlink: 'syz.3.1345': attribute type 10 has an invalid length. [ 137.746360][ T7347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1345'. [ 137.759139][ T7347] batman_adv: batadv0: Interface activated: veth1_vlan [ 137.781294][ T7347] xt_hashlimit: max too large, truncated to 1048576 [ 138.242683][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 138.242697][ T29] audit: type=1326 audit(1765362045.464:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1a04965e7 code=0x7ffc0000 [ 138.286811][ T29] audit: type=1326 audit(1765362045.494:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1a043b829 code=0x7ffc0000 [ 138.310199][ T29] audit: type=1326 audit(1765362045.494:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1a04965e7 code=0x7ffc0000 [ 138.333529][ T29] audit: type=1326 audit(1765362045.494:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1a043b829 code=0x7ffc0000 [ 138.356841][ T29] audit: type=1326 audit(1765362045.494:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 138.364859][ T7368] bond3: entered promiscuous mode [ 138.380377][ T29] audit: type=1326 audit(1765362045.494:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 138.385441][ T7368] bond3: entered allmulticast mode [ 138.408860][ T29] audit: type=1326 audit(1765362045.494:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1a049f783 code=0x7ffc0000 [ 138.408898][ T29] audit: type=1326 audit(1765362045.494:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe1a049f807 code=0x7ffc0000 [ 138.414259][ T7368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.437202][ T29] audit: type=1326 audit(1765362045.494:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe1a0456bdd code=0x7ffc0000 [ 138.437236][ T29] audit: type=1326 audit(1765362045.494:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe1a04d3e89 code=0x7ffc0000 [ 138.529709][ T7368] bond3 (unregistering): Released all slaves [ 138.540214][ T7369] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1352'. [ 138.582153][ T7372] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 138.605538][ T7372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.609117][ T7375] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 138.617538][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 138.635899][ T7375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.650995][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 138.667219][ T7375] bond2 (unregistering): Released all slaves [ 138.730350][ T7382] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 138.749090][ T7380] bridge0: left promiscuous mode [ 138.778592][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.788343][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.805646][ T7380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.834319][ T7385] lo speed is unknown, defaulting to 1000 [ 138.840918][ T7385] lo speed is unknown, defaulting to 1000 [ 138.873282][ T7378] loop1: detected capacity change from 0 to 512 [ 138.891188][ T7378] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1355: error while reading EA inode 32 err=-116 [ 138.910493][ T7378] EXT4-fs (loop1): Remounting filesystem read-only [ 138.917417][ T7378] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 138.927722][ T7378] EXT4-fs (loop1): 1 orphan inode deleted [ 138.936048][ T7378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.948818][ T7378] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.028603][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 139.059617][ T7405] netlink: 'syz.4.1364': attribute type 13 has an invalid length. [ 139.072829][ T7405] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 139.116790][ T7408] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 139.301035][ T7411] loop1: detected capacity change from 0 to 512 [ 139.339050][ T7411] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 139.347443][ T7411] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.355726][ T7411] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1365: corrupted inode contents [ 139.368245][ T7411] EXT4-fs (loop1): Remounting filesystem read-only [ 139.375131][ T7411] EXT4-fs (loop1): 1 truncate cleaned up [ 139.381234][ T290] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.391995][ T290] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.402964][ T290] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 139.413986][ T7411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.575662][ T7417] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 139.595487][ T7417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.611915][ T7417] bond5 (unregistering): Released all slaves [ 139.636899][ T7421] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 139.652856][ T7421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.685044][ T7421] bond3 (unregistering): Released all slaves [ 139.750869][ T7430] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.794740][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.803952][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.815140][ T7432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.831293][ T3482] lo speed is unknown, defaulting to 1000 [ 139.837225][ T3482] sz1: Port: 1 Link ACTIVE [ 139.856564][ T3411] lo speed is unknown, defaulting to 1000 [ 139.944739][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.017325][ T7451] lo speed is unknown, defaulting to 1000 [ 140.023926][ T7451] lo speed is unknown, defaulting to 1000 [ 140.032828][ T7453] sz1: rxe_newlink: already configured on lo [ 140.050086][ T7455] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 140.085614][ T7457] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 140.142257][ T7459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 140.152875][ T7459] bond5 (unregistering): Released all slaves [ 140.366343][ T7474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.692345][ T7486] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 140.828177][ T7490] __nla_validate_parse: 7 callbacks suppressed [ 140.828197][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 140.893447][ T7494] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1394'. [ 141.039991][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 141.052843][ T7503] validate_nla: 2 callbacks suppressed [ 141.052856][ T7503] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 141.080026][ T7503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.089307][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 141.102803][ T7503] bond2 (unregistering): Released all slaves [ 141.359328][ T7519] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1402'. [ 141.749751][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 141.978390][ T7531] lo speed is unknown, defaulting to 1000 [ 142.032252][ T7531] lo speed is unknown, defaulting to 1000 [ 142.364082][ T7541] blktrace: Concurrent blktraces are not allowed on loop8 [ 142.411765][ T7539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.430663][ T7539] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.451250][ T7539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.502838][ T7541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7541 comm=syz.4.1409 [ 142.728683][ T7548] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 142.779466][ T7548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.803841][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 142.830008][ T7552] bond2 (unregistering): Released all slaves [ 142.980624][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 143.010204][ T7559] netlink: 'syz.4.1415': attribute type 13 has an invalid length. [ 143.040667][ T9] lo speed is unknown, defaulting to 1000 [ 143.046441][ T9] sz1: Port: 1 Link DOWN [ 143.056248][ T3411] lo speed is unknown, defaulting to 1000 [ 143.086705][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 143.131034][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 143.157385][ T7573] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.200234][ T7576] netlink: 'syz.3.1418': attribute type 13 has an invalid length. [ 143.208627][ T7576] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 143.300915][ T7584] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 143.366029][ T7584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.427072][ T7585] bond5 (unregistering): Released all slaves [ 143.434566][ T7591] netlink: 'syz.1.1426': attribute type 13 has an invalid length. [ 143.457916][ T7591] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 144.202934][ T7595] loop1: detected capacity change from 0 to 512 [ 144.304669][ T7595] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1428: error while reading EA inode 32 err=-116 [ 144.349052][ T7606] netlink: 'syz.2.1430': attribute type 13 has an invalid length. [ 144.357077][ T7595] EXT4-fs (loop1): Remounting filesystem read-only [ 144.373777][ T7595] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 144.412181][ T7595] EXT4-fs (loop1): 1 orphan inode deleted [ 144.438997][ T7595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.461530][ T7606] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 144.491497][ T7595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.502943][ T7610] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 144.568868][ T7610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.618301][ T7612] bond4 (unregistering): Released all slaves [ 144.738091][ T7614] lo speed is unknown, defaulting to 1000 [ 144.778785][ T7614] lo speed is unknown, defaulting to 1000 [ 145.576875][ T7631] rdma_rxe: rxe_newlink: failed to add lo [ 145.682520][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 145.682534][ T29] audit: type=1326 audit(1765362052.904:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.713561][ T7634] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 145.724942][ T7635] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 145.742926][ T7635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.764836][ T7635] bond3 (unregistering): Released all slaves [ 145.766122][ T7641] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 145.780636][ T29] audit: type=1326 audit(1765362052.934:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.804244][ T29] audit: type=1326 audit(1765362052.934:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.827753][ T29] audit: type=1326 audit(1765362052.934:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.851089][ T29] audit: type=1326 audit(1765362052.934:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.874508][ T29] audit: type=1326 audit(1765362052.934:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.897921][ T29] audit: type=1326 audit(1765362052.954:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.921411][ T29] audit: type=1326 audit(1765362052.954:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 145.944859][ T29] audit: type=1326 audit(1765362052.984:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 145.968414][ T29] audit: type=1326 audit(1765362052.984:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 145.993695][ T7640] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 146.009976][ T7640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.023640][ T7640] __nla_validate_parse: 6 callbacks suppressed [ 146.023658][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 146.049299][ T7640] bond3 (unregistering): Released all slaves [ 146.052518][ T7651] loop1: detected capacity change from 0 to 512 [ 146.062347][ T7651] ext4: Unknown parameter 'obj_role' [ 146.074857][ T7651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.094961][ T7651] netlink: 'syz.1.1444': attribute type 10 has an invalid length. [ 146.102835][ T7651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1444'. [ 146.113054][ T7651] batman_adv: batadv0: Interface activated: veth1_vlan [ 146.121842][ T7651] xt_hashlimit: max too large, truncated to 1048576 [ 146.200482][ T7655] siw: device registration error -23 [ 147.256154][ T7669] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.271633][ T7670] siw: device registration error -23 [ 147.833958][ T7675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.868198][ T7675] netlink: 'syz.2.1453': attribute type 10 has an invalid length. [ 147.876399][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1453'. [ 147.895192][ T7663] loop1: detected capacity change from 0 to 512 [ 147.903004][ T7675] batman_adv: batadv0: Interface activated: veth1_vlan [ 147.911374][ T7675] xt_hashlimit: max too large, truncated to 1048576 [ 147.928982][ T7663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1448: error while reading EA inode 32 err=-116 [ 147.944975][ T7663] EXT4-fs (loop1): Remounting filesystem read-only [ 147.958568][ T7663] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 147.981130][ T7663] EXT4-fs (loop1): 1 orphan inode deleted [ 148.067775][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 148.083889][ T7663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.123513][ T7687] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1456'. [ 148.135535][ T7663] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.165005][ T7689] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1457'. [ 148.278653][ T7696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.460355][ T7696] netlink: 'syz.2.1459': attribute type 10 has an invalid length. [ 148.468251][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1459'. [ 148.538232][ T7699] xt_hashlimit: max too large, truncated to 1048576 [ 148.617753][ T7703] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 148.677952][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 148.723774][ T7708] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.735099][ T7703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.846264][ T7715] lo speed is unknown, defaulting to 1000 [ 148.861589][ T7715] lo speed is unknown, defaulting to 1000 [ 148.965774][ T7730] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 149.844457][ T7742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.895194][ T7742] netlink: 'syz.0.1472': attribute type 10 has an invalid length. [ 149.903133][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1472'. [ 149.918085][ T7747] siw: device registration error -23 [ 150.090687][ T7757] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 150.127891][ T7756] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 150.143856][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 150.428062][ T7757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.467999][ T7752] bond3 (unregistering): Released all slaves [ 150.673727][ T7763] blktrace: Concurrent blktraces are not allowed on loop4 [ 150.683969][ T7763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7763 comm=syz.2.1480 [ 150.715941][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 150.715955][ T29] audit: type=1326 audit(1765362057.934:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 150.758769][ T7756] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.790892][ T7765] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 150.880425][ T29] audit: type=1326 audit(1765362058.014:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 150.903939][ T29] audit: type=1326 audit(1765362058.014:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 150.927364][ T29] audit: type=1326 audit(1765362058.014:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 150.950719][ T29] audit: type=1326 audit(1765362058.014:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 150.959227][ T7773] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 150.974145][ T29] audit: type=1326 audit(1765362058.014:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 151.005431][ T29] audit: type=1326 audit(1765362058.064:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 151.012025][ T7773] 8021q: adding VLAN 0 to HW filter on device bond6 [ 151.028962][ T29] audit: type=1326 audit(1765362058.064:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 151.058922][ T29] audit: type=1326 audit(1765362058.064:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 151.082481][ T29] audit: type=1326 audit(1765362058.064:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 151.108153][ T7775] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 151.167390][ T7781] siw: device registration error -23 [ 151.222670][ T7783] lo speed is unknown, defaulting to 1000 [ 151.229037][ T7783] lo speed is unknown, defaulting to 1000 [ 151.249885][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 151.285847][ T7787] siw: device registration error -23 [ 151.286463][ T7773] bond6 (unregistering): Released all slaves [ 151.369120][ T7792] siw: device registration error -23 [ 151.557405][ T7800] blktrace: Concurrent blktraces are not allowed on loop2 [ 151.585161][ T7800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7800 comm=syz.1.1492 [ 151.713162][ T7807] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 151.873036][ T7807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.902997][ T7811] loop1: detected capacity change from 0 to 1024 [ 152.061158][ T7798] lo speed is unknown, defaulting to 1000 [ 152.176807][ T7798] lo speed is unknown, defaulting to 1000 [ 152.204512][ T7811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.244905][ T7811] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1495'. [ 152.448639][ T7817] netlink: 'syz.4.1496': attribute type 10 has an invalid length. [ 152.456514][ T7817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'. [ 152.680672][ T7824] xt_hashlimit: max too large, truncated to 1048576 [ 152.727636][ T7820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.747145][ T7817] batman_adv: batadv0: Interface activated: veth1_vlan [ 153.306421][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.468397][ T7832] siw: device registration error -23 [ 153.686471][ T7835] siw: device registration error -23 [ 154.025824][ T7842] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 154.388708][ T7847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.475146][ T7850] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 154.486875][ T7847] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 154.495525][ T7847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'. [ 154.720570][ T7860] rdma_rxe: rxe_newlink: failed to add lo [ 154.762815][ T7864] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 154.858535][ T7871] blktrace: Concurrent blktraces are not allowed on loop0 [ 154.869896][ T7871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7871 comm=syz.0.1514 [ 154.886427][ T7872] loop1: detected capacity change from 0 to 512 [ 154.899972][ T7872] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 154.908283][ T7872] EXT4-fs (loop1): orphan cleanup on readonly fs [ 154.916231][ T7876] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 154.916557][ T7872] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1513: corrupted inode contents [ 154.938022][ T7872] EXT4-fs (loop1): Remounting filesystem read-only [ 154.944700][ T7872] EXT4-fs (loop1): 1 truncate cleaned up [ 155.827758][ T290] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 155.838410][ T290] __quota_error: 68 callbacks suppressed [ 155.838434][ T290] Quota error (device loop1): write_blk: dquota write failed [ 155.851456][ T290] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 155.861523][ T290] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 155.872059][ T290] Quota error (device loop1): write_blk: dquota write failed [ 155.879455][ T290] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 156.075196][ T7886] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 156.099980][ T290] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 156.110221][ T290] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 156.119203][ T290] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 156.129533][ T7872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.198207][ T7888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.221326][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.240946][ T7888] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 156.248802][ T7888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1520'. [ 156.283333][ T7890] rdma_rxe: rxe_newlink: failed to add lo [ 156.290525][ T7888] xt_hashlimit: max too large, truncated to 1048576 [ 156.349965][ T7894] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 156.368715][ T7896] netlink: 'syz.4.1525': attribute type 1 has an invalid length. [ 156.458902][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 156.489685][ T7896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.508513][ T7900] bond6 (unregistering): Released all slaves [ 156.601715][ T29] audit: type=1326 audit(1765362063.824:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 156.626632][ T7904] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 156.668549][ T29] audit: type=1326 audit(1765362063.844:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 156.691995][ T29] audit: type=1326 audit(1765362063.844:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 156.715428][ T29] audit: type=1326 audit(1765362063.844:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 156.778082][ T7910] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 156.811657][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 156.892129][ T7914] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 156.905890][ T7915] netlink: 'syz.4.1531': attribute type 13 has an invalid length. [ 156.914384][ T7915] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 157.107833][ T7920] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.167330][ T3323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 157.178459][ T3323] CPU: 1 UID: 0 PID: 3323 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.178506][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.178519][ T3323] Call Trace: [ 157.178528][ T3323] [ 157.178538][ T3323] __dump_stack+0x1d/0x30 [ 157.178571][ T3323] dump_stack_lvl+0xe8/0x140 [ 157.178618][ T3323] dump_stack+0x15/0x1b [ 157.178636][ T3323] dump_header+0x81/0x240 [ 157.178660][ T3323] oom_kill_process+0x295/0x350 [ 157.178690][ T3323] out_of_memory+0x97b/0xb80 [ 157.178765][ T3323] try_charge_memcg+0x610/0xa10 [ 157.178806][ T3323] charge_memcg+0x51/0xc0 [ 157.178846][ T3323] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 157.178956][ T3323] __read_swap_cache_async+0x17b/0x2d0 [ 157.178997][ T3323] swap_cluster_readahead+0x262/0x3c0 [ 157.179040][ T3323] swapin_readahead+0xde/0x820 [ 157.179147][ T3323] ? __rcu_read_unlock+0x4f/0x70 [ 157.179168][ T3323] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 157.179209][ T3323] ? __list_add_valid_or_report+0x38/0xe0 [ 157.179247][ T3323] ? __rcu_read_unlock+0x4f/0x70 [ 157.179278][ T3323] ? swap_cache_get_folio+0x277/0x280 [ 157.179313][ T3323] do_swap_page+0x2b4/0x21e0 [ 157.179340][ T3323] ? _raw_spin_unlock+0x26/0x50 [ 157.179362][ T3323] ? __schedule+0x85f/0xcd0 [ 157.179391][ T3323] ? __pfx_default_wake_function+0x10/0x10 [ 157.179531][ T3323] handle_mm_fault+0x9d8/0x2c60 [ 157.179580][ T3323] do_user_addr_fault+0x630/0x1080 [ 157.179612][ T3323] exc_page_fault+0x62/0xa0 [ 157.179663][ T3323] asm_exc_page_fault+0x26/0x30 [ 157.179683][ T3323] RIP: 0033:0x7fe1a04d1fc5 [ 157.179698][ T3323] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 157.179784][ T3323] RSP: 002b:00007fff6650a908 EFLAGS: 00010246 [ 157.179804][ T3323] RAX: 0000000000000000 RBX: 0000000000000362 RCX: 00007fe1a04d1fc3 [ 157.179820][ T3323] RDX: 00007fff6650a920 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.179834][ T3323] RBP: 00007fff6650a98c R08: 000000000578943e R09: 0000000000000000 [ 157.179851][ T3323] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 157.179863][ T3323] R13: 00000000000927c0 R14: 00000000000264eb R15: 00007fff6650a9e0 [ 157.179962][ T3323] [ 157.179971][ T3323] memory: usage 307200kB, limit 307200kB, failcnt 7518 [ 157.411196][ T3323] memory+swap: usage 307800kB, limit 9007199254740988kB, failcnt 0 [ 157.419110][ T3323] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 157.426462][ T3323] Memory cgroup stats for /syz4: [ 157.469482][ T7924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.494871][ T7926] rdma_rxe: rxe_newlink: failed to add lo [ 157.509383][ T7927] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 157.510732][ T3323] cache 4096 [ 157.522496][ T3323] rss 20480 [ 157.525603][ T3323] shmem 0 [ 157.528679][ T3323] mapped_file 0 [ 157.532141][ T3323] dirty 0 [ 157.535077][ T3323] writeback 0 [ 157.538490][ T3323] workingset_refault_anon 1461 [ 157.543254][ T3323] workingset_refault_file 1571 [ 157.548051][ T3323] swap 593920 [ 157.551343][ T3323] swapcached 49152 [ 157.555061][ T3323] pgpgin 216870 [ 157.558548][ T3323] pgpgout 216857 [ 157.562101][ T3323] pgfault 256914 [ 157.565658][ T3323] pgmajfault 327 [ 157.569254][ T3323] inactive_anon 24576 [ 157.573286][ T3323] active_anon 24576 [ 157.577100][ T3323] inactive_file 0 [ 157.580770][ T3323] active_file 0 [ 157.584233][ T3323] unevictable 4096 [ 157.588010][ T3323] hierarchical_memory_limit 314572800 [ 157.589524][ T7924] netlink: 'syz.0.1534': attribute type 10 has an invalid length. [ 157.593511][ T3323] hierarchical_memsw_limit 9223372036854771712 [ 157.601388][ T7924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1534'. [ 157.607545][ T3323] total_cache 4096 [ 157.607555][ T3323] total_rss 20480 [ 157.607562][ T3323] total_shmem 0 [ 157.607568][ T3323] total_mapped_file 0 [ 157.607575][ T3323] total_dirty 0 [ 157.635404][ T3323] total_writeback 0 [ 157.639256][ T3323] total_workingset_refault_anon 1461 [ 157.644549][ T3323] total_workingset_refault_file 1571 [ 157.649978][ T3323] total_swap 593920 [ 157.653830][ T3323] total_swapcached 49152 [ 157.658121][ T3323] total_pgpgin 216870 [ 157.662104][ T3323] total_pgpgout 216857 [ 157.666314][ T3323] total_pgfault 256914 [ 157.670477][ T3323] total_pgmajfault 327 [ 157.674626][ T3323] total_inactive_anon 24576 [ 157.679172][ T3323] total_active_anon 24576 [ 157.683494][ T3323] total_inactive_file 0 [ 157.687667][ T3323] total_active_file 0 [ 157.691658][ T3323] total_unevictable 4096 [ 157.696024][ T3323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1531,pid=7912,uid=0 [ 157.710732][ T3323] Memory cgroup out of memory: Killed process 7912 (syz.4.1531) total-vm:96016kB, anon-rss:1264kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 157.719634][ T7924] xt_hashlimit: max too large, truncated to 1048576 [ 157.980394][ T7943] bond4: entered promiscuous mode [ 157.985496][ T7943] bond4: entered allmulticast mode [ 157.990934][ T7943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.008326][ T7943] bond4 (unregistering): Released all slaves [ 158.059760][ T7948] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1542'. [ 158.307768][ T7955] blktrace: Concurrent blktraces are not allowed on loop6 [ 158.323634][ T7955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7955 comm=syz.3.1544 [ 158.457474][ T7961] rdma_rxe: rxe_newlink: failed to add lo [ 158.873370][ T7971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.919069][ T7973] 9p: Bad value for 'rfdno' [ 158.924522][ T7974] netlink: 'syz.4.1550': attribute type 10 has an invalid length. [ 158.932425][ T7974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1550'. [ 159.037699][ T7971] xt_hashlimit: max too large, truncated to 1048576 [ 159.051952][ T7974] batman_adv: batadv0: Interface activated: veth1_vlan [ 159.081351][ T7980] netlink: 'syz.4.1554': attribute type 1 has an invalid length. [ 159.095769][ T7980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.107649][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 159.118214][ T7980] bond6 (unregistering): Released all slaves [ 159.134312][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 159.193596][ T7986] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 159.309155][ T7993] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.310165][ T7992] bond4: entered promiscuous mode [ 159.324680][ T7992] bond4: entered allmulticast mode [ 159.330065][ T7992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.354325][ T7992] bond4 (unregistering): Released all slaves [ 159.389963][ T7996] blktrace: Concurrent blktraces are not allowed on loop2 [ 159.521299][ T8006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.540660][ T8010] netlink: 'syz.1.1566': attribute type 29 has an invalid length. [ 159.540887][ T8006] netlink: 'syz.0.1564': attribute type 10 has an invalid length. [ 159.556456][ T8006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1564'. [ 159.568100][ T8006] xt_hashlimit: max too large, truncated to 1048576 [ 159.587693][ T8010] netlink: 'syz.1.1566': attribute type 29 has an invalid length. [ 159.614821][ T8010] FAULT_INJECTION: forcing a failure. [ 159.614821][ T8010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.627991][ T8010] CPU: 1 UID: 0 PID: 8010 Comm: syz.1.1566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.628018][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.628030][ T8010] Call Trace: [ 159.628036][ T8010] [ 159.628043][ T8010] __dump_stack+0x1d/0x30 [ 159.628124][ T8010] dump_stack_lvl+0xe8/0x140 [ 159.628152][ T8010] dump_stack+0x15/0x1b [ 159.628211][ T8010] should_fail_ex+0x265/0x280 [ 159.628234][ T8010] should_fail+0xb/0x20 [ 159.628304][ T8010] should_fail_usercopy+0x1a/0x20 [ 159.628327][ T8010] _copy_from_iter+0xcf/0xe70 [ 159.628385][ T8010] ? __alloc_skb+0x3bb/0x4d0 [ 159.628486][ T8010] ? __alloc_skb+0x24d/0x4d0 [ 159.628510][ T8010] netlink_sendmsg+0x471/0x6b0 [ 159.628556][ T8010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.628586][ T8010] __sock_sendmsg+0x145/0x180 [ 159.628604][ T8010] ____sys_sendmsg+0x31e/0x4a0 [ 159.628651][ T8010] ___sys_sendmsg+0x17b/0x1d0 [ 159.628718][ T8010] __x64_sys_sendmsg+0xd4/0x160 [ 159.628748][ T8010] x64_sys_call+0x17ba/0x3000 [ 159.628771][ T8010] do_syscall_64+0xd8/0x2a0 [ 159.628914][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.628934][ T8010] RIP: 0033:0x7fe07775f749 [ 159.628948][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.628965][ T8010] RSP: 002b:00007fe0761c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.628982][ T8010] RAX: ffffffffffffffda RBX: 00007fe0779b5fa0 RCX: 00007fe07775f749 [ 159.628998][ T8010] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 159.629009][ T8010] RBP: 00007fe0761c7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.629020][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.629031][ T8010] R13: 00007fe0779b6038 R14: 00007fe0779b5fa0 R15: 00007fffa5ecf458 [ 159.629100][ T8010] [ 159.935599][ T8018] loop1: detected capacity change from 0 to 512 [ 159.964698][ T8018] EXT4-fs (loop1): 1 truncate cleaned up [ 159.977203][ T8020] lo speed is unknown, defaulting to 1000 [ 159.993541][ T8018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.006125][ T8020] lo speed is unknown, defaulting to 1000 [ 160.082731][ T8018] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.1568: invalid fast symlink length 39 [ 160.237930][ T8032] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 160.535295][ T8035] siw: device registration error -23 [ 160.794555][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.831286][ T8044] 9p: Bad value for 'rfdno' [ 160.851971][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'. [ 160.871961][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 160.919654][ T8051] 9pnet_fd: Insufficient options for proto=fd [ 160.951584][ T8054] netlink: 'syz.1.1579': attribute type 29 has an invalid length. [ 161.069078][ T8061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.108037][ T8061] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 161.117093][ T8061] xt_hashlimit: max too large, truncated to 1048576 [ 161.153004][ T8065] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 161.272571][ T8065] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.299945][ T8068] bond4 (unregistering): Released all slaves [ 161.927828][ T8074] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 161.943297][ T8074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.976344][ T8074] __nla_validate_parse: 4 callbacks suppressed [ 161.976362][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 162.072316][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 162.102366][ T8074] bond4 (unregistering): Released all slaves [ 162.263192][ T8091] bond6: entered promiscuous mode [ 162.268326][ T8091] bond6: entered allmulticast mode [ 162.273801][ T8091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.288546][ T8091] bond6 (unregistering): Released all slaves [ 162.394746][ T8098] netlink: 'syz.4.1596': attribute type 1 has an invalid length. [ 162.417302][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 162.417327][ T29] audit: type=1326 audit(1765362069.634:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.417917][ T8098] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.424117][ T29] audit: type=1326 audit(1765362069.644:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.477673][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1596'. [ 162.482326][ T8103] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 162.529687][ T8102] bond6 (unregistering): Released all slaves [ 162.617436][ T29] audit: type=1326 audit(1765362069.744:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.617497][ T8104] bond3: entered promiscuous mode [ 162.640930][ T8104] bond3: entered allmulticast mode [ 162.645921][ T29] audit: type=1326 audit(1765362069.744:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.674438][ T29] audit: type=1326 audit(1765362069.744:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.677352][ T8111] 9pnet_fd: Insufficient options for proto=fd [ 162.697972][ T29] audit: type=1326 audit(1765362069.744:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.727761][ T29] audit: type=1326 audit(1765362069.744:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.751243][ T29] audit: type=1326 audit(1765362069.744:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.774816][ T29] audit: type=1326 audit(1765362069.744:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.797530][ T29] audit: type=1326 audit(1765362069.744:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab21f749 code=0x7ffc0000 [ 162.820380][ T8104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.829840][ T8104] bond3 (unregistering): Released all slaves [ 162.856533][ T8109] lo speed is unknown, defaulting to 1000 [ 162.866201][ T8112] lo speed is unknown, defaulting to 1000 [ 162.872791][ T8109] lo speed is unknown, defaulting to 1000 [ 162.917656][ T8112] lo speed is unknown, defaulting to 1000 [ 162.981644][ T8120] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 162.995113][ T8120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.006725][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 163.017175][ T8120] bond3 (unregistering): Released all slaves [ 163.057906][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 163.316558][ T8135] bond6: entered promiscuous mode [ 163.321702][ T8135] bond6: entered allmulticast mode [ 163.327163][ T8135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 163.336442][ T8135] bond6 (unregistering): Released all slaves [ 163.448026][ T8140] netlink: 'syz.4.1609': attribute type 1 has an invalid length. [ 163.463200][ T8140] 8021q: adding VLAN 0 to HW filter on device bond6 [ 163.477688][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1609'. [ 163.506008][ T8140] bond6 (unregistering): Released all slaves [ 163.519504][ T8143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1610'. [ 163.532358][ T8143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1610'. [ 163.550662][ T8143] netlink: 'syz.0.1610': attribute type 49 has an invalid length. [ 163.574058][ T8145] rdma_rxe: rxe_newlink: failed to add lo [ 163.658729][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 163.668256][ T8156] siw: device registration error -23 [ 163.795304][ T8168] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.795839][ T8166] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 163.878869][ T8169] bond4: entered promiscuous mode [ 163.883987][ T8169] bond4: entered allmulticast mode [ 163.907594][ T8169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.922007][ T8169] bond4 (unregistering): Released all slaves [ 163.985230][ T8175] netlink: 'syz.2.1623': attribute type 1 has an invalid length. [ 164.019118][ T8175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.037564][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 164.051604][ T8175] bond3 (unregistering): Released all slaves [ 164.074051][ T8178] rdma_rxe: rxe_newlink: failed to add lo [ 164.259809][ T8189] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 164.394760][ T8189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.422395][ T8191] bond4 (unregistering): Released all slaves [ 164.564475][ T8201] siw: device registration error -23 [ 165.248869][ T8216] blktrace: Concurrent blktraces are not allowed on loop4 [ 165.282576][ T8216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8216 comm=syz.2.1636 [ 165.414714][ T8217] bond6: entered promiscuous mode [ 165.419837][ T8217] bond6: entered allmulticast mode [ 165.513521][ T8227] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 165.545386][ T8217] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.571429][ T8217] bond6 (unregistering): Released all slaves [ 165.582336][ T8232] 9pnet_fd: Insufficient options for proto=fd [ 165.661519][ T8222] lo speed is unknown, defaulting to 1000 [ 165.681574][ T8222] lo speed is unknown, defaulting to 1000 [ 165.683508][ T8239] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 165.747040][ T8239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.765859][ T8244] bond4 (unregistering): Released all slaves [ 165.890066][ T8257] siw: device registration error -23 [ 166.059524][ T8269] 9p: Bad value for 'rfdno' [ 166.337801][ T8273] netlink: 'syz.2.1652': attribute type 13 has an invalid length. [ 166.346024][ T8273] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 167.165787][ T8288] siw: device registration error -23 [ 167.309942][ T8291] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 167.335307][ T8291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.352918][ T8291] __nla_validate_parse: 7 callbacks suppressed [ 167.352995][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 167.369548][ T8291] bond6 (unregistering): Released all slaves [ 167.470391][ T29] kauditd_printk_skb: 946 callbacks suppressed [ 167.470406][ T29] audit: type=1400 audit(1765362074.694:5479): avc: denied { validate_trans } for pid=8293 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.597727][ T29] audit: type=1400 audit(1765362074.814:5480): avc: denied { ioctl } for pid=8293 comm="syz.1.1662" path="socket:[18502]" dev="sockfs" ino=18502 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 167.742431][ T29] audit: type=1400 audit(1765362074.954:5481): avc: denied { setopt } for pid=8317 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.905383][ T8321] lo speed is unknown, defaulting to 1000 [ 167.940579][ T8321] lo speed is unknown, defaulting to 1000 [ 167.994101][ T8267] syz.2.1652 (8267) used greatest stack depth: 8760 bytes left [ 168.381253][ T29] audit: type=1326 audit(1765362075.604:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 168.568882][ T29] audit: type=1326 audit(1765362075.644:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 168.775746][ T8339] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 168.828254][ T8339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.946764][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 169.056885][ T8343] bond4 (unregistering): Released all slaves [ 169.116671][ T8346] netlink: 'syz.4.1676': attribute type 10 has an invalid length. [ 169.124624][ T8346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1676'. [ 169.215597][ T8345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.269672][ T8350] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.309555][ T8345] xt_hashlimit: max too large, truncated to 1048576 [ 169.368398][ T8354] netlink: 'syz.2.1680': attribute type 1 has an invalid length. [ 169.407372][ T8354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.439237][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 169.559510][ T8361] bond3 (unregistering): Released all slaves [ 169.594879][ T8366] netlink: 'syz.1.1684': attribute type 1 has an invalid length. [ 169.610096][ T8366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.621863][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 169.690881][ T8366] bond3 (unregistering): Released all slaves [ 169.777843][ T8380] 9p: Bad value for 'rfdno' [ 169.832946][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 170.216246][ T8393] rdma_rxe: rxe_newlink: failed to add lo [ 170.556260][ T29] audit: type=1326 audit(1765362077.774:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 170.591572][ T8400] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 170.633536][ T8195] syz.2.1627 (8195) used greatest stack depth: 7808 bytes left [ 170.758205][ T29] audit: type=1326 audit(1765362077.814:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 170.781797][ T29] audit: type=1326 audit(1765362077.814:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 170.805232][ T29] audit: type=1326 audit(1765362077.814:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 170.828621][ T29] audit: type=1326 audit(1765362077.814:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a049f749 code=0x7ffc0000 [ 170.964019][ T8406] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1700'. [ 171.035684][ T8409] syz.1.1693 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 171.356338][ T8416] 9p: Bad value for 'rfdno' [ 171.439631][ T8421] blktrace: Concurrent blktraces are not allowed on loop0 [ 171.472427][ T8421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8421 comm=syz.0.1705 [ 171.713684][ T8439] siw: device registration error -23 [ 171.724349][ T8440] siw: device registration error -23 [ 171.856315][ T8445] loop1: detected capacity change from 0 to 512 [ 171.866709][ T8445] EXT4-fs (loop1): 1 truncate cleaned up [ 171.873661][ T8445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.892238][ T8445] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.1715: invalid fast symlink length 39 [ 172.001905][ T8451] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 172.093280][ T8455] siw: device registration error -23 [ 172.235192][ T8459] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 172.243440][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 172.299788][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 172.317708][ T8469] siw: device registration error -23 [ 172.478025][ T29] kauditd_printk_skb: 1342 callbacks suppressed [ 172.478067][ T29] audit: type=1326 audit(1765362079.704:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b6b002005 code=0x7ffc0000 [ 172.521177][ T29] audit: type=1326 audit(1765362079.744:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b6afc65e7 code=0x7ffc0000 [ 172.638610][ T29] audit: type=1326 audit(1765362079.744:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b6af6b829 code=0x7ffc0000 [ 172.662184][ T29] audit: type=1326 audit(1765362079.744:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 172.685907][ T29] audit: type=1326 audit(1765362079.754:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b6afc65e7 code=0x7ffc0000 [ 172.709281][ T29] audit: type=1326 audit(1765362079.754:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b6af6b829 code=0x7ffc0000 [ 172.732682][ T29] audit: type=1326 audit(1765362079.754:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 172.756105][ T29] audit: type=1326 audit(1765362079.754:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe077792005 code=0x7ffc0000 [ 172.779646][ T29] audit: type=1326 audit(1765362079.754:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0777565e7 code=0x7ffc0000 [ 172.803033][ T29] audit: type=1326 audit(1765362079.754:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0776fb829 code=0x7ffc0000 [ 172.864549][ T8489] blktrace: Concurrent blktraces are not allowed on loop6 [ 172.900205][ T8489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8489 comm=syz.3.1735 [ 172.919494][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.022689][ T8497] loop1: detected capacity change from 0 to 512 [ 173.039207][ T8497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.048246][ T8495] blktrace: Concurrent blktraces are not allowed on loop4 [ 173.058205][ T8497] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.066743][ T8495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8495 comm=syz.2.1738 [ 173.107075][ T8503] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 173.120837][ T8503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.130684][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 173.141294][ T8503] bond3 (unregistering): Released all slaves [ 173.484238][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.624725][ T8521] siw: device registration error -23 [ 173.753879][ T8523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.831260][ T8524] netlink: 'syz.2.1748': attribute type 10 has an invalid length. [ 173.839196][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1748'. [ 173.848757][ T8524] batman_adv: batadv0: Interface activated: veth1_vlan [ 173.858212][ T8523] xt_hashlimit: max too large, truncated to 1048576 [ 173.871146][ T8528] blktrace: Concurrent blktraces are not allowed on loop2 [ 173.879031][ T8530] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.881975][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8528 comm=syz.1.1750 [ 173.933045][ T8534] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 173.969650][ T8534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.019055][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 174.065868][ T8534] bond3 (unregistering): Released all slaves [ 174.088865][ T8545] rdma_rxe: rxe_newlink: failed to add lo [ 174.247760][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 174.328641][ T8561] blktrace: Concurrent blktraces are not allowed on loop6 [ 174.341445][ T8561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8561 comm=syz.3.1764 [ 174.389952][ T8565] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 175.033981][ T8575] rdma_rxe: rxe_newlink: failed to add lo [ 175.160038][ T8557] syz.1.1763 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 175.171150][ T8557] CPU: 0 UID: 0 PID: 8557 Comm: syz.1.1763 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.171203][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.171216][ T8557] Call Trace: [ 175.171222][ T8557] [ 175.171230][ T8557] __dump_stack+0x1d/0x30 [ 175.171296][ T8557] dump_stack_lvl+0xe8/0x140 [ 175.171335][ T8557] dump_stack+0x15/0x1b [ 175.171354][ T8557] dump_header+0x81/0x240 [ 175.171374][ T8557] oom_kill_process+0x295/0x350 [ 175.171402][ T8557] out_of_memory+0x97b/0xb80 [ 175.171511][ T8557] try_charge_memcg+0x610/0xa10 [ 175.171540][ T8557] charge_memcg+0x51/0xc0 [ 175.171573][ T8557] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 175.171697][ T8557] __read_swap_cache_async+0x17b/0x2d0 [ 175.171732][ T8557] swap_cluster_readahead+0x362/0x3c0 [ 175.171778][ T8557] swapin_readahead+0xde/0x820 [ 175.171809][ T8557] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 175.171837][ T8557] ? __rcu_read_unlock+0x34/0x70 [ 175.171860][ T8557] ? __rcu_read_unlock+0x4f/0x70 [ 175.171919][ T8557] ? swap_cache_get_folio+0x277/0x280 [ 175.171950][ T8557] do_swap_page+0x2b4/0x21e0 [ 175.172052][ T8557] ? css_rstat_updated+0xb7/0x240 [ 175.172073][ T8557] ? __pfx_default_wake_function+0x10/0x10 [ 175.172169][ T8557] handle_mm_fault+0x9d8/0x2c60 [ 175.172230][ T8557] do_user_addr_fault+0x630/0x1080 [ 175.172339][ T8557] exc_page_fault+0x62/0xa0 [ 175.172366][ T8557] asm_exc_page_fault+0x26/0x30 [ 175.172387][ T8557] RIP: 0033:0x7fe07761d71f [ 175.172404][ T8557] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 175.172493][ T8557] RSP: 002b:00007fffa5ecf4d8 EFLAGS: 00010206 [ 175.172508][ T8557] RAX: 000000008162aa42 RBX: 00007fe0784e5720 RCX: 0000000000000001 [ 175.172593][ T8557] RDX: 0000000000000a42 RSI: ffffffff8162aa42 RDI: 000000000000000d [ 175.172605][ T8557] RBP: ffffffff8162aa42 R08: 00007fe0779a0000 R09: 00007fe0779a2000 [ 175.172618][ T8557] R10: 000000008162aa46 R11: 000000000000000d R12: 000000000000000d [ 175.172684][ T8557] R13: 0000000000000000 R14: ffffffff8162afe1 R15: 0000000000000001 [ 175.172697][ T8557] ? __sys_bpf+0x31/0x7c0 [ 175.172718][ T8557] ? bpf_link_defer_dealloc_mult_rcu_gp+0x1b2/0x1f0 [ 175.172744][ T8557] ? bpf_link_defer_dealloc_mult_rcu_gp+0x1b2/0x1f0 [ 175.172790][ T8557] [ 175.172798][ T8557] memory: usage 307196kB, limit 307200kB, failcnt 3952 [ 175.265955][ T8578] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 175.267211][ T8557] memory+swap: usage 307932kB, limit 9007199254740988kB, failcnt 0 [ 175.267232][ T8557] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 175.398181][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 175.400638][ T8557] Memory cgroup stats for /syz1: [ 175.457875][ T8557] cache 528384 [ 175.466317][ T8557] rss 28672 [ 175.469500][ T8557] shmem 0 [ 175.472445][ T8557] mapped_file 65536 [ 175.476252][ T8557] dirty 0 [ 175.479229][ T8557] writeback 0 [ 175.482518][ T8557] workingset_refault_anon 2692 [ 175.487344][ T8557] workingset_refault_file 640 [ 175.492052][ T8557] swap 716800 [ 175.495348][ T8557] swapcached 20480 [ 175.499164][ T8557] pgpgin 210210 [ 175.502663][ T8557] pgpgout 210073 [ 175.506215][ T8557] pgfault 263320 [ 175.509938][ T8557] pgmajfault 420 [ 175.513499][ T8557] inactive_anon 0 [ 175.517138][ T8557] active_anon 32768 [ 175.521124][ T8557] inactive_file 0 [ 175.524767][ T8557] active_file 524288 [ 175.528722][ T8557] unevictable 4096 [ 175.532446][ T8557] hierarchical_memory_limit 314572800 [ 175.537850][ T8557] hierarchical_memsw_limit 9223372036854771712 [ 175.544023][ T8557] total_cache 528384 [ 175.547993][ T8557] total_rss 28672 [ 175.551637][ T8557] total_shmem 0 [ 175.555106][ T8557] total_mapped_file 65536 [ 175.559596][ T8557] total_dirty 0 [ 175.563070][ T8557] total_writeback 0 [ 175.566121][ T8578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.566947][ T8557] total_workingset_refault_anon 2692 [ 175.578919][ T8557] total_workingset_refault_file 640 [ 175.584183][ T8557] total_swap 716800 [ 175.588051][ T8557] total_swapcached 20480 [ 175.592354][ T8557] total_pgpgin 210210 [ 175.596343][ T8557] total_pgpgout 210073 [ 175.600451][ T8557] total_pgfault 263320 [ 175.604522][ T8557] total_pgmajfault 420 [ 175.608639][ T8557] total_inactive_anon 0 [ 175.612810][ T8557] total_active_anon 32768 [ 175.617180][ T8557] total_inactive_file 0 [ 175.621444][ T8557] total_active_file 524288 [ 175.625875][ T8557] total_unevictable 4096 [ 175.630316][ T8557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1763,pid=8557,uid=0 [ 175.645075][ T8557] Memory cgroup out of memory: Killed process 8557 (syz.1.1763) total-vm:93968kB, anon-rss:1140kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 175.686566][ T8577] bond3 (unregistering): Released all slaves [ 175.798961][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 175.830149][ T8589] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 175.843862][ T8589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.938471][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 175.949073][ T8596] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 175.969427][ T8597] bond3 (unregistering): Released all slaves [ 176.099672][ T8602] blktrace: Concurrent blktraces are not allowed on loop4 [ 176.109913][ T8602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8602 comm=syz.2.1777 [ 176.247119][ T8607] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 176.293492][ T8607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.300312][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 176.370414][ T8592] netlink: 'syz.1.1775': attribute type 13 has an invalid length. [ 176.398675][ T8611] bond3 (unregistering): Released all slaves [ 176.439877][ T8592] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 176.548954][ T8613] blktrace: Concurrent blktraces are not allowed on loop2 [ 176.571852][ T8615] siw: device registration error -23 [ 176.587279][ T8613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8613 comm=syz.1.1781 [ 176.888681][ T8625] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 176.973277][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1785'. [ 177.009950][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 177.168103][ T8625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.217963][ T8628] bond3 (unregistering): Released all slaves [ 177.374941][ T8636] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 177.428396][ T8636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.509996][ T8636] bond4 (unregistering): Released all slaves [ 177.521075][ T8639] siw: device registration error -23 [ 177.649920][ T8649] blktrace: Concurrent blktraces are not allowed on loop2 [ 177.659906][ T8649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8649 comm=syz.1.1794 [ 177.740725][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 177.740743][ T29] audit: type=1326 audit(1765362084.964:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 177.741571][ T8659] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 177.746944][ T29] audit: type=1326 audit(1765362084.964:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 177.803451][ T29] audit: type=1326 audit(1765362084.964:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 177.826907][ T29] audit: type=1326 audit(1765362084.964:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 177.850373][ T29] audit: type=1326 audit(1765362084.964:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 177.873766][ T29] audit: type=1326 audit(1765362084.964:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 177.897161][ T29] audit: type=1326 audit(1765362084.964:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 178.113371][ T8666] siw: device registration error -23 [ 178.166490][ T8670] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 178.194529][ T29] audit: type=1326 audit(1765362085.014:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 178.218000][ T29] audit: type=1326 audit(1765362085.014:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 178.218359][ T8673] __nla_validate_parse: 3 callbacks suppressed [ 178.218375][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 178.241399][ T29] audit: type=1400 audit(1765362085.274:7366): avc: denied { setattr } for pid=8663 comm="syz.3.1799" name="secretmem" dev="secretmem" ino=18983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.293229][ T8670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.336610][ T8676] lo speed is unknown, defaulting to 1000 [ 178.343235][ T8676] lo speed is unknown, defaulting to 1000 [ 178.359071][ T8682] sz1: rxe_newlink: already configured on lo [ 178.412180][ T8685] blktrace: Concurrent blktraces are not allowed on loop6 [ 178.422018][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8685 comm=syz.3.1807 [ 178.962821][ T8699] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 178.976936][ T8699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.986245][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 179.069070][ T8699] bond3 (unregistering): Released all slaves [ 179.085987][ T8701] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 179.371586][ T8587] syz.3.1767 (8587) used greatest stack depth: 7704 bytes left [ 179.527516][ T8708] loop1: detected capacity change from 0 to 1024 [ 179.613092][ T8710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.629675][ T8708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.659177][ T8708] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1813'. [ 179.718684][ T8710] netlink: 'syz.4.1814': attribute type 10 has an invalid length. [ 179.726539][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1814'. [ 179.948615][ T8730] siw: device registration error -23 [ 179.958965][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.049548][ T8732] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 180.065549][ T8732] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.117795][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 180.285282][ T8734] bond5 (unregistering): Released all slaves [ 180.434849][ T8741] lo speed is unknown, defaulting to 1000 [ 180.587571][ T8748] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.718682][ T8741] lo speed is unknown, defaulting to 1000 [ 181.124232][ T8761] siw: device registration error -23 [ 181.319953][ T8766] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1832'. [ 181.354664][ T8768] loop1: detected capacity change from 0 to 512 [ 181.362653][ T8768] EXT4-fs (loop1): 1 truncate cleaned up [ 181.368814][ T8768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.474817][ T8774] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 181.522239][ T8775] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 181.870788][ T8788] netlink: 660 bytes leftover after parsing attributes in process `syz.3.1840'. [ 182.199813][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1844'. [ 182.216119][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.266468][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'. [ 182.361303][ T8811] netlink: 'syz.1.1846': attribute type 13 has an invalid length. [ 182.444723][ T8815] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1850'. [ 182.471616][ T8819] blktrace: Concurrent blktraces are not allowed on loop6 [ 182.481414][ T8819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8819 comm=syz.3.1851 [ 182.656141][ T8829] FAULT_INJECTION: forcing a failure. [ 182.656141][ T8829] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.669489][ T8829] CPU: 1 UID: 0 PID: 8829 Comm: syz.1.1854 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.669535][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.669551][ T8829] Call Trace: [ 182.669559][ T8829] [ 182.669655][ T8829] __dump_stack+0x1d/0x30 [ 182.669679][ T8829] dump_stack_lvl+0xe8/0x140 [ 182.669702][ T8829] dump_stack+0x15/0x1b [ 182.669733][ T8829] should_fail_ex+0x265/0x280 [ 182.669763][ T8829] should_fail_alloc_page+0xf2/0x100 [ 182.669801][ T8829] __alloc_frozen_pages_noprof+0x109/0x360 [ 182.669848][ T8829] alloc_pages_mpol+0xb3/0x260 [ 182.669880][ T8829] vma_alloc_folio_noprof+0x1aa/0x300 [ 182.669911][ T8829] handle_mm_fault+0xef5/0x2c60 [ 182.670001][ T8829] do_user_addr_fault+0x630/0x1080 [ 182.670035][ T8829] exc_page_fault+0x62/0xa0 [ 182.670071][ T8829] asm_exc_page_fault+0x26/0x30 [ 182.670096][ T8829] RIP: 0033:0x7fe07770cc5b [ 182.670115][ T8829] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 182.670183][ T8829] RSP: 002b:00007fe0761a3e10 EFLAGS: 00010246 [ 182.670202][ T8829] RAX: 00007fe0761a5f30 RBX: 00007fe07798a640 RCX: 0000000000000000 [ 182.670218][ T8829] RDX: 00007fe0761a5f78 RSI: 00007fe0777c0df8 RDI: 00007fe0761a3e30 [ 182.670233][ T8829] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 182.670248][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.670272][ T8829] R13: 00007fe0779b6128 R14: 00007fe0779b6090 R15: 00007fffa5ecf458 [ 182.670291][ T8829] [ 182.670363][ T8829] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 182.905896][ T29] kauditd_printk_skb: 955 callbacks suppressed [ 182.905910][ T29] audit: type=1326 audit(1765362090.124:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 182.907062][ T8840] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 182.912436][ T29] audit: type=1326 audit(1765362090.124:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 182.968670][ T29] audit: type=1326 audit(1765362090.124:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 182.992151][ T29] audit: type=1326 audit(1765362090.124:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 183.015612][ T29] audit: type=1326 audit(1765362090.124:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 183.038955][ T29] audit: type=1326 audit(1765362090.124:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 183.062370][ T29] audit: type=1326 audit(1765362090.124:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 183.086482][ T29] audit: type=1326 