last executing test programs: 1.731043619s ago: executing program 1 (id=1354): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfeb184d0aa046426) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r3) sendto$unix(r3, &(0x7f0000000580)="4081d49b5dc83732e606389f1bb2afd70155a42669ec2225a537d40163796c869e94b66e963a264da63ad55b72b0f1d661aa4a45b54c705b3ebb48aeffb803e1c0cc93aabfcc8311b7ce1ed016d379a570321d5d124c5255df9f7b4362f87679f227bb80a14006faad9a983632c5614913606db8ab33a36ead09e85c35abb573fc0742a9d629258305aa686a1d735735c0661755fb796cd952a32b45a728db0c2c411cbe61dfa45a8e4dfc8b386aa3d7daead31c861713a1", 0xb8, 0x2040000, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x9}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xa0}}, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000001c0)={0x401, 0x8, 0x8, 0x7, 0x5, "82b6fd1f7f318473e3ae88fc57fa1cb33f4812", 0x2, 0xfa78}) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000180)=0x6, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r5], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r11, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f0000000700)={0x1f, 0x18, '\x00', [@generic={0x9, 0xab, "4dd519fc9a90022769c61447398bf2aa9bd718ba74a1a261476297676a131cdbc75fb5ccbbb42b8bb4df48caffa34b35a0f23925ea4130512335d931d397c929934c7418ed0038437ed19cb35a8b42821d7477b8ac490e40f17a9b3d59812efcde743fb3c4f7e5b98e69213f43e21239d96b5c982c73a8f9147ae893224b88100753743e55de5f4ff33dc98b6c2cd42e7875a4955eba735fe5343a434eb1f73ddc17171ea0684b8fe9bf7c"}, @pad1, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xd0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x40, &(0x7f0000000000)={[{}]}) 1.730619679s ago: executing program 0 (id=1355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x10001, 0x1, 0x5, 0xa, 0x1, 0x0, [{0x7fff, 0x103, 0x4, '\x00', 0xb08}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000138d5c48f48540dbc5000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000225, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)}}], 0x48}, 0x0) 1.730133649s ago: executing program 0 (id=1356): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) ptrace(0x4206, r1) ptrace$setopts(0x4202, r1, 0xe96, 0x455b843fbdb64c65) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x44001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8840}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000032e3c3b47b7b5eb645ea69", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000840)={0x200001, 0x1d, 0x31}, 0x18) mknodat$loop(r5, &(0x7f0000000880)='./file0\x00', 0x0, 0x1) faccessat2(r5, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) io_setup(0x101, &(0x7f0000000280)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000004000000090000000700000000000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_vmscan_kswapd_wake\x00', r4, 0x0, 0x8}, 0x18) syz_open_dev$usbmon(&(0x7f00000005c0), 0x1, 0x84800) get_robust_list(r1, &(0x7f0000000100)=&(0x7f00000000c0)={&(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000140)=0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x184, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@mcast2, 0xff, 0x2, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@rand_addr=0x64010100, @in=@private=0xa010102, @in=@broadcast, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x8}]}]}, 0x184}}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x4, 0x0) 1.442327376s ago: executing program 4 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fchown(r2, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010004c0f504566289ed3ed"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x200000000200}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee00, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000280)={0x11, 0x7, r8, 0x1, 0xdf, 0x6, @local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r8, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 1.419464217s ago: executing program 1 (id=1359): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000ccbff53a5839f0dba376655bd840000000c00000005ffffffe06743c27c5931e97c5a77cda975c0cf07c6"], &(0x7f0000002200)=""/4110, 0x29, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = open(&(0x7f00009e1000)='./file1\x00', 0x48541, 0x20) fcntl$setlease(r1, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) fcntl$getflags(r1, 0x401) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/208) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2002}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) rt_sigaction(0x1b, &(0x7f0000000000)={0xfffffffffffffffc, 0x8000001, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f0000000240)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x8e\x03\x00\x00+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9o\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\xe95\n\xf9\x17u\xad\xd3A\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\xac\xd3\xd9\xeei\n\xa4\x12+t\x15\xcc#\x7f\x1au\x15\x05\xe0\xec\aV|\xb3H,P>\xd9C*\xf7>\xf5\x16\x81\x03_\xaf\x8cNB\x1a\x91\xe7\f\xb5\xa7\x13\xa4DuoV:\xdf&\x1f\x90\x8c\x00\xba\x87\x15\xea\xfehy|f\xf93\xae{\x9d\a', 0x2) 1.37784937s ago: executing program 4 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x0, 0x100, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x1, 0x5, 0x8000000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x801}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x21, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000, 0x0, @void, @value}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) 1.37293426s ago: executing program 1 (id=1361): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x4e24, @multicast2}, 0x10) recvfrom$unix(r1, 0x0, 0x0, 0x12122, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x0, 0x0, @void}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) close(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x20004050) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdf9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.356770861s ago: executing program 0 (id=1362): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x3b16, 0x1, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setgroups(0x1, &(0x7f0000000380)=[0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000004c0)={0x1, 0x6, 0x7d, &(0x7f0000000600)=""/125}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r4) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) fallocate(r5, 0x0, 0x0, 0x1001f0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000680)="2f5cf6f1597f85bf183f2326d591b61dfec5a2a37d4019dd1f02fcbbc79d9c7638944b1b2330af2ed65605a47639b414117c9dbc9e3fbac8e05df5d61074f69156136dcdcfb03e946409edc0561bbfaa3e6d423f52f143099edf810080", 0x5d}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="d4d4a7ffd1b12e713d6691ca2fb1001316ed0b3008a22cc4ecddb584781ae714c290f805b0c56dc512e73ed2db6a7e9b732e767b0722d432760f9862c9c292681e308244dca379fde5c6a95eee4e94b46add3b8d786d8845bbba4e9cc61ed1e500b3c6ef3c85eb3352b9ada2369b0c5ca7ac31db5dd5839dd78af10ee164ed8c401f0bb75444a37e8b19adc9e14395fc9b295f0612eb0f68fb13a1a5b23589cd8fd225f3662bd2dd73bfacdeefde2377ef80a06fcc0a6996bf6b", 0xba}], 0x3) 1.343167121s ago: executing program 4 (id=1363): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x9, 0x1, &(0x7f0000000d00)=[{0x0, 0x0, 0x7}], 0x30000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x602280, 0x0) writev(r1, &(0x7f0000000380), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="fdffffff0000000000000000000000002c95d1aaa534b3a057a2e62c14bc9d00000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000004300000095000000000000007036e17b2fbb90fca046f4ffdc33f623652a5a1b52105ba00980d03147afdbd4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0xfe, 0x4f2, &(0x7f0000000600)="$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") timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x7, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x3998, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3960, 0x3, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "812b"}]}, @NFTA_SET_ELEM_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x48, 0x1, "4914fd1ff0cbe04688e2ba3b9222fe4963cdce845648d1cdb5c92774c213d098df38fba748babf090ce171209b6f0c1b13ce3fbaf6577cebfb2fc3863905a1fe1f69ca1c"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @match={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_MATCH_REV={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "04a530febffd852e35c601fb9e0ecee071e7632034a9f0bb7b17420bb352493f6284"}, @NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "638cf9ce42f61fcf0745b0969eaec54c1f69eb990a3d8c8feeb8d7b33e87f0913747381c681cdd96cfabc0c6e425125473068d23075bc0b43aa3df0410b009bc818b9fee4c83b1b7ba5542c70cff4cdb28eae0bc4348bc37602e1e97394e856523f28b62e512a1d661690e9ba84a90338a22c33db389bec180c6fcf5edcccc2f16a827466f1dca3b42e63cab7d1cd66cf823bf531f2a1dc892ad0f9bffd83204b96fe46c8ad9ad8651ba96d0c57d66f6bba45d44e8f5bd33ee092127ef5027d0aabacbcb5dfe011e2d8e1192dfe079b19f48c1b6c77c35944353c20919a662c99fde7c2fb1f6eef7fa9158e00fcf234f34bc38f8652a03ce096661"}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80a}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, {0x1900, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x414, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "7594e3106c80ac990dbb1729e4d5b9eee2bb9bc6dfa870435124bb2429c2f91cb0cc2e8b044879663b7a7b32098595d550080338f32d96d1ccef5ca210a90542faeffb729f14e422f6d1959e958797e51262f6d82de343895c0a818b77833ebba28627f7c076175226cae7b0a165efcf073ce9cb533d227dc0a72934c42617ecfc5d81c4d7147284a0a1e285c1489070164005a12a884b117da1364d85bcbe7c492553fbe52d0cd9b66e29a4183407c4902db14300770f3dfe0a8d9f19fcfd1804c0000ba0275e70be1a70094302fbfb48190ea4a73450e961"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x73, 0x1, "a66a596a6bae05772827a0b45001cf53d973b84221c8f750d4c479bc084a7606615154c625de5e00ed662e3e201d050b8ea893bd134cedb5fc6984be9a068ac9506225f1c41e9f27422a710737350132b3f3831a7c036316612ab7b65311e155ee63278fbc0bdbe02784de6b1803dd"}, @NFTA_DATA_VALUE={0x21, 0x1, "ade9a3d3572e064e91675a45629c2277d7dcd7b454d942708b220b611d"}, @NFTA_DATA_VALUE={0xc7, 0x1, "704a38fb38d994a170257fc925b467b4d1cf7c0895db6678b5d9787cfe3b131aff8c1254d0ed7799012b1c82fd4828811ae74ad5bd6559c960e777b2b14834a65b53513ddb101d8c4044050aba0e18a9081cae66f00da2c51c3842c721150b557bc098f65c4b9924326b4795e385e5d20ff7dbd6a85a9b197f4f6f9c655aa978163c0bc2aa22976ee8600b9e5484becf7db708031813cb017ee4900f68ab0556c0647d8064eb04b6acf49763c54f36b9083a8b017f4230bf8e777911ed229f63fe569d"}, @NFTA_DATA_VALUE={0xf7, 0x1, "fc83f331bd080541e975c834f4482edbaa22a4d9e25ed6c55490b822872c82785645a2984a5f2da44b666c04581e0674425fb42637d7e877dcb24a008afb2b4e6318a44140c5b96aa59a225ce97c20b1d6f0df9adb2af7fb922ca78a1b2c212146a7b2edbdc6bf97009f58133006e462cf789201f9223e548ad86f2b10546a2fe9a85daabd16663c2cf7ef624bb14757fa7b28083973fe001b4e416d7fe5e8a8087b02e0c7cf05acaf1fba84de3532217733c3a7de0c04e16f1d9667c86921d9578b23edfb497d1ebb0a60c90d7e06ba04385e1a37ac320ea157f1eaba06414a2955d9ec32227d7551854e9e5613ea686c8714"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x2f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "c55f1913e9e4ea7f02bdaf1ed27e95a7a55626e3215ced333e3e6a84d966adeb75bb517bdafd45aa687a4e5f004ec45fd7619a16c607eee97b8b4b46fef2f06aded1d7932dcd48fb4d1bb588d7e2cf14be8086b075272fc9f7ec226dd6c4a0dc70ed44ce7d24e41dd3f89ac12184793df4e1cf92be03f0a8fb78365d3df9300bcf5f27ec2c44dbfbc192c909510a3c6b22a1a4d16ff9e570e79abe4bbf0ff36c32e1b44fbc0847fe8d7f227a8cf077eef7879d3e0e47e299377b4656b0016a9a2a337af9d8e3bf51db1030269984473f696c"}, @NFTA_DATA_VALUE={0x14, 0x1, "8fe61551064993297af98c95d3bebe91"}, @NFTA_DATA_VALUE={0x43, 0x1, "d9f3888ea3b0b974f79cdadd3fafc370d9a7253f0796222a8942a34fb1e6e2ab214572295e70b0e08cc39789b0aca2c5b052b0ab981059ea90e17c6c1915a6"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x88, 0x1, "5cea4781d9618e7553b6d7fc3add26ed4986edff787296887539bd6847609216ffb9fe926c0e1a9a2ff07ea69c6977eb9ac2ca85de875cda329830f7d090a6973c983623c967005c0d8838cac257af9c765f0ba1d43758e3c3d440cf177a98541a2f2d3349999eca3fd7200092acfa27d9f8c63bd9fb06a1e17f0d96bc0706b4999581c3"}]}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "449cc87d67c5881a23ff5ff4821b48c07e3649af70ccc61f8c8ff24f4e71c83805c7dab7ba7f78a8ce1c412df26a0c1b84063a92ee2895e42cb8f964f367135d4ee0602a7ed197ad8bfcc43534c236f8ba9a83935bd72392b243133b18a24aca"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x113c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "131e1007d5818f3e4b6031ae67eb06da8ba67e71fbd3ed2348127469dbe656b4fd885fe18707154741e9315a42259f42d96f93a6b8ac16b0bc597ac149eb1a5ece45e310f808e5cd8b1225f38e5a415239024889d374ff10b5f7181a472f71c542f4a09aeb20b8ffef55f40da7036d3ef9bd153df14e9f844772e3670815ac88ce8c10ee7ea044bae7594de08d3572205515b9919deb663485ea7d106e6bba3d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "e5911265999520c6fea1dc08d971b466b4a56955ea1a108276378442f6254479ad51d091528fbc0bfa4c428bf43efd8b2064f00b4948a9da1b100cbbed00fbddf998e6b46bf68d0c097d4afc800a086b4b79b125cdb8dfe92b5dd5c4fab5c365b42796b0f9ef32bce34829eb29e416de9d3d818322ea62ea52c68df453f76d1cba4b30f3180c82a82d39adbe3b6e3a1a6df7f750824b0ce8ce74c5187fd08000474a9812ef75da7b765317501d7134ccafb88c3983f89d4773bcbeb540671d07319d0520b11b24d3c7ce3a54bbfcfd91f58ecc506b416f43d833e20af91c1acfed0363e68ce0b4283effee7359e5c1ed77cd39adba63b25816f679821441cdde17850f0ecac5d4c8ef511ddef4bc24e16a9501df2bb922b0b94ef04dd011767b406b5fe9ce92e82cc3a329ef4f11aa4bb44040f82737bc75055f40aa9e528cdeec4ae2c1a2f6d4a69f5045cef1e6bb96608cf3bed7fda9d11f4596ec474a012362f71b24063a46ffff23cb400c8ada6378d3379d857a7e70084379d85214eaf16a44bbf37ef5d78632643bf6cf3a4e221a43ab117b2022c9ea176b0700610d7cf4dc8a9d082e62bca528ee86626bebdfce8c2ea90af75ba70689780bdf77b28706b101150df8f7aefd6ad5d8fd70d9e249253da00cd1d324c21dc248fbbe693b8bb3a40942b9e0f38a4a1749120ec9a29d7a1452642d246f0f974cce018f58e2438c86ca4aa5c9e6de017389f07ffb0bd89661f3dabac9cfc274f49f423197848088b7a9b0a5527f71c3b5606d78258219eb1e449755ef690da04007ab87eee2039d8728a145fab9f75e206433e0a29385358c8d726b86314162fc41749c07a02773f28d53f7c4a873fb4d6f5dfbb1b5c9cc4d053e16bcbc378465c166500388b548648a2d428579bd4acf6e164fa00b565a4f053c28d0f2963f1f29f7ca1747ba01f71608092c2b473413eb1208cc58f6a5025756e8188d1a7aede83b25d19f07653c27993db43ff02f74a2eff6564fc4883423ff6fe24a748b5f29d06a8d942e7a1956ad8e7a005d70dbfeb636d8d733830326554ea2af6850639719930f10ed368d04c83fa89bc227e86a40355c079acfc60ac2e8ed3da39cb7b4f10d862da8deb6130eff8d909dfdc8b09b40c38c124dd823ea1fe82ab253cdaf7c884713867cd2aa244b7e2d68fc149aed6d7566af3c4b418b549e10b070e034a501bfb91895445753473375825f40f0fe997d723628521d4676a77df663491d81d477f12028b51b98274380606074b4d2119cb7c8f6408bc1eab88ad9fef46ec1a22d8d55391cf1fc11ce6f43dc0e100fb36178d4aebfcf14b1da4b70de205b36132c2e5011ca08929ce817b0e5bbf972158949723e03c2a118adbc826a08c7b7d9e7c093807cb319d6f515afb0822e631f8ca7d7d98b9576cf586417c877dc60c4b2ccb3bd200c55b80a47d857d6c5020572de9c1bdf97fb23e7ae253b32c7e2f2bd62b89ce4d302ba97eba77974b424cbf0d053e57ec3e4e12450ae6045c46f057c4f3fb7561addcb137375ca9de0be462ae58e9bcf36d849ba8ec4b5cb1629454fb9f2360796e7553b7c1223fad0b4a10c984f7a881e111c16f6e977fe8322951dfefaedd203c299f51940acc4b795a75690dd3f6d4c7187905121a1681f3cc1f39f55501ee2d1bba4afe9f962284e6336b3c3e2c68e5c83420fd23f1e83ad165488ebc63b13c7d8594d47be4d7e57e7c8f5fa9e17081f4f591f9b16a7214a769d3f92d7c9310427916b0752d91e1758e53d1ae386b9dbe9c98c54ced97af97b6647a9cfef949ea3fa9f992bb489e52c1da972b51577f46d4525c2c54012ebd3a57a43d94379d4b063d7de99dd21bd384281ebecc0e442e4040b7607a2451eb15f1e4b6c3c2b515fe281c0895ffcfa47dcafd242ddac687f7b7cc4d961b673cd56171b1b9f977680e47db5ad200b4c864dea88b940c97ed592de18c9d8ecde3bceb476068d961e9eadb4f3b2279ac3e521304bd210bc23abc4a86d0e5c403fddbadc0db0ea9198efb4f94d363b558cb227a3dca091aa3770cc541fca2e072a0e1d4f48073a1ad690f8c46f13301c1c2a888ab13ee3828a6f5650b190dbcf52ced9e91eb0baaf2f62d0b97f0fcb7a33e62e6635d3638b1bbcb26b69fcc09ac144e53a7636d483caa9590d6862dfe82d5af33bf5689e034578ee6b7db986eb9d115b6dbb3cbea814dc85f60b7dbeb328751d17b8469be591826de541e66194fba5f9d602689fd9ba38f9b3bbf9350664ab5936f8d601b2faa9c3fa4a3865bfc0ad14906df34e336573c753d49a9f64bce6abf333fbb39bbb5d2e09b8e77502fd09e805866d8c428415c03a588d7dfcb7cf0c229af4c9727842ef5b143977969f403561e7a2eded87361e39720aee1a876ac34877dde7c2da527d79af184c659bdb6b1ad9e336790072ecdf781a9be3a936a66dcad0254b37ec87e23b6d9652b13a2983778341a61b7f8897fd75477176a85fb7288bfc2b37c0b4f15ae82f083b268683b654b53447c06c9b64cc250ffef7f8a81d3dc531060cb92c4d87e68dff81e3df01307c66dc9fc6362acb37ded36607560cd345ddf76dfb200db29f0829c6b5afef8278a00c23ee74381b0478ede0e214b989217bc384c54e8294732e81cbf30206e86aa056f5495d26ffc14becdd578746836a43a1aa99891814ad8a376160efcc7774884b1e340ca39508323b3f8bd4f24651cf2788213741fad39cae16ee578ed6201bd15ac4afe5743671de7cef07a4c54f566d02b3e212d4c162e8dd81df6417745d42bfcf3227cf2498ebe8c5f4d319adb54e935105a85006791e78eb1c74576744eae5a07b9563075a38d36b745688406451df27f6a559b6874f31856d67131d941aecb90228963dbbbb63c9632448ffeca413148b6593d34f1d1c4740b057589bc2ffd1283f7da302b8870b941de5b306d532f077c6059b8aacac4f2606c6837540c7277b30d82cd2ef572cea82520d935dbe8e5870f8b5c6bdd21b594b8d0cec251c912eb1627da0897406e86ba5ecb0184561c717adea5f5d474b12c3042b7f2026a1a407d7c8d50055791936685c060bb80476f3042a04d735158d3d91200c07213cdd3077003748084de62d90891bc595540ee74b34f71ff30d5cfaf3f8b4ca3456877db2387d4993d0b5da17b22fba71c987199cd221a2d4ee4c61605c31cb0ecda993254dbd492a9a86113dcadf86d940b5b50cfaa79a6d3552164375c79b70199a0194743df1137afd4a4ed5f8e79866681b74fcd996267ea3465ac1ff5f91f28ca500777c86c3891111d6a38f8849e10d96d5d0553de10b83185e8bcf865ecaeded0e7711330c6478b103f1ba35f4b982635fe168f975dbe33f38865453c95af3249607b4beb57b389610bf12f9df48deb597ef7c216c530819e80bc850de7b8b934f8bbdc5649e57e509e223ed1b47af57a6dff29bb504689bae086929f92d3c91f77d17e4ba49cf165e0de391cc70bf72a4a682033b0b53cf9830df110ef37a0da99620d5767a53df64369a5f63bd6e9c2a3c70dfaa839d2c4f9ffd4eef7e6c1d22cf0e612da9e093b32f84baec460fa466c2fcd33881295d32599c394a89262aeb7ed8248974d918659ae3ca4e532c6ec2f65c1a73f2de14beac18b8b7cb8d383f0de8c25c1b52bdf4100f92b0979bddab7a95f572e0fd69791a8e7429c477709e2f0829a855610b58c3ddaeae546f47a395c743b879cc8ccf980ca7eef7e119a11b9cccc2d8ff2c3e252b686855bf87f8e525d005f62b90eeac8111ca08875c589aa7042d0071edcceee0fb405641912ed9376a158aa51d687e22ea149777878479cf4ac8a087baa9426527b7519e3547be3aeaff14945d234b320022fb2122ef442ff70a2376f9bb49492572d60a27f808f36821893d580be456c00008c54564003dc558c3b9058955aab6526671714826a74376bbe672b3bf37a5f7ca7786a59e0a04211fafb9e74d1e328e5970725ee39dcb31e66fcc1119641720d6d1dea74040f0eb29cdf5c6ee6689813fe52a0a60afbdb0a87cb21926db1e60592bc02a69c4c08ff8f13b3358a068b5de79836b45ca765efb6ca481205e4dc8485503bbe087dabdb6c31b61c87fa40d571255157ab2c34b661f5aed3d84bd5bf5fbc0fe756ce95a160701347e34cbf3d89e5d2caed7890fb019cf799b753ec52e4350083f0c44cf8e3ca80f23b317a396fad769ec724525acdfbf41fd962f82ab75343cfc7cef6538aba51c3544124901b0b8126c669b4a123d5f04839928a0fd6959b2b6ce5806786e473a2ed17207af606b25569cf2cac15f670df27fa3e38ff869ef5f0b618c46d2457f97500415b73c1b2c27a1451074ee48eac65e2c2509661a087eb8144585c6d402ab79c8d58f72fc1b1720ea7389551d94c43c5608ee5c07f918c2dd66903b30e29de1c8656ffe9182273cfc42b8552494d092ebf2db096502436a54eb3713d23f64ebada1f4b718fa17fbfacd9bca82c77a80376f9b905263fd3d0ede9d23146bfdd03455f6d3a63b946adec9587f811cc3f25d8f6a493d8d35d880de70bb7192564a23933575e7e6d083c4bd9b1a0c411bcaa20f85b09bf305b9351e25d81de56d66fe8442326e1962cd81e591c99a529e460f1ad15d0953b971949cbc000a4ee57fda7fe28f9732ea20e3e3ac96d7c55d19e5097f37e4e4f4a06492517b09aa731a37f581c4402729490a7621a3f590b29873ff36d92c605c1eac69866ea99234ecd1032f305f22fce7d99d83ddd1b8596b79d19ad4d7fc58dd78ae2c8edf733f7b8fbc7a60a42ea05c39984d02efef1a43d992dcf6a3308d2b5d1bf2723d71b2032044624e6748a00f9b3a5a0324eca47b0c8372d25f593a07e7239a9191712e03017654c69ab313baedb75b503d3b461c318e80b7fe10ff54f9d6bb93b2d9bc2ba83c09eeb48357ac367b4b153c91f1a4126be93830c86dab407b81b67bd4c0bfd8fa21dbc516a5c9049b3d80c65b692ac1f47f0230e3864b2897ed93fd18876939e7b92f8ab72a438044b58b79a5c3244408c33297d73e2eef711f54a5fb7974bd7c0357a0d15639c6107111bd0640a29ce26bb5003ca318af4321c7bf2ad5c4e275b0efeb99c6f869bea6e5732d2c5c8ccf6c89e315f054ee520bca180089cb72293206fa2d984aa7390e949cd1f2e35e1eb4e34f043902e97f6b928187401f5890cff723cbd2d23bd2093b5d04d0df282aab7c56e600b45521012e06cf656c509bf66eee7679257a7079b72656ae840cf0d35cbfb375f0217df38b33db1c0f81a18c123a254cfb97b12cdf28836ca81d84456ef0f8edac976e8e1d54a07c9e450723013347c46778dc45047df555f72f748a733ec353b4a7a1be52ebc32c9e7fb7c7263dc44d641480166eafc00be5f8a430f6bcc08fab21f100271ed0f0e6b7797daa18685a03ec8b8b2c95c1c61b84422c9f4aa68b8b57ebe98ff62a6d3f27de15d9cf630a25fe410cbb1a5d71e4deb3d3b943a50a5b9425beb03358ac07dc6e5e03bbce36d4379ae9e39076196fd4f26116eaeecefdddf8b5173f10eb29d8e0e2f40b784d44780b226023341fb41f8f6afc577fea7e3bc241b2cd91f0a2e2585b0a9f53cdda51d9fed2e7603adf3eeb70cd6a4654f2d3a7ff582a65d13d418650788a600fae896e80e27b4d1ef5a25e973042c751aa1689246951da868dec80d2adb6900789e6f272b30af81c8822b7da825b6e4fac8a136dd775acf9576e833a2527527e416b03f2fc"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_EXPR={0x1c, 