last executing test programs: 4.885386541s ago: executing program 4 (id=720): r0 = socket(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.011530066s ago: executing program 4 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getpgid(0x0) socket$kcm(0x10, 0x2, 0x4) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001214010025bd7000fbdbdf25080001000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 2.987721792s ago: executing program 3 (id=736): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004c4d61a2ec4400004400000000000690780a010100ac1e0001830748ac1414aa440000000000000000000000000000000000000000000000006a70cd4547132b3fd525264f30f76ea3e11810361eae814a6bf3ac5dd2088b762dafc4cf28329172e8bd3959abaef7b06a762c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32, @ANYBLOB="0c000d80"], 0x24}], 0x1}, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) ustat(0x7fffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x6, 0x9, 0x6, 0x8}, {0x7, 0x54, 0x7, 0x101}]}, 0x10) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x274, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x30c6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TUPLE_ORIG={0xd0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7995}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xbc9}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x1}, 0x20040081) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) 2.581531004s ago: executing program 3 (id=741): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x3}, 0x12, 0x6, 0x7, 0x0, 0x4, 0x5}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004012200a4e2000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x55}) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.580605074s ago: executing program 0 (id=742): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040), 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.513123545s ago: executing program 4 (id=743): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2510"], 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 2.420095435s ago: executing program 4 (id=745): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000000)=""/174) 2.386410416s ago: executing program 4 (id=746): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 2.310935386s ago: executing program 4 (id=747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_setup(0x4822, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000200)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {@fat=@check_strict}, {@fat=@uid}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}}) 1.718779029s ago: executing program 0 (id=754): r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0x7d}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000310"], 0x80}, 0x1, 0x7}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e23, @private=0xa010104}}, 0x0, 0x0, 0xb, 0x0, "39bcf5aba71652ddc5c8da1be5a42e5f03000000000000009b4277c0cecb8937c2948d4f4802c4ebf5564c50ffffa3987d30f351751fa9f118000000000000080000002000"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="6c717927d334d6e81050dca86d2cd8906717b56735fca162b6c6813f8ecdb385a12f3b76f4e0211c"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b0700000077540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e280f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x1, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") socket$inet6(0xa, 0x80002, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=r8, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="22857cd090bfa50900000000000000f620000000", @ANYRES16=r8, @ANYBLOB="00012bbd7000fddbdf255a0000000c009900010000006a000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20044080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x7}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000000)={0x8, 0x8}) 1.68776448s ago: executing program 3 (id=756): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f00000007c0)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="5825be06000000000000007ca2746314d178", 0x12}, {&(0x7f0000000800)='ik', 0x2}], 0x2}}, {{&(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000840)="93906993f297576e94d57265f0cac3abcaf6db6d4545cf5c8e114f592daf8fdb36e06b99fdf8fff1ee93866f456c87e69ce4115b51dc49a74dd8245dd3006e604903a7f2634ec13e3359493a7828994f742849c8fec83a9f281c199f7e28bab28c795cc281139dbcab0b72842aa1f78473dcb7058a2784f90743301852383c9488bbab100cca3a50321684b3453eae61c7abc00bb33b8200d1a6e21f5a189d862f98bf31e4c5124db12777fe003ed989dce270c921e44623ebcb77ff07ea34fd6db4dd410221bd4bc8c83bee6dd72a413ce3", 0xd2}, {&(0x7f0000000980)="fddb18c50b3ab2e0221fa844b6949c66c607ad2885e23c1c8723d1a7fbc166062e5a140cbfb36e75397f01679d0933ba14f5969b0e88e16ea7e6fbb874ccd23232d4241cdad4985c70d97909fd0da28c2c6dc6d954acb7802d51867d4d5fd5742c19140a8e69e430ffeebc04f015aa3e7ba4a2bb5e83e586f94e19f713e54cdd0fc46c4b7dbf46b36303284aa205f121646dea8f53ef3bd829891df83eacc6c82ae02d13896a45310ba77c120c77d5c887a4c89d46c9327baeb7950605584224009a8dd07de6", 0xc6}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f00000003c0)="902896d96358d6cce934693977e5b039264149b9ed6960b749f53e526f507a823cc253ade36362130145e6d07adfa1201fdf76f938d27316a3e2f58f44cd60ea55207dcb54b4adda54329070a7", 0x4d}, {&(0x7f0000000a80)="4a82c377b4d811b499fa3ff2769ecd09587b0968ca16e87d3fa544c230b8de8e0f7c7705dc6a718bcbb7216162fed823b7e38a954d470d1f4791d1ac6602008aec4bf8e70958315d882454f00c57989d93a57534c9fab29e558450004473ffd5593b322575e3486134cbd905d67b025f2c52582d1051b39d1616430a49b8efa64b6199201b5cd94ac446ca0acaa7091db2ea47040f8ec71c67f91b519f7a2a6138ad6c143d09c5e0934914474df27959054a5fde359c7cf3ce1c9fae8a6c2a09", 0xc0}, {&(0x7f00000004c0)="89531389bc65322c827190a26e2a215a375bf09ca540d682", 0x18}], 0x6, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x3, 0x4004040) socket$inet(0x2, 0x3, 0xd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x6, 0x1000, 0x3, @rand_addr=' \x01\x00', @loopback, 0x7800, 0x8000, 0x401, 0xf6f}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 1.64200018s ago: executing program 0 (id=758): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000c854f61d4f2f89b0308d9fde1156a27f2d3c40595078bdf29f6a042ca04e9f1dca8691d5d6b10c0cb34a90b40de6ef9ee0b2f4e720a50142eba72fe0bbef0ec8083abdfd529344c95ef83cb60c76597abe3c8385e9a1fc77ee6846f26e3b50cc73df435d49dbae4fd207649fdf7208d77d3053ea1ff080e94055d289281a79a51e48", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x18) r9 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="7472610000380000000000646e6f3dde0769e17a8986c3892cf1272a03f3c808d4ca6608f1a3ec5463c1117c3d4f86547aa52ffd75f804525e0ee3a6da878d1b5f44cb5dba6258b4d128c4c58360a75d558e07791b644bd76e43dbf7f3fe9f284a66d0f305e64d9d7c00e07f", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k']) write$binfmt_elf32(r3, 0x0, 0x69) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200000200000085000000860000009538988771888389a0", @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='tlb_flush\x00', r11, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) 1.57581746s ago: executing program 0 (id=760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffd34, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.56615919s ago: executing program 0 (id=761): unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r0 = epoll_create1(0x80000) unshare(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) finit_module(r1, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) (fail_nth: 5) 1.395247712s ago: executing program 1 (id=762): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e0", 0xb0}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) write(r1, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) unshare(0x26040600) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) 1.203531913s ago: executing program 3 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 777.097515ms ago: executing program 0 (id=766): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040), 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 776.156065ms ago: executing program 1 (id=767): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x6, 0x9, 0x6, 0x8}, {0x7, 0x54, 0x7, 0x101}]}, 0x10) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) io_uring_enter(0xffffffffffffffff, 0x2a9e, 0x13ff, 0x0, &(0x7f0000000000)={[0x6]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xfffffffffffffe6d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x274, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x30c6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TUPLE_ORIG={0xd0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7995}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xbc9}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x1}, 0x20040081) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) 634.956506ms ago: executing program 1 (id=768): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000002c0)={0x8, 0xc81, 0x5, 0x0, 0x0, [{{r3}}, {{r3}, 0x300000}, {{r3}, 0x5}, {{r3}, 0x4}, {{r3}, 0x4}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) getdents(r5, &(0x7f0000000a00)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 555.539207ms ago: executing program 1 (id=770): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="ff00000000000800000000e50000000000c90600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone(0x80048000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendmmsg$inet6(r4, 0x0, 0x0, 0x84) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 554.957216ms ago: executing program 3 (id=771): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffd34, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 393.359168ms ago: executing program 3 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000f40)={0x1208, 0x3d, 0x200, 0x70bd26, 