audit(1765362090.304:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 183.088491][ T8842] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 183.109941][ T29] audit: type=1326 audit(1765362090.304:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 183.143164][ T29] audit: type=1326 audit(1765362090.304:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6afcf749 code=0x7ffc0000 [ 183.559438][ T8861] sz1: rxe_newlink: already configured on lo [ 184.495750][ T8893] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 184.554273][ T8895] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 184.625454][ T8901] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 184.640648][ T8901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.649906][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'. [ 184.660247][ T8901] bond6 (unregistering): Released all slaves [ 184.719810][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 184.776714][ T8910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.793606][ T8910] netlink: 'syz.4.1885': attribute type 10 has an invalid length. [ 184.801488][ T8910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1885'. [ 184.811961][ T8910] xt_hashlimit: max too large, truncated to 1048576 [ 184.823416][ T8912] loop1: detected capacity change from 0 to 512 [ 184.830369][ T8912] ext4: Unknown parameter 'obj_role' [ 184.839177][ T8912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.856136][ T8912] netlink: 'syz.1.1886': attribute type 10 has an invalid length. [ 184.864098][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1886'. [ 184.876127][ T8912] batman_adv: batadv0: Interface activated: veth1_vlan [ 184.876729][ T8915] siw: device registration error -23 [ 184.885381][ T8912] xt_hashlimit: max too large, truncated to 1048576 [ 184.917832][ T8916] rdma_rxe: rxe_newlink: failed to add lo [ 184.948460][ T8920] siw: device registration error -23 [ 184.987175][ T8926] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 185.005915][ T8926] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.015304][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 185.025978][ T8926] bond6 (unregistering): Released all slaves [ 185.065817][ T8932] loop1: detected capacity change from 0 to 512 [ 185.111458][ T8932] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 185.124282][ T8932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.147618][ T8932] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1892: corrupted inode contents [ 185.159873][ T8932] EXT4-fs (loop1): Remounting filesystem read-only [ 185.166547][ T8932] EXT4-fs (loop1): 1 truncate cleaned up [ 185.172496][ T290] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 185.183090][ T290] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 185.217214][ T290] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 185.228460][ T8932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.265676][ T8956] geneve2: entered promiscuous mode [ 185.271335][ T8956] geneve2: entered allmulticast mode [ 185.287404][ T8958] siw: device registration error -23 [ 185.308880][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1903'. [ 185.483997][ T8968] blktrace: Concurrent blktraces are not allowed on loop4 [ 185.500826][ T8968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8968 comm=syz.2.1908 [ 185.517688][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1906'. [ 185.531537][ T8970] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 185.563251][ T8970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.575731][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 185.577147][ T8974] netlink: 'syz.2.1910': attribute type 1 has an invalid length. [ 185.599792][ T8974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.609886][ T8970] bond5 (unregistering): Released all slaves [ 185.610337][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'. [ 185.616312][ T8977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1911'. [ 185.636166][ T8974] bond4 (unregistering): Released all slaves [ 185.779740][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.833667][ T8996] tipc: Enabling of bearer rejected, failed to enable media [ 185.847186][ T9000] loop1: detected capacity change from 0 to 512 [ 185.873650][ T9000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.886470][ T9000] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.953188][ T9014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.971801][ T9016] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 185.978560][ T9014] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 185.991005][ T9016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.999563][ T9014] xt_hashlimit: max too large, truncated to 1048576 [ 186.009124][ T9016] bond4 (unregistering): Released all slaves [ 186.105216][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.309635][ T9053] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 186.324174][ T9053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.377631][ T9053] bond4 (unregistering): Released all slaves [ 186.423434][ T9063] blktrace: Concurrent blktraces are not allowed on loop6 [ 186.433731][ T9063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9063 comm=syz.3.1942 [ 186.669628][ T9084] siw: device registration error -23 [ 186.889024][ T9102] rdma_rxe: rxe_newlink: failed to add lo [ 186.980291][ T9109] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 187.021771][ T9112] blktrace: Concurrent blktraces are not allowed on loop0 [ 187.067715][ T9112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9112 comm=syz.0.1963 [ 187.412635][ T9124] blktrace: Concurrent blktraces are not allowed on loop0 [ 187.429835][ T9124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9124 comm=syz.0.1967 [ 187.556828][ T9128] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 187.585021][ T9128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.615129][ T9128] bond6 (unregistering): Released all slaves [ 187.711302][ T9140] sz1: rxe_newlink: already configured on lo [ 187.718974][ T9142] blktrace: Concurrent blktraces are not allowed on loop2 [ 187.730491][ T9142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9142 comm=syz.1.1974 [ 187.853550][ T9159] loop1: detected capacity change from 0 to 512 [ 187.885021][ T9159] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.972292][ T9159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.990855][ T9159] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1979: corrupted inode contents [ 188.008452][ T9166] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 188.087717][ T9159] EXT4-fs (loop1): Remounting filesystem read-only [ 188.103114][ T9159] EXT4-fs (loop1): 1 truncate cleaned up [ 188.109197][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 188.119928][ T12] __quota_error: 307 callbacks suppressed [ 188.119940][ T12] Quota error (device loop1): write_blk: dquota write failed [ 188.133462][ T12] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 188.143732][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 188.154504][ T12] Quota error (device loop1): write_blk: dquota write failed [ 188.162119][ T12] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 188.200054][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 188.210578][ T12] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 188.265663][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 188.321161][ T9159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.418065][ T9162] syz.4.1981 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 188.429028][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.4.1981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.429079][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.429091][ T9162] Call Trace: [ 188.429098][ T9162] [ 188.429107][ T9162] __dump_stack+0x1d/0x30 [ 188.429149][ T9162] dump_stack_lvl+0xe8/0x140 [ 188.429172][ T9162] dump_stack+0x15/0x1b [ 188.429196][ T9162] dump_header+0x81/0x240 [ 188.429223][ T9162] oom_kill_process+0x295/0x350 [ 188.429260][ T9162] out_of_memory+0x97b/0xb80 [ 188.429284][ T9162] try_charge_memcg+0x610/0xa10 [ 188.429318][ T9162] charge_memcg+0x51/0xc0 [ 188.429390][ T9162] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 188.429430][ T9162] __read_swap_cache_async+0x17b/0x2d0 [ 188.429493][ T9162] swap_cluster_readahead+0x262/0x3c0 [ 188.429599][ T9162] swapin_readahead+0xde/0x820 [ 188.429660][ T9162] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 188.429703][ T9162] ? lruvec_stat_mod_folio+0xd6/0x120 [ 188.429726][ T9162] ? __rcu_read_unlock+0x4f/0x70 [ 188.429817][ T9162] ? swap_cache_get_folio+0x277/0x280 [ 188.429852][ T9162] do_swap_page+0x2b4/0x21e0 [ 188.429895][ T9162] ? css_rstat_updated+0xb7/0x240 [ 188.429916][ T9162] ? __pfx_default_wake_function+0x10/0x10 [ 188.430035][ T9162] handle_mm_fault+0x9d8/0x2c60 [ 188.430077][ T9162] do_user_addr_fault+0x630/0x1080 [ 188.430111][ T9162] exc_page_fault+0x62/0xa0 [ 188.430145][ T9162] asm_exc_page_fault+0x26/0x30 [ 188.430186][ T9162] RIP: 0033:0x7fe1a03759ec [ 188.430205][ T9162] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 188.430239][ T9162] RSP: 002b:00007fff6650a730 EFLAGS: 00010206 [ 188.430258][ T9162] RAX: 0000000000000000 RBX: 00007fe1a06f5fa0 RCX: 0000000000000000 [ 188.430272][ T9162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555591f9b808 [ 188.430283][ T9162] RBP: 00007fe1a06f7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 188.430315][ T9162] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002e113 [ 188.430339][ T9162] R13: 00007fe1a06f6090 R14: ffffffffffffffff R15: 00007fff6650a840 [ 188.430360][ T9162] [ 188.430563][ T9162] memory: usage 307200kB, limit 307200kB, failcnt 11778 [ 188.658008][ T9162] memory+swap: usage 243204kB, limit 9007199254740988kB, failcnt 0 [ 188.666098][ T9162] kmem: usage 242416kB, limit 9007199254740988kB, failcnt 0 [ 188.673602][ T9162] Memory cgroup stats for /syz4: [ 188.677537][ T9162] cache 4096 [ 188.686121][ T9162] rss 24576 [ 188.689482][ T9162] shmem 0 [ 188.692662][ T9162] mapped_file 0 [ 188.696367][ T9162] dirty 0 [ 188.699557][ T9162] writeback 8192 [ 188.703351][ T9162] workingset_refault_anon 1506 [ 188.708341][ T9162] workingset_refault_file 3994 [ 188.713298][ T9162] swap 761856 [ 188.716783][ T9162] swapcached 24576 [ 188.720745][ T9162] pgpgin 316411 [ 188.724420][ T9162] pgpgout 316401 [ 188.728198][ T9162] pgfault 319842 [ 188.731954][ T9162] pgmajfault 352 [ 188.735763][ T9162] inactive_anon 8192 [ 188.739868][ T9162] active_anon 28672 [ 188.743894][ T9162] inactive_file 0 [ 188.747637][ T9162] active_file 0 [ 188.751197][ T9162] unevictable 4096 [ 188.754924][ T9162] hierarchical_memory_limit 314572800 [ 188.760344][ T9162] hierarchical_memsw_limit 9223372036854771712 [ 188.766524][ T9162] total_cache 4096 [ 188.770378][ T9162] total_rss 24576 [ 188.774019][ T9162] total_shmem 0 [ 188.777515][ T9162] total_mapped_file 0 [ 188.781531][ T9162] total_dirty 0 [ 188.784992][ T9162] total_writeback 8192 [ 188.789096][ T9162] total_workingset_refault_anon 1506 [ 188.794397][ T9162] total_workingset_refault_file 3994 [ 188.799714][ T9162] total_swap 761856 [ 188.803533][ T9162] total_swapcached 24576 [ 188.807819][ T9162] total_pgpgin 316411 [ 188.811810][ T9162] total_pgpgout 316401 [ 188.815876][ T9162] total_pgfault 319842 [ 188.819985][ T9162] total_pgmajfault 352 [ 188.824061][ T9162] total_inactive_anon 8192 [ 188.828523][ T9162] total_active_anon 28672 [ 188.832856][ T9162] total_inactive_file 0 [ 188.837023][ T9162] total_active_file 0 [ 188.841061][ T9162] total_unevictable 4096 [ 188.845340][ T9162] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1981,pid=9162,uid=0 [ 188.860497][ T9162] Memory cgroup out of memory: Killed process 9162 (syz.4.1981) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 188.878363][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.901494][ T9183] loop1: detected capacity change from 0 to 512 [ 188.923701][ T9183] EXT4-fs (loop1): 1 truncate cleaned up [ 188.930039][ T9183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.949733][ T29] audit: type=1326 