0x7, 0x0, 0x1, {{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}]}}}]}}}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "b4e0faee7c714ee13e2090a8bb2d5da317d3702bad0870f16afb0391fb2be13c9b2a1d48305cf56a9f7cc362f92df5010169bc6d76867155bbfb15998d7d20c4816e22baafb797fd2893b7445caae72179826f656d241825c8f9d493ca1c04cb932e2430064741e0fad89c43a0be5e8e25d7aa4162feb912a9ea8338b0f868af3c4db4150a37676f82dd66c00434b58a5bde35afbb0b75a2e5f637ed8c76c471bffd554eb013a019"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "bf50fd8d9f1d00190a7ba172d00947dd346a8d49b95e35fee9b0d1838450a4246f18197893a973cd807ff7de009d8bbfda67211e66463bd48f3f9355ed3ffdddd6b5fc88c2fb9f7a0d79fb92dc0d8c01caebcf529d0d5664df551640338dece000a06987dc59c9006ef4e1f87bab154721103fea7518ca08db044f56243688708c06f06dad3b"}]}]}, {0x3bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x17c, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x50, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'kfree\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'kfree\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9efd}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x23c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5c, 0x1, "41998f1820eb04b968e3ea98aef0d2e70f007b6a77ca0b9cfdf4fe14499eddf1d5096daa49b91fcbb572e4e7ffac8694d4485e4103e95807c0c90f3165bf6d738efbf502ddbd60903a55a4770231f32cfd4642c8b2d7d92a"}, @NFTA_DATA_VALUE={0xc6, 0x1, "37263134dafe421ae15ec8a0ef4d6872e476b72164d699670815c5f9a7fb3778fa4aeea6bbc9fc3d30b1bee79eb346236296f32d7cbbc9f6c461e7dbe6507d15e3eb02dd079cfef1a1bb380574840c6957f9390723cbc471dffa053f96e44841a246c0b3cc4ad57f3f8dcbc5043e875e19910372d6340d4e7a5a050bc19c2657aa940f3dd34029639c5a6340fd516c50003699e5c818347633366d7316c2c38ccbfde118684290b19ee76e8c0b3c25ae096fee77434921f9a9535dc177d029bd3d98"}, @NFTA_DATA_VALUE={0x74, 0x1, "ca6d0e8a8cb87ea38727bee348aeb4bcaebfae7509ce3c71e8b3e40e6530421abd9a084bd3245779a55d1a85a25e9731b81f61ad3b9c745676d7a49d2bdeb01dce86e7b5a6a16f41f782354c58bc74cc6d55899df6b050c496346c4ae8007a8c1e9bbd87db8902ea02c18a66289af5dd"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x57, 0x1, "7788a473d7f0de7a25cc6118df0034a909bc9e3551c96c1f68953c3bb77c544ac63d27ddf52d0d45d908a4cd3b275625c23baec9e6206d91fac8c60fbdf9fa52a5bdd0c9f95cc6903f05ce9811dbf51cb3781c"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x10ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_KEY={0x1078, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x51, 0x1, "7b204a0880af5c4d7fdd18d372191912bca009753b40fda6e71280a8dc25a61311f364199cc88518e4711443e0036dfa6a67d7ce78e61c50f1c8a8a8e16d4f6936e4b7494fbf01a9dede6d0eab"}]}]}, {0x4ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x308, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "ff09fa64f374c0267fda42e5edbbe39cadca768a1ce82d5eab0fd91f4f78a18a3f87029f9de5d6003c111773c415358e9d864aa9628e6fff044224b5d4a5386e46b5979e3a6d8ca984472655ccfb8a48315ec9911076582c43e8df9a2cd91ef525b5d3a23c8f3f9b350ccca1ed823668cea9088f54bc5020bd97372765b37f38664f1f206e59e896a3267e525f32e7dfd3f4f1de92931c05b142f4b5a6b3667c9183de3ee59fecf43cbc1a86c5197f3d683b7b11e0716f102faa2f94dc12e348aea6c1a184483b9e557e9a5aa77d8144"}, @NFTA_DATA_VALUE={0x55, 0x1, "42fd6e55a6525f3e6c942f83d0a873964bb942ca0eeb338edcd0e832f95c0b80e4e99cf00c98b92f749b2529afa5fcfd6b6548fb96232067934a7fd1a1654ceb8820ceaee92b0561075e36a182e8b5cc03"}, @NFTA_DATA_VALUE={0x47, 0x1, "fdc268681a7ff4f68bdbed5a30167df2939be17d2f9e3cfa242b6609f676e59252fd21f063a221480a5f9ef15c1e10103e6f4807ce0fef1f32e3c5a538d1084ada123a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x60, 0x1, "a81e5583205a219bfba6e5d2cca00aed88a8df56d9eb67f7e4abfddc12bd05bf2e3073ef78f396b6be9f871b0a03cb0122f60c00626c64fe9e78cbe2925ce553a7b02badce1aaa5dada7e3abb3b8a7c142fc75da60787b4f5173be84"}, @NFTA_DATA_VALUE={0xd1, 0x1, "d291124b67a1490044e5e322117228eddf4ca0f78d384829ee34be6453e165dad304fb99b7b0ab75a83bfc470ac7c5eefe8604995f8b50a5791648fd9e021a78d05a522942d3cee202db9f1c22fd2aeac796960930df7833410ccbf3da1c137e592bd84d918ed57e582081ec6452c165354fcbb00a805798391b3e3f1cc22cdfb971ed0b6850043db04d3e0cb1f3aaee375483aa962d05d9f25c2de0809f475bf15ff7b5355f47234e3b29bb2026127cc191135ff657a8c748d3550209d89691373312290c258f1bd2639092f6"}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x120, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffaccd}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4ef1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x41}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x288, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "0daa587ea13390e4516145a400a15e651494729a5aef6f99ab828138d56f3ae1bc07c623fc92fe5a3017c060d88b134ae84454a5908fae18f00b0f5772287c961dabc1b4b7ec929a62a8b08cc6a1b28309e3290b19bb6bc75ec63a31ee0b2a845f294edc3b11c1256eddd8ec40544957c25fc339578c1de2a6898fc2c1bacc30b4f575b93d07c782235e236a5058ef39ad857b8eb7e8f2142d4ca7d8fd10571a2e927d3cd57ea217dedf05aff062cf56f2b35730313b3d7de81965202316c8c89c299f5a23d0f0a48ce7dc1025d8178b0c"}]}, @NFTA_SET_ELEM_USERDATA={0xd2, 0x6, 0x1, 0x0, "c6fed1d5d3effc53a8b710ef1027114dd85788295aedad4e082f9ab0625d47d5a9e1e44d8f4d58d2ce5c9cb9564b1610182227a2ca670683ce552722a1310b702bbec7ce072a478a829717fec5e57b0b2c325677d5781e25f52f210155347e017c81bce6ffae4dab435047c5e0b6d3010be561a3ca0948a44418ee6fd936a9fbaa0680038e4ee2fb1c05d90675ce474a35ad4b495cca1cc21208052f8d7e2c6c63baa65a6c9af6c7650723dd3164c5b38e4f2319139d87478677d36ed57aff794f7398658b58f1d948faf9421fee"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xba, 0x6, 0x1, 0x0, "aef65177f76b8412f72ee0f9867d4bbedccc62ecaa47ffca63395328c87a1b01366762b6a83e05b0a2487d3f7a2c61f2597514dbe4fdc128346aa5f2915d00c3ad86fe72f8603ccf012a349c0e57ff1f315066127f4d5396ae093446cda031ebfdfcf4c5e1730a6e67fe5c05638132310ea0617ab9be62c851f968093a732ce5069943788329b4932e143f7154af36e89fa483a8d729bb4cefddb3342808fe5e7fb9b4957f3e33b17562c74678a8d2c03b7b4efb4b64"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x39c0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.341894081s ago: executing program 1 (id=1373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x0, 0x100, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x1, 0x5, 0x8000000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x801}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x21, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000, 0x0, @void, @value}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="601000000105010100000000000000000a0000035402010003000000b4d41a260210f8011000220073797a3000000000000000000000000000000000000000000000000000000000b3af6fd09d9ba3f61f620c6d3a05b890faa9a1513db9fec3ec3281b2e22b8dac699edad5a949abd9a412e7deb75a415533f867dc30416f331845c2478fcde9b30080090001000000010100000004010002000000ee0000000180090001000000950600000900e5b803000000fa03000006000400020000000600000008000900000000000f000000ff01080000000000600000000800060000000000020000000300030003000000040000000500010000000000020000000001f7ff02000000eb0100000100020003000000100000000200ff0000000000050000000300020000000000070000000100000003000000ff07000005000b0000000000ff0f0000400001000100000007000000ff0301f0000000000700000008000700020000000100000008000f0003000000070000000800050003000000000100000100090001000000050000000c0007000000000006000000f70000000200000005000000ff7f090003000000040000000800810000000000070000000200040000000000ff0700000500f05400000000f658b44c030040000100000034bf00000100030003000000008000000900ff0100000000060000000900703802000000010400000100810003000000ffffffff0200810003000000050000000a000800020000000300000008000a000000000004000000cf02080003000000070000000800010002000000800c00000800e03f0000000007000000080000000200000009000000540201000300000000800000050707002c06090073797a3100000000000000000000000000000000000000000000000000000000319f5c7926214f0ef1776209b4c24f1c54de01e1699156a2dfe156c4c90ca95f4968a1f7e887e132ebdb25f17c18c49936c03a54743d142428f3e147aa621ffb6ce8020000000000b10000000000fbff01000000060000000900050001000000080000001f1cf8ff000000000a000000080023d2030000001efe00000800ff0300000000010000000000faffe2f43aa9057d000078000500020000000400000000000800010000000c00000000a001040300000007000000ff0700000100000008000000000001000000000001010000040006000300000081000000000804000300000001000000080005000000000084000000090001000300000008000000ff000c00010000000600000081000900000000007f0000004200008002000000090000000500feff00000000be000000ff01d01400000000008000000a005d0d010000000002000006000900000000000100000000c0050002000000020000000002ffff02000000105400000700040001000000080000000500f1ff01000000040000000100552303000000199d00000100040003000000020000000300070002000000790e0000ff03000002000000030000000700000001000000b7ffffff02000000010000000700000008007f00030000000400000005000600010000001000000007007f0003000000ff0f00000800010000000000eb8500000700699400000000ff000000070004000200000001800000c5bd07000000000034080000540201000300000011f00000090805000000050073797a3000000000000000000000000000000000000000000000000000000000d5993880f6d281403097ee4c7ec0166050b5018f9b31449d565d169da2deb41800f73de40bf27ed03a4d3f21ceffe65d22465ce97488650d3a6edf3811e79e40000100000100000004000000000008000200000004000000010007000100000020000000ff01c3000000000000800000040002000300000002000000b60b0e00020000000500000002000c0003000000050000000700107a00000000fdffffff02000101030000007f00000007000b0000000000080000005006010003000000020000000400f1ff0100000000000000300009000100000001000000030047980300000032360000010002000300000008000000600a001003000000ffffffff7aff0c000300000001000000ff0708000000000020b7000000001b2c02000000010000007800be0000000000050000000400070002000000010000000800018000000000ff07000006000b0003000000315200000800060001000000090000000c00090002000000550000000100050000000000ffffff7f05770900020000000a00000009008b0b02000000080000002100000001000000810000008000520c01000000030000000400b10202000000cb000000010404000000000007000000030001800300000001000000ff070004020000000200000004002ebe000000003f930000060002000000000005000000ff7f0500000000000b000000c00a000001000000ad0900000200050002000000060000000500000002000000ff7f0000540201000300000007000000060506000100000073797a310000000000000000000000000000000000000000000000000000000061271f468cb0f08e612fa1416b4102c887b91f08fcf6eacc0d6f3b57f79df2ab32833eceff06ac26d5438f5d120ae58a5ea4a50f424cd9abd6b32f8679835f23000204000000000003000000000001f8000000000200000000004000000000000300000005000600010000000100000008002f4601000000140000000900010000000000000200000700770000000000020000000200333902000000080000000000060003000000720000000800400001000000010000000700090003000000ff7f00007a033409030000007300000008000800000000000c0000001a00080002000000c0f4ffff0000000100000000200000000100010002000000030000000008bb020200000073970b830d00030003000000234f2715010005000200000003000000f9ff070003000000b0f52630dd0011f0000000000f0000006368080002000000080000000700010001000000090000000200080002000000ffffff7f01002e0b02000000000200000200080000000000020000000600010001000000030000000700020003000000ff00000040000f0002000000030000000300080001000000280000000200040000000000010000001200b10501000000018000000100fdff0100000007000000feff000102000000ff0000000200010101000000000000000101000002000000a51fffff0800080003000000500200000700010002000000050000000500ff0301000000010400000100020002000000060000005402010000000000205300000406f5ff0700110073797a31000000000000000000000000000000000000000000000000000000003b2ac143bf0407c7ad7654c0de2be9583fa043894349f3866c9d9c61bf15a22bf4685e8d679d2b7221bfca00170e5ee7d11344fe078a51f7db40fd1f83102dd60e00ff0002000000a70000000200050002000000040000000900060003000000080000000300020001000000ff7f000006001000020000000f0000000d000000000000000800000005000000020000000900000006000200020000000000000005000500020000000300000000400000020000004c000000030005000000000009000000090008da00000000020000000acc000100000000310000000300283e00000000070000000900080001000000020000000b00040002000000000000000d00ff0103000000020000004844080001000000090000000800080001000000010000000400000003000000a86f0000ff0f09000300000000000000edffff0101000000060000000000030000000000080000000b000100000000000bec9c5e3ff208000000000008000000ff03060000000000ffff00000600050000000000080000000300810c02000000090000000700080000000000050000000900ffff00000000040000000300bc00030000009e0e0000dd0d050000000000dda800000b000300010000000e000000aa0006000100000007000000b5b6050000000000080000000500090003000000000000000b0061b401000000d70f00000002a68400000000100000000400060003000000180e00000600d500030000003503000054020100000000000500000009f75b0001000f0073797a3100000000000000000000000000000000000000000000000000000000a231382f4b3d3a4e2069f6230bb446fb580d2c675d05ede1f2f0222e535f5c209d68368090c2668b6d6cc0f02af788f9f526880e6256c479c7914748d994422d0100000200000000040000000300040003000000000000000800636700000000060000004000050001000000001000009f04721b01000000bf0000000f000400030000007203000002000200000000000900000005000104020000000200000000000700000000000d0000000500050003000000660000000900030002000000020000000600000101000000020000007aff030003000000c90f00000200000200000000020000000200080000000000b30000000000000002000000050000000500030000000000ec1e00005400040c01000000040000000400ba3d000000000500000081000700000000000400000000000200000000000b0000000700000000000000060000000500000003000000000e00000500000003000000010001000400030003000000cf8cbb620b00ff7f01000000feffffff564f08000300000006000000060000080300000039890000fdff0700010000000c00000005000300030000000100000000000e00000000000500000008005b0c020000000600000000080900010000000200000001000100020000000400000004000104020000000e000000b30d0080000000008100000008000500020000004b2c0000fdff00080100000007000000e0110100020000009f2b000008008ed803000000050000005402010001000000040000000408070004000b0073797a3100000000000000000000000000000000000000000000000000000000066604980a34c4a1b39826a63532b9bd7f3552df4dfab024d25fbad2125a688a2326e81a38737942aa14997581c53b9d408927096c1501603794b3ba6df6c48dbc0007000100000007000000a6480700030000000800000000040000010000000001000000000f0000000000060000000400837301000000ff0700000800070000000000040000004000ca0a00000000060000000200d9b001000000010000000101faff02000000018000000200d50002000000d60800007f000200030000000600000004000f0d010000000100000005000800000000000700000000000700030000000c00000025069f0802000000020000001efb070002000000090000007d000104b9e9dc61ff0f00000500010002000000ff0700000600030002000000090000008000020001000000010000000000b40000000000070000000200f7ff010000000001000000fe54010000000005000000690509000200000008000000fcff09000000000013e600000500ebff00000000520300000400000002000000010100000000090000000000080000000400100000000000090000007b1e0100020000000100000003000a000300000009000000f30001000200000007000000010077b202000000ff7f00000100e55e020000000200000005000600010000000700000002000400000000007fffffff0f00030001000000000800000700050002000000030000007f0000640300000006000000010004000100000000020000"], 0x1060}}, 0x4004000) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x8, 0x0, 0xe96, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000006}, 0x1100, 0x5dd8, 0x3, 0x6, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) 1.284464325s ago: executing program 1 (id=1364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000094475d514dc11f76000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000840)=ANY=[@ANYRESDEC=r7, @ANYBLOB="5b8cfeba9dac720534f16799322b6663b789442c0c1bac2b8e7311dc975ae5e1c39c1ff9a04a017f35d5ba77998a7aa336cf9d2af34149d7cc23e36411cc552478b5628417010f4a26349f38ae79c36bdc38f8de76260bbbf3860d9281fa9b20fb1f57f08d783d3d171ac7c3309aff1e866b7014d795b30b8e05e32414ebff196af503a4b8eb15d1e4e153063907e7f2dd3dc38f28e7b87d2fae776288d6c7a89e62e464a5", @ANYRES8=r7, @ANYRESDEC=r4, @ANYBLOB="30216aa81b8e1d8884fe79178dbc1f9a4b978f6df016623056bf014793c8db6e101af911279c5c6281ce8a2200038a11f8f61a2878050e85bb3199c1bc4fb98b20d956013e80807608392f8b1b28a382d9e956c9e5a00ab502f063e1b32c3aa640f9c7363090ae992231b79362b782eede79853a324a80ae6a2c7eb950a29f13eb22bf6458419cc2", @ANYBLOB="5f6e8116f0ba6532cff92edd120bb77c67a6595bd8f1af2a501d949866c771c3ed344766333dff8e80f8da1a782a3bc44927da712bac14a508f5da7c22dd36bfa33a2959e270a39e74cac431117b8f1c61d9"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r9 = dup(r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x45, 0x1, 0x8, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x40, 0x40, 0x5, 0xfffffff9}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001440)={'syztnl2\x00', 0x0}) connect$pppoe(r9, &(0x7f0000000400)={0x18, 0x0, {0x2, @local, 'nicvf0\x00'}}, 0x1e) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000580)={'nat\x00', 0x4d, "329f492dccf4f9b386d23b8934361e95fd901ee41f680ba46b981fe077808878e314bae2db80d33b23217f72c81e2df0d9d4bd588db0050c15e379bfa8033e745bd556ac2b45bb2c1b5c878b7c"}, &(0x7f0000000600)=0x71) r10 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x0, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfffb, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') 1.19271289s ago: executing program 4 (id=1365): socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3, 0xfffffffd, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000079a306a0ed3a24a96444c297888cf8c8ff7ac222d722ac99cf8b8c123f0d0e9621c8d582edb43e1639cd3685abac24044ac215bb71d34a542d688ef2774e14d6b692dbe524e0cc6e495f818d3a02e4e4e583316165c165d9252dfbc3ef0f5cccba0d7a2c608b9b5e0a4f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1b, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) open(&(0x7f0000000bc0)='./file1\x00', 0x161282, 0x179) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x0, &(0x7f0000004080), 0x1, 0x76f, &(0x7f0000002080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) close_range(r5, r6, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000380)='./bus\x00', 0x3a015e, &(0x7f0000000800)={[{@nojournal_checksum}, {@data_err_abort}, {@usrjquota}, {@dax_never}, {@nolazytime}, {@quota}], [{@appraise}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@fowner_lt}]}, 0x1, 0x460, &(0x7f0000001380)="$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") mount$bind(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x1235cd4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe33) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 956.959773ms ago: executing program 2 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x10001, 0x1, 0x5, 0xa, 0x1, 0x0, [{0x7fff, 0x103, 0x4, '\x00', 0xb08}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000138d5c48f48540dbc5000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000225, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 931.706065ms ago: executing program 4 (id=1370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x6b, 0xf, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mq_open(&(0x7f0000000100)='${$\x00\xc5\x00\xa7\x01i\x14\xd5\x9a\x02\x0eMN\xa0\x87\xc2Kh\x8f\x1c\xb9o3PfQ\xd2\xf1\x18m[e\xbaq\xd6\x9c\x87>\xe6\x1d\xf7\x85\xd4\xeb\xaf\x9e\xd2\x01A\x13\xb1\x13T\xe2\x8c9\x87\xeeN\xda\xa0\x8ajg\x18L\xd5\x1fZ\xcd:\x90\x0e', 0x840, 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='nilfs2_collection_stage_transition\x00', r3}, 0x18) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r7, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r2, r5, 0x0) r8 = fcntl$dupfd(r5, 0x0, r5) connect$unix(r8, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) 930.054065ms ago: executing program 2 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fchown(r2, 0x0, 0xee01) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010004c0f504566289ed3ed"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x200000000200}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee00, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000280)={0x11, 0x7, r9, 0x1, 0xdf, 0x6, @local}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r9, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 808.437992ms ago: executing program 2 (id=1372): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000080001000d0808004149004001040800", 0x58}, {&(0x7f00000008c0)="46d5a50da4545a76f6277d76ca1249922c0895776abf78afd3e3747c21121506c2247abf93169cd3847a495dc9349a1fdd5f68c3c8f05abfb8fd4f0ebb7c07466b49379c96aad5bc6853ff51cddbea2eab38c4129c76798c9d8707e1152a4fe125261334d98a59f64ae6938c11ccb576d0a9b896147ef88a0000006a80de1ebf7e38361f61bb31205907706bf60e0829db721ffe2092c2419b8b64db065d8df4d5c95e8b7a9dabbef3282079045ad57740dfbfc0ac52bbeee50d72aa", 0xbc}, {0x0}, {&(0x7f0000000440)="4258cf28706a1c16856c75b58d89dbbe6b63ba4b45ffb093b71e29a009ef46b13f3d169ef60000c10da2873923560ff0b0", 0x31}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000200000000f8ffffffb702000008000000b70300000080002085000000700000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x29, 0x6, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0xffffff27, 0x88, 0xd, 0x5, 0x80, 0x472, 0x10000007}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9f000100180000000000000000000000000000000020aafeefcbe30000000000"], 0x0, 0x1a, 0x0, 0x2, 0x1, 0x0, @void, @value}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc3dc1bff80c6c3adc10d4d5e80b7e8ba831803a75ec985af4d6a2cb5b55253b53fa002cc116305a8a0f9c5a1f153dd29f879ae306e71979115e31f29082cb9edf60f9d3baa08f6a7b9f7653a7b4287abaace2e084e83f8dc8f69af6f2234fbf788ada52e1b54382913e45ba18c2e086f48011ed"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16=r4, @ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x12010}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x58, r7, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b88357a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44d6d32e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9d1}]}]}]}, 0x58}}, 0x0) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$user(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r9}) open_by_handle_at(r2, 0x0, 0x10000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r8) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0025000000a00200300012800b0001f5697036746e6c00002000028014000300fc010000000000fdb6ac8a3906fd0600"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) 623.265343ms ago: executing program 2 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x10001, 0x1, 0x5, 0xa, 0x1, 0x0, [{0x7fff, 0x103, 0x4, '\x00', 0xb08}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000138d5c48f48540dbc5000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000225, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 504.98848ms ago: executing program 2 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x0, 0x100, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x1, 0x5, 0x8000000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x801}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x21, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000, 0x0, @void, @value}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) 470.389502ms ago: executing program 0 (id=1376): syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2801800, 0x0, 0x10, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cachetag=,aname=uname,access=c']) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00sy'], 0x1c7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = getpid() syz_pidfd_open(r4, 0x0) setns(r3, 0x8020000) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x20440) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000272de5000000fb00100020a07025000927b1eea100000000000007010000f8e3bcf6ffffffb7a1db0f6d395d4302000008000000b7"], &(0x7f0000000500)='GPL\x00', 0x19, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = getpid() setreuid(0xee00, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r8, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="019557dd5cd68a218e5dbf3882a37db2a40681c51f2bb32c8fb6a53a82e6f226ba8627ce383bf07e383c47b5e687e49e7d6b780c6233c88796f6ee19387f0c47b86cd76333362a681e3f4946b025e665caaea8dd40518255e68d18e8a37b6579d47a9b1c38ae94858189db7cf154dfb934ddee7b8116fab6a4daa0b65c98bf1745f13c4fedec7133b2011711ac24ae131e51ee38b6f306654fb73436eb506c4c4290925042596a20e91a4c472ad5bd29b55ed6f13fb8fcc3d5f4ca2389e7559984fad4460cdf069512983a3cb4622ecbd6f7b36ed045af2c4ed23297cc8e5eb341111d6d7a144321e4ad79"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x178}, 0x18) r10 = getpid() process_vm_readv(r10, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/206, 0xce}], 0x1, &(0x7f0000008640)=[{&(0x7f0000000340)=""/103, 0x67}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x3, 0xfffffffc, {{0x10, 0x4, 0x3, 0x2, 0xffffffffffffffcd, 0x67, 0x0, 0x2, 0x29, 0x0, @local, @private=0xa010100, {[@ra={0x94, 0xfffffffffffffdac}, @ssrr={0x89, 0x27, 0x60, [@empty, @multicast1, @local, @multicast1, @remote, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) 282.754353ms ago: executing program 2 (id=1377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000b1000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c000180"], 0x34}}, 0xc000) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40014, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x1000}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="11e5a0", 0x3, 0xb4ff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 242.621516ms ago: executing program 1 (id=1378): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x8, 0xc, 0x3, 0x0, 0x80, 0x10008, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xeb, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x8000000000000001, 0x9, 0x4, 0x6, 0x1ff, 0x7, 0x0, 0x80000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r2 = socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r2], &(0x7f00000002c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) r4 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000140000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x3a8, 0x8, 0x7f02ae, 0x3a8, 0x200, 0x478, 0x2e8, 0x2e8, 0x478, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@empty, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0xfffa, 0xab, 0xfffffff9, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x1, 0x4}, {0x3, 0x4, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 192.793688ms ago: executing program 3 (id=1379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x10001, 0x1, 0x5, 0xa, 0x1, 0x0, [{0x7fff, 0x103, 0x4, '\x00', 0xb08}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000138d5c48f48540dbc5000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000225, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x48}, 0x0) 191.986838ms ago: executing program 0 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x0, 0x100, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x1, 0x5, 0x8000000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x801}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x21, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000, 0x0, @void, @value}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1060}}, 0x4004000) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x8, 0x0, 0xe96, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000006}, 0x1100, 0x5dd8, 0x3, 0x6, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) socket$packet(0x11, 0x3, 0x300) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000003c0)=""/57, 0x39, 0x81, 0x671, 0x8, 0xd, 0x6}}, 0x120) socket$xdp(0x2c, 0x3, 0x0) 179.999329ms ago: executing program 3 (id=1381): r0 = syz_open_dev$evdev(&(0x7f0000002d40), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000002e40)={0x16, 0x1, &(0x7f0000002d80)='`'}) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x1, 0x7c7, &(0x7f0000001540)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000001393000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYRES16=0x0, @ANYRES32=r2], 0x34}}, 0x4000804) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x1000}, {0xffffffff, 0x0, 0x0, 0x7fffffff, 0x1}]}) ioctl$KDADDIO(r6, 0x4b34, 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r5, @ANYRESHEX=r4], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000740)='ext4_da_reserve_space\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x633, 0x70bd25, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x4000, 0x0, 0x8000}, {@in6=@empty, 0x0, 0x32}, @in=@private=0xa010101, {0x327, 0x4, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0x2, 0x4, 0x9, 0x19}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000c80)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}, [0x7, 0x8, 0x9, 0x18000000, 0x9, 0xc35, 0x5, 0x2, 0xb, 0x6, 0x8, 0x4, 0x9, 0x800000000000000, 0x4]}, &(0x7f0000000780)=0x100) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000d80)={0x0, 0xffff}, &(0x7f0000000dc0)=0x8) 171.177159ms ago: executing program 0 (id=1382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x210000, 0x0) read(r0, 0x0, 0xfffffffffffffda4) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2002) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/uts\x00') ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x5319) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r8, 0x0, 0x1a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000200), &(0x7f0000000680)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe43, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x242) 136.497561ms ago: executing program 3 (id=1383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x10001, 0x1, 0x5, 0xa, 0x1, 0x0, [{0x7fff, 0x103, 0x4, '\x00', 0xb08}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000138d5c48f48540dbc5000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000225, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 118.456333ms ago: executing program 3 (id=1384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r6, 0x0, 0x200}, 0x18) r7 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff47"], 0xa0}}, 0x0) sendto$inet6(r8, 0x0, 0x4, 0x0, 0x0, 0x0) 99.183483ms ago: executing program 3 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x10001, 0x1, 0x5, 0xa, 0x1, 0x0, [{0x7fff, 0x103, 0x4, '\x00', 0xb08}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000138d5c48f48540dbc5000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000225, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)}}], 0x48}, 0x0) 82.722914ms ago: executing program 3 (id=1386): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x3b16, 0x1, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setgroups(0x1, &(0x7f0000000380)=[0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000004c0)={0x1, 0x6, 0x7d, &(0x7f0000000600)=""/125}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r4) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) fallocate(r5, 0x0, 0x0, 0x1001f0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000680)="2f5cf6f1597f85bf183f2326d591b61dfec5a2a37d4019dd1f02fcbbc79d9c7638944b1b2330af2ed65605a47639b414117c9dbc9e3fbac8e05df5d61074f69156136dcdcfb03e946409edc0561bbfaa3e6d423f52f143099edf810080", 0x5d}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="d4d4a7ffd1b12e713d6691ca2fb1001316ed0b3008a22cc4ecddb584781ae714c290f805b0c56dc512e73ed2db6a7e9b732e767b0722d432760f9862c9c292681e308244dca379fde5c6a95eee4e94b46add3b8d786d8845bbba4e9cc61ed1e500b3c6ef3c85eb3352b9ada2369b0c5ca7ac31db5dd5839dd78af10ee164ed8c401f0bb75444a37e8b19adc9e14395fc9b295f0612eb0f68fb13a1a5b23589cd8fd225f3662bd2dd73bfacdeefde2377ef80a06fcc0a6996bf6b", 0xba}], 0x3) 0s ago: executing program 4 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fchown(r2, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010004c0f504566289ed3ed"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x200000000200}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee00, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000280)={0x11, 0x7, r8, 0x1, 0xdf, 0x6, @local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r8, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) kernel console output (not intermixed with test programs): lticast mode [ 141.373486][ T7928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.383122][ T7928] bond1 (unregistering): Released all slaves [ 141.618112][ T7946] xt_hashlimit: max too large, truncated to 1048576 [ 141.625389][ T7946] Cannot find set identified by id 0 to match [ 141.632976][ T7946] x_tables: duplicate underflow at hook 3 [ 141.672358][ T7944] loop1: detected capacity change from 0 to 128 [ 141.679108][ T7944] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 141.764156][ T7957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7957 comm=syz.0.1074 [ 141.810690][ T7961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7961 comm=syz.0.1075 [ 142.242333][ T7966] loop4: detected capacity change from 0 to 128 [ 142.314458][ T7974] loop3: detected capacity change from 0 to 512 [ 142.330007][ T7972] loop1: detected capacity change from 0 to 2048 [ 142.330988][ T7974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.336891][ T7972] EXT4-fs: Ignoring removed bh option [ 142.363050][ T7974] EXT4-fs (loop3): 1 truncate cleaned up [ 142.374753][ T7974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.375383][ T7972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.405312][ T7977] syz.4.1078: attempt to access beyond end of device [ 142.405312][ T7977] loop4: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 142.424695][ T7966] syz.4.1078: attempt to access beyond end of device [ 142.424695][ T7966] loop4: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 142.438174][ T7966] Buffer I/O error on dev loop4, logical block 241, lost async page write [ 142.537707][ T7987] xt_hashlimit: max too large, truncated to 1048576 [ 142.568032][ T40] kworker/u8:2: attempt to access beyond end of device [ 142.568032][ T40] loop4: rw=1, sector=377, nr_sectors = 664 limit=128 [ 142.645815][ T40] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.666056][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 142.678431][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.678431][ T40] [ 142.689028][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 142.695093][ T40] EXT4-fs (loop1): Free/Dirty block details [ 142.701090][ T40] EXT4-fs (loop1): free_blocks=2415919104 [ 142.706856][ T40] EXT4-fs (loop1): dirty_blocks=8000 [ 142.712144][ T40] EXT4-fs (loop1): Block reservation details [ 142.718138][ T40] EXT4-fs (loop1): i_reserved_data_blocks=500 [ 142.734836][ T7993] syz.3.1080 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 142.744715][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.3.1080 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 142.744743][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.744757][ T7993] Call Trace: [ 142.744765][ T7993] [ 142.744849][ T7993] dump_stack_lvl+0xf2/0x150 [ 142.744882][ T7993] dump_stack+0x15/0x1a [ 142.744908][ T7993] dump_header+0x83/0x2d0 [ 142.745019][ T7993] oom_kill_process+0x341/0x4c0 [ 142.745123][ T7993] out_of_memory+0x9af/0xbe0 [ 142.745156][ T7993] ? css_next_descendant_pre+0x11c/0x140 [ 142.745233][ T7993] mem_cgroup_out_of_memory+0x13e/0x190 [ 142.745332][ T7993] try_charge_memcg+0x508/0x7f0 [ 142.745365][ T7993] charge_memcg+0x50/0xc0 [ 142.745410][ T7993] __mem_cgroup_charge+0x29/0xb0 [ 142.745435][ T7993] shmem_get_folio_gfp+0x47e/0xd90 [ 142.745488][ T7993] shmem_fault+0xfa/0x250 [ 142.745527][ T7993] __do_fault+0xb6/0x200 [ 142.745556][ T7993] handle_mm_fault+0xe98/0x2ac0 [ 142.745598][ T7993] ? __rcu_read_lock+0x36/0x50 [ 142.745621][ T7993] ? __pte_offset_map_lock+0x1ce/0x280 [ 142.745682][ T7993] __get_user_pages+0xf6a/0x2350 [ 142.745741][ T7993] __mm_populate+0x25b/0x3b0 [ 142.745773][ T7993] vm_mmap_pgoff+0x224/0x2d0 [ 142.745814][ T7993] ksys_mmap_pgoff+0xd0/0x330 [ 142.745914][ T7993] ? __rcu_read_unlock+0x4e/0x70 [ 142.745949][ T7993] x64_sys_call+0x1940/0x2dc0 [ 142.745987][ T7993] do_syscall_64+0xc9/0x1c0 [ 142.746016][ T7993] ? clear_bhb_loop+0x55/0xb0 [ 142.746078][ T7993] ? clear_bhb_loop+0x55/0xb0 [ 142.746114][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.746147][ T7993] RIP: 0033:0x7f425750cde9 [ 142.746162][ T7993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.746179][ T7993] RSP: 002b:00007f4255b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 142.746225][ T7993] RAX: ffffffffffffffda RBX: 00007f4257726080 RCX: 00007f425750cde9 [ 142.746240][ T7993] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 142.746255][ T7993] RBP: 00007f425758e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 142.746277][ T7993] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 142.746292][ T7993] R13: 0000000000000001 R14: 00007f4257726080 R15: 00007ffe86edad08 [ 142.746313][ T7993] [ 142.746319][ T7993] memory: usage 307196kB, limit 307200kB, failcnt 1403 [ 142.805681][ T7992] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 14 with error 28 [ 142.807189][ T7993] memory+swap: usage 281372kB, limit 9007199254740988kB, failcnt 0 [ 143.001220][ T7993] kmem: usage 4944kB, limit 9007199254740988kB, failcnt 0 [ 143.008505][ T7993] Memory cgroup stats for /syz3: [ 143.008758][ T7993] cache 7122944 [ 143.017306][ T7993] rss 204800 [ 143.020572][ T7993] shmem 7110656 [ 143.024036][ T7993] mapped_file 6852608 [ 143.028040][ T7993] dirty 0 [ 143.031022][ T7993] writeback 0 [ 143.034331][ T7993] workingset_refault_anon 492 [ 143.039015][ T7993] workingset_refault_file 1315 [ 143.043778][ T7993] swap 180224 [ 143.047100][ T7993] swapcached 0 [ 143.050475][ T7993] pgpgin 107367 [ 143.053934][ T7993] pgpgout 105578 [ 143.057506][ T7993] pgfault 93856 [ 143.060966][ T7993] pgmajfault 295 [ 143.064649][ T7993] inactive_anon 2142208 [ 143.068810][ T7993] active_anon 5173248 [ 143.072818][ T7993] inactive_file 0 [ 143.076543][ T7993] active_file 12288 [ 143.080480][ T7993] unevictable 0 [ 143.084020][ T7993] hierarchical_memory_limit 314572800 [ 143.089427][ T7993] hierarchical_memsw_limit 9223372036854771712 [ 143.095603][ T7993] total_cache 7122944 [ 143.099585][ T7993] total_rss 204800 [ 143.103305][ T7993] total_shmem 7110656 [ 143.107302][ T7993] total_mapped_file 6852608 [ 143.111807][ T7993] total_dirty 0 [ 143.115286][ T7993] total_writeback 0 [ 143.119125][ T7993] total_workingset_refault_anon 492 [ 143.124349][ T7993] total_workingset_refault_file 1315 [ 143.129632][ T7993] total_swap 180224 [ 143.133435][ T7993] total_swapcached 0 [ 143.137345][ T7993] total_pgpgin 107367 [ 143.141348][ T7993] total_pgpgout 105578 [ 143.145444][ T7993] total_pgfault 93856 [ 143.149438][ T7993] total_pgmajfault 295 [ 143.153509][ T7993] total_inactive_anon 2142208 [ 143.158276][ T7993] total_active_anon 5173248 [ 143.162848][ T7993] total_inactive_file 0 [ 143.167099][ T7993] total_active_file 12288 [ 143.171433][ T7993] total_unevictable 0 [ 143.175460][ T7993] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1080,pid=7973,uid=0 [ 143.190078][ T7993] Memory cgroup out of memory: Killed process 7973 (syz.3.1080) total-vm:93712kB, anon-rss:1044kB, file-rss:22444kB, shmem-rss:6656kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 143.250209][ T7999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7999 comm=syz.4.1086 [ 143.311138][ T7999] __nla_validate_parse: 5 callbacks suppressed [ 143.311153][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 143.333774][ T8007] xt_hashlimit: max too large, truncated to 1048576 [ 143.410067][ T8007] Cannot find set identified by id 0 to match [ 143.464111][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.565867][ T8015] lo speed is unknown, defaulting to 1000 [ 