0x25dfdbfc, {0x9}, [@generic="bd156c100dd985082f1d43b2fa5256340e0b474cf704b5ffd53123ba316cf5f5071f5a906d5587d8f9b31f3baa96cbe7c1c6cb0ad827546a545c7ab436116bc671cfd610753fdaa810c334c9c2ce9f146f7f4ac517244d30ce54d6c575fa25c7a2a38350a0fc389fdf3529daf3cd9b4924e47dcce15e90566ac9d84f7735a069002b1f35ea0a6b915d5997a286cb3f84bce2ca7ff6d6a75cdced4b6f437a0e0a28ee1a39cde09124711fcb594eb8a7fd71ce13503fb5351d68edd4473dccc9ddd26ce9ced410971e98ddf61b6d202f96b1aaf1bad8db15149ca3f47b91a219f818359591fc1d4fe9578f73632a55d7d76f081d14c25668", @generic="06e5fdcad09aedca718b0a76bc50ce616806973f48194ec44a505403fbbe5d22a6e12de5b02078f53727a75e69032e4b7e7983faff88f378aa3718fbfeea3d8147a88eca19cf2d8e0728c6d17a725bd3345688142c8d30c30c18c29eeb1a1259b9114e7b62f3fd027bf346893ea1ab61614b4a57786bf7f3d93b4206b89ab164c60b0aa5a65f11a8217c62b05cde4f3fe7b485d286749b02a2791c4f777df76eee0ee9be0d4b20cbda7a7268c884796dacf2f22959dc7fed755d7c90e6675cd1602d3e2b2e058bca3e9e", @generic="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", @generic="3519e0bc273c825f995c313843dd11673b30502c5f0eede8b3d71ec18a34f161a0f74ab13b7d76356819f307a70c4397b3"]}, 0x1208}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601030000000020000000000000060e0003006269746d61703a697000000005000400000000000900020073797a31000000001800078005000300ff0000000c00018008000140ffffffff05000500020000000500010006000000"], 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) 392.659697ms ago: executing program 2 (id=774): r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0x7d}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000310"], 0x80}, 0x1, 0x7}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e23, @private=0xa010104}}, 0x0, 0x0, 0xb, 0x0, "39bcf5aba71652ddc5c8da1be5a42e5f03000000000000009b4277c0cecb8937c2948d4f4802c4ebf5564c50ffffa3987d30f351751fa9f118000000000000080000002000"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="6c717927d334d6e81050dca86d2cd8906717b56735fca162b6c6813f8ecdb385a12f3b76f4e0211c"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b0700000077540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e280f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x1, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") socket$inet6(0xa, 0x80002, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=r8, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x4) fchown(r6, 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x7}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000000)={0x8, 0x8}) 240.148649ms ago: executing program 1 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB="757466383d302c757466383d302c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c726f6469722c747a3d5554433a7566383d312c6e6f6e756d7461696c3d302c6e66733d6e6f737400010000726f2c73686f72746e616d653d77696e6e742c646f733178666c6f7070792c73306f72746e616d653d77696e39352c636865636b3d72656c617865642c0000"], 0x6, 0x2d9, &(0x7f0000000cc0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 234.648798ms ago: executing program 1 (id=776): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10200000, 0x0, 0x1, 0x9, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x10200000, 0x2, 0x2, 0x8, 0x1ff}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) pwritev(r0, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0/file0'}, 0x11) close_range(r3, r4, 0x0) 208.492758ms ago: executing program 2 (id=777): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4bfb, &(0x7f0000000000)=""/174) 120.169209ms ago: executing program 2 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) 113.350729ms ago: executing program 2 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x100000003, 0x2000000000000000, 0x2, 0x7, 0x7fff, 0x7a, 0xfffffffffffffffa, 0x6ac}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) signalfd(r2, &(0x7f0000000400)={[0x100]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x14) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0xfffffffffffffcb9, 0x0, 0x0) 68.363459ms ago: executing program 2 (id=780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000002c0)={0x8, 0xc81, 0x5, 0x0, 0x0, [{{r3}}, {{r3}, 0x300000}, {{r3}, 0x5}, {{r3}, 0x4}, {{r3}, 0x4}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) getdents(r5, &(0x7f0000000a00)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 0s ago: executing program 2 (id=781): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0xfffffffffffffffb, {0x2, 0xff, 0x2}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b", 0x8}}, 0xee) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = gettid() fcntl$lock(r4, 0x24, &(0x7f0000000000)={0x1, 0x1, 0xc, 0x3, r5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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") (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x161442, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000340)=0x3) (async) write$ppp(r7, &(0x7f0000000480)="37e12710ed0c82e0e81f05fae3452aadec37807934d0257b0468a69ba6510588aadd1929244be0e3f7b73afeecd069290eb90dd79ce8a4433b5a11656bab900eafc269579fdc6b401eb886d32e4271dc4bcb43481af3701319e2d1ba7442f2cae1d8878b7591e3efb21c67e20058d08f2b2e16cf75aebefb192d95aa4a560591a09ab20333adbb8cadbcc8205657d894eaed5c293b74826b3de71e489adade7345f2ff8b2b668187c346099a7fcde76ef990a41d88338c935e8d4a51a2875f687491167f01b7ea22a9cfb79783", 0xcd) (async) getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) (async) getdents64(r6, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000002000000000000000000", @ANYBLOB="79f7284e2b35507de6993473d99cab8a0a68247e8ef5d3ef074d6209daf4e752f5d3a756b63052cc0eb4f796f7a7d41ea555023068708118a3eb6664d76a3806a38a14400ee1d1ee10d855102c17a9cb43306a4861d1f90bffb762b2d3a873508b81131b8c084f31e8998af62cc1356043b752b46ac79343dc09f7600bf2da481639b3cbb700cec62f6fb4bf6a08b8b86b39597447b8e405cbb9656360783b4eb1bbb7fc7c1866ed2abd7c6792c8dab63e27218e9ea600191b487575c4005ce7568bc2140ccaeebad0709c97a7a62be4010e92b75791a3c1e1257a36455e59d559c4d62b5f7d97928986dc13", @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000000ba200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000400", @ANYRES16=r11, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e0000000000000000000800038004000380"], 0x34}}, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 24.517745][ T29] audit: type=1400 audit(1762615827.239:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.540724][ T29] audit: type=1400 audit(1762615827.269:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.541369][ T3301] cgroup: Unknown subsys name 'net' [ 24.568418][ T29] audit: type=1400 audit(1762615827.289:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.690297][ T3301] cgroup: Unknown subsys name 'cpuset' [ 24.696540][ T3301] cgroup: Unknown subsys name 'rlimit' [ 24.805665][ T29] audit: type=1400 audit(1762615827.529:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.829026][ T29] audit: type=1400 audit(1762615827.529:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.849573][ T29] audit: type=1400 audit(1762615827.529:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.860312][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.869946][ T29] audit: type=1400 audit(1762615827.529:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.898801][ T29] audit: type=1400 audit(1762615827.539:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.923683][ T29] audit: type=1400 audit(1762615827.539:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.924996][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.947036][ T29] audit: type=1400 audit(1762615827.609:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.122800][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 26.223660][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.230793][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.237919][ T3319] bridge_slave_0: entered allmulticast mode [ 26.244425][ T3319] bridge_slave_0: entered promiscuous mode [ 26.253079][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.268471][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.277214][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.284601][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.291845][ T3319] bridge_slave_1: entered allmulticast mode [ 26.298207][ T3319] bridge_slave_1: entered promiscuous mode [ 26.328121][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.366305][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.385633][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.392727][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.399946][ T3314] bridge_slave_0: entered allmulticast mode [ 26.406257][ T3314] bridge_slave_0: entered promiscuous mode [ 26.416122][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.425546][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.440752][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.447823][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.455028][ T3314] bridge_slave_1: entered allmulticast mode [ 26.461486][ T3314] bridge_slave_1: entered promiscuous mode [ 26.505657][ T3319] team0: Port device team_slave_0 added [ 26.517415][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.524758][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.531917][ T3317] bridge_slave_0: entered allmulticast mode [ 26.538194][ T3317] bridge_slave_0: entered promiscuous mode [ 26.547393][ T3319] team0: Port device team_slave_1 added [ 26.563455][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.572608][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.579674][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.586927][ T3317] bridge_slave_1: entered allmulticast mode [ 26.593459][ T3317] bridge_slave_1: entered promiscuous mode [ 26.606369][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.613457][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.620603][ T3312] bridge_slave_0: entered allmulticast mode [ 26.626816][ T3312] bridge_slave_0: entered promiscuous mode [ 26.633335][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.640470][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.647556][ T3312] bridge_slave_1: entered allmulticast mode [ 26.654037][ T3312] bridge_slave_1: entered promiscuous mode [ 26.661149][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.695507][ T3314] team0: Port device team_slave_0 added [ 26.702201][ T3314] team0: Port device team_slave_1 added [ 