audit(1765362096.174:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 188.973272][ T29] audit: type=1326 audit(1765362096.174:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 188.996651][ T29] audit: type=1326 audit(1765362096.174:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 189.020098][ T29] audit: type=1326 audit(1765362096.174:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 189.057681][ T9185] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 189.088005][ T9189] sz1: rxe_newlink: already configured on lo [ 189.166195][ T9192] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 189.211407][ T9194] blktrace: Concurrent blktraces are not allowed on loop4 [ 189.222512][ T9194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9194 comm=syz.2.1990 [ 189.329591][ T9202] blktrace: Concurrent blktraces are not allowed on loop4 [ 189.345540][ T9202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9202 comm=syz.2.1992 [ 189.698873][ T9217] __nla_validate_parse: 15 callbacks suppressed [ 189.698891][ T9217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1998'. [ 189.748124][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.775703][ T9219] rdma_rxe: rxe_newlink: failed to add lo [ 189.808608][ T9221] loop1: detected capacity change from 0 to 164 [ 189.855703][ T9225] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.883937][ T9229] blktrace: Concurrent blktraces are not allowed on loop2 [ 189.893864][ T9229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9229 comm=syz.1.2004 [ 189.924347][ T9231] loop1: detected capacity change from 0 to 1024 [ 189.939549][ T9231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.954680][ T9231] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2005'. [ 190.031830][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.051588][ T9246] loop1: detected capacity change from 0 to 128 [ 190.060604][ T9246] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.073221][ T9246] ext4 filesystem being mounted at /370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.173461][ T9255] blktrace: Concurrent blktraces are not allowed on loop8 [ 190.183753][ T9255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9255 comm=syz.4.2015 [ 190.218886][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.313944][ T9267] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2020'. [ 190.329362][ T9269] validate_nla: 1 callbacks suppressed [ 190.329375][ T9269] netlink: 'syz.2.2021': attribute type 21 has an invalid length. [ 190.367572][ T9269] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2021'. [ 190.486937][ T9279] netlink: 'syz.4.2024': attribute type 1 has an invalid length. [ 190.501475][ T9279] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.526654][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'. [ 190.578497][ T9279] bond6 (unregistering): Released all slaves [ 190.686085][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 190.686829][ T9292] capability: warning: `syz.1.2028' uses 32-bit capabilities (legacy support in use) [ 190.695186][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 190.789924][ T9300] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 190.804356][ T9300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.833515][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2031'. [ 190.849571][ T9300] bond6 (unregistering): Released all slaves [ 190.868005][ T9305] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 190.884247][ T9305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.897846][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 190.950631][ T9303] bond3 (unregistering): Released all slaves [ 191.118275][ T9315] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2036'. [ 191.347013][ T9324] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 191.401932][ T9324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.489145][ T9326] bond4 (unregistering): Released all slaves [ 191.658194][ T9341] blktrace: Concurrent blktraces are not allowed on loop6 [ 191.667475][ T9340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.700219][ T9341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9341 comm=syz.3.2047 [ 191.735054][ T9348] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 191.758407][ T9340] netlink: 'syz.2.2046': attribute type 10 has an invalid length. [ 191.774901][ T9348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.803532][ T9353] bond5 (unregistering): Released all slaves [ 191.809806][ T9349] xt_hashlimit: max too large, truncated to 1048576 [ 192.039235][ T9329] loop1: detected capacity change from 0 to 512 [ 192.056672][ T9374] netlink: 'syz.3.2057': attribute type 1 has an invalid length. [ 192.176999][ T9374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.253481][ T9379] bond5 (unregistering): Released all slaves [ 192.305304][ T9329] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2040: error while reading EA inode 32 err=-116 [ 192.476107][ T9329] EXT4-fs (loop1): Remounting filesystem read-only [ 192.604162][ T9329] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 192.747235][ T9329] EXT4-fs (loop1): 1 orphan inode deleted [ 192.753646][ T9329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.757615][ T9388] netlink: 'syz.4.2060': attribute type 1 has an invalid length. [ 192.773996][ T9329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.866252][ T9388] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.951787][ T9390] bond6 (unregistering): Released all slaves [ 193.020199][ T9393] netlink: 'syz.0.2062': attribute type 10 has an invalid length. [ 193.053371][ T9392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.103433][ T9395] lo speed is unknown, defaulting to 1000 [ 193.130195][ T9392] xt_hashlimit: max too large, truncated to 1048576 [ 193.140661][ T9395] lo speed is unknown, defaulting to 1000 [ 193.224084][ T9397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.519515][ T9402] bond6 (unregistering): Released all slaves [ 194.106201][ T9416] loop1: detected capacity change from 0 to 512 [ 194.281217][ T9416] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 194.291436][ T9416] EXT4-fs (loop1): orphan cleanup on readonly fs [ 194.292978][ T9428] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.299839][ T9416] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2066: corrupted inode contents [ 194.320854][ T9416] EXT4-fs (loop1): Remounting filesystem read-only [ 194.327977][ T9416] EXT4-fs (loop1): 1 truncate cleaned up [ 194.334001][ T6199] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.344743][ T6199] __quota_error: 996 callbacks suppressed [ 194.344759][ T6199] Quota error (device loop1): write_blk: dquota write failed [ 194.358312][ T6199] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 194.368554][ T6199] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.379253][ T6199] Quota error (device loop1): write_blk: dquota write failed [ 194.386793][ T6199] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 194.397389][ T6199] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 194.407795][ T6199] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 194.417037][ T6199] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 194.428023][ T9416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.022666][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.366700][ T9445] validate_nla: 1 callbacks suppressed [ 195.366721][ T9445] netlink: 'syz.1.2075': attribute type 8 has an invalid length. [ 195.380000][ T9445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.457906][ T29] audit: type=1326 audit(1765362102.684:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 195.489380][ T29] audit: type=1326 audit(1765362102.684:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 195.512732][ T29] audit: type=1326 audit(1765362102.684:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07775f749 code=0x7ffc0000 [ 195.536271][ T29] audit: type=1326 audit(1765362102.704:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe077792005 code=0x7ffc0000 [ 195.749430][ T9451] __nla_validate_parse: 8 callbacks suppressed [ 195.749450][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 195.764559][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 196.112949][ T9473] netlink: 'syz.2.2086': attribute type 1 has an invalid length. [ 196.153349][ T9473] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.317919][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 196.385480][ T9475] bond4 (unregistering): Released all slaves [ 196.460967][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 196.473630][ T9489] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 196.585549][ T9498] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 196.600282][ T9499] lo speed is unknown, defaulting to 1000 [ 196.606722][ T9499] lo speed is unknown, defaulting to 1000 [ 197.277349][ T9514] blktrace: Concurrent blktraces are not allowed on loop2 [ 197.289973][ T9514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9514 comm=syz.1.2097 [ 197.369241][ T9516] siw: device registration error -23 [ 197.453832][ T9522] loop1: detected capacity change from 0 to 512 [ 197.469853][ T9522] ext4: Unknown parameter 'obj_role' [ 197.504578][ T9522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.527932][ T9522] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 197.535857][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2100'. [ 197.549624][ T9522] xt_hashlimit: max too large, truncated to 1048576 [ 197.589377][ T9526] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2102'. [ 197.639464][ T9525] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2103'. [ 198.060078][ T9547] rdma_rxe: rxe_newlink: failed to add lo [ 198.131792][ T9558] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.267116][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'. [ 198.291515][ T9568] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2118'. [ 198.596708][ T9585] loop1: detected capacity change from 0 to 512 [ 198.628286][ T9585] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.645534][ T9595] blktrace: Concurrent blktraces are not allowed on loop6 [ 198.655222][ T9585] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.667187][ T9595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9595 comm=syz.3.2128 [ 198.690647][ T9585] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2122: corrupted inode contents [ 198.734196][ T9585] EXT4-fs (loop1): Remounting filesystem read-only [ 198.749375][ T9585] EXT4-fs (loop1): 1 truncate cleaned up [ 198.755350][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.766103][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.778430][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.789305][ T9585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.843878][ T9600] rdma_rxe: rxe_newlink: failed to add lo [ 198.863458][ T9602] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.992591][ T9608] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2134'. [ 199.268188][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.360595][ T9626] blktrace: Concurrent blktraces are not allowed on loop8 [ 199.371369][ T9626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9626 comm=syz.4.2140 [ 199.453234][ T29] kauditd_printk_skb: 1026 callbacks suppressed [ 199.453250][ T29] audit: type=1326 audit(1765362106.674:10657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.526695][ T29] audit: type=1326 audit(1765362106.714:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.550400][ T29] audit: type=1326 audit(1765362106.714:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.574087][ T29] audit: type=1326 audit(1765362106.714:10660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.597616][ T29] audit: type=1326 audit(1765362106.714:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.621122][ T29] audit: type=1326 audit(1765362106.714:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.644747][ T29] audit: type=1326 audit(1765362106.714:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.668337][ T29] audit: type=1326 