143.581583][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 143.608327][ T8018] hub 2-0:1.0: USB hub found [ 143.616686][ T8018] hub 2-0:1.0: 8 ports detected [ 143.621061][ T8015] lo speed is unknown, defaulting to 1000 [ 143.658865][ T8015] lo speed is unknown, defaulting to 1000 [ 143.675093][ T8018] loop3: detected capacity change from 0 to 1024 [ 143.687805][ T8018] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 143.698639][ T8018] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 143.707065][ T8018] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.719484][ T8018] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 143.729295][ T8018] EXT4-fs (loop3): Remounting filesystem read-only [ 143.737384][ T8018] EXT4-fs (loop3): 1 orphan inode deleted [ 143.743745][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 143.756054][ T8018] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 143.763297][ T8018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.774474][ T8028] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 143.782257][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1094'. [ 143.810070][ T8031] loop3: detected capacity change from 0 to 512 [ 143.816955][ T8031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.828501][ T8031] EXT4-fs (loop3): 1 truncate cleaned up [ 143.834533][ T8031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.837700][ T8035] SELinux: policydb string SEºLinuz does not match my string SE Linux [ 143.855885][ T8035] SELinux: failed to load policy [ 143.958140][ T8035] $Hÿ: renamed from bond0 [ 143.964388][ T8035] $Hÿ: entered promiscuous mode [ 144.076200][ T8047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8047 comm=syz.1.1099 [ 144.115228][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 144.145100][ T8054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8054 comm=syz.0.1110 [ 144.175530][ T8053] loop1: detected capacity change from 0 to 1024 [ 144.182532][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 144.184716][ T8053] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1100: Failed to acquire dquot type 0 [ 144.203273][ T8053] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 144.218333][ T8053] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #13: comm syz.1.1100: corrupted inode contents [ 144.230406][ T8053] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #13: comm syz.1.1100: mark_inode_dirty error [ 144.247349][ T8053] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #13: comm syz.1.1100: corrupted inode contents [ 144.259937][ T8053] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.1100: mark_inode_dirty error [ 144.284736][ T8053] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #13: comm syz.1.1100: corrupted inode contents [ 144.305075][ T8053] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 144.320797][ T8053] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #13: comm syz.1.1100: corrupted inode contents [ 144.336065][ T8053] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.1100: mark_inode_dirty error [ 144.347426][ T8053] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 144.356956][ T8053] EXT4-fs (loop1): 1 truncate cleaned up [ 144.363253][ T8053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.399111][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.568047][ T8063] siw: device registration error -23 [ 144.618698][ T8077] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 144.626483][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 144.658336][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.809615][ T8090] loop3: detected capacity change from 0 to 1024 [ 144.817172][ T8090] EXT4-fs: Ignoring removed nobh option [ 144.822872][ T8090] EXT4-fs: Ignoring removed bh option [ 144.829880][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 144.829893][ T29] audit: type=1400 audit(1739874880.674:15730): avc: denied { relabelfrom } for pid=8093 comm="syz.0.1112" name="" dev="pipefs" ino=24904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 144.861003][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.878727][ T8094] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 144.882330][ T8090] pimreg: entered allmulticast mode [ 144.895771][ T8090] pimreg: left allmulticast mode [ 144.909500][ T8098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8098 comm=syz.0.1113 [ 144.936228][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 144.958976][ T8090] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 144.968459][ T29] audit: type=1326 audit(1739874880.814:15731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 144.992303][ T29] audit: type=1326 audit(1739874880.814:15732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.016555][ T29] audit: type=1326 audit(1739874880.814:15733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.040115][ T29] audit: type=1326 audit(1739874880.814:15734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.064426][ T29] audit: type=1326 audit(1739874880.814:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.087916][ T29] audit: type=1326 audit(1739874880.814:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.111931][ T29] audit: type=1326 audit(1739874880.814:15737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.135845][ T29] audit: type=1326 audit(1739874880.814:15738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.159317][ T29] audit: type=1326 audit(1739874880.814:15739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 145.184082][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.279787][ T8109] loop3: detected capacity change from 0 to 2048 [ 145.286493][ T8109] EXT4-fs: Ignoring removed bh option [ 145.305862][ T8109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.378721][ T8113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.518713][ T8114] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.536482][ T8114] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 145.548963][ T8114] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.548963][ T8114] [ 145.558679][ T8114] EXT4-fs (loop3): Total free blocks count 0 [ 145.565411][ T8114] EXT4-fs (loop3): Free/Dirty block details [ 145.571372][ T8114] EXT4-fs (loop3): free_blocks=2415919104 [ 145.577109][ T8114] EXT4-fs (loop3): dirty_blocks=8224 [ 145.582400][ T8114] EXT4-fs (loop3): Block reservation details [ 145.588427][ T8114] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 145.613205][ T8127] loop4: detected capacity change from 0 to 512 [ 145.620094][ T8127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.631197][ T8127] EXT4-fs (loop4): 1 truncate cleaned up [ 145.637474][ T8127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.764767][ T53] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 145.846973][ T8131] siw: device registration error -23 [ 146.145162][ T8136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8136 comm=syz.1.1126 [ 146.191918][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 146.243224][ T8141] loop1: detected capacity change from 0 to 512 [ 146.264807][ T8141] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.274046][ T8141] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1127: bg 0: block 248: padding at end of block bitmap is not set [ 146.323891][ T8141] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1127: Failed to acquire dquot type 1 [ 146.329549][ T8127] syz.4.1123 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 146.350005][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.4.1123 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 146.350093][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.350106][ T8127] Call Trace: [ 146.350111][ T8127] [ 146.350118][ T8127] dump_stack_lvl+0xf2/0x150 [ 146.350152][ T8127] dump_stack+0x15/0x1a [ 146.350179][ T8127] dump_header+0x83/0x2d0 [ 146.350224][ T8127] oom_kill_process+0x341/0x4c0 [ 146.350316][ T8127] out_of_memory+0x9af/0xbe0 [ 146.350348][ T8127] ? css_next_descendant_pre+0x11c/0x140 [ 146.350371][ T8127] mem_cgroup_out_of_memory+0x13e/0x190 [ 146.350467][ T8127] try_charge_memcg+0x508/0x7f0 [ 146.350509][ T8127] obj_cgroup_charge_pages+0xbd/0x1a0 [ 146.350601][ T8127] __memcg_kmem_charge_page+0x9d/0x170 [ 146.350628][ T8127] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 146.350668][ T8127] alloc_pages_mpol+0xb4/0x260 [ 146.350698][ T8127] alloc_pages_noprof+0xe8/0x130 [ 146.350766][ T8127] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 146.350806][ T8127] __kvmalloc_node_noprof+0x121/0x170 [ 146.350837][ T8127] ? ip_set_alloc+0x1f/0x30 [ 146.350880][ T8127] ip_set_alloc+0x1f/0x30 [ 146.350908][ T8127] hash_netiface_create+0x273/0x730 [ 146.350941][ T8127] ? __nla_parse+0x40/0x60 [ 146.350982][ T8127] ? __pfx_hash_netiface_create+0x10/0x10 [ 146.351034][ T8127] ip_set_create+0x3b1/0x970 [ 146.351062][ T8127] ? __find_get_block+0x5e1/0x890 [ 146.351163][ T8127] ? __nla_parse+0x40/0x60 [ 146.351199][ T8127] nfnetlink_rcv_msg+0x4a9/0x570 [ 146.351239][ T8127] netlink_rcv_skb+0x12c/0x230 [ 146.351273][ T8127] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 146.351352][ T8127] nfnetlink_rcv+0x16c/0x15d0 [ 146.351376][ T8127] ? inode_set_ctime_current+0x52c/0x770 [ 146.351411][ T8127] ? up_write+0x30/0xf0 [ 146.351434][ T8127] ? ext4_xattr_set_handle+0x500/0xbf0 [ 146.351464][ T8127] ? rb_insert_color+0x263/0x290 [ 146.351515][ T8127] ? timerqueue_add+0x16e/0x1a0 [ 146.351536][ T8127] ? rb_erase+0x230/0x6b0 [ 146.351569][ T8127] ? timerqueue_del+0x88/0xb0 [ 146.351592][ T8127] ? should_fail_ex+0x31/0x260 [ 146.351628][ T8127] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 146.351672][ T8127] ? __rcu_read_unlock+0x34/0x70 [ 146.351762][ T8127] ? __netlink_lookup+0x253/0x290 [ 146.351798][ T8127] netlink_unicast+0x599/0x670 [ 146.351858][ T8127] netlink_sendmsg+0x5cc/0x6e0 [ 146.351892][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.352024][ T8127] __sock_sendmsg+0x140/0x180 [ 146.352064][ T8127] ____sys_sendmsg+0x326/0x4b0 [ 146.352098][ T8127] __sys_sendmsg+0x19d/0x230 [ 146.352200][ T8127] __x64_sys_sendmsg+0x46/0x50 [ 146.352287][ T8127] x64_sys_call+0x2734/0x2dc0 [ 146.352318][ T8127] do_syscall_64+0xc9/0x1c0 [ 146.352349][ T8127] ? clear_bhb_loop+0x55/0xb0 [ 146.352383][ T8127] ? clear_bhb_loop+0x55/0xb0 [ 146.352477][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.352509][ T8127] RIP: 0033:0x7f9bf38dcde9 [ 146.352526][ T8127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.352559][ T8127] RSP: 002b:00007f9bf1f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.352582][ T8127] RAX: ffffffffffffffda RBX: 00007f9bf3af5fa0 RCX: 00007f9bf38dcde9 [ 146.352596][ T8127] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000006 [ 146.352610][ T8127] RBP: 00007f9bf395e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.352624][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.352638][ T8127] R13: 0000000000000000 R14: 00007f9bf3af5fa0 R15: 00007fff65c91618 [ 146.352660][ T8127] [ 146.352685][ T8127] memory: usage 307200kB, limit 307200kB, failcnt 5605 [ 146.368560][ T8141] EXT4-fs (loop1): 1 truncate cleaned up [ 146.373227][ T8127] memory+swap: usage 375056kB, limit 9007199254740988kB, failcnt 0 [ 146.436354][ T8149] loop3: detected capacity change from 0 to 128 [ 146.736867][ T8127] kmem: usage 306672kB, limit 9007199254740988kB, failcnt 0 [ 146.744952][ T8127] Memory cgroup stats for /syz4: [ 146.745112][ T8127] cache 282624 [ 146.753437][ T8127] rss 204800 [ 146.756678][ T8127] shmem 262144 [ 146.760054][ T8127] mapped_file 4096 [ 146.763808][ T8127] dirty 0 [ 146.766864][ T8127] writeback 0 [ 146.770219][ T8127] workingset_refault_anon 605 [ 146.775567][ T8127] workingset_refault_file 12017 [ 146.780427][ T8127] swap 69484544 [ 146.783893][ T8127] swapcached 0 [ 146.787298][ T8127] pgpgin 181015 [ 146.790761][ T8127] pgpgout 180895 [ 146.794339][ T8127] pgfault 109842 [ 146.797891][ T8127] pgmajfault 304 [ 146.801494][ T8127] inactive_anon 36864 [ 146.806048][ T8127] active_anon 430080 [ 146.809944][ T8127] inactive_file 20480 [ 146.813929][ T8127] active_file 4096 [ 146.817672][ T8127] unevictable 0 [ 146.821127][ T8127] hierarchical_memory_limit 314572800 [ 146.826521][ T8127] hierarchical_memsw_limit 9223372036854771712 [ 146.832726][ T8127] total_cache 282624 [ 146.837318][ T8127] total_rss 204800 [ 146.841052][ T8127] total_shmem 262144 [ 146.845280][ T8127] total_mapped_file 4096 [ 146.849671][ T8127] total_dirty 0 [ 146.853162][ T8127] total_writeback 0 [ 146.857122][ T8127] total_workingset_refault_anon 605 [ 146.862330][ T8127] total_workingset_refault_file 12017 [ 146.868422][ T8127] total_swap 69484544 [ 146.872443][ T8127] total_swapcached 0 [ 146.876418][ T8127] total_pgpgin 181015 [ 146.880404][ T8127] total_pgpgout 180895 [ 146.884498][ T8127] total_pgfault 109842 [ 146.888611][ T8127] total_pgmajfault 304 [ 146.892678][ T8127] total_inactive_anon 36864 [ 146.897917][ T8127] total_active_anon 430080 [ 146.902401][ T8127] total_inactive_file 20480 [ 146.906927][ T8127] total_active_file 4096 [ 146.911246][ T8127] total_unevictable 0 [ 146.915252][ T8127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1123,pid=8126,uid=0 [ 146.930614][ T8127] Memory cgroup out of memory: Killed process 8127 (syz.4.1123) total-vm:93844kB, anon-rss:1044kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 146.948454][ T8141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.966334][ T8153] syz.3.1129: attempt to access beyond end of device [ 146.966334][ T8153] loop3: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 146.979815][ T8153] Buffer I/O error on dev loop3, logical block 241, lost async page write [ 147.020674][ T8151] syz.3.1129: attempt to access beyond end of device [ 147.020674][ T8151] loop3: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 147.054293][ T8141] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 147.095737][ T8157] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 147.103497][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1130'. [ 147.123411][ T8141] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 147.141299][ T4920] kworker/u8:8: attempt to access beyond end of device [ 147.141299][ T4920] loop3: rw=1, sector=377, nr_sectors = 664 limit=128 [ 147.178776][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.203862][ T8160] loop3: detected capacity change from 0 to 2048 [ 147.212144][ T8160] EXT4-fs: Ignoring removed bh option [ 147.227332][ T8160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.281043][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.326560][ T8169] loop4: detected capacity change from 0 to 1024 [ 147.343712][ T8169] EXT4-fs: Ignoring removed nobh option [ 147.349997][ T8169] EXT4-fs: Ignoring removed bh option [ 147.381623][ T8169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.406120][ T8169] pimreg: entered allmulticast mode [ 147.415935][ T8169] pimreg: left allmulticast mode [ 147.476821][ T8171] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.495348][ T8171] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 147.507655][ T8171] EXT4-fs (loop3): This should not happen!! Data will be lost [ 147.507655][ T8171] [ 147.517333][ T8171] EXT4-fs (loop3): Total free blocks count 0 [ 147.523327][ T8171] EXT4-fs (loop3): Free/Dirty block details [ 147.529379][ T8171] EXT4-fs (loop3): free_blocks=2415919104 [ 147.535133][ T8171] EXT4-fs (loop3): dirty_blocks=8224 [ 147.540421][ T8171] EXT4-fs (loop3): Block reservation details [ 147.546489][ T8171] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 147.563397][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.609027][ T8182] loop4: detected capacity change from 0 to 512 [ 147.628958][ T53] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 147.646534][ T8182] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 147.656698][ T8182] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.677033][ T8182] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.703049][ T8182] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 147.711439][ T8182] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1137: bg 0: block 40: padding at end of block bitmap is not set [ 147.725900][ T8182] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 147.735714][ T8182] EXT4-fs (loop4): 1 truncate cleaned up [ 147.737853][ T8186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8186 comm=syz.3.1138 [ 147.741883][ T8182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.772347][ T8182] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.1137: corrupted xattr block 31: invalid header [ 147.785877][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 147.796975][ T8182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 147.828696][ T8190] siw: device registration error -23 [ 147.835224][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.845416][ T8190] loop3: detected capacity change from 0 to 128 [ 147.864065][ T8190] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.876461][ T8190] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.914972][ T8195] loop4: detected capacity change from 0 to 256 [ 147.982095][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.022314][ T8204] team0 (unregistering): Port device team_slave_0 removed [ 148.034975][ T8204] team0 (unregistering): Port device team_slave_1 removed [ 148.066578][ T8210] bridge0: entered allmulticast mode [ 148.133857][ T8214] loop1: detected capacity change from 0 to 512 [ 148.141568][ T8214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.153269][ T8214] EXT4-fs (loop1): 1 truncate cleaned up [ 148.167197][ T8214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.193540][ T8218] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8218 comm=syz.4.1148 [ 148.290425][ T8223] loop4: detected capacity change from 0 to 512 [ 148.308321][ T8223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.336348][ T8223] EXT4-fs (loop4): 1 truncate cleaned up [ 148.345351][ T8223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.429984][ T8221] syz.1.1147 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 148.439870][ T8221] CPU: 0 UID: 0 PID: 8221 Comm: syz.1.1147 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 148.439893][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.439904][ T8221] Call Trace: [ 148.439910][ T8221] [ 148.439917][ T8221] dump_stack_lvl+0xf2/0x150 [ 148.439980][ T8221] dump_stack+0x15/0x1a [ 148.440005][ T8221] dump_header+0x83/0x2d0 [ 148.440039][ T8221] oom_kill_process+0x341/0x4c0 [ 148.440078][ T8221] out_of_memory+0x9af/0xbe0 [ 148.440173][ T8221] ? css_next_descendant_pre+0x11c/0x140 [ 148.440202][ T8221] mem_cgroup_out_of_memory+0x13e/0x190 [ 148.440235][ T8221] try_charge_memcg+0x508/0x7f0 [ 148.440282][ T8221] charge_memcg+0x50/0xc0 [ 148.440305][ T8221] __mem_cgroup_charge+0x29/0xb0 [ 148.440376][ T8221] shmem_get_folio_gfp+0x47e/0xd90 [ 148.440425][ T8221] shmem_fault+0xfa/0x250 [ 148.440451][ T8221] __do_fault+0xb6/0x200 [ 148.440475][ T8221] handle_mm_fault+0xe98/0x2ac0 [ 148.440606][ T8221] ? kcsan_setup_watchpoint+0x404/0x410 [ 148.440651][ T8221] ? __rcu_read_lock+0x36/0x50 [ 148.440680][ T8221] ? __pte_offset_map_lock+0x1ce/0x280 [ 148.440786][ T8221] __get_user_pages+0xf6a/0x2350 [ 148.440830][ T8221] __mm_populate+0x25b/0x3b0 [ 148.440877][ T8221] vm_mmap_pgoff+0x224/0x2d0 [ 148.440908][ T8221] ksys_mmap_pgoff+0xd0/0x330 [ 148.440940][ T8221] ? __rcu_read_unlock+0x4e/0x70 [ 148.440969][ T8221] x64_sys_call+0x1940/0x2dc0 [ 148.441019][ T8221] do_syscall_64+0xc9/0x1c0 [ 148.441056][ T8221] ? clear_bhb_loop+0x55/0xb0 [ 148.441090][ T8221] ? clear_bhb_loop+0x55/0xb0 [ 148.441121][ T8221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.441147][ T8221] RIP: 0033:0x7fbf6268cde9 [ 148.441194][ T8221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.441217][ T8221] RSP: 002b:00007fbf60cd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.441239][ T8221] RAX: ffffffffffffffda RBX: 00007fbf628a6080 RCX: 00007fbf6268cde9 [ 148.441255][ T8221] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 