26.717995][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.725242][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.751161][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.771561][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.785499][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.792481][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.818407][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.830142][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.844920][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.854323][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.861295][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.887285][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.897897][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.904974][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.912162][ T3316] bridge_slave_0: entered allmulticast mode [ 26.919002][ T3316] bridge_slave_0: entered promiscuous mode [ 26.927648][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.934901][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.942065][ T3316] bridge_slave_1: entered allmulticast mode [ 26.948373][ T3316] bridge_slave_1: entered promiscuous mode [ 26.955519][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.974220][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.981338][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.008097][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.033866][ T3314] hsr_slave_0: entered promiscuous mode [ 27.040008][ T3314] hsr_slave_1: entered promiscuous mode [ 27.066130][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.075780][ T3312] team0: Port device team_slave_0 added [ 27.082402][ T3317] team0: Port device team_slave_0 added [ 27.088820][ T3312] team0: Port device team_slave_1 added [ 27.105216][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.115021][ T3317] team0: Port device team_slave_1 added [ 27.131729][ T3319] hsr_slave_0: entered promiscuous mode [ 27.137976][ T3319] hsr_slave_1: entered promiscuous mode [ 27.144272][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 27.150085][ T3319] Cannot create hsr debugfs directory [ 27.182840][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.189848][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.215846][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.234272][ T3316] team0: Port device team_slave_0 added [ 27.248238][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.255240][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.281232][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.292262][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.299276][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.325254][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.339102][ T3316] team0: Port device team_slave_1 added [ 27.346359][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.353461][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.379382][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.434358][ T3312] hsr_slave_0: entered promiscuous mode [ 27.440550][ T3312] hsr_slave_1: entered promiscuous mode [ 27.446432][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.452223][ T3312] Cannot create hsr debugfs directory [ 27.464700][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.471754][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.497732][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.525230][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.532213][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.558139][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.578428][ T3317] hsr_slave_0: entered promiscuous mode [ 27.584597][ T3317] hsr_slave_1: entered promiscuous mode [ 27.590567][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 27.596290][ T3317] Cannot create hsr debugfs directory [ 27.633807][ T3316] hsr_slave_0: entered promiscuous mode [ 27.639980][ T3316] hsr_slave_1: entered promiscuous mode [ 27.645755][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.651535][ T3316] Cannot create hsr debugfs directory [ 27.742668][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.751558][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.778161][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.796367][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.831669][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.841623][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.855577][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.866832][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.893223][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.902757][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.917391][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.931811][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.955701][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.970417][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.979623][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.996238][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.004677][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.016621][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.036944][ T2013] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.044034][ T2013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.067119][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.074243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.083920][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.093274][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.102710][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.119284][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.129693][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.152512][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.162791][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.192131][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.203485][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.218619][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.225719][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.234745][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.241854][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.266734][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.293744][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.300822][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.318809][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.330501][ T2013] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.337564][ T2013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.363834][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.372327][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.381947][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.400996][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.408146][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.428350][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.436917][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.444066][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.480039][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.490494][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.521526][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.550299][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.557378][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.582866][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.590003][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.623327][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.659666][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.685077][ T3314] veth0_vlan: entered promiscuous mode [ 28.721483][ T3314] veth1_vlan: entered promiscuous mode [ 28.728788][ T3319] veth0_vlan: entered promiscuous mode [ 28.747718][ T3319] veth1_vlan: entered promiscuous mode [ 28.769989][ T3314] veth0_macvtap: entered promiscuous mode [ 28.778068][ T3314] veth1_macvtap: entered promiscuous mode [ 28.788961][ T3319] veth0_macvtap: entered promiscuous mode [ 28.798046][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.808898][ T3319] veth1_macvtap: entered promiscuous mode [ 28.824241][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.835539][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.854870][ T3312] veth0_vlan: entered promiscuous mode [ 28.865448][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.879102][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.894685][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.903645][ T779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.913436][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.921415][ T3317] veth0_vlan: entered promiscuous mode [ 28.935008][ T779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.949262][ T3312] veth1_vlan: entered promiscuous mode [ 28.958834][ T779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.975467][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.976029][ T779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.999930][ T3317] veth1_vlan: entered promiscuous mode [ 29.025871][ T3312] veth0_macvtap: entered promiscuous mode [ 29.043319][ T779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.053495][ T3317] veth0_macvtap: entered promiscuous mode [ 29.062401][ T3312] veth1_macvtap: entered promiscuous mode [ 29.075334][ T779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.090074][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.099612][ T3317] veth1_macvtap: entered promiscuous mode [ 29.113472][ T3316] veth0_vlan: entered promiscuous mode [ 29.122971][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.131703][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.144761][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.155411][ T2013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.169170][ T3316] veth1_vlan: entered promiscuous mode [ 29.178059][ T3485] loop0: detected capacity change from 0 to 2048 [ 29.185500][ T2013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.213665][ T2013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.234858][ T3485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.248546][ T2013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.265638][ T3316] veth0_macvtap: entered promiscuous mode [ 29.279334][ T2013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.295616][ T3316] veth1_macvtap: entered promiscuous mode [ 29.312323][ T2013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.325961][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.348050][ T2013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.375276][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.382621][ T167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.483941][ T3483] loop4: detected capacity change from 0 to 512 [ 29.579685][ T167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.608732][ T167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.656487][ T167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670237][ T3448] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 29.713335][ T3483] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.5: bad orphan inode 11862016 [ 29.758843][ T167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.768813][ T3483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 29.781865][ T3448] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 29.783281][ T3484] syz.0.