audit(1765362106.714:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.691843][ T29] audit: type=1326 audit(1765362106.714:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.715368][ T29] audit: type=1326 audit(1765362106.714:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 199.773156][ T9645] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 199.812734][ T9645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.846551][ T9649] bond3 (unregistering): Released all slaves [ 200.002306][ T9654] loop1: detected capacity change from 0 to 1024 [ 200.031170][ T9654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.163150][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.319665][ T9669] loop1: detected capacity change from 0 to 512 [ 200.338494][ T9669] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 200.347726][ T9669] EXT4-fs (loop1): orphan cleanup on readonly fs [ 200.357707][ T9676] blktrace: Concurrent blktraces are not allowed on loop0 [ 200.359416][ T9669] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2147: corrupted inode contents [ 200.368876][ T9676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9676 comm=syz.0.2152 [ 200.381246][ T9677] blktrace: Concurrent blktraces are not allowed on loop8 [ 200.410089][ T9669] EXT4-fs (loop1): Remounting filesystem read-only [ 200.423896][ T9677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9677 comm=syz.4.2153 [ 200.441508][ T9669] EXT4-fs (loop1): 1 truncate cleaned up [ 200.447805][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 200.458698][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 200.509127][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 200.520269][ T9669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.548186][ T9687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.565865][ T9687] netlink: 'syz.4.2156': attribute type 10 has an invalid length. [ 200.574793][ T9687] batman_adv: batadv0: Interface activated: veth1_vlan [ 200.583545][ T9687] xt_hashlimit: max too large, truncated to 1048576 [ 200.602227][ T9689] lo speed is unknown, defaulting to 1000 [ 200.612760][ T9689] lo speed is unknown, defaulting to 1000 [ 201.050025][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.140346][ T9704] tipc: Enabling of bearer rejected, failed to enable media [ 201.343572][ T9714] siw: device registration error -23 [ 201.392097][ T9717] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 201.431754][ T9717] loop1: detected capacity change from 0 to 4096 [ 201.472430][ T9717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.544631][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.563765][ T9721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.582717][ T9721] netlink: 'syz.2.2168': attribute type 10 has an invalid length. [ 201.590657][ T9721] __nla_validate_parse: 6 callbacks suppressed [ 201.590675][ T9721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2168'. [ 201.610555][ T9721] xt_hashlimit: max too large, truncated to 1048576 [ 201.673809][ T9733] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 201.759560][ T9742] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2177'. [ 201.967614][ T9753] blktrace: Concurrent blktraces are not allowed on loop4 [ 201.977598][ T9753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9753 comm=syz.2.2180 [ 202.044353][ T9760] siw: device registration error -23 [ 202.150979][ T9763] siw: device registration error -23 [ 202.152509][ T9765] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 202.301694][ T9773] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2190'. [ 202.589980][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 203.414208][ T9823] siw: device registration error -23 [ 203.673570][ T9834] FAULT_INJECTION: forcing a failure. [ 203.673570][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 203.686296][ T9834] CPU: 1 UID: 0 PID: 9834 Comm: syz.1.2212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 203.686326][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.686340][ T9834] Call Trace: [ 203.686346][ T9834] [ 203.686355][ T9834] __dump_stack+0x1d/0x30 [ 203.686382][ T9834] dump_stack_lvl+0xe8/0x140 [ 203.686417][ T9834] dump_stack+0x15/0x1b [ 203.686438][ T9834] should_fail_ex+0x265/0x280 [ 203.686543][ T9834] should_failslab+0x8c/0xb0 [ 203.686567][ T9834] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 203.686596][ T9834] ? kstrdup_const+0x3e/0x50 [ 203.686617][ T9834] kstrdup+0x3e/0xd0 [ 203.686640][ T9834] kstrdup_const+0x3e/0x50 [ 203.686658][ T9834] __kernfs_new_node+0x42/0x3a0 [ 203.686765][ T9834] ? selinux_file_open+0x2dc/0x330 [ 203.686801][ T9834] kernfs_new_node+0xd0/0x140 [ 203.686831][ T9834] kernfs_create_link+0x70/0x130 [ 203.686851][ T9834] sysfs_do_create_link_sd+0x6a/0x100 [ 203.686902][ T9834] sysfs_create_link+0x51/0x70 [ 203.687010][ T9834] driver_sysfs_add+0x54/0x160 [ 203.687062][ T9834] really_probe+0xf6/0x5c0 [ 203.687167][ T9834] ? __driver_probe_device+0x116/0x190 [ 203.687195][ T9834] __driver_probe_device+0x121/0x190 [ 203.687241][ T9834] driver_probe_device+0x37/0x2f0 [ 203.687313][ T9834] __device_attach_driver+0x205/0x310 [ 203.687339][ T9834] ? __pfx___device_attach_driver+0x10/0x10 [ 203.687375][ T9834] bus_for_each_drv+0x1c0/0x230 [ 203.687401][ T9834] __device_attach+0x1c7/0x290 [ 203.687464][ T9834] device_attach+0x17/0x20 [ 203.687494][ T9834] proc_ioctl+0x2f7/0x400 [ 203.687609][ T9834] proc_ioctl_default+0x71/0xa0 [ 203.687643][ T9834] usbdev_ioctl+0xe8b/0x1700 [ 203.687668][ T9834] ? __pfx_usbdev_ioctl+0x10/0x10 [ 203.687691][ T9834] __se_sys_ioctl+0xce/0x140 [ 203.687877][ T9834] __x64_sys_ioctl+0x43/0x50 [ 203.687975][ T9834] x64_sys_call+0x14b0/0x3000 [ 203.688078][ T9834] do_syscall_64+0xd8/0x2a0 [ 203.688119][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.688143][ T9834] RIP: 0033:0x7fe07775f749 [ 203.688159][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.688253][ T9834] RSP: 002b:00007fe0761c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.688274][ T9834] RAX: ffffffffffffffda RBX: 00007fe0779b5fa0 RCX: 00007fe07775f749 [ 203.688286][ T9834] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 203.688297][ T9834] RBP: 00007fe0761c7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.688382][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.688397][ T9834] R13: 00007fe0779b6038 R14: 00007fe0779b5fa0 R15: 00007fffa5ecf458 [ 203.688423][ T9834] [ 203.953998][ T9834] hub 9-0:1.0: really_probe: driver_sysfs_add failed [ 204.011864][ T9836] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2213'. [ 204.071802][ T9838] lo speed is unknown, defaulting to 1000 [ 204.097877][ T9838] lo speed is unknown, defaulting to 1000 [ 204.282756][ T9848] loop1: detected capacity change from 0 to 164 [ 204.493603][ T9854] netlink: 'syz.1.2220': attribute type 1 has an invalid length. [ 204.503167][ T9856] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 204.545926][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 204.584853][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 204.644006][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 204.644022][ T29] audit: type=1326 audit(1765362111.864:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 204.674704][ T9856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.713876][ T9854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.731908][ T29] audit: type=1326 audit(1765362111.904:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c17b565e7 code=0x7ffc0000 [ 204.755389][ T29] audit: type=1326 audit(1765362111.904:11481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c17afb829 code=0x7ffc0000 [ 204.778838][ T29] audit: type=1326 audit(1765362111.904:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 204.802287][ T29] audit: type=1326 audit(1765362111.904:11483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 204.825837][ T29] audit: type=1326 audit(1765362111.904:11484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 204.849349][ T29] audit: type=1326 audit(1765362111.904:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 204.872892][ T29] audit: type=1326 audit(1765362111.904:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 204.896499][ T29] audit: type=1326 audit(1765362111.904:11487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 204.920264][ T29] audit: type=1326 audit(1765362111.904:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17b5f749 code=0x7ffc0000 [ 205.098893][ T9859] bond3 (unregistering): Released all slaves [ 205.176905][ T9860] bond4 (unregistering): Released all slaves [ 205.228611][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2224'. [ 205.237635][ T9871] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2224'. [ 205.282009][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 205.292912][ T9875] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 205.330029][ T9875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.428801][ T9877] bond4 (unregistering): Released all slaves [ 205.526543][ T9878] netlink: 'syz.1.2225': attribute type 13 has an invalid length. [ 205.598098][ T9878] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 205.777562][ T9873] ================================================================== [ 205.785701][ T9873] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 205.795548][ T9873] [ 205.797880][ T9873] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 1: [ 205.805958][ T9873] tick_do_update_jiffies64+0x113/0x1c0 [ 205.811563][ T9873] tick_nohz_handler+0x8d/0x3d0 [ 205.816439][ T9873] __hrtimer_run_queues+0x20f/0x5a0 [ 205.821649][ T9873] hrtimer_interrupt+0x21a/0x460 [ 205.826609][ T9873] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 205.832523][ T9873] sysvec_apic_timer_interrupt+0x6f/0x80 [ 205.838184][ T9873] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.844184][ T9873] __tsan_unaligned_write4+0x11e/0x190 [ 205.849665][ T9873] shmem_fault+0x7c/0x250 [ 205.854028][ T9873] __do_fault+0xbc/0x200 [ 205.858305][ T9873] handle_mm_fault+0xfab/0x2c60 [ 205.863176][ T9873] __get_user_pages+0x1024/0x1ed0 [ 205.868230][ T9873] __mm_populate+0x243/0x3a0 [ 205.872846][ T9873] vm_mmap_pgoff+0x232/0x2e0 [ 205.877713][ T9873] ksys_mmap_pgoff+0xc2/0x310 [ 205.882506][ T9873] x64_sys_call+0x16bb/0x3000 [ 205.887216][ T9873] do_syscall_64+0xd8/0x2a0 [ 205.891774][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.897689][ T9873] [ 205.900024][ T9873] read to 0xffffffff86809a00 of 8 bytes by task 9873 on cpu 0: [ 205.907572][ T9873] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 205.913843][ T9873] count_shadow_nodes+0x6a/0x230 [ 205.918817][ T9873] do_shrink_slab+0x63/0x680 [ 205.923433][ T9873] shrink_slab+0x4f5/0x840 [ 205.927875][ T9873] shrink_node+0x6a9/0x2010 [ 205.932397][ T9873] do_try_to_free_pages+0x3f6/0xcd0 [ 205.937628][ T9873] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 205.943556][ T9873] try_charge_memcg+0x383/0xa10 [ 205.948430][ T9873] obj_cgroup_charge_pages+0xa6/0x150 [ 205.953835][ T9873] __memcg_kmem_charge_page+0x9f/0x170 [ 205.959322][ T9873] __alloc_frozen_pages_noprof+0x18f/0x360 [ 205.965168][ T9873] alloc_pages_mpol+0xb3/0x260 [ 205.969972][ T9873] alloc_pages_noprof+0x90/0x130 [ 205.974941][ T9873] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 205.980863][ T9873] bpf_map_area_alloc+0xfa/0x150 [ 205.985831][ T9873] array_map_alloc+0x1d3/0x3c0 [ 205.990610][ T9873] map_create+0x862/0xda0 [ 205.994942][ T9873] __sys_bpf+0x54e/0x7c0 [ 205.999198][ T9873] __x64_sys_bpf+0x41/0x50 [ 206.003621][ T9873] x64_sys_call+0x28e1/0x3000 [ 206.008310][ T9873] do_syscall_64+0xd8/0x2a0 [ 206.012834][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.018737][ T9873] [ 206.021068][ T9873] value changed: 0x00000000ffffdb01 -> 0x00000000ffffdb02 [ 206.028171][ T9873] [ 206.030492][ T9873] Reported by Kernel Concurrency Sanitizer on: [ 206.036638][ T9873] CPU: 0 UID: 0 PID: 9873 Comm: syz.1.2225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.046364][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.056426][ T9873] ================================================================== [ 206.141501][ T9901] xt_CT: No such helper "pptp"