148.441271][ T8221] RBP: 00007fbf6270e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 148.441347][ T8221] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 148.441360][ T8221] R13: 0000000000000001 R14: 00007fbf628a6080 R15: 00007ffc54f0b298 [ 148.441425][ T8221] [ 148.441433][ T8221] memory: usage 307200kB, limit 307200kB, failcnt 3505 [ 148.688211][ T8221] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 148.696149][ T8221] kmem: usage 302008kB, limit 9007199254740988kB, failcnt 0 [ 148.703509][ T8221] Memory cgroup stats for /syz1: [ 148.703734][ T8221] cache 5120000 [ 148.712221][ T8221] rss 196608 [ 148.716010][ T8221] shmem 5095424 [ 148.719473][ T8221] mapped_file 4837376 [ 148.723454][ T8221] dirty 0 [ 148.726401][ T8221] writeback 0 [ 148.729685][ T8221] workingset_refault_anon 1194 [ 148.734482][ T8221] workingset_refault_file 2697 [ 148.739245][ T8221] swap 200704 [ 148.742529][ T8221] swapcached 0 [ 148.746575][ T8221] pgpgin 130173 [ 148.750036][ T8221] pgpgout 128875 [ 148.753582][ T8221] pgfault 126599 [ 148.757155][ T8221] pgmajfault 620 [ 148.760695][ T8221] inactive_anon 5226496 [ 148.764875][ T8221] active_anon 65536 [ 148.768745][ T8221] inactive_file 4096 [ 148.772629][ T8221] active_file 20480 [ 148.777132][ T8221] unevictable 0 [ 148.780592][ T8221] hierarchical_memory_limit 314572800 [ 148.786071][ T8221] hierarchical_memsw_limit 9223372036854771712 [ 148.792230][ T8221] total_cache 5120000 [ 148.796330][ T8221] total_rss 196608 [ 148.800055][ T8221] total_shmem 5095424 [ 148.804042][ T8221] total_mapped_file 4837376 [ 148.809214][ T8221] total_dirty 0 [ 148.812680][ T8221] total_writeback 0 [ 148.816530][ T8221] total_workingset_refault_anon 1194 [ 148.821920][ T8221] total_workingset_refault_file 2697 [ 148.825014][ T8229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8229 comm=syz.3.1150 [ 148.827207][ T8221] total_swap 200704 [ 148.827217][ T8221] total_swapcached 0 [ 148.848069][ T8221] total_pgpgin 130173 [ 148.852057][ T8221] total_pgpgout 128875 [ 148.856164][ T8221] total_pgfault 126599 [ 148.860337][ T8221] total_pgmajfault 620 [ 148.865163][ T8221] total_inactive_anon 5226496 [ 148.869850][ T8221] total_active_anon 65536 [ 148.874268][ T8221] total_inactive_file 4096 [ 148.878688][ T8221] total_active_file 20480 [ 148.883083][ T8221] total_unevictable 0 [ 148.887102][ T8221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1147,pid=8212,uid=0 [ 148.902553][ T8221] Memory cgroup out of memory: Killed process 8212 (syz.1.1147) total-vm:93712kB, anon-rss:1044kB, file-rss:22460kB, shmem-rss:4608kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 148.934587][ T8229] __nla_validate_parse: 5 callbacks suppressed [ 148.934600][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 148.983509][ T8233] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 149.032714][ T8239] netlink: 'syz.0.1153': attribute type 1 has an invalid length. [ 149.040511][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1153'. [ 149.106613][ T8241] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.119598][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.156557][ T8241] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.201149][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.212072][ T8241] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.256041][ T8241] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.290906][ T8252] siw: device registration error -23 [ 149.313327][ T8256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8256 comm=syz.2.1159 [ 149.333782][ T8241] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.345189][ T8241] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.353745][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 149.357167][ T8241] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.375621][ T8241] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.394557][ T8260] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.415719][ T8262] loop3: detected capacity change from 0 to 1024 [ 149.422270][ T8262] EXT4-fs: Ignoring removed bh option [ 149.427775][ T8262] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.435165][ T8262] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.446148][ T8260] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.446300][ T8262] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ee018, mo2=0000] [ 149.466142][ T8262] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.1161: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.480231][ T8262] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.1161: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.495150][ T8262] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1161: Failed to acquire dquot type 0 [ 149.506590][ T8262] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 149.507903][ T8260] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.516225][ T8262] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.1161: mark_inode_dirty error [ 149.537880][ T8262] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 149.548297][ T8262] EXT4-fs (loop3): 1 orphan inode deleted [ 149.555168][ T8262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.567783][ T4920] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.583153][ T8260] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.585022][ T4920] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 149.661214][ T8260] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.672648][ T8260] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.684745][ T8260] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.713414][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.720729][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.765684][ T8262] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.774100][ T8262] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.782662][ T8262] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.791089][ T8262] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.801673][ T9] lo speed is unknown, defaulting to 1000 [ 149.804041][ T8260] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.851963][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.862266][ T3297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 149.885087][ T3297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 149.901760][ T3297] EXT4-fs error (device loop3): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 149.926167][ T8273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8273 comm=syz.3.1164 [ 149.955489][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 149.987487][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 149.987504][ T29] audit: type=1326 audit(1739874885.834:15994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.041226][ T29] audit: type=1326 audit(1739874885.834:15995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.065468][ T29] audit: type=1326 audit(1739874885.834:15996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.088895][ T29] audit: type=1326 audit(1739874885.834:15997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.113120][ T29] audit: type=1326 audit(1739874885.834:15998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.118298][ T8281] loop1: detected capacity change from 0 to 512 [ 150.137340][ T29] audit: type=1326 audit(1739874885.834:15999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.167176][ T29] audit: type=1326 audit(1739874885.834:16000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.190658][ T29] audit: type=1326 audit(1739874885.834:16001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.191684][ T8281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.214883][ T29] audit: type=1326 audit(1739874885.834:16002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.248141][ T29] audit: type=1326 audit(1739874885.834:16003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 150.272300][ T8281] EXT4-fs (loop1): 1 truncate cleaned up [ 150.284919][ T8281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.425594][ T8293] loop3: detected capacity change from 0 to 512 [ 150.435199][ T8293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.495752][ T8289] loop4: detected capacity change from 0 to 1764 [ 150.520159][ T8293] EXT4-fs (loop3): 1 truncate cleaned up [ 150.526486][ T8293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.776890][ T8299] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8299 comm=syz.4.1170 [ 150.827903][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 150.916074][ T8308] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 150.923886][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1174'. [ 150.966446][ T3375] IPVS: starting estimator thread 0... [ 151.052577][ T8318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8318 comm=syz.2.1175 [ 151.076363][ T8314] IPVS: using max 2400 ests per chain, 120000 per kthread [ 151.099394][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 151.246721][ T8328] netlink: 'syz.2.1178': attribute type 13 has an invalid length. [ 151.280193][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.311228][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.318435][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.332417][ T8332] loop1: detected capacity change from 0 to 512 [ 151.340585][ T8332] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.350377][ T8334] loop3: detected capacity change from 0 to 128 [ 151.362676][ T8332] EXT4-fs (loop1): 1 truncate cleaned up [ 151.403152][ T8328] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.411738][ T8328] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.420323][ T8328] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.428998][ T8328] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.488968][ T40] kworker/u8:2: attempt to access beyond end of device [ 151.488968][ T40] loop3: rw=1, sector=273, nr_sectors = 64 limit=128 [ 151.523028][ T8334] syz.3.1181: attempt to access beyond end of device [ 151.523028][ T8334] loop3: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 151.536520][ T8334] Buffer I/O error on dev loop3, logical block 241, lost async page write [ 151.550473][ T40] kworker/u8:2: attempt to access beyond end of device [ 151.550473][ T40] loop3: rw=1, sector=337, nr_sectors = 704 limit=128 [ 151.568637][ T3308] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 151.579529][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 151.579554][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.579622][ T3308] Call Trace: [ 151.579629][ T3308] [ 151.579637][ T3308] dump_stack_lvl+0xf2/0x150 [ 151.579664][ T3308] dump_stack+0x15/0x1a [ 151.579690][ T3308] dump_header+0x83/0x2d0 [ 151.579744][ T3308] oom_kill_process+0x341/0x4c0 [ 151.579778][ T3308] out_of_memory+0x9af/0xbe0 [ 151.579817][ T3308] ? css_next_descendant_pre+0x11c/0x140 [ 151.579844][ T3308] mem_cgroup_out_of_memory+0x13e/0x190 [ 151.579905][ T3308] try_charge_memcg+0x508/0x7f0 [ 151.580011][ T3308] charge_memcg+0x50/0xc0 [ 151.580039][ T3308] __mem_cgroup_charge+0x29/0xb0 [ 151.580068][ T3308] filemap_add_folio+0x53/0x1b0 [ 151.580166][ T3308] __filemap_get_folio+0x32f/0x630 [ 151.580198][ T3308] filemap_fault+0x46d/0xb30 [ 151.580236][ T3308] ? __list_del_entry_valid_or_report+0x66/0x130 [ 151.580331][ T3308] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 151.580378][ T3308] __do_fault+0xb6/0x200 [ 151.580399][ T3308] handle_mm_fault+0xe98/0x2ac0 [ 151.580490][ T3308] exc_page_fault+0x3b9/0x650 [ 151.580518][ T3308] asm_exc_page_fault+0x26/0x30 [ 151.580542][ T3308] RIP: 0033:0x7fbf62564184 [ 151.580559][ T3308] Code: 85 d3 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 18 16 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 29 15 e7 00 48 01 d1 [ 151.580580][ T3308] RSP: 002b:00007ffc54f0b620 EFLAGS: 00010206 [ 151.580597][ T3308] RAX: 0000001b31820000 RBX: 000000000000029c RCX: 0000000000024dd8 [ 151.580611][ T3308] RDX: 00000000084c5c3c RSI: 00007ffc54f0b6b0 RDI: 0000000000000001 [ 151.580665][ T3308] RBP: 00007ffc54f0b65c R08: 000000001fa7ca9b R09: 7fffffffffffffff [ 151.580708][ T3308] R10: 00007fbf624fa038 R11: 0000000000000010 R12: 0000000000001388 [ 151.580719][ T3308] R13: 00000000000927c0 R14: 0000000000024f4f R15: 00007ffc54f0b6b0 [ 151.580736][ T3308] [ 151.580747][ T3308] memory: usage 307200kB, limit 307200kB, failcnt 3664 [ 151.781711][ T3308] memory+swap: usage 210336kB, limit 9007199254740988kB, failcnt 0 [ 151.789652][ T3308] kmem: usage 194976kB, limit 9007199254740988kB, failcnt 0 [ 151.796986][ T3308] Memory cgroup stats for /syz1: [ 151.797275][ T3308] cache 10833920 [ 151.805846][ T3308] rss 94208 [ 151.808960][ T3308] shmem 10809344 [ 151.812575][ T3308] mapped_file 10600448 [ 151.816687][ T3308] dirty 0 [ 151.819627][ T3308] writeback 0 [ 151.822911][ T3308] workingset_refault_anon 1216 [ 151.827787][ T3308] workingset_refault_file 2704 [ 151.832692][ T3308] swap 212992 [ 151.836209][ T3308] swapcached 143360 [ 151.840071][ T3308] pgpgin 136112 [ 151.843610][ T3308] pgpgout 133409 [ 151.847189][ T3308] pgfault 132666 [ 151.850777][ T3308] pgmajfault 622 [ 151.854349][ T3308] inactive_anon 2072576 [ 151.858510][ T3308] active_anon 8945664 [ 151.862510][ T3308] inactive_file 12288 [ 151.866514][ T3308] active_file 12288 [ 151.870382][ T3308] unevictable 0 [ 151.873845][ T3308] hierarchical_memory_limit 314572800 [ 151.879232][ T3308] hierarchical_memsw_limit 9223372036854771712 [ 151.885395][ T3308] total_cache 10833920 [ 151.889461][ T3308] total_rss 94208 [ 151.893125][ T3308] total_shmem 10809344 [ 151.897277][ T3308] total_mapped_file 10600448 [ 151.901880][ T3308] total_dirty 0 [ 151.905370][ T3308] total_writeback 0 [ 151.909181][ T3308] total_workingset_refault_anon 1216 [ 151.914687][ T3308] total_workingset_refault_file 2704 [ 151.920177][ T3308] total_swap 212992 [ 151.922684][ T8341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8341 comm=syz.4.1183 [ 151.923987][ T3308] total_swapcached 143360 [ 151.923999][ T3308] total_pgpgin 136112 [ 151.924008][ T3308] total_pgpgout 133409 [ 151.948910][ T3308] total_pgfault 132666 [ 151.952987][ T3308] total_pgmajfault 622 [ 151.957161][ T3308] total_inactive_anon 2072576 [ 151.961837][ T3308] total_active_anon 8945664 [ 151.966459][ T3308] total_inactive_file 12288 [ 151.970966][ T3308] total_active_file 12288 [ 151.975345][ T3308] total_unevictable 0 [ 151.979333][ T3308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1179,pid=8330,uid=0 [ 151.994016][ T3308] Memory cgroup out of memory: Killed process 8330 (syz.1.1179) total-vm:98080kB, anon-rss:896kB, file-rss:26364kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 152.021687][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 152.071113][ T8346] siw: device registration error -23 [ 152.090723][ T8346] loop3: detected capacity change from 0 to 128 [ 152.100436][ T8354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8354 comm=syz.1.1186 [ 152.116053][ T8353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8353 comm=syz.4.1187 [ 152.129698][ T8346] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.159536][ T8350] lo speed is unknown, defaulting to 1000 [ 152.174264][ T8358] delete_channel: no stack [ 152.178736][ T8358] delete_channel: no stack [ 152.192463][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 152.204864][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 152.226139][ T8365] loop4: detected capacity change from 0 to 512 [ 152.233054][ T8365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.236472][ T8350] lo speed is unknown, defaulting to 1000 [ 152.266017][ T8365] EXT4-fs (loop4): 1 truncate cleaned up [ 152.289928][ T8350] lo speed is unknown, defaulting to 1000 [ 152.332512][ T8373] futex_wake_op: syz.3.1191 tries to shift op by -1; fix this program [ 152.421471][ T8374] netlink: 'syz.1.1190': attribute type 8 has an invalid length. [ 152.642063][ T4920] kworker/u8:8 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 152.655693][ T4920] CPU: 0 UID: 0 PID: 4920 Comm: kworker/u8:8 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 152.655720][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.655734][ T4920] Workqueue: loop4 loop_rootcg_workfn [ 152.655836][ T4920] Call Trace: [ 152.655842][ T4920] [ 152.655849][ T4920] dump_stack_lvl+0xf2/0x150 [ 152.655896][ T4920] dump_stack+0x15/0x1a [ 152.655917][ T4920] dump_header+0x83/0x2d0 [ 152.655958][ T4920] oom_kill_process+0x341/0x4c0 [ 152.656041][ T4920] out_of_memory+0x9af/0xbe0 [ 152.656105][ T4920] ? css_next_descendant_pre+0x11c/0x140 [ 152.656129][ T4920] mem_cgroup_out_of_memory+0x13e/0x190 [ 152.656163][ T4920] try_charge_memcg+0x508/0x7f0 [ 152.656248][ T4920] charge_memcg+0x50/0xc0 [ 152.656332][ T4920] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 152.656366][ T4920] __read_swap_cache_async+0x236/0x480 [ 152.656396][ T4920] swap_cluster_readahead+0x279/0x3f0 [ 152.656433][ T4920] shmem_swapin_folio+0xbfb/0x1000 [ 152.656502][ T4920] shmem_get_folio_gfp+0x26e/0xd90 [ 152.656555][ T4920] shmem_write_begin+0xa2/0x180 [ 152.656582][ T4920] generic_perform_write+0x1a8/0x4a0 [ 152.656615][ T4920] shmem_file_write_iter+0xc2/0xe0 [ 152.656640][ T4920] do_iter_readv_writev+0x403/0x4b0 [ 152.656709][ T4920] vfs_iter_write+0x265/0x5c0 [ 152.656744][ T4920] loop_process_work+0xae1/0x1230 [ 152.656780][ T4920] ? __rcu_read_unlock+0x4e/0x70 [ 152.656806][ T4920] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 152.656847][ T4920] ? __rcu_read_unlock+0x4e/0x70 [ 152.656868][ T4920] ? xfd_validate_state+0x46/0xf0 [ 152.656907][ T4920] loop_rootcg_workfn+0x22/0x30 [ 152.656977][ T4920] process_scheduled_works+0x4db/0xa20 [ 152.657074][ T4920] worker_thread+0x51d/0x6f0 [ 152.657117][ T4920] kthread+0x4ae/0x520 [ 152.657145][ T4920] ? finish_task_switch+0xb5/0x2b0 [ 152.657172][ T4920] ? __pfx_worker_thread+0x10/0x10 [ 152.657235][ T4920] ? __pfx_kthread+0x10/0x10 [ 152.657352][ T4920] ret_from_fork+0x4b/0x60 [ 152.657373][ T4920] ? __pfx_kthread+0x10/0x10 [ 152.657397][ T4920] ret_from_fork_asm+0x1a/0x30 [ 152.657427][ T4920] [ 152.657433][ T4920] memory: usage 307200kB, limit 307200kB, failcnt 5721 [ 152.776784][ T8384] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 152.778416][ T4920] memory+swap: usage 319420kB, limit 9007199254740988kB, failcnt 0 [ 152.890154][ T4920] kmem: usage 220612kB, limit 9007199254740988kB, failcnt 0 [ 152.890229][ T4920] Memory cgroup stats for /syz4: [ 152.898104][ T4920] cache 6545408 [ 152.907357][ T4920] rss 196608 [ 152.910573][ T4920] shmem 6459392 [ 152.914037][ T4920] mapped_file 6303744 [ 152.918043][ T4920] dirty 0 [ 152.920998][ T4920] writeback 77824 [ 152.924708][ T4920] workingset_refault_anon 608 [ 152.929434][ T4920] workingset_refault_file 12067 [ 152.935072][ T4920] swap 69566464 [ 152.938594][ T4920] swapcached 24576 [ 152.942319][ T4920] pgpgin 186977 [ 152.945862][ T4920] pgpgout 185323 [ 152.949461][ T4920] pgfault 116573 [ 152.953006][ T4920] pgmajfault 307 [ 152.956643][ T4920] inactive_anon 761856 [ 152.960715][ T4920] active_anon 5918720 [ 152.965512][ T4920] inactive_file 86016 [ 152.969571][ T4920] active_file 8192 [ 152.973325][ T4920] unevictable 0 [ 152.976817][ T4920] hierarchical_memory_limit 314572800 [ 152.982185][ T4920] hierarchical_memsw_limit 9223372036854771712 [ 152.988381][ T4920] total_cache 6545408 [ 152.992355][ T4920] total_rss 196608 [ 152.996834][ T4920] total_shmem 6459392 [ 153.000822][ T4920] total_mapped_file 6303744 [ 153.005426][ T4920] total_dirty 0 [ 153.008888][ T4920] total_writeback 77824 [ 153.013042][ T4920] total_workingset_refault_anon 608 [ 153.018291][ T4920] total_workingset_refault_file 12067 [ 153.023671][ T4920] total_swap 69566464 [ 153.028382][ T4920] total_swapcached 24576 [ 153.032707][ T4920] total_pgpgin 186977 [ 153.036717][ T4920] total_pgpgout 185323 [ 153.040816][ T4920] total_pgfault 116573 [ 153.044906][ T4920] total_pgmajfault 307 [ 153.048978][ T4920] total_inactive_anon 761856 [ 153.053685][ T4920] total_active_anon 5918720 [ 153.058889][ T4920] total_inactive_file 86016 [ 153.063450][ T4920] total_active_file 8192 [ 153.067720][ T4920] total_unevictable 0 [ 153.071740][ T4920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1189,pid=8364,uid=0 [ 153.087069][ T4920] Memory cgroup out of memory: Killed process 8364 (syz.4.1189) total-vm:93712kB, anon-rss:1044kB, file-rss:22316kB, shmem-rss:6144kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 153.222256][ T8370] lo speed is unknown, defaulting to 1000 [ 153.436322][ T8401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8401 comm=syz.0.1200 [ 153.523780][ T8409] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 153.549395][ T8370] lo speed is unknown, defaulting to 1000 [ 153.555423][ T8410] loop4: detected capacity change from 0 to 128 [ 153.576683][ T8410] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.820947][ T8370] lo speed is unknown, defaulting to 1000 [ 153.828528][ T8404] siw: device registration error -23 [ 154.219339][ T8424] loop4: detected capacity change from 0 to 1024 [ 154.681348][ T8440] loop3: detected capacity change from 0 to 512 [ 154.689458][ T8440] msdos: Unknown parameter 'errerrors' [ 154.801792][ T8442] syz.0.1209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 154.812219][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.0.1209 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 154.812254][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.812270][ T8442] Call Trace: [ 154.812278][ T8442] [ 154.812288][ T8442] dump_stack_lvl+0xf2/0x150 [ 154.812323][ T8442] dump_stack+0x15/0x1a [ 154.812350][ T8442] dump_header+0x83/0x2d0 [ 154.812469][ T8442] oom_kill_process+0x341/0x4c0 [ 154.812510][ T8442] out_of_memory+0x9af/0xbe0 [ 154.812549][ T8442] ? css_next_descendant_pre+0x11c/0x140 [ 154.812573][ T8442] mem_cgroup_out_of_memory+0x13e/0x190 [ 154.812679][ T8442] try_charge_memcg+0x508/0x7f0 [ 154.812704][ T8442] charge_memcg+0x50/0xc0 [ 154.812798][ T8442] __mem_cgroup_charge+0x29/0xb0 [ 154.812822][ T8442] shmem_get_folio_gfp+0x47e/0xd90 [ 154.812863][ T8442] shmem_fault+0xfa/0x250 [ 154.812922][ T8442] __do_fault+0xb6/0x200 [ 154.812942][ T8442] handle_mm_fault+0xe98/0x2ac0 [ 154.812975][ T8442] ? save_fpregs_to_fpstate+0x102/0x160 [ 154.813043][ T8442] ? __rcu_read_lock+0x36/0x50 [ 154.813082][ T8442] ? __pte_offset_map_lock+0x1ce/0x280 [ 154.813151][ T8442] __get_user_pages+0xf6a/0x2350 [ 154.813185][ T8442] __mm_populate+0x25b/0x3b0 [ 154.813210][ T8442] vm_mmap_pgoff+0x224/0x2d0 [ 154.813243][ T8442] ksys_mmap_pgoff+0xd0/0x330 [ 154.813272][ T8442] ? __rcu_read_unlock+0x4e/0x70 [ 154.813327][ T8442] x64_sys_call+0x1940/0x2dc0 [ 154.813353][ T8442] do_syscall_64+0xc9/0x1c0 [ 154.813396][ T8442] ? clear_bhb_loop+0x55/0xb0 [ 154.813423][ T8442] ? clear_bhb_loop+0x55/0xb0 [ 154.813450][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.813504][ T8442] RIP: 0033:0x7ff1a3e2cde9 [ 154.813520][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.813538][ T8442] RSP: 002b:00007ff1a2476038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 154.813557][ T8442] RAX: ffffffffffffffda RBX: 00007ff1a4046080 RCX: 00007ff1a3e2cde9 [ 154.813569][ T8442] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 154.813582][ T8442] RBP: 00007ff1a3eae2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 154.813594][ T8442] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 154.813606][ T8442] R13: 0000000000000001 R14: 00007ff1a4046080 R15: 00007ffc1289a0f8 [ 154.813651][ T8442] [ 154.813661][ T8442] memory: usage 307196kB, limit 307200kB, failcnt 2754 [ 155.059664][ T8442] memory+swap: usage 124532kB, limit 9007199254740988kB, failcnt 0 [ 155.067673][ T8442] kmem: usage 119164kB, limit 9007199254740988kB, failcnt 0 [ 155.075039][ T8442] Memory cgroup stats for /syz0: [ 155.075712][ T8442] cache 4849664 [ 155.084872][ T8442] rss 368640 [ 155.088122][ T8442] shmem 4845568 [ 155.091620][ T8442] mapped_file 4501504 [ 155.095684][ T8442] dirty 0 [ 155.098716][ T8442] writeback 0 [ 155.102062][ T8442] workingset_refault_anon 721 [ 155.106775][ T8442] workingset_refault_file 2078 [ 155.111543][ T8442] swap 176128 [ 155.115528][ T8442] swapcached 12288 [ 155.119260][ T8442] pgpgin 197236 [ 155.122714][ T8442] pgpgout 195959 [ 155.126269][ T8442] pgfault 208669 [ 155.129896][ T8442] pgmajfault 426 [ 155.133524][ T8442] inactive_anon 4075520 [ 155.137802][ T8442] active_anon 1150976 [ 155.141786][ T8442] inactive_file 4096 [ 155.146380][ T8442] active_file 0 [ 155.149867][ T8442] unevictable 0 [ 155.153332][ T8442] hierarchical_memory_limit 314572800 [ 155.158721][ T8442] hierarchical_memsw_limit 9223372036854771712 [ 155.164959][ T8442] total_cache 4849664 [ 155.168952][ T8442] total_rss 368640 [ 155.172676][ T8442] total_shmem 4845568 [ 155.177447][ T8442] total_mapped_file 4501504 [ 155.181990][ T8442] total_dirty 0 [ 155.185476][ T8442] total_writeback 0 [ 155.189300][ T8442] total_workingset_refault_anon 721 [ 155.194539][ T8442] total_workingset_refault_file 2078 [ 155.199822][ T8442] total_swap 176128 [ 155.203630][ T8442] total_swapcached 12288 [ 155.208603][ T8442] total_pgpgin 197236 [ 155.212585][ T8442] total_pgpgout 195959 [ 155.216764][ T8442] total_pgfault 208669 [ 155.220831][ T8442] total_pgmajfault 426 [ 155.224918][ T8442] total_inactive_anon 4075520 [ 155.229589][ T8442] total_active_anon 1150976 [ 155.234096][ T8442] total_inactive_file 4096 [ 155.239239][ T8442] total_active_file 0 [ 155.243222][ T8442] total_unevictable 0 [ 155.247391][ T8442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1209,pid=8436,uid=0 [ 155.262105][ T8442] Memory cgroup out of memory: Killed process 8436 (syz.0.1209) total-vm:93712kB, anon-rss:1096kB, file-rss:22188kB, shmem-rss:4352kB, UID:0 pgtables:132kB oom_score_adj:0 [ 155.293630][ T8446] loop4: detected capacity change from 0 to 512 [ 155.301035][ T8446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.312243][ T8446] EXT4-fs (loop4): 1 truncate cleaned up [ 155.337677][ T8449] netlink: 'syz.0.1212': attribute type 1 has an invalid length. [ 155.345556][ T8449] __nla_validate_parse: 8 callbacks suppressed [ 155.345568][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1212'. [ 155.436939][ T8453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8453 comm=syz.1.1213 [ 155.453377][ T8450] syz.4.1211 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 155.464016][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.4.1211 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 155.464059][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 155.464071][ T8450] Call Trace: [ 155.464077][ T8450] [ 155.464084][ T8450] dump_stack_lvl+0xf2/0x150 [ 155.464113][ T8450] dump_stack+0x15/0x1a [ 155.464141][ T8450] dump_header+0x83/0x2d0 [ 155.464200][ T8450] oom_kill_process+0x341/0x4c0 [ 155.464262][ T8450] out_of_memory+0x9af/0xbe0 [ 155.464301][ T8450] ? css_next_descendant_pre+0x11c/0x140 [ 155.464332][ T8450] mem_cgroup_out_of_memory+0x13e/0x190 [ 155.464369][ T8450] try_charge_memcg+0x508/0x7f0 [ 155.464452][ T8450] charge_memcg+0x50/0xc0 [ 155.464492][ T8450] __mem_cgroup_charge+0x29/0xb0 [ 155.464518][ T8450] shmem_get_folio_gfp+0x47e/0xd90 [ 155.464568][ T8450] shmem_fault+0xfa/0x250 [ 155.464637][ T8450] __do_fault+0xb6/0x200 [ 155.464657][ T8450] handle_mm_fault+0xe98/0x2ac0 [ 155.464690][ T8450] ? save_fpregs_to_fpstate+0x102/0x160 [ 155.464865][ T8450] ? __rcu_read_lock+0x36/0x50 [ 155.464914][ T8450] ? __pte_offset_map_lock+0x1ce/0x280 [ 155.464956][ T8450] __get_user_pages+0xf6a/0x2350 [ 155.464989][ T8450] __mm_populate+0x25b/0x3b0 [ 155.465080][ T8450] vm_mmap_pgoff+0x224/0x2d0 [ 155.465168][ T8450] ksys_mmap_pgoff+0xd0/0x330 [ 155.465206][ T8450] ? __rcu_read_unlock+0x4e/0x70 [ 155.465235][ T8450] x64_sys_call+0x1940/0x2dc0 [ 155.465278][ T8450] do_syscall_64+0xc9/0x1c0 [ 155.465342][ T8450] ? clear_bhb_loop+0x55/0xb0 [ 155.465368][ T8450] ? clear_bhb_loop+0x55/0xb0 [ 155.465394][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.465433][ T8450] RIP: 0033:0x7f9bf38dcde9 [ 155.465452][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.465474][ T8450] RSP: 002b:00007f9bf1f26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 155.465573][ T8450] RAX: ffffffffffffffda RBX: 00007f9bf3af6080 RCX: 00007f9bf38dcde9 [ 155.465588][ T8450] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 155.465601][ T8450] RBP: 00007f9bf395e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 155.465635][ T8450] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 155.465650][ T8450] R13: 0000000000000001 R14: 00007f9bf3af6080 R15: 00007fff65c91618 [ 155.465674][ T8450] [ 155.698573][ T8450] memory: usage 307200kB, limit 307200kB, failcnt 5899 [ 155.705527][ T8450] memory+swap: usage 363356kB, limit 9007199254740988kB, failcnt 0 [ 155.713424][ T8450] kmem: usage 277084kB, limit 9007199254740988kB, failcnt 0 [ 155.720732][ T8450] Memory cgroup stats for /syz4: [ 155.728178][ T8450] cache 4489216 [ 155.736677][ T8450] rss 196608 [ 155.739895][ T8450] shmem 4452352 [ 155.743355][ T8450] mapped_file 4194304 [ 155.747363][ T8450] dirty 0 [ 155.750297][ T8450] writeback 0 [ 155.753583][ T8450] workingset_refault_anon 623 [ 155.758938][ T8450] workingset_refault_file 12119 [ 155.763787][ T8450] swap 69484544 [ 155.764735][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 155.767261][ T8450] swapcached 0 [ 155.779521][ T8450] pgpgin 191324 [ 155.782980][ T8450] pgpgout 190178 [ 155.787138][ T8450] pgfault 121036 [ 155.790683][ T8450] pgmajfault 310 [ 155.794327][ T8450] inactive_anon 811008 [ 155.798399][ T8450] active_anon 3837952 [ 155.802380][ T8450] inactive_file 40960 [ 155.806400][ T8450] active_file 0 [ 155.809857][ T8450] unevictable 0 [ 155.813360][ T8450] hierarchical_memory_limit 314572800 [ 155.819439][ T8450] hierarchical_memsw_limit 9223372036854771712 [ 155.825725][ T8450] total_cache 4489216 [ 155.829770][ T8450] total_rss 196608 [ 155.833567][ T8450] total_shmem 4452352 [ 155.837582][ T8450] total_mapped_file 4194304 [ 155.842092][ T8450] total_dirty 0 [ 155.846371][ T8450] total_writeback 0 [ 155.850299][ T8450] total_workingset_refault_anon 623 [ 155.855521][ T8450] total_workingset_refault_file 12119 [ 155.860940][ T8450] total_swap 69484544 [ 155.864947][ T8450] total_swapcached 0 [ 155.868868][ T8450] total_pgpgin 191324 [ 155.872852][ T8450] total_pgpgout 190178 [ 155.877651][ T8450] total_pgfault 121036 [ 155.881716][ T8450] total_pgmajfault 310 [ 155.885815][ T8450] total_inactive_anon 811008 [ 155.890411][ T8450] total_active_anon 3837952 [ 155.894922][ T8450] total_inactive_file 40960 [ 155.899416][ T8450] total_active_file 0 [ 155.903410][ T8450] total_unevictable 0 [ 155.908062][ T8450] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1211,pid=8445,uid=0 [ 155.922734][ T8450] Memory cgroup out of memory: Killed process 8445 (syz.4.1211) total-vm:93712kB, anon-rss:1044kB, file-rss:22316kB, shmem-rss:3968kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 155.985188][ T8458] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1214'. [ 155.994483][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 156.015835][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 156.015852][ T29] audit: type=1326 audit(1739874891.864:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.051362][ T29] audit: type=1326 audit(1739874891.894:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.051401][ T29] audit: type=1326 audit(1739874891.894:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.051461][ T29] audit: type=1326 audit(1739874891.894:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.051494][ T29] audit: type=1326 audit(1739874891.894:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.051525][ T29] audit: type=1326 audit(1739874891.894:16289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.123260][ T8467] loop1: detected capacity change from 0 to 512 [ 156.123868][ T8467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.147628][ T29] audit: type=1326 audit(1739874891.894:16290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.200956][ T8467] EXT4-fs (loop1): 1 truncate cleaned up [ 156.211404][ T29] audit: type=1326 audit(1739874891.894:16291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.240409][ T29] audit: type=1326 audit(1739874891.894:16292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.240483][ T29] audit: type=1326 audit(1739874891.894:16293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425750cde9 code=0x7ffc0000 [ 156.266301][ T8468] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 156.266420][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'. [ 156.456849][ T3308] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 156.467837][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 156.467865][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.467880][ T3308] Call Trace: [ 156.467888][ T3308] [ 156.467896][ T3308] dump_stack_lvl+0xf2/0x150 [ 156.467923][ T3308] dump_stack+0x15/0x1a [ 156.467970][ T3308] dump_header+0x83/0x2d0 [ 156.468011][ T3308] oom_kill_process+0x341/0x4c0 [ 156.468099][ T3308] out_of_memory+0x9af/0xbe0 [ 156.468143][ T3308] ? css_next_descendant_pre+0x11c/0x140 [ 156.468166][ T3308] mem_cgroup_out_of_memory+0x13e/0x190 [ 156.468197][ T3308] try_charge_memcg+0x508/0x7f0 [ 156.468222][ T3308] charge_memcg+0x50/0xc0 [ 156.468255][ T3308] __mem_cgroup_charge+0x29/0xb0 [ 156.468282][ T3308] filemap_add_folio+0x53/0x1b0 [ 156.468322][ T3308] __filemap_get_folio+0x32f/0x630 [ 156.468347][ T3308] filemap_fault+0x46d/0xb30 [ 156.468416][ T3308] ? __list_del_entry_valid_or_report+0x66/0x130 [ 156.468459][ T3308] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 156.468544][ T3308] __do_fault+0xb6/0x200 [ 156.468612][ T3308] handle_mm_fault+0xe98/0x2ac0 [ 156.468656][ T3308] exc_page_fault+0x3b9/0x650 [ 156.468682][ T3308] asm_exc_page_fault+0x26/0x30 [ 156.468756][ T3308] RIP: 0033:0x7fbf62564184 [ 156.468773][ T3308] Code: 85 d3 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 18 16 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 29 15 e7 00 48 01 d1 [ 156.468789][ T3308] RSP: 002b:00007ffc54f0b620 EFLAGS: 00010206 [ 156.468836][ T3308] RAX: 0000001b31820000 RBX: 00000000000002af RCX: 0000000000026160 [ 156.468847][ T3308] RDX: 0000000006bdec0f RSI: 00007ffc54f0b6b0 RDI: 0000000000000001 [ 156.468858][ T3308] RBP: 00007ffc54f0b65c R08: 0000000019b7ded0 R09: 7fffffffffffffff [ 156.468870][ T3308] R10: 00007fbf624fa038 R11: 0000000000000010 R12: 0000000000001388 [ 156.468886][ T3308] R13: 00000000000927c0 R14: 0000000000026242 R15: 00007ffc54f0b6b0 [ 156.468934][ T3308] [ 156.468940][ T3308] memory: usage 307200kB, limit 307200kB, failcnt 3773 [ 156.670058][ T3308] memory+swap: usage 182148kB, limit 9007199254740988kB, failcnt 0 [ 156.677976][ T3308] kmem: usage 170012kB, limit 9007199254740988kB, failcnt 0 [ 156.685309][ T3308] Memory cgroup stats for /syz1: [ 156.695301][ T3308] cache 12177408 [ 156.703886][ T3308] rss 204800 [ 156.707198][ T3308] shmem 12017664 [ 156.710818][ T3308] mapped_file 11759616 [ 156.714961][ T3308] dirty 4096 [ 156.718171][ T3308] writeback 0 [ 156.721447][ T3308] workingset_refault_anon 1216 [ 156.726229][ T3308] workingset_refault_file 2835 [ 156.731068][ T3308] swap 200704 [ 156.734374][ T3308] swapcached 0 [ 156.737755][ T3308] pgpgin 139751 [ 156.741211][ T3308] pgpgout 136728 [ 156.744818][ T3308] pgfault 136527 [ 156.748374][ T3308] pgmajfault 628 [ 156.752000][ T3308] inactive_anon 1064960 [ 156.756179][ T3308] active_anon 11157504 [ 156.760306][ T3308] inactive_file 28672 [ 156.764376][ T3308] active_file 131072 [ 156.768303][ T3308] unevictable 0 [ 156.771776][ T3308] hierarchical_memory_limit 314572800 [ 156.777182][ T3308] hierarchical_memsw_limit 9223372036854771712 [ 156.783344][ T3308] total_cache 12177408 [ 156.787435][ T3308] total_rss 204800 [ 156.791241][ T3308] total_shmem 12017664 [ 156.795338][ T3308] total_mapped_file 11759616 [ 156.799931][ T3308] total_dirty 4096 [ 156.803700][ T3308] total_writeback 0 [ 156.807520][ T3308] total_workingset_refault_anon 1216 [ 156.812804][ T3308] total_workingset_refault_file 2835 [ 156.818183][ T3308] total_swap 200704 [ 156.821997][ T3308] total_swapcached 0 [ 156.825918][ T3308] total_pgpgin 139751 [ 156.829937][ T3308] total_pgpgout 136728 [ 156.834014][ T3308] total_pgfault 136527 [ 156.838153][ T3308] total_pgmajfault 628 [ 156.842231][ T3308] total_inactive_anon 1064960 [ 156.846939][ T3308] total_active_anon 11157504 [ 156.851567][ T3308] total_inactive_file 28672 [ 156.856101][ T3308] total_active_file 131072 [ 156.860527][ T3308] total_unevictable 0 [ 156.864549][ T3308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1215,pid=8460,uid=0 [ 156.879228][ T3308] Memory cgroup out of memory: Killed process 8460 (syz.1.1215) total-vm:93844kB, anon-rss:1044kB, file-rss:22200kB, shmem-rss:11392kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 156.917054][ T8492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8492 comm=syz.3.1225 [ 156.955047][ T8495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8495 comm=syz.4.1226 [ 156.976969][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 157.035210][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 157.052677][ T8500] siw: device registration error -23 [ 157.095932][ T8504] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 157.121124][ T8504] option changes via remount are deprecated (pid=8503 comm=syz.3.1229) [ 157.144291][ T8506] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 157.152181][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1230'. [ 157.177756][ T8509] bridge0: port 3(veth0_to_bond) entered blocking state [ 157.184815][ T8509] bridge0: port 3(veth0_to_bond) entered disabled state [ 157.192274][ T8509] veth0_to_bond: entered allmulticast mode [ 157.199530][ T8509] veth0_to_bond: entered promiscuous mode [ 157.278676][ T8517] siw: device registration error -23 [ 157.285185][ T8517] loop3: detected capacity change from 0 to 128 [ 157.303359][ T8517] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.437476][ T8522] netlink: 'syz.3.1236': attribute type 1 has an invalid length. [ 157.445480][ T8522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1236'. [ 157.516524][ T8526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8526 comm=syz.0.1237 [ 157.543115][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 157.946216][ T8534] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8534 comm=syz.4.1239 [ 157.993825][ T8538] siw: device registration error -23 [ 158.336591][ T8550] bridge0: port 3(veth0_to_bond) entered blocking state [ 158.343731][ T8550] bridge0: port 3(veth0_to_bond) entered disabled state [ 158.351578][ T8550] veth0_to_bond: entered allmulticast mode [ 158.360256][ T8550] veth0_to_bond: entered promiscuous mode [ 158.371043][ T8552] loop3: detected capacity change from 0 to 512 [ 158.377896][ T8552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.408074][ T8555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8555 comm=syz.1.1248 [ 158.408571][ T8552] EXT4-fs (loop3): 1 truncate cleaned up [ 158.442235][ T8552] EXT4-fs mount: 17 callbacks suppressed [ 158.442250][ T8552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.488962][ T8563] netlink: 'syz.1.1250': attribute type 1 has an invalid length. [ 158.513074][ T8566] siw: device registration error -23 [ 158.548172][ T8569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8569 comm=syz.0.1252 [ 158.589484][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 158.601125][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 158.601153][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.601166][ T3297] Call Trace: [ 158.601173][ T3297] [ 158.601181][ T3297] dump_stack_lvl+0xf2/0x150 [ 158.601274][ T3297] dump_stack+0x15/0x1a [ 158.601297][ T3297] dump_header+0x83/0x2d0 [ 158.601329][ T3297] oom_kill_process+0x341/0x4c0 [ 158.601377][ T3297] out_of_memory+0x9af/0xbe0 [ 158.601415][ T3297] mem_cgroup_out_of_memory+0x13e/0x190 [ 158.601511][ T3297] try_charge_memcg+0x508/0x7f0 [ 158.601613][ T3297] charge_memcg+0x50/0xc0 [ 158.601638][ T3297] __mem_cgroup_charge+0x29/0xb0 [ 158.601661][ T3297] filemap_add_folio+0x53/0x1b0 [ 158.601734][ T3297] __filemap_get_folio+0x32f/0x630 [ 158.601757][ T3297] filemap_fault+0x46d/0xb30 [ 158.601779][ T3297] ? __list_del_entry_valid_or_report+0x66/0x130 [ 158.601872][ T3297] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 158.601909][ T3297] __do_fault+0xb6/0x200 [ 158.601930][ T3297] handle_mm_fault+0xe98/0x2ac0 [ 158.601978][ T3297] exc_page_fault+0x3b9/0x650 [ 158.602040][ T3297] asm_exc_page_fault+0x26/0x30 [ 158.602066][ T3297] RIP: 0033:0x7f42573e4184 [ 158.602114][ T3297] Code: 85 d3 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 18 16 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 29 15 e7 00 48 01 d1 [ 158.602133][ T3297] RSP: 002b:00007ffe86edb090 EFLAGS: 00010206 [ 158.602148][ T3297] RAX: 0000001b31a20000 RBX: 0000000000000293 RCX: 0000000000026930 [ 158.602161][ T3297] RDX: 0000000008d11ad1 RSI: 00007ffe86edb120 RDI: 0000000000000001 [ 158.602219][ T3297] RBP: 00007ffe86edb0cc R08: 0000000021a22bde R09: 7fffffffffffffff [ 158.602308][ T3297] R10: 00007f4258260038 R11: 0000000000000010 R12: 0000000000001388 [ 158.602320][ T3297] R13: 00000000000927c0 R14: 0000000000026af9 R15: 00007ffe86edb120 [ 158.602340][ T3297] [ 158.602347][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 1573 [ 158.801808][ T3297] memory+swap: usage 115984kB, limit 9007199254740988kB, failcnt 0 [ 158.810394][ T3297] kmem: usage 101576kB, limit 9007199254740988kB, failcnt 0 [ 158.817696][ T3297] Memory cgroup stats for /syz3: [ 158.818199][ T3297] cache 2945024 [ 158.826653][ T3297] rss 204800 [ 158.829875][ T3297] shmem 2916352 [ 158.833333][ T3297] mapped_file 2654208 [ 158.837981][ T3297] dirty 0 [ 158.840917][ T3297] writeback 0 [ 158.844264][ T3297] workingset_refault_anon 492 [ 158.848937][ T3297] workingset_refault_file 1382 [ 158.853756][ T3297] swap 180224 [ 158.857091][ T3297] swapcached 0 [ 158.860453][ T3297] pgpgin 129214 [ 158.863906][ T3297] pgpgout 128445 [ 158.868109][ T3297] pgfault 118007 [ 158.871701][ T3297] pgmajfault 299 [ 158.875296][ T3297] inactive_anon 335872 [ 158.879395][ T3297] active_anon 2785280 [ 158.883480][ T3297] inactive_file 4096 [ 158.887395][ T3297] active_file 24576 [ 158.891232][ T3297] unevictable 0 [ 158.895393][ T3297] hierarchical_memory_limit 314572800 [ 158.900761][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 158.906948][ T3297] total_cache 2945024 [ 158.910928][ T3297] total_rss 204800 [ 158.914667][ T3297] total_shmem 2916352 [ 158.918645][ T3297] total_mapped_file 2654208 [ 158.923217][ T3297] total_dirty 0 [ 158.927353][ T3297] total_writeback 0 [ 158.931178][ T3297] total_workingset_refault_anon 492 [ 158.936430][ T3297] total_workingset_refault_file 1382 [ 158.941856][ T3297] total_swap 180224 [ 158.945690][ T3297] total_swapcached 0 [ 158.949592][ T3297] total_pgpgin 129214 [ 158.953584][ T3297] total_pgpgout 128445 [ 158.958348][ T3297] total_pgfault 118007 [ 158.962417][ T3297] total_pgmajfault 299 [ 158.966529][ T3297] total_inactive_anon 335872 [ 158.971118][ T3297] total_active_anon 2785280 [ 158.975644][ T3297] total_inactive_file 4096 [ 158.980123][ T3297] total_active_file 24576 [ 158.985071][ T3297] total_unevictable 0 [ 158.989055][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1246,pid=8551,uid=0 [ 159.003902][ T3297] Memory cgroup out of memory: Killed process 8551 (syz.3.1246) total-vm:93712kB, anon-rss:1044kB, file-rss:22316kB, shmem-rss:2560kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 159.100228][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.156951][ T8584] loop4: detected capacity change from 0 to 1024 [ 159.175940][ T8584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.856683][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.884905][ T8587] loop3: detected capacity change from 0 to 1024 [ 159.910176][ T8604] loop4: detected capacity change from 0 to 128 [ 159.920880][ T8587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.964264][ T8607] loop1: detected capacity change from 0 to 128 [ 160.005594][ T8602] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=8602 comm=syz.0.1262 [ 160.138033][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.148052][ T8609] syz.4.1259: attempt to access beyond end of device [ 160.148052][ T8609] loop4: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 160.163395][ T8604] syz.4.1259: attempt to access beyond end of device [ 160.163395][ T8604] loop4: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 160.176839][ T8604] Buffer I/O error on dev loop4, logical block 241, lost async page write [ 160.195756][ T8612] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8612 comm=syz.1.1263 [ 160.235744][ T41] kworker/u8:3: attempt to access beyond end of device [ 160.235744][ T41] loop4: rw=1, sector=377, nr_sectors = 664 limit=128 [ 160.364070][ T8620] syz.0.1264 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 160.374600][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.0.1264 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 160.374735][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.374771][ T8620] Call Trace: [ 160.374779][ T8620] [ 160.374788][ T8620] dump_stack_lvl+0xf2/0x150 [ 160.374823][ T8620] dump_stack+0x15/0x1a [ 160.374861][ T8620] dump_header+0x83/0x2d0 [ 160.374896][ T8620] oom_kill_process+0x341/0x4c0 [ 160.375001][ T8620] out_of_memory+0x9af/0xbe0 [ 160.375032][ T8620] ? css_next_descendant_pre+0x11c/0x140 [ 160.375130][ T8620] mem_cgroup_out_of_memory+0x13e/0x190 [ 160.375162][ T8620] try_charge_memcg+0x508/0x7f0 [ 160.375207][ T8620] charge_memcg+0x50/0xc0 [ 160.375258][ T8620] __mem_cgroup_charge+0x29/0xb0 [ 160.375286][ T8620] shmem_get_folio_gfp+0x47e/0xd90 [ 160.375337][ T8620] shmem_fault+0xfa/0x250 [ 160.375359][ T8620] __do_fault+0xb6/0x200 [ 160.375424][ T8620] handle_mm_fault+0xe98/0x2ac0 [ 160.375475][ T8620] ? folio_mark_accessed+0x104/0x3d0 [ 160.375500][ T8620] ? __rcu_read_lock+0x36/0x50 [ 160.375528][ T8620] ? __pte_offset_map_lock+0x1ce/0x280 [ 160.375589][ T8620] __get_user_pages+0xf6a/0x2350 [ 160.375672][ T8620] __mm_populate+0x25b/0x3b0 [ 160.375703][ T8620] vm_mmap_pgoff+0x224/0x2d0 [ 160.375743][ T8620] ksys_mmap_pgoff+0xd0/0x330 [ 160.375788][ T8620] ? __rcu_read_unlock+0x4e/0x70 [ 160.375817][ T8620] x64_sys_call+0x1940/0x2dc0 [ 160.375848][ T8620] do_syscall_64+0xc9/0x1c0 [ 160.375877][ T8620] ? clear_bhb_loop+0x55/0xb0 [ 160.375931][ T8620] ? clear_bhb_loop+0x55/0xb0 [ 160.375966][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.375995][ T8620] RIP: 0033:0x7ff1a3e2cde9 [ 160.376010][ T8620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.376106][ T8620] RSP: 002b:00007ff1a2476038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 160.376130][ T8620] RAX: ffffffffffffffda RBX: 00007ff1a4046080 RCX: 00007ff1a3e2cde9 [ 160.376178][ T8620] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 160.376190][ T8620] RBP: 00007ff1a3eae2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 160.376202][ T8620] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 160.376218][ T8620] R13: 0000000000000001 R14: 00007ff1a4046080 R15: 00007ffc1289a0f8 [ 160.376242][ T8620] [ 160.376250][ T8620] memory: usage 307200kB, limit 307200kB, failcnt 2816 [ 160.408889][ T8630] loop4: detected capacity change from 0 to 512 [ 160.412718][ T8620] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 160.417678][ T8630] msdos: Unknown parameter 'errerrors' [ 160.421885][ T8620] kmem: usage 299984kB, limit 9007199254740988kB, failcnt 0 [ 160.563286][ T8633] lo speed is unknown, defaulting to 1000 [ 160.569763][ T8620] Memory cgroup stats for /syz0: [ 160.572456][ T8620] cache 7139328 [ 160.662977][ T8620] rss 368640 [ 160.666199][ T8620] shmem 7008256 [ 160.669746][ T8620] mapped_file 6660096 [ 160.673730][ T8620] dirty 0 [ 160.676787][ T8633] lo speed is unknown, defaulting to 1000 [ 160.683060][ T8620] writeback 0 [ 160.686432][ T8620] workingset_refault_anon 721 [ 160.691112][ T8620] workingset_refault_file 2159 [ 160.696027][ T8620] swap 176128 [ 160.699351][ T8620] swapcached 12288 [ 160.703090][ T8620] pgpgin 203095 [ 160.707263][ T8620] pgpgout 201259 [ 160.710831][ T8620] pgfault 214869 [ 160.714390][ T8620] pgmajfault 429 [ 160.717998][ T8620] inactive_anon 5816320 [ 160.722164][ T8620] active_anon 1572864 [ 160.726176][ T8620] inactive_file 0 [ 160.729812][ T8620] active_file 126976 [ 160.733706][ T8620] unevictable 0 [ 160.737817][ T8620] hierarchical_memory_limit 314572800 [ 160.743192][ T8620] hierarchical_memsw_limit 9223372036854771712 [ 160.749359][ T8620] total_cache 7139328 [ 160.752032][ T8633] lo speed is unknown, defaulting to 1000 [ 160.753420][ T8620] total_rss 368640 [ 160.753436][ T8620] total_shmem 7008256 [ 160.753445][ T8620] total_mapped_file 6660096 [ 160.753453][ T8620] total_dirty 0 [ 160.753460][ T8620] total_writeback 0 [ 160.753467][ T8620] total_workingset_refault_anon 721 [ 160.753475][ T8620] total_workingset_refault_file 2159 [ 160.789846][ T8620] total_swap 176128 [ 160.793713][ T8620] total_swapcached 12288 [ 160.798714][ T8620] total_pgpgin 203095 [ 160.802783][ T8620] total_pgpgout 201259 [ 160.806925][ T8620] total_pgfault 214869 [ 160.810998][ T8620] total_pgmajfault 429 [ 160.815085][ T8620] total_inactive_anon 5816320 [ 160.819758][ T8620] total_active_anon 1572864 [ 160.824944][ T8620] total_inactive_file 0 [ 160.829098][ T8620] total_active_file 126976 [ 160.833512][ T8620] total_unevictable 0 [ 160.837511][ T8620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1264,pid=8613,uid=0 [ 160.852240][ T8620] Memory cgroup out of memory: Killed process 8613 (syz.0.1264) total-vm:93712kB, anon-rss:1096kB, file-rss:22188kB, shmem-rss:6400kB, UID:0 pgtables:136kB oom_score_adj:0 [ 160.987832][ T8646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.015770][ T8643] loop3: detected capacity change from 0 to 512 [ 161.022448][ T8643] EXT4-fs: Ignoring removed oldalloc option [ 161.030788][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 161.030799][ T29] audit: type=1326 audit(1739874896.874:16682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.061570][ T29] audit: type=1326 audit(1739874896.894:16683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.085105][ T29] audit: type=1326 audit(1739874896.894:16684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.088421][ T8643] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1270: Parent and EA inode have the same ino 15 [ 161.108729][ T29] audit: type=1326 audit(1739874896.894:16685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.108760][ T29] audit: type=1326 audit(1739874896.894:16686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.108787][ T29] audit: type=1326 audit(1739874896.894:16687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.108816][ T29] audit: type=1326 audit(1739874896.894:16688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.108904][ T29] audit: type=1326 audit(1739874896.894:16689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.108970][ T29] audit: type=1326 audit(1739874896.894:16690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.109059][ T29] audit: type=1326 audit(1739874896.894:16691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c07cde9 code=0x7ffc0000 [ 161.154930][ T8648] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 161.169401][ T8643] EXT4-fs (loop3): Remounting filesystem read-only [ 161.192666][ T8648] __nla_validate_parse: 6 callbacks suppressed [ 161.192680][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1272'. [ 161.318792][ T8643] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 161.329286][ T8643] EXT4-fs (loop3): 1 orphan inode deleted [ 161.335530][ T8643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.348305][ T8643] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 161.355698][ T8643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.372459][ T8654] loop1: detected capacity change from 0 to 512 [ 161.407110][ T8654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 161.420911][ T8654] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.441912][ T8662] loop4: detected capacity change from 0 to 128 [ 161.557988][ T8665] loop3: detected capacity change from 0 to 128 [ 161.594105][ T8654] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1273: corrupted inode contents [ 161.607596][ T8654] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.1273: mark_inode_dirty error [ 161.620373][ T8654] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1273: corrupted inode contents [ 161.638646][ T8662] syz.4.1276: attempt to access beyond end of device [ 161.638646][ T8662] loop4: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 161.656234][ T8666] syz.4.1276: attempt to access beyond end of device [ 161.656234][ T8666] loop4: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 161.669771][ T8666] Buffer I/O error on dev loop4, logical block 241, lost async page write [ 161.806900][ T8654] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.1273: mark_inode_dirty error [ 161.870441][ T8654] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.1273: mark inode dirty (error -117) [ 161.909297][ T8665] syz.3.1277: attempt to access beyond end of device [ 161.909297][ T8665] loop3: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 161.928628][ T5115] kworker/u8:10: attempt to access beyond end of device [ 161.928628][ T5115] loop4: rw=1, sector=377, nr_sectors = 664 limit=128 [ 161.943483][ T8673] syz.3.1277: attempt to access beyond end of device [ 161.943483][ T8673] loop3: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 161.956900][ T8673] Buffer I/O error on dev loop3, logical block 241, lost async page write [ 161.966178][ T8654] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 162.054568][ T5115] kworker/u8:10: attempt to access beyond end of device [ 162.054568][ T5115] loop3: rw=1, sector=377, nr_sectors = 664 limit=128 [ 162.107313][ T8679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8679 comm=syz.0.1280 [ 162.120989][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 162.157152][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 162.161509][ T8689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8689 comm=syz.3.1283 [ 162.206552][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 162.222557][ T8695] siw: device registration error -23 [ 162.229597][ T8695] loop1: detected capacity change from 0 to 128 [ 162.238606][ T8695] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.247944][ T8694] 9pnet: Could not find request transport: 0xffffffffffffffff [ 162.250876][ T8695] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.261284][ T8694] siw: device registration error -23 [ 162.310624][ T8694] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 162.320436][ T8694] vlan0: entered promiscuous mode [ 162.325649][ T8694] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 162.408078][ T8700] lo speed is unknown, defaulting to 1000 [ 162.414947][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 162.443056][ T8700] lo speed is unknown, defaulting to 1000 [ 162.449794][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.478657][ T8700] lo speed is unknown, defaulting to 1000 [ 162.522075][ T8712] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 162.530697][ T8712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1290'. [ 162.563894][ T8715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'. [ 162.579225][ T8715] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1291'. [ 162.820504][ T8728] loop1: detected capacity change from 0 to 2048 [ 162.866694][ T8728] Alternate GPT is invalid, using primary GPT. [ 162.873196][ T8728] loop1: p2 p3 p7 [ 162.901917][ T8731] loop4: detected capacity change from 0 to 512 [ 162.926406][ T8731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.939397][ T8731] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.980796][ T8737] siw: device registration error -23 [ 163.238356][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.351812][ T8757] loop1: detected capacity change from 0 to 1024 [ 163.436382][ T8757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.510845][ T8764] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 163.519295][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1306'. [ 163.615203][ T8767] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 163.623055][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1308'. [ 163.978440][ T8779] loop3: detected capacity change from 0 to 512 [ 164.013458][ T8779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.025403][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.035064][ T8779] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.042143][ T8779] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1312: bg 0: block 248: padding at end of block bitmap is not set [ 164.064693][ T8779] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1312: Failed to acquire dquot type 1 [ 164.079302][ T8782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8782 comm=syz.1.1313 [ 164.093295][ T8779] EXT4-fs (loop3): 1 truncate cleaned up [ 164.099691][ T8779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.115578][ T8779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.166726][ T8786] loop1: detected capacity change from 0 to 512 [ 164.182062][ T8786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.211257][ T8786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 164.222642][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 164.233584][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 164.233686][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 164.233699][ T3302] Call Trace: [ 164.233706][ T3302] [ 164.233715][ T3302] dump_stack_lvl+0xf2/0x150 [ 164.233749][ T3302] dump_stack+0x15/0x1a [ 164.233777][ T3302] dump_header+0x83/0x2d0 [ 164.233812][ T3302] oom_kill_process+0x341/0x4c0 [ 164.233945][ T3302] out_of_memory+0x9af/0xbe0 [ 164.234022][ T3302] ? css_next_descendant_pre+0x11c/0x140 [ 164.234099][ T3302] mem_cgroup_out_of_memory+0x13e/0x190 [ 164.234174][ T3302] try_charge_memcg+0x508/0x7f0 [ 164.234216][ T3302] charge_memcg+0x50/0xc0 [ 164.234242][ T3302] __mem_cgroup_charge+0x29/0xb0 [ 164.234316][ T3302] filemap_add_folio+0x53/0x1b0 [ 164.234376][ T3302] __filemap_get_folio+0x32f/0x630 [ 164.234474][ T3302] filemap_fault+0x46d/0xb30 [ 164.234493][ T3302] ? __list_del_entry_valid_or_report+0x66/0x130 [ 164.234541][ T3302] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 164.234627][ T3302] __do_fault+0xb6/0x200 [ 164.234652][ T3302] handle_mm_fault+0xe98/0x2ac0 [ 164.234709][ T3302] exc_page_fault+0x3b9/0x650 [ 164.234740][ T3302] asm_exc_page_fault+0x26/0x30 [ 164.234769][ T3302] RIP: 0033:0x7f9a7bf54184 [ 164.234783][ T3302] Code: 85 d3 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 18 16 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 29 15 e7 00 48 01 d1 [ 164.234802][ T3302] RSP: 002b:00007ffc8bdec420 EFLAGS: 00010206 [ 164.234820][ T3302] RAX: 0000001b31920000 RBX: 00000000000002c5 RCX: 00000000000280a0 [ 164.234834][ T3302] RDX: 0000000002efd0b6 RSI: 00007ffc8bdec4b0 RDI: 0000000000000001 [ 164.234847][ T3302] RBP: 00007ffc8bdec45c R08: 000000000b33f29c R09: 7fffffffffffffff [ 164.234949][ T3302] R10: 00007f9a7beea038 R11: 0000000000000010 R12: 0000000000001388 [ 164.234961][ T3302] R13: 00000000000927c0 R14: 0000000000027fc5 R15: 00007ffc8bdec4b0 [ 164.234980][ T3302] [ 164.428644][ T3302] memory: usage 306680kB, limit 307200kB, failcnt 2477 [ 164.435621][ T3302] memory+swap: usage 349956kB, limit 9007199254740988kB, failcnt 0 [ 164.443609][ T3302] kmem: usage 269448kB, limit 9007199254740988kB, failcnt 0 [ 164.450955][ T3302] Memory cgroup stats for /syz2: [ 164.453589][ T8786] System zones: 1-12 [ 164.477261][ T3302] cache 9265152 [ 164.480806][ T3302] rss 557056 [ 164.484009][ T3302] shmem 9265152 [ 164.488200][ T3302] mapped_file 1581056 [ 164.492243][ T3302] dirty 0 [ 164.495269][ T3302] writeback 0 [ 164.498616][ T3302] workingset_refault_anon 1006 [ 164.503398][ T3302] workingset_refault_file 1482 [ 164.508216][ T3302] swap 57626624 [ 164.511687][ T3302] swapcached 65536 [ 164.516161][ T3302] pgpgin 127412 [ 164.519635][ T3302] pgpgout 124997 [ 164.523205][ T3302] pgfault 118477 [ 164.526804][ T3302] pgmajfault 494 [ 164.530354][ T3302] inactive_anon 720896 [ 164.534452][ T3302] active_anon 9166848 [ 164.538440][ T3302] inactive_file 0 [ 164.542150][ T3302] active_file 4096 [ 164.546528][ T3302] unevictable 0 [ 164.549997][ T3302] hierarchical_memory_limit 314572800 [ 164.555449][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 164.561682][ T3302] total_cache 9265152 [ 164.565772][ T3302] total_rss 557056 [ 164.569496][ T3302] total_shmem 9265152 [ 164.573502][ T3302] total_mapped_file 1581056 [ 164.578679][ T3302] total_dirty 0 [ 164.582140][ T3302] total_writeback 0 [ 164.585972][ T3302] total_workingset_refault_anon 1006 [ 164.591310][ T3302] total_workingset_refault_file 1482 [ 164.596619][ T3302] total_swap 57626624 [ 164.600595][ T3302] total_swapcached 65536 [ 164.605576][ T3302] total_pgpgin 127412 [ 164.609556][ T3302] total_pgpgout 124997 [ 164.613690][ T3302] total_pgfault 118477 [ 164.617836][ T3302] total_pgmajfault 494 [ 164.621900][ T3302] total_inactive_anon 720896 [ 164.626559][ T3302] total_active_anon 9166848 [ 164.631187][ T3302] total_inactive_file 0 [ 164.636155][ T3302] total_active_file 4096 [ 164.640405][ T3302] total_unevictable 0 [ 164.644509][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1311,pid=8774,uid=0 [ 164.659159][ T3302] Memory cgroup out of memory: Killed process 8774 (syz.2.1311) total-vm:97300kB, anon-rss:1012kB, file-rss:23848kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 164.678354][ T8798] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 164.687096][ T8786] EXT4-fs (loop1): 1 truncate cleaned up [ 164.693104][ T8786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.749582][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.759569][ T8804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8804 comm=syz.4.1319 [ 164.820319][ T8817] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8817 comm=syz.4.1324 [ 164.865578][ T8823] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 165.026475][ T8829] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 165.436634][ T8832] bridge0: port 3(veth0_to_bond) entered blocking state [ 165.443740][ T8832] bridge0: port 3(veth0_to_bond) entered disabled state [ 165.450960][ T8832] veth0_to_bond: entered allmulticast mode [ 165.457395][ T8832] veth0_to_bond: entered promiscuous mode [ 165.482796][ T8834] rdma_op ffff88813e2f9580 conn xmit_rdma 0000000000000000 [ 165.500606][ T8834] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 165.622788][ T8842] lo speed is unknown, defaulting to 1000 [ 165.638257][ T8838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.657141][ T8842] lo speed is unknown, defaulting to 1000 [ 165.726632][ T8842] lo speed is unknown, defaulting to 1000 [ 165.741296][ T8848] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8848 comm=syz.4.1335 [ 165.765056][ T8850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8850 comm=syz.0.1334 [ 165.830332][ T8858] netlink: 'syz.4.1337': attribute type 1 has an invalid length. [ 166.577361][ T8872] batadv_slave_1: entered promiscuous mode [ 166.980107][ T8881] loop3: detected capacity change from 0 to 2048 [ 167.008744][ T8882] loop4: detected capacity change from 0 to 2048 [ 167.059305][ T8882] EXT4-fs (loop4): bad block size 8192 [ 167.076993][ T8885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8885 comm=syz.1.1347 [ 167.096794][ T8881] Alternate GPT is invalid, using primary GPT. [ 167.103243][ T8881] loop3: p2 p3 p7 [ 167.146163][ T8885] __nla_validate_parse: 19 callbacks suppressed [ 167.146182][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 167.180679][ T8890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8890 comm=syz.1.1348 [ 167.201483][ T3296] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 167.212419][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 167.212447][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 167.212461][ T3296] Call Trace: [ 167.212469][ T3296] [ 167.212477][ T3296] dump_stack_lvl+0xf2/0x150 [ 167.212507][ T3296] dump_stack+0x15/0x1a [ 167.212538][ T3296] dump_header+0x83/0x2d0 [ 167.212574][ T3296] oom_kill_process+0x341/0x4c0 [ 167.212646][ T3296] out_of_memory+0x9af/0xbe0 [ 167.212727][ T3296] ? css_next_descendant_pre+0x11c/0x140 [ 167.212753][ T3296] mem_cgroup_out_of_memory+0x13e/0x190 [ 167.212786][ T3296] try_charge_memcg+0x508/0x7f0 [ 167.212870][ T3296] charge_memcg+0x50/0xc0 [ 167.212894][ T3296] __mem_cgroup_charge+0x29/0xb0 [ 167.212996][ T3296] filemap_add_folio+0x53/0x1b0 [ 167.213031][ T3296] __filemap_get_folio+0x32f/0x630 [ 167.213053][ T3296] filemap_fault+0x46d/0xb30 [ 167.213074][ T3296] ? __list_del_entry_valid_or_report+0x66/0x130 [ 167.213147][ T3296] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 167.213229][ T3296] __do_fault+0xb6/0x200 [ 167.213250][ T3296] handle_mm_fault+0xe98/0x2ac0 [ 167.213395][ T3296] exc_page_fault+0x3b9/0x650 [ 167.213421][ T3296] asm_exc_page_fault+0x26/0x30 [ 167.213448][ T3296] RIP: 0033:0x7ff1a3d04184 [ 167.213464][ T3296] Code: 85 d3 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 18 16 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 29 15 e7 00 48 01 d1 [ 167.213495][ T3296] RSP: 002b:00007ffc1289a480 EFLAGS: 00010202 [ 167.213523][ T3296] RAX: 0000001b31720000 RBX: 0000000000000389 RCX: 0000000000028c58 [ 167.213536][ T3296] RDX: 0000000002cc523c RSI: 00007ffc1289a510 RDI: 0000000000000001 [ 167.213548][ T3296] RBP: 00007ffc1289a4bc R08: 000000000aac8c74 R09: 7fffffffffffffff [ 167.213561][ T3296] R10: 00007ff1a4b83038 R11: 0000000000000010 R12: 0000000000001388 [ 167.213572][ T3296] R13: 00000000000927c0 R14: 0000000000028bf3 R15: 00007ffc1289a510 [ 167.213592][ T3296] [ 167.213598][ T3296] memory: usage 307200kB, limit 307200kB, failcnt 2976 [ 167.415951][ T3296] memory+swap: usage 125056kB, limit 9007199254740988kB, failcnt 0 [ 167.423853][ T3296] kmem: usage 101272kB, limit 9007199254740988kB, failcnt 0 [ 167.431376][ T3296] Memory cgroup stats for /syz0: [ 167.432371][ T3296] cache 10854400 [ 167.440947][ T3296] rss 544768 [ 167.444149][ T3296] shmem 10854400 [ 167.447719][ T3296] mapped_file 10506240 [ 167.451809][ T3296] dirty 0 [ 167.454762][ T3296] writeback 0 [ 167.458053][ T3296] workingset_refault_anon 732 [ 167.462734][ T3296] workingset_refault_file 2231 [ 167.467687][ T3296] swap 176128 [ 167.470972][ T3296] swapcached 12288 [ 167.474741][ T3296] pgpgin 209356 [ 167.478200][ T3296] pgpgout 206570 [ 167.481768][ T3296] pgfault 222509 [ 167.485341][ T3296] pgmajfault 435 [ 167.488915][ T3296] inactive_anon 10645504 [ 167.493157][ T3296] active_anon 765952 [ 167.497090][ T3296] inactive_file 0 [ 167.500748][ T3296] active_file 0 [ 167.504255][ T3296] unevictable 0 [ 167.507716][ T3296] hierarchical_memory_limit 314572800 [ 167.513099][ T3296] hierarchical_memsw_limit 9223372036854771712 [ 167.519346][ T3296] total_cache 10854400 [ 167.523413][ T3296] total_rss 544768 [ 167.527227][ T3296] total_shmem 10854400 [ 167.531339][ T3296] total_mapped_file 10506240 [ 167.536029][ T3296] total_dirty 0 [ 167.539517][ T3296] total_writeback 0 [ 167.543323][ T3296] total_workingset_refault_anon 732 [ 167.548616][ T3296] total_workingset_refault_file 2231 [ 167.553915][ T3296] total_swap 176128 [ 167.557833][ T3296] total_swapcached 12288 [ 167.562314][ T3296] total_pgpgin 209356 [ 167.566344][ T3296] total_pgpgout 206570 [ 167.570534][ T3296] total_pgfault 222509 [ 167.574636][ T3296] total_pgmajfault 435 [ 167.578709][ T3296] total_inactive_anon 10645504 [ 167.583484][ T3296] total_active_anon 765952 [ 167.587930][ T3296] total_inactive_file 0 [ 167.592104][ T3296] total_active_file 0 [ 167.596115][ T3296] total_unevictable 0 [ 167.600160][ T3296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1344,pid=8877,uid=0 [ 167.614800][ T3296] Memory cgroup out of memory: Killed process 8877 (syz.0.1344) total-vm:93712kB, anon-rss:1036kB, file-rss:22188kB, shmem-rss:10112kB, UID:0 pgtables:144kB oom_score_adj:0 [ 167.661197][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 167.685162][ T8903] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 167.692938][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1350'. [ 167.716087][ T8907] loop1: detected capacity change from 0 to 512 [ 167.725549][ T8907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.738475][ T8907] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.781809][ T8913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8913 comm=syz.4.1353 [ 167.796255][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.822071][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 167.846255][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 167.846271][ T29] audit: type=1326 audit(1739874903.694:17148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 167.876735][ T29] audit: type=1326 audit(1739874903.694:17149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 167.879808][ T8924] bridge0: port 3(veth0_to_bond) entered blocking state [ 167.900282][ T29] audit: type=1326 audit(1739874903.694:17150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 167.907198][ T8924] bridge0: port 3(veth0_to_bond) entered disabled state [ 167.907429][ T8924] veth0_to_bond: entered allmulticast mode [ 167.907937][ T8924] veth0_to_bond: entered promiscuous mode [ 167.931364][ T29] audit: type=1326 audit(1739874903.694:17151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 167.974644][ T29] audit: type=1326 audit(1739874903.694:17152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 167.998158][ T29] audit: type=1326 audit(1739874903.694:17153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 168.022253][ T29] audit: type=1326 audit(1739874903.694:17154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 168.046337][ T29] audit: type=1326 audit(1739874903.694:17155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 168.069827][ T29] audit: type=1326 audit(1739874903.694:17156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 168.094144][ T29] audit: type=1326 audit(1739874903.694:17157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a3e2cde9 code=0x7ffc0000 [ 168.116499][ T8926] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8926 comm=syz.4.1358 [ 168.147045][ T8929] tipc: Can't bind to reserved service type 2 [ 168.153444][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1358'. [ 168.220871][ T8939] bridge0: port 1(veth0_to_bond) entered blocking state [ 168.227878][ T8940] loop4: detected capacity change from 0 to 2048 [ 168.227950][ T8939] bridge0: port 1(veth0_to_bond) entered disabled state [ 168.241392][ T8939] veth0_to_bond: entered allmulticast mode [ 168.247718][ T8939] veth0_to_bond: entered promiscuous mode [ 168.276500][ T8940] Alternate GPT is invalid, using primary GPT. [ 168.282402][ T8942] loop1: detected capacity change from 0 to 2048 [ 168.282898][ T8940] loop4: p2 p3 p7 [ 168.289598][ T8942] EXT4-fs (loop1): bad block size 8192 [ 168.369431][ T8947] loop4: detected capacity change from 0 to 512 [ 168.386618][ T8947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.399620][ T8947] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.413409][ T8947] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 168.431401][ T8947] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 168.443909][ T8947] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.443909][ T8947] [ 168.453585][ T8947] EXT4-fs (loop4): Total free blocks count 0 [ 168.460243][ T8947] EXT4-fs (loop4): Free/Dirty block details [ 168.466160][ T8947] EXT4-fs (loop4): free_blocks=65280 [ 168.471489][ T8947] EXT4-fs (loop4): dirty_blocks=22 [ 168.476642][ T8947] EXT4-fs (loop4): Block reservation details [ 168.482619][ T8947] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 168.557531][ T8958] loop3: detected capacity change from 0 to 512 [ 168.564730][ T8958] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.575821][ T8958] EXT4-fs (loop3): 1 truncate cleaned up [ 168.581939][ T8958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.611964][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.647830][ T8965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8965 comm=syz.2.1371 [ 168.707452][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 168.791053][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 168.802054][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 168.802079][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.802091][ T3297] Call Trace: [ 168.802098][ T3297] [ 168.802122][ T3297] dump_stack_lvl+0xf2/0x150 [ 168.802152][ T3297] dump_stack+0x15/0x1a [ 168.802177][ T3297] dump_header+0x83/0x2d0 [ 168.802210][ T3297] oom_kill_process+0x341/0x4c0 [ 168.802250][ T3297] out_of_memory+0x9af/0xbe0 [ 168.802327][ T3297] ? css_next_descendant_pre+0x11c/0x140 [ 168.802350][ T3297] mem_cgroup_out_of_memory+0x13e/0x190 [ 168.802387][ T3297] try_charge_memcg+0x508/0x7f0 [ 168.802413][ T3297] charge_memcg+0x50/0xc0 [ 168.802548][ T3297] __mem_cgroup_charge+0x29/0xb0 [ 168.802618][ T3297] filemap_add_folio+0x53/0x1b0 [ 168.802693][ T3297] __filemap_get_folio+0x32f/0x630 [ 168.802714][ T3297] filemap_fault+0x46d/0xb30 [ 168.802791][ T3297] ? __list_del_entry_valid_or_report+0x66/0x130 [ 168.802834][ T3297] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 168.802922][ T3297] __do_fault+0xb6/0x200 [ 168.802946][ T3297] handle_mm_fault+0xe98/0x2ac0 [ 168.803056][ T3297] exc_page_fault+0x3b9/0x650 [ 168.803104][ T3297] asm_exc_page_fault+0x26/0x30 [ 168.803135][ T3297] RIP: 0033:0x7f42573e4184 [ 168.803154][ T3297] Code: 85 d3 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 18 16 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 29 15 e7 00 48 01 d1 [ 168.803175][ T3297] RSP: 002b:00007ffe86edb090 EFLAGS: 00010202 [ 168.803191][ T3297] RAX: 0000001b31a20000 RBX: 00000000000002cf RCX: 0000000000029040 [ 168.803207][ T3297] RDX: 000000000c0b5f7f RSI: 00007ffe86edb120 RDI: 0000000000000001 [ 168.803222][ T3297] RBP: 00007ffe86edb0cc R08: 000000002df2227b R09: 7fffffffffffffff [ 168.803243][ T3297] R10: 00007f4258260038 R11: 0000000000000010 R12: 0000000000001388 [ 168.803254][ T3297] R13: 00000000000927c0 R14: 00000000000292a9 R15: 00007ffe86edb120 [ 168.803323][ T3297] [ 168.803330][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 1748 [ 169.008444][ T3297] memory+swap: usage 178220kB, limit 9007199254740988kB, failcnt 0 [ 169.016436][ T3297] kmem: usage 165436kB, limit 9007199254740988kB, failcnt 0 [ 169.023735][ T3297] Memory cgroup stats for /syz3: [ 169.044591][ T3297] cache 9555968 [ 169.053235][ T3297] rss 204800 [ 169.056466][ T3297] shmem 9547776 [ 169.059920][ T3297] mapped_file 9285632 [ 169.063906][ T3297] dirty 0 [ 169.067614][ T3297] writeback 0 [ 169.070943][ T3297] workingset_refault_anon 492 [ 169.075660][ T3297] workingset_refault_file 1450 [ 169.080448][ T3297] swap 180224 [ 169.083747][ T3297] swapcached 0 [ 169.087175][ T3297] pgpgin 136449 [ 169.090376][ T8980] 9p: Unknown access argument c: -22 [ 169.090628][ T3297] pgpgout 134066 [ 169.100075][ T3297] pgfault 126349 [ 169.103620][ T3297] pgmajfault 303 [ 169.107203][ T3297] inactive_anon 1544192 [ 169.111365][ T3297] active_anon 8208384 [ 169.115368][ T3297] inactive_file 0 [ 169.119001][ T3297] active_file 8192 [ 169.122745][ T3297] unevictable 0 [ 169.126963][ T3297] hierarchical_memory_limit 314572800 [ 169.132331][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 169.138529][ T3297] total_cache 9555968 [ 169.142525][ T3297] total_rss 204800 [ 169.146275][ T3297] total_shmem 9547776 [ 169.150269][ T3297] total_mapped_file 9285632 [ 169.155504][ T3297] total_dirty 0 [ 169.159065][ T3297] total_writeback 0 [ 169.162947][ T3297] total_workingset_refault_anon 492 [ 169.168238][ T3297] total_workingset_refault_file 1450 [ 169.173624][ T3297] total_swap 180224 [ 169.177487][ T3297] total_swapcached 0 [ 169.181388][ T3297] total_pgpgin 136449 [ 169.186031][ T3297] total_pgpgout 134066 [ 169.190101][ T3297] total_pgfault 126349 [ 169.194234][ T3297] total_pgmajfault 303 [ 169.198398][ T3297] total_inactive_anon 1544192 [ 169.203186][ T3297] total_active_anon 8208384 [ 169.207751][ T3297] total_inactive_file 0 [ 169.211929][ T3297] total_active_file 8192 [ 169.216804][ T3297] total_unevictable 0 [ 169.220929][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1367,pid=8957,uid=0 [ 169.235530][ T3297] Memory cgroup out of memory: Killed process 8957 (syz.3.1367) total-vm:93844kB, anon-rss:1044kB, file-rss:22444kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 169.277208][ T8986] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 169.285067][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'. [ 169.338792][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.384468][ T8996] loop3: detected capacity change from 0 to 764 [ 169.476500][ T9007] loop3: detected capacity change from 0 to 128 [ 169.559265][ T9010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9010 comm=syz.4.1387 [ 169.589662][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 169.599818][ T9008] ================================================================== [ 169.607930][ T9008] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 169.615944][ T9008] [ 169.618268][ T9008] write to 0xffff888106689328 of 4 bytes by task 9007 on cpu 1: [ 169.625895][ T9008] writeback_single_inode+0x14f/0x3f0 [ 169.631283][ T9008] sync_inode_metadata+0x5c/0x90 [ 169.636239][ T9008] __generic_file_fsync+0xed/0x140 [ 169.641360][ T9008] fat_file_fsync+0x46/0x100 [ 169.645966][ T9008] vfs_fsync_range+0x116/0x130 [ 169.650738][ T9008] generic_file_write_iter+0x1c3/0x310 [ 169.656204][ T9008] iter_file_splice_write+0x5f1/0x980 [ 169.661586][ T9008] direct_splice_actor+0x160/0x2c0 [ 169.666725][ T9008] splice_direct_to_actor+0x302/0x670 [ 169.672103][ T9008] do_splice_direct+0xd7/0x150 [ 169.676872][ T9008] do_sendfile+0x398/0x660 [ 169.681286][ T9008] __x64_sys_sendfile64+0x110/0x150 [ 169.686498][ T9008] x64_sys_call+0xfbd/0x2dc0 [ 169.691094][ T9008] do_syscall_64+0xc9/0x1c0 [ 169.695610][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.701513][ T9008] [ 169.703831][ T9008] read to 0xffff888106689328 of 4 bytes by task 9008 on cpu 0: [ 169.711472][ T9008] vfs_fsync_range+0x9a/0x130 [ 169.716158][ T9008] generic_file_write_iter+0x1c3/0x310 [ 169.721622][ T9008] iter_file_splice_write+0x5f1/0x980 [ 169.727002][ T9008] direct_splice_actor+0x160/0x2c0 [ 169.732116][ T9008] splice_direct_to_actor+0x302/0x670 [ 169.737488][ T9008] do_splice_direct+0xd7/0x150 [ 169.742256][ T9008] do_sendfile+0x398/0x660 [ 169.746682][ T9008] __x64_sys_sendfile64+0x110/0x150 [ 169.751894][ T9008] x64_sys_call+0xfbd/0x2dc0 [ 169.756497][ T9008] do_syscall_64+0xc9/0x1c0 [ 169.761034][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.766941][ T9008] [ 169.769257][ T9008] value changed: 0x00000038 -> 0x00000022 [ 169.774987][ T9008] [ 169.777312][ T9008] Reported by Kernel Concurrency Sanitizer on: [ 169.783461][ T9008] CPU: 0 UID: 0 PID: 9008 Comm: syz.3.1386 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 169.794149][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 169.804219][ T9008] ================================================================== [ 169.825382][ T9008] syz.3.1386: attempt to access beyond end of device [ 169.825382][ T9008] loop3: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 169.839919][ T9007] syz.3.1386: attempt to access beyond end of device [ 169.839919][ T9007] loop3: rw=2049, sector=241, nr_sectors = 128 limit=128 [ 169.853620][ T9007] syz.3.1386: attempt to access beyond end of device [ 169.853620][ T9007] loop3: rw=2049, sector=369, nr_sectors = 1 limit=128 [ 169.867689][ T9007] Buffer I/O error on dev loop3, logical block 369, lost async page write [ 169.891172][ T5115] kworker/u8:10: attempt to access beyond end of device [ 169.891172][ T5115] loop3: rw=1, sector=377, nr_sectors = 664 limit=128