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 29.794096][ T3448] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.794096][ T3448] [ 29.794121][ T3448] EXT4-fs (loop0): Total free blocks count 0 [ 29.794136][ T3448] EXT4-fs (loop0): Free/Dirty block details [ 29.794151][ T3448] EXT4-fs (loop0): free_blocks=66060288 [ 29.804970][ T3484] CPU: 1 UID: 0 PID: 3484 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.805074][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.805087][ T3484] Call Trace: [ 29.805167][ T3484] [ 29.805175][ T3484] __dump_stack+0x1d/0x30 [ 29.805199][ T3484] dump_stack_lvl+0xe8/0x140 [ 29.805221][ T3484] dump_stack+0x15/0x1b [ 29.805240][ T3484] dump_header+0x81/0x220 [ 29.805330][ T3484] oom_kill_process+0x342/0x400 [ 29.805367][ T3484] out_of_memory+0x979/0xb80 [ 29.805407][ T3484] try_charge_memcg+0x610/0xa10 [ 29.805439][ T3484] charge_memcg+0x51/0xc0 [ 29.805465][ T3484] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 29.805571][ T3484] __read_swap_cache_async+0x17b/0x2d0 [ 29.805607][ T3484] swap_cluster_readahead+0x362/0x3c0 [ 29.805634][ T3484] swapin_readahead+0xde/0x6f0 [ 29.805657][ T3484] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 29.805689][ T3484] ? __rcu_read_unlock+0x34/0x70 [ 29.805727][ T3484] ? __rcu_read_unlock+0x4f/0x70 [ 29.805761][ T3484] ? swap_cache_get_folio+0x277/0x280 [ 29.805854][ T3484] do_swap_page+0x2ae/0x2370 [ 29.805899][ T3484] ? css_rstat_updated+0xb7/0x240 [ 29.805921][ T3484] ? __pfx_default_wake_function+0x10/0x10 [ 29.805953][ T3484] handle_mm_fault+0x9a5/0x2be0 [ 29.805979][ T3484] ? vma_start_read+0x141/0x1f0 [ 29.806014][ T3484] do_user_addr_fault+0x630/0x1080 [ 29.806057][ T3484] exc_page_fault+0x62/0xa0 [ 29.806089][ T3484] asm_exc_page_fault+0x26/0x30 [ 29.806111][ T3484] RIP: 0033:0x7fc78abc593c [ 29.806159][ T3484] Code: 66 0f 1f 44 00 00 69 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 29.806177][ T3484] RSP: 002b:00007ffe43a934e0 EFLAGS: 00010287 [ 29.806195][ T3484] RAX: 0000000000000000 RBX: 00007fc78af46090 RCX: 0000000000000000 [ 29.806208][ T3484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555579c13808 [ 29.806234][ T3484] RBP: 00007fc78af47da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 29.806247][ T3484] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000751e [ 29.806260][ T3484] R13: 00007fc78af46090 R14: ffffffffffffffff R15: 00007ffe43a935f0 [ 29.806279][ T3484] [ 29.806286][ T3484] memory: usage 307200kB, limit 307200kB, failcnt 506 [ 29.814631][ T3448] EXT4-fs (loop0): dirty_blocks=64 [ 29.814651][ T3448] EXT4-fs (loop0): Block reservation details [ 29.814661][ T3448] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 29.855609][ T3508] loop2: detected capacity change from 0 to 1024 [ 29.858341][ T3484] memory+swap: usage 308388kB, limit 9007199254740988kB, failcnt 0 [ 29.858414][ T3484] kmem: usage 306984kB, limit 9007199254740988kB, failcnt 0 [ 29.916537][ T3508] EXT4-fs: Ignoring removed orlov option [ 29.922094][ T3484] Memory cgroup stats for /syz0: [ 29.938882][ T3483] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.091753][ T3484] cache 225280 [ 30.121504][ T3484] rss 0 [ 30.124276][ T3484] shmem 4096 [ 30.127483][ T3484] mapped_file 110592 [ 30.131417][ T3484] dirty 102400 [ 30.134803][ T3484] writeback 0 [ 30.138155][ T3484] workingset_refault_anon 10 [ 30.142891][ T3484] workingset_refault_file 0 [ 30.147404][ T3484] swap 1208320 [ 30.150862][ T3484] swapcached 4096 [ 30.154504][ T3484] pgpgin 604 [ 30.157714][ T3484] pgpgout 548 [ 30.161144][ T3484] pgfault 413 [ 30.164605][ T3484] pgmajfault 3 [ 30.168028][ T3484] inactive_anon 8192 [ 30.172178][ T3484] active_anon 0 [ 30.175649][ T3484] inactive_file 221184 [ 30.179821][ T3484] active_file 0 [ 30.183299][ T3484] unevictable 0 [ 30.186776][ T3484] hierarchical_memory_limit 314572800 [ 30.192204][ T3484] hierarchical_memsw_limit 9223372036854771712 [ 30.198684][ T3484] total_cache 225280 [ 30.202813][ T3484] total_rss 0 [ 30.206112][ T3484] total_shmem 4096 [ 30.210084][ T3484] total_mapped_file 110592 [ 30.214524][ T3484] total_dirty 102400 [ 30.218424][ T3484] total_writeback 0 [ 30.222422][ T3484] total_workingset_refault_anon 10 [ 30.227590][ T3484] total_workingset_refault_file 0 [ 30.231755][ T3481] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 30.232699][ T3484] total_swap 1208320 [ 30.246883][ T3484] total_swapcached 4096 [ 30.251149][ T3484] total_pgpgin 604 [ 30.254873][ T3484] total_pgpgout 548 [ 30.258683][ T3484] total_pgfault 413 [ 30.262522][ T3484] total_pgmajfault 3 [ 30.266427][ T3484] total_inactive_anon 8192 [ 30.270858][ T3484] total_active_anon 0 [ 30.274886][ T3484] total_inactive_file 221184 [ 30.277478][ T3508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.279531][ T3484] total_active_file 0 [ 30.279573][ T3484] total_unevictable 0 [ 30.300209][ T3484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1,pid=3484,uid=0 [ 30.314733][ T3484] Memory cgroup out of memory: Killed process 3484 (syz.0.1) total-vm:95932kB, anon-rss:1128kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 30.332843][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 30.363756][ C1] hrtimer: interrupt took 46728 ns [ 30.391183][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 30.391202][ T29] audit: type=1400 audit(1762615833.119:117): avc: denied { read } for pid=3505 comm="syz.2.7" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.398188][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 30.436089][ T29] audit: type=1400 audit(1762615833.119:118): avc: denied { open } for pid=3505 comm="syz.2.7" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.462484][ T3485] syz.0.1 (3485) used greatest stack depth: 9720 bytes left [ 30.479193][ T779] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 44 with error 28 [ 30.532565][ T29] audit: type=1400 audit(1762615833.259:119): avc: denied { setopt } for pid=3524 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.535677][ T3525] loop0: detected capacity change from 0 to 512 [ 30.572927][ T3525] ext4: Unknown parameter 'fowner<00000000000000000000' [ 30.581860][ T29] audit: type=1400 audit(1762615833.289:120): avc: denied { bind } for pid=3526 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.601499][ T29] audit: type=1400 audit(1762615833.299:121): avc: denied { connect } for pid=3526 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.621307][ T29] audit: type=1326 audit(1762615833.299:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3505 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 30.644601][ T29] audit: type=1326 audit(1762615833.299:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3505 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 30.676421][ T29] audit: type=1326 audit(1762615833.349:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3505 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 30.699696][ T29] audit: type=1326 audit(1762615833.349:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3505 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 30.722885][ T29] audit: type=1326 audit(1762615833.349:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3505 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 30.787608][ T3525] 9p: Unknown access argument : -22 [ 30.834677][ T3530] xt_hashlimit: max too large, truncated to 1048576 [ 30.900827][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.980899][ T3529] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13'. [ 31.148135][ T3554] loop2: detected capacity change from 0 to 1024 [ 31.155106][ T3554] EXT4-fs: Ignoring removed orlov option [ 31.185232][ T3554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.230080][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.467751][ T3551] loop3: detected capacity change from 0 to 512 [ 31.514916][ T3551] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.22: bad orphan inode 11862016 [ 31.526524][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.556321][ T3551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 31.569848][ T3551] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.600952][ T3561] netlink: 188 bytes leftover after parsing attributes in process `syz.0.25'. [ 31.681068][ T3567] loop2: detected capacity change from 0 to 2048 [ 31.731568][ T3567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.980810][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.233927][ T3590] loop4: detected capacity change from 0 to 1024 [ 32.266027][ T3590] EXT4-fs: Ignoring removed orlov option [ 32.303849][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.390894][ T3590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 32.450574][ T2013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 32.527587][ T2013] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 32.539976][ T2013] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.539976][ T2013] [ 32.549760][ T2013] EXT4-fs (loop2): Total free blocks count 0 [ 32.555755][ T2013] EXT4-fs (loop2): Free/Dirty block details [ 32.561721][ T2013] EXT4-fs (loop2): free_blocks=66060288 [ 32.567387][ T2013] EXT4-fs (loop2): dirty_blocks=64 [ 32.572549][ T2013] EXT4-fs (loop2): Block reservation details [ 32.578552][ T2013] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 32.592565][ T3598] loop3: detected capacity change from 0 to 512 [ 32.632062][ T3598] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.37: bad orphan inode 11862016 [ 32.674080][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.716756][ T3598] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.735453][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.761744][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.818151][ T3614] loop3: detected capacity change from 0 to 1024 [ 32.824230][ T3567] syz.2.26 (3567) used greatest stack depth: 9592 bytes left [ 32.835575][ T167] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 44 with error 28 [ 32.865795][ T3614] EXT4-fs: Ignoring removed orlov option [ 32.903868][ T3614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.916214][ T3616] netlink: 188 bytes leftover after parsing attributes in process `syz.0.43'. [ 32.949723][ T3622] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.956699][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 33.139088][ T3612] loop4: detected capacity change from 0 to 512 [ 33.165402][ T3612] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.40: bad orphan inode 11862016 [ 33.193303][ T3612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.218897][ T3612] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.231269][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.374796][ T3646] syzkaller0: entered allmulticast mode [ 33.409548][ T3646] syzkaller0: entered promiscuous mode [ 33.432422][ T3646] syzkaller0 (unregistering): left allmulticast mode [ 33.439160][ T3646] syzkaller0 (unregistering): left promiscuous mode [ 33.530672][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.780229][ T3642] loop3: detected capacity change from 0 to 512 [ 33.811828][ T3642] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.49: bad orphan inode 11862016 [ 33.867232][ T3642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.880033][ T3642] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.533206][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.720501][ T3683] syzkaller0: entered allmulticast mode [ 34.737538][ T3683] syzkaller0: entered promiscuous mode [ 34.901042][ T3687] syzkaller0 (unregistering): left allmulticast mode [ 34.907916][ T3687] syzkaller0 (unregistering): left promiscuous mode [ 35.403698][ T3693] netlink: 72 bytes leftover after parsing attributes in process `syz.2.65'. [ 35.575522][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 35.575542][ T29] audit: type=1400 audit(1762615838.279:244): avc: denied { mounton } for pid=3695 comm="syz.3.67" path="/13/bus" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.641581][ T3701] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.800051][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 35.831344][ T29] audit: type=1326 audit(1762615838.559:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 35.856352][ T29] audit: type=1326 audit(1762615838.559:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 35.879822][ T29] audit: type=1326 audit(1762615838.559:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 35.903110][ T29] audit: type=1326 audit(1762615838.559:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 35.926350][ T29] audit: type=1326 audit(1762615838.559:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 35.949720][ T29] audit: type=1326 audit(1762615838.559:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 35.972776][ T29] audit: type=1326 audit(1762615838.559:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 35.996112][ T29] audit: type=1326 audit(1762615838.559:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 36.019255][ T29] audit: type=1326 audit(1762615838.559:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 36.561342][ T3712] loop4: detected capacity change from 0 to 512 [ 36.581165][ T3712] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.73: bad orphan inode 11862016 [ 36.592403][ T3712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.605198][ T3712] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.770095][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.865096][ T3738] loop4: detected capacity change from 0 to 1024 [ 36.876009][ T3738] EXT4-fs: Ignoring removed orlov option [ 36.891407][ T3738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.910245][ T3745] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.952862][ T3738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 36.963483][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 36.980014][ T3749] syzkaller0: entered allmulticast mode [ 36.996006][ T3749] syzkaller0: entered promiscuous mode [ 37.019233][ T3749] syzkaller0 (unregistering): left allmulticast mode [ 37.026090][ T3749] syzkaller0 (unregistering): left promiscuous mode [ 37.194291][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.264064][ T3759] wireguard0: entered promiscuous mode [ 37.269713][ T3759] wireguard0: entered allmulticast mode [ 37.481055][ T3758] loop4: detected capacity change from 0 to 512 [ 37.494721][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 37.496505][ T3758] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.89: bad orphan inode 11862016 [ 37.535548][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.548174][ T3758] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.675896][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.848616][ T3787] syzkaller0: entered allmulticast mode [ 37.863556][ T3787] syzkaller0: entered promiscuous mode [ 37.882312][ T3787] syzkaller0 (unregistering): left allmulticast mode [ 37.889257][ T3787] syzkaller0 (unregistering): left promiscuous mode [ 37.935874][ T3791] mmap: syz.2.99 (3791) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.967896][ T3793] 9pnet_fd: Insufficient options for proto=fd [ 38.068613][ T3798] wireguard0: entered promiscuous mode [ 38.074232][ T3798] wireguard0: entered allmulticast mode [ 38.231792][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 38.902679][ T3823] veth0: entered promiscuous mode [ 38.918549][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 38.949947][ T3825] 9pnet_fd: Insufficient options for proto=fd [ 38.985732][ T3823] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 38.989717][ T3827] syzkaller0: entered allmulticast mode [ 39.029522][ T3827] syzkaller0: entered promiscuous mode [ 39.036990][ T3827] syzkaller0 (unregistering): left allmulticast mode [ 39.043827][ T3827] syzkaller0 (unregistering): left promiscuous mode [ 39.171689][ T3841] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 39.190748][ T3839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 39.324790][ T3848] netlink: 188 bytes leftover after parsing attributes in process `syz.4.118'. [ 39.547583][ T3863] 9pnet_fd: Insufficient options for proto=fd [ 39.582676][ T3867] FAULT_INJECTION: forcing a failure. [ 39.582676][ T3867] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.595914][ T3867] CPU: 1 UID: 0 PID: 3867 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.595941][ T3867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.595953][ T3867] Call Trace: [ 39.595959][ T3867] [ 39.595996][ T3867] __dump_stack+0x1d/0x30 [ 39.596023][ T3867] dump_stack_lvl+0xe8/0x140 [ 39.596045][ T3867] dump_stack+0x15/0x1b [ 39.596066][ T3867] should_fail_ex+0x265/0x280 [ 39.596091][ T3867] should_fail+0xb/0x20 [ 39.596111][ T3867] should_fail_usercopy+0x1a/0x20 [ 39.596198][ T3867] _copy_from_user+0x1c/0xb0 [ 39.596223][ T3867] ___sys_sendmsg+0xc1/0x1d0 [ 39.596272][ T3867] __x64_sys_sendmsg+0xd4/0x160 [ 39.596299][ T3867] x64_sys_call+0x191e/0x3000 [ 39.596326][ T3867] do_syscall_64+0xd2/0x200 [ 39.596376][ T3867] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.596457][ T3867] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.596496][ T3867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.596520][ T3867] RIP: 0033:0x7f9e9da9f6c9 [ 39.596535][ T3867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.596552][ T3867] RSP: 002b:00007f9e9c4ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.596614][ T3867] RAX: ffffffffffffffda RBX: 00007f9e9dcf5fa0 RCX: 00007f9e9da9f6c9 [ 39.596629][ T3867] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 39.596644][ T3867] RBP: 00007f9e9c4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 39.596658][ T3867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.596718][ T3867] R13: 00007f9e9dcf6038 R14: 00007f9e9dcf5fa0 R15: 00007fffcac28338 [ 39.596736][ T3867] [ 39.780469][ T3870] wireguard0: entered promiscuous mode [ 39.786044][ T3870] wireguard0: entered allmulticast mode [ 40.252064][ T3888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 40.331640][ T3899] syzkaller0: entered allmulticast mode [ 40.337349][ T3899] syzkaller0: entered promiscuous mode [ 40.350102][ T3899] syzkaller0 (unregistering): left allmulticast mode [ 40.356849][ T3899] syzkaller0 (unregistering): left promiscuous mode [ 41.474365][ T3948] wireguard1: entered promiscuous mode [ 41.479943][ T3948] wireguard1: entered allmulticast mode [ 41.721133][ T3951] syzkaller0: entered allmulticast mode [ 41.727579][ T3951] syzkaller0: entered promiscuous mode [ 41.736626][ T3951] syzkaller0 (unregistering): left allmulticast mode [ 41.743376][ T3951] syzkaller0 (unregistering): left promiscuous mode [ 41.927001][ T3957] syzkaller0: entered promiscuous mode [ 41.932607][ T3957] syzkaller0: entered allmulticast mode [ 42.116707][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 42.116726][ T29] audit: type=1400 audit(1762615844.839:404): avc: denied { remount } for pid=3962 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.179572][ T29] audit: type=1400 audit(1762615844.839:405): avc: denied { setopt } for pid=3962 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.198957][ T29] audit: type=1400 audit(1762615844.839:406): avc: denied { bind } for pid=3962 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.218332][ T29] audit: type=1400 audit(1762615844.839:407): avc: denied { name_bind } for pid=3962 comm="syz.4.159" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.240051][ T29] audit: type=1400 audit(1762615844.839:408): avc: denied { node_bind } for pid=3962 comm="syz.4.159" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 42.320649][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 42.359550][ T29] audit: type=1326 audit(1762615845.069:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 42.382971][ T29] audit: type=1326 audit(1762615845.069:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 42.406214][ T29] audit: type=1326 audit(1762615845.069:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 42.429557][ T29] audit: type=1326 audit(1762615845.069:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 42.452698][ T29] audit: type=1326 audit(1762615845.069:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 42.697929][ T3979] syzkaller0: entered allmulticast mode [ 42.704238][ T3979] syzkaller0: entered promiscuous mode [ 42.712055][ T3979] syzkaller0 (unregistering): left allmulticast mode [ 42.718871][ T3979] syzkaller0 (unregistering): left promiscuous mode [ 42.835596][ T3985] FAULT_INJECTION: forcing a failure. [ 42.835596][ T3985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.848800][ T3985] CPU: 0 UID: 0 PID: 3985 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.848831][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.848843][ T3985] Call Trace: [ 42.848875][ T3985] [ 42.848885][ T3985] __dump_stack+0x1d/0x30 [ 42.848913][ T3985] dump_stack_lvl+0xe8/0x140 [ 42.848938][ T3985] dump_stack+0x15/0x1b [ 42.848960][ T3985] should_fail_ex+0x265/0x280 [ 42.848981][ T3985] should_fail+0xb/0x20 [ 42.849022][ T3985] should_fail_usercopy+0x1a/0x20 [ 42.849042][ T3985] _copy_to_user+0x20/0xa0 [ 42.849080][ T3985] simple_read_from_buffer+0xb5/0x130 [ 42.849111][ T3985] proc_fail_nth_read+0x10e/0x150 [ 42.849145][ T3985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.849246][ T3985] vfs_read+0x1a8/0x770 [ 42.849269][ T3985] ? __rcu_read_unlock+0x4f/0x70 [ 42.849361][ T3985] ? __fget_files+0x184/0x1c0 [ 42.849389][ T3985] ksys_read+0xda/0x1a0 [ 42.849414][ T3985] __x64_sys_read+0x40/0x50 [ 42.849439][ T3985] x64_sys_call+0x27c0/0x3000 [ 42.849535][ T3985] do_syscall_64+0xd2/0x200 [ 42.849557][ T3985] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.849592][ T3985] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.849670][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.849696][ T3985] RIP: 0033:0x7eff4835e0dc [ 42.849715][ T3985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.849813][ T3985] RSP: 002b:00007eff46dbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.849837][ T3985] RAX: ffffffffffffffda RBX: 00007eff485b5fa0 RCX: 00007eff4835e0dc [ 42.849851][ T3985] RDX: 000000000000000f RSI: 00007eff46dbf0a0 RDI: 0000000000000004 [ 42.849941][ T3985] RBP: 00007eff46dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.849956][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.849970][ T3985] R13: 00007eff485b6038 R14: 00007eff485b5fa0 R15: 00007fff063828c8 [ 42.849993][ T3985] [ 43.378582][ T4013] netlink: 188 bytes leftover after parsing attributes in process `syz.1.177'. [ 43.450169][ T4019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 43.486397][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 44.280439][ T4060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 44.340469][ T4068] syzkaller0: entered allmulticast mode [ 44.346485][ T4068] syzkaller0: entered promiscuous mode [ 44.355162][ T4068] syzkaller0 (unregistering): left allmulticast mode [ 44.362132][ T4068] syzkaller0 (unregistering): left promiscuous mode [ 44.510498][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 44.642936][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 45.821741][ T4110] syzkaller0: entered allmulticast mode [ 45.849120][ T4110] syzkaller0: entered promiscuous mode [ 45.867216][ T4110] syzkaller0 (unregistering): left allmulticast mode [ 45.873974][ T4110] syzkaller0 (unregistering): left promiscuous mode [ 46.166665][ T4123] Zero length message leads to an empty skb [ 46.830969][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 46.981180][ T4135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'. [ 47.613881][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 47.613895][ T29] audit: type=1326 audit(1762615850.339:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 47.643367][ T29] audit: type=1326 audit(1762615850.339:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 47.667461][ T29] audit: type=1326 audit(1762615850.399:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 47.690734][ T29] audit: type=1326 audit(1762615850.399:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 47.714037][ T29] audit: type=1326 audit(1762615850.399:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 47.737314][ T29] audit: type=1326 audit(1762615850.399:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 47.760565][ T29] audit: type=1326 audit(1762615850.399:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 47.798148][ T4164] 9pnet_fd: Insufficient options for proto=fd [ 48.118456][ T4183] syzkaller0: entered allmulticast mode [ 48.129918][ T4183] syzkaller0: entered promiscuous mode [ 48.144684][ T4183] syzkaller0 (unregistering): left allmulticast mode [ 48.151496][ T4183] syzkaller0 (unregistering): left promiscuous mode [ 48.357062][ T4191] netlink: 188 bytes leftover after parsing attributes in process `syz.3.238'. [ 48.412700][ T4194] netlink: 188 bytes leftover after parsing attributes in process `syz.1.235'. [ 48.546269][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 48.603966][ T29] audit: type=1326 audit(1762615851.329:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4195 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 48.662006][ T29] audit: type=1326 audit(1762615851.359:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4195 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 48.685396][ T29] audit: type=1326 audit(1762615851.369:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4195 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 48.789564][ T4203] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.677670][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 49.982376][ T4252] netlink: 188 bytes leftover after parsing attributes in process `syz.4.264'. [ 50.011360][ T4254] netlink: 188 bytes leftover after parsing attributes in process `syz.3.265'. [ 50.158834][ T4268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 50.289819][ T4278] netlink: 3 bytes leftover after parsing attributes in process `syz.4.275'. [ 50.298731][ T4278] 0X: renamed from caif0 [ 50.305364][ T4278] 0X: entered allmulticast mode [ 50.310895][ T4278] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 50.517133][ T4280] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.655904][ T4287] netlink: 188 bytes leftover after parsing attributes in process `syz.1.279'. [ 51.215537][ T4317] 9pnet_virtio: no channels available for device  [ 51.281089][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 51.292081][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.292114][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.292129][ T3317] Call Trace: [ 51.292164][ T3317] [ 51.292171][ T3317] __dump_stack+0x1d/0x30 [ 51.292194][ T3317] dump_stack_lvl+0xe8/0x140 [ 51.292214][ T3317] dump_stack+0x15/0x1b [ 51.292245][ T3317] dump_header+0x81/0x220 [ 51.292266][ T3317] oom_kill_process+0x342/0x400 [ 51.292296][ T3317] out_of_memory+0x979/0xb80 [ 51.292410][ T3317] try_charge_memcg+0x610/0xa10 [ 51.292448][ T3317] charge_memcg+0x51/0xc0 [ 51.292474][ T3317] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 51.292554][ T3317] __read_swap_cache_async+0x17b/0x2d0 [ 51.292578][ T3317] swap_cluster_readahead+0x362/0x3c0 [ 51.292657][ T3317] swapin_readahead+0xde/0x6f0 [ 51.292682][ T3317] ? next_uptodate_folio+0x81c/0x890 [ 51.292707][ T3317] ? percpu_counter_add_batch+0xb6/0x130 [ 51.292746][ T3317] ? __rcu_read_unlock+0x4f/0x70 [ 51.292806][ T3317] ? swap_cache_get_folio+0x277/0x280 [ 51.292828][ T3317] do_swap_page+0x2ae/0x2370 [ 51.292855][ T3317] ? fput+0x8f/0xc0 [ 51.292878][ T3317] ? css_rstat_updated+0xb7/0x240 [ 51.292948][ T3317] ? __pfx_default_wake_function+0x10/0x10 [ 51.292982][ T3317] handle_mm_fault+0x9a5/0x2be0 [ 51.293053][ T3317] ? vma_start_read+0x141/0x1f0 [ 51.293089][ T3317] do_user_addr_fault+0x630/0x1080 [ 51.293175][ T3317] exc_page_fault+0x62/0xa0 [ 51.293213][ T3317] asm_exc_page_fault+0x26/0x30 [ 51.293244][ T3317] RIP: 0033:0x7eff48235f27 [ 51.293261][ T3317] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 f7 ea 00 48 01 d1 39 7c 24 [ 51.293279][ T3317] RSP: 002b:00007fff06382c50 EFLAGS: 00010202 [ 51.293298][ T3317] RAX: 0000001b33924000 RBX: 0000000000000073 RCX: 000000000000c738 [ 51.293314][ T3317] RDX: 00000000033c6b25 RSI: 00007fff06382ce0 RDI: 0000000000000017 [ 51.293330][ T3317] RBP: 00007fff06382c8c R08: 000000000c582a7b R09: 7fffffffffffffff [ 51.293346][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 51.293381][ T3317] R13: 00000000000927c0 R14: 000000000000c66a R15: 00007fff06382ce0 [ 51.293399][ T3317] [ 51.293405][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 2888 [ 51.408680][ T4316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.412543][ T3317] memory+swap: usage 211460kB, limit 9007199254740988kB, failcnt 0 [ 51.412564][ T3317] kmem: usage 211148kB, limit 9007199254740988kB, failcnt 0 [ 51.418719][ T4316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.423328][ T3317] Memory cgroup stats for [ 51.432333][ T4316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.433247][ T3317] /syz2: [ 51.579430][ T3317] cache 0 [ 51.585329][ T3317] rss 0 [ 51.588193][ T3317] shmem 0 [ 51.591177][ T3317] mapped_file 0 [ 51.592822][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 51.594641][ T3317] dirty 0 [ 51.594652][ T3317] writeback 0 [ 51.594737][ T3317] workingset_refault_anon 46 [ 51.594773][ T3317] workingset_refault_file 244 [ 51.594782][ T3317] swap 204800 [ 51.594790][ T3317] swapcached 0 [ 51.594798][ T3317] pgpgin 37904 [ 51.594806][ T3317] pgpgout 37904 [ 51.594814][ T3317] pgfault 23659 [ 51.594821][ T3317] pgmajfault 29 [ 51.594829][ T3317] inactive_anon 0 [ 51.594847][ T3317] active_anon 0 [ 51.594855][ T3317] inactive_file 0 [ 51.594863][ T3317] active_file 0 [ 51.594871][ T3317] unevictable 0 [ 51.594879][ T3317] hierarchical_memory_limit 314572800 [ 51.594889][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 51.594909][ T3317] total_cache 0 [ 51.594918][ T3317] total_rss 0 [ 51.594933][ T3317] total_shmem 0 [ 51.594941][ T3317] total_mapped_file 0 [ 51.594949][ T3317] total_dirty 0 [ 51.594980][ T3317] total_writeback 0 [ 51.594987][ T3317] total_workingset_refault_anon 46 [ 51.594996][ T3317] total_workingset_refault_file 244 [ 51.595006][ T3317] total_swap 204800 [ 51.595015][ T3317] total_swapcached 0 [ 51.595022][ T3317] total_pgpgin 37904 [ 51.595031][ T3317] total_pgpgout 37904 [ 51.595039][ T3317] total_pgfault 23659 [ 51.595048][ T3317] total_pgmajfault 29 [ 51.595057][ T3317] total_inactive_anon 0 [ 51.595065][ T3317] total_active_anon 0 [ 51.595074][ T3317] total_inactive_file 0 [ 51.595130][ T3317] total_active_file 0 [ 51.595138][ T3317] total_unevictable 0 [ 51.595148][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.280,pid=4285,uid=0 [ 51.595391][ T3317] Memory cgroup out of memory: Killed process 4285 (syz.2.280) total-vm:93956kB, anon-rss:1172kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 51.875601][ T4335] FAULT_INJECTION: forcing a failure. [ 51.875601][ T4335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.888800][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.2.300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.888827][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.888840][ T4335] Call Trace: [ 51.888847][ T4335] [ 51.888855][ T4335] __dump_stack+0x1d/0x30 [ 51.888909][ T4335] dump_stack_lvl+0xe8/0x140 [ 51.888942][ T4335] dump_stack+0x15/0x1b [ 51.888959][ T4335] should_fail_ex+0x265/0x280 [ 51.888978][ T4335] should_fail+0xb/0x20 [ 51.888994][ T4335] should_fail_usercopy+0x1a/0x20 [ 51.889043][ T4335] _copy_from_user+0x1c/0xb0 [ 51.889074][ T4335] ___sys_sendmsg+0xc1/0x1d0 [ 51.889107][ T4335] __x64_sys_sendmsg+0xd4/0x160 [ 51.889135][ T4335] x64_sys_call+0x191e/0x3000 [ 51.889161][ T4335] do_syscall_64+0xd2/0x200 [ 51.889191][ T4335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.889219][ T4335] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.889254][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.889284][ T4335] RIP: 0033:0x7eff4835f6c9 [ 51.889302][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.889358][ T4335] RSP: 002b:00007eff46dbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.889381][ T4335] RAX: ffffffffffffffda RBX: 00007eff485b5fa0 RCX: 00007eff4835f6c9 [ 51.889404][ T4335] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 51.889419][ T4335] RBP: 00007eff46dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 51.889485][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.889500][ T4335] R13: 00007eff485b6038 R14: 00007eff485b5fa0 R15: 00007fff063828c8 [ 51.889518][ T4335] [ 52.148364][ T4347] random: crng reseeded on system resumption [ 52.653647][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 52.653685][ T29] audit: type=1400 audit(1762615855.379:870): avc: denied { append } for pid=4383 comm="syz.0.320" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.932645][ T29] audit: type=1400 audit(1762615855.659:871): avc: denied { write } for pid=4393 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.009704][ T29] audit: type=1400 audit(1762615855.739:872): avc: denied { write } for pid=4393 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.145517][ T29] audit: type=1400 audit(1762615855.819:873): avc: denied { create } for pid=4413 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.165695][ T29] audit: type=1400 audit(1762615855.869:874): avc: denied { ioctl } for pid=4413 comm="syz.3.329" path="socket:[7591]" dev="sockfs" ino=7591 ioctlcmd=0x89f6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.282977][ T29] audit: type=1326 audit(1762615855.999:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 53.476074][ T29] audit: type=1326 audit(1762615856.009:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 53.499365][ T29] audit: type=1326 audit(1762615856.009:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 53.522887][ T29] audit: type=1326 audit(1762615856.009:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 53.546189][ T29] audit: type=1326 audit(1762615856.049:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78acef6c9 code=0x7ffc0000 [ 53.886280][ T4449] syzkaller0: entered allmulticast mode [ 53.923621][ T4449] syzkaller0: entered promiscuous mode [ 53.933135][ T4449] syzkaller0 (unregistering): left allmulticast mode [ 53.940011][ T4449] syzkaller0 (unregistering): left promiscuous mode [ 54.820194][ T4467] __nla_validate_parse: 6 callbacks suppressed [ 54.820211][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 54.849772][ T4471] syzkaller0: entered allmulticast mode [ 54.855715][ T4471] syzkaller0: entered promiscuous mode [ 54.863536][ T4471] syzkaller0 (unregistering): left allmulticast mode [ 54.870318][ T4471] syzkaller0 (unregistering): left promiscuous mode [ 55.073464][ T4487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.080854][ T4487] IPv6: NLM_F_CREATE should be set when creating new route [ 56.084384][ T4510] 9p: Unknown access argument : -22 [ 56.203954][ T4518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.211313][ T4518] IPv6: NLM_F_CREATE should be set when creating new route [ 56.309533][ T4526] SELinux: Context is not valid (left unmapped). [ 56.361152][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 57.329904][ T4560] 9p: Unknown access argument : -22 [ 57.841901][ T4589] 9p: Unknown access argument : -22 [ 57.863867][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 57.863886][ T29] audit: type=1326 audit(1762615860.589:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 57.893385][ T29] audit: type=1326 audit(1762615860.589:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 57.916693][ T29] audit: type=1326 audit(1762615860.589:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 57.939927][ T29] audit: type=1326 audit(1762615860.589:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 57.963147][ T29] audit: type=1326 audit(1762615860.589:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 57.988715][ T29] audit: type=1326 audit(1762615860.589:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 58.012017][ T29] audit: type=1326 audit(1762615860.589:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 58.035509][ T29] audit: type=1326 audit(1762615860.589:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 58.058766][ T29] audit: type=1326 audit(1762615860.589:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 58.082014][ T29] audit: type=1326 audit(1762615860.589:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9e9da9f6c9 code=0x7ffc0000 [ 58.134197][ T4595] syzkaller0: entered allmulticast mode [ 58.140265][ T4595] syzkaller0: entered promiscuous mode [ 58.147667][ T4595] syzkaller0 (unregistering): left allmulticast mode [ 58.154399][ T4595] syzkaller0 (unregistering): left promiscuous mode [ 58.334212][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'. [ 58.466588][ T4624] FAULT_INJECTION: forcing a failure. [ 58.466588][ T4624] name failslab, interval 1, probability 0, space 0, times 1 [ 58.479306][ T4624] CPU: 0 UID: 0 PID: 4624 Comm: syz.1.410 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.479337][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.479350][ T4624] Call Trace: [ 58.479404][ T4624] [ 58.479412][ T4624] __dump_stack+0x1d/0x30 [ 58.479452][ T4624] dump_stack_lvl+0xe8/0x140 [ 58.479476][ T4624] dump_stack+0x15/0x1b [ 58.479499][ T4624] should_fail_ex+0x265/0x280 [ 58.479523][ T4624] should_failslab+0x8c/0xb0 [ 58.479591][ T4624] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 58.479669][ T4624] ? __alloc_skb+0x101/0x320 [ 58.479702][ T4624] __alloc_skb+0x101/0x320 [ 58.479752][ T4624] netlink_alloc_large_skb+0xbf/0xf0 [ 58.479864][ T4624] netlink_sendmsg+0x3cf/0x6b0 [ 58.479888][ T4624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.479911][ T4624] __sock_sendmsg+0x145/0x180 [ 58.479937][ T4624] ____sys_sendmsg+0x31e/0x4e0 [ 58.480018][ T4624] ___sys_sendmsg+0x17b/0x1d0 [ 58.480051][ T4624] __x64_sys_sendmsg+0xd4/0x160 [ 58.480144][ T4624] x64_sys_call+0x191e/0x3000 [ 58.480170][ T4624] do_syscall_64+0xd2/0x200 [ 58.480267][ T4624] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.480299][ T4624] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.480337][ T4624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.480405][ T4624] RIP: 0033:0x7f5a4521f6c9 [ 58.480474][ T4624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.480494][ T4624] RSP: 002b:00007f5a43c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.480517][ T4624] RAX: ffffffffffffffda RBX: 00007f5a45475fa0 RCX: 00007f5a4521f6c9 [ 58.480532][ T4624] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 58.480547][ T4624] RBP: 00007f5a43c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.480560][ T4624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.480574][ T4624] R13: 00007f5a45476038 R14: 00007f5a45475fa0 R15: 00007ffdd89fd778 [ 58.480653][ T4624] [ 58.820532][ T4632] 9pnet_fd: Insufficient options for proto=fd [ 58.957489][ T4640] syzkaller0: entered allmulticast mode [ 58.973514][ T4640] syzkaller0: entered promiscuous mode [ 58.990001][ T4640] syzkaller0 (unregistering): left allmulticast mode [ 58.996752][ T4640] syzkaller0 (unregistering): left promiscuous mode [ 60.320824][ T4736] bond1: option updelay: invalid value (18446744073709531912) [ 60.328410][ T4736] bond1: option updelay: allowed values 0 - 2147483647 [ 60.328937][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 60.346300][ T3319] CPU: 0 UID: 0 PID: 3319 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.346330][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.346399][ T3319] Call Trace: [ 60.346406][ T3319] [ 60.346413][ T3319] __dump_stack+0x1d/0x30 [ 60.346438][ T3319] dump_stack_lvl+0xe8/0x140 [ 60.346460][ T3319] dump_stack+0x15/0x1b [ 60.346479][ T3319] dump_header+0x81/0x220 [ 60.346560][ T3319] oom_kill_process+0x342/0x400 [ 60.346596][ T3319] out_of_memory+0x979/0xb80 [ 60.346651][ T3319] try_charge_memcg+0x610/0xa10 [ 60.346689][ T3319] charge_memcg+0x51/0xc0 [ 60.346786][ T3319] __mem_cgroup_charge+0x28/0xb0 [ 60.346813][ T3319] filemap_add_folio+0x111/0x360 [ 60.346847][ T3319] __filemap_get_folio+0x31e/0x650 [ 60.346930][ T3319] filemap_fault+0x447/0xb60 [ 60.346955][ T3319] __do_fault+0xbc/0x200 [ 60.346983][ T3319] handle_mm_fault+0xf78/0x2be0 [ 60.347012][ T3319] ? vma_start_read+0x141/0x1f0 [ 60.347126][ T3319] do_user_addr_fault+0x630/0x1080 [ 60.347219][ T3319] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.347321][ T3319] exc_page_fault+0x62/0xa0 [ 60.347356][ T3319] asm_exc_page_fault+0x26/0x30 [ 60.347378][ T3319] RIP: 0033:0x7fc78abc5f24 [ 60.347396][ T3319] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 f7 ea 00 48 01 d1 [ 60.347416][ T3319] RSP: 002b:00007ffe43a93700 EFLAGS: 00010206 [ 60.347434][ T3319] RAX: 0000001b33724000 RBX: 00000000000000c1 RCX: 000000000000ea60 [ 60.347478][ T3319] RDX: 000000000419ddc0 RSI: 00007ffe43a93790 RDI: 0000000000000001 [ 60.347492][ T3319] RBP: 00007ffe43a9373c R08: 000000000fa4ebfa R09: 7fffffffffffffff [ 60.347506][ T3319] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 60.347523][ T3319] R13: 00000000000927c0 R14: 000000000000e8f0 R15: 00007ffe43a93790 [ 60.347544][ T3319] [ 60.347551][ T3319] memory: usage 307200kB, limit 307200kB, failcnt 1540 [ 60.545249][ T3319] memory+swap: usage 199864kB, limit 9007199254740988kB, failcnt 0 [ 60.553883][ T3319] kmem: usage 192324kB, limit 9007199254740988kB, failcnt 0 [ 60.561212][ T3319] Memory cgroup stats for /syz0: [ 60.563304][ T4736] bond1 (unregistering): Released all slaves [ 60.574573][ T3319] cache 1048576 [ 60.578041][ T3319] rss 110592 [ 60.581304][ T3319] shmem 0 [ 60.584252][ T3319] mapped_file 8192 [ 60.588065][ T3319] dirty 8192 [ 60.591445][ T3319] writeback 0 [ 60.594756][ T3319] workingset_refault_anon 114 [ 60.599551][ T3319] workingset_refault_file 591 [ 60.604242][ T3319] swap 61440 [ 60.607484][ T3319] swapcached 135168 [ 60.611373][ T3319] pgpgin 43977 [ 60.614747][ T3319] pgpgout 43687 [ 60.618214][ T3319] pgfault 47630 [ 60.621804][ T3319] pgmajfault 61 [ 60.625274][ T3319] inactive_anon 12288 [ 60.629362][ T3319] active_anon 126976 [ 60.633307][ T3319] inactive_file 0 [ 60.637121][ T3319] active_file 1048576 [ 60.641144][ T3319] unevictable 0 [ 60.644637][ T3319] hierarchical_memory_limit 314572800 [ 60.650058][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 60.656221][ T3319] total_cache 1048576 [ 60.660343][ T3319] total_rss 110592 [ 60.664117][ T3319] total_shmem 0 [ 60.667589][ T3319] total_mapped_file 8192 [ 60.671945][ T3319] total_dirty 8192 [ 60.675700][ T3319] total_writeback 0 [ 60.679561][ T3319] total_workingset_refault_anon 114 [ 60.684830][ T3319] total_workingset_refault_file 591 [ 60.690061][ T3319] total_swap 61440 [ 60.693787][ T3319] total_swapcached 135168 [ 60.698121][ T3319] total_pgpgin 43977 [ 60.702059][ T3319] total_pgpgout 43687 [ 60.706065][ T3319] total_pgfault 47630 [ 60.710077][ T3319] total_pgmajfault 61 [ 60.714069][ T3319] total_inactive_anon 12288 [ 60.718648][ T3319] total_active_anon 126976 [ 60.723105][ T3319] total_inactive_file 0 [ 60.727268][ T3319] total_active_file 1048576 [ 60.731811][ T3319] total_unevictable 0 [ 60.735837][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.436,pid=4696,uid=0 [ 60.750382][ T3319] Memory cgroup out of memory: Killed process 4698 (syz.0.436) total-vm:93956kB, anon-rss:1260kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 61.042262][ T4706] syz.2.439 (4706) used greatest stack depth: 7096 bytes left [ 61.405152][ T4780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 61.558325][ T4796] 9pnet_fd: Insufficient options for proto=fd [ 62.087649][ T4821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 62.191608][ T4823] vhci_hcd: invalid port number 96 [ 62.196787][ T4823] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 62.219554][ T4829] 9pnet_fd: Insufficient options for proto=fd [ 62.416934][ T4848] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.450526][ T4848] SELinux: failed to load policy [ 62.516900][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 62.537904][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.490'. [ 62.859308][ T4874] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 62.869814][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 62.869831][ T29] audit: type=1400 audit(1762615865.599:1293): avc: denied { relabelto } for pid=4873 comm="syz.3.497" name="UDP" dev="sockfs" ino=8965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 62.926416][ T29] audit: type=1326 audit(1762615865.649:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 62.950096][ T29] audit: type=1326 audit(1762615865.649:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 62.973491][ T29] audit: type=1326 audit(1762615865.649:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 62.996855][ T29] audit: type=1326 audit(1762615865.649:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 63.020272][ T29] audit: type=1326 audit(1762615865.649:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 63.043660][ T29] audit: type=1326 audit(1762615865.649:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 63.067002][ T29] audit: type=1326 audit(1762615865.649:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 63.090449][ T29] audit: type=1326 audit(1762615865.649:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 63.113951][ T29] audit: type=1326 audit(1762615865.649:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 63.349674][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'. [ 63.523281][ T4913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.608453][ T4917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.694821][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 63.703842][ T4922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'. [ 63.712763][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 63.725721][ T4922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'. [ 63.734700][ T4922] netlink: 'syz.2.508': attribute type 6 has an invalid length. [ 63.768413][ T4917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.923845][ T4917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.014253][ T4917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.096925][ T4942] hub 1-0:1.0: USB hub found [ 64.111162][ T4942] hub 1-0:1.0: 8 ports detected [ 64.131600][ T4944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 64.138883][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.189426][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.236094][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.254753][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.878909][ T5006] wg2: entered promiscuous mode [ 64.884014][ T5006] wg2: entered allmulticast mode [ 64.954216][ T5012] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.967657][ T5012] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 65.471426][ T5045] syzkaller0: entered allmulticast mode [ 65.499713][ T5045] syzkaller0: entered promiscuous mode [ 65.507217][ T5045] syzkaller0 (unregistering): left allmulticast mode [ 65.514108][ T5045] syzkaller0 (unregistering): left promiscuous mode [ 65.671413][ T5058] syzkaller0: entered allmulticast mode [ 65.693905][ T5058] syzkaller0: entered promiscuous mode [ 65.714221][ T5058] syzkaller0 (unregistering): left allmulticast mode [ 65.721010][ T5058] syzkaller0 (unregistering): left promiscuous mode [ 66.060448][ T5091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.434744][ T5101] FAULT_INJECTION: forcing a failure. [ 66.434744][ T5101] name failslab, interval 1, probability 0, space 0, times 0 [ 66.447483][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz.1.575 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.447514][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.447527][ T5101] Call Trace: [ 66.447535][ T5101] [ 66.447543][ T5101] __dump_stack+0x1d/0x30 [ 66.447565][ T5101] dump_stack_lvl+0xe8/0x140 [ 66.447585][ T5101] dump_stack+0x15/0x1b [ 66.447602][ T5101] should_fail_ex+0x265/0x280 [ 66.447624][ T5101] should_failslab+0x8c/0xb0 [ 66.447657][ T5101] kmem_cache_alloc_noprof+0x50/0x480 [ 66.447690][ T5101] ? mas_alloc_nodes+0x1a2/0x210 [ 66.447711][ T5101] mas_alloc_nodes+0x1a2/0x210 [ 66.447729][ T5101] mas_preallocate+0x2ca/0x510 [ 66.447751][ T5101] __split_vma+0x240/0x650 [ 66.447791][ T5101] ? mas_find+0x5d5/0x700 [ 66.447814][ T5101] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 66.447845][ T5101] do_vmi_align_munmap+0x1ac/0x3d0 [ 66.447878][ T5101] do_vmi_munmap+0x1db/0x220 [ 66.447906][ T5101] do_munmap+0x79/0xb0 [ 66.447933][ T5101] mremap_to+0x192/0x430 [ 66.447965][ T5101] ? check_prep_vma+0x5d6/0x660 [ 66.448000][ T5101] __se_sys_mremap+0x632/0xb30 [ 66.448040][ T5101] ? fput+0x8f/0xc0 [ 66.448061][ T5101] ? ksys_write+0x192/0x1a0 [ 66.448086][ T5101] __x64_sys_mremap+0x67/0x80 [ 66.448113][ T5101] x64_sys_call+0x2a28/0x3000 [ 66.448138][ T5101] do_syscall_64+0xd2/0x200 [ 66.448158][ T5101] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.448186][ T5101] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.448219][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.448244][ T5101] RIP: 0033:0x7f5a4521f6c9 [ 66.448262][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.448283][ T5101] RSP: 002b:00007f5a43c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 66.448303][ T5101] RAX: ffffffffffffffda RBX: 00007f5a45476090 RCX: 00007f5a4521f6c9 [ 66.448315][ T5101] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 66.448327][ T5101] RBP: 00007f5a43c5e090 R08: 0000200000000000 R09: 0000000000000000 [ 66.448339][ T5101] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 66.448353][ T5101] R13: 00007f5a45476128 R14: 00007f5a45476090 R15: 00007ffdd89fd778 [ 66.448374][ T5101] [ 66.751474][ T5103] syzkaller0: entered allmulticast mode [ 66.757201][ T5103] syzkaller0: entered promiscuous mode [ 66.768685][ T5103] syzkaller0 (unregistering): left allmulticast mode [ 66.775471][ T5103] syzkaller0 (unregistering): left promiscuous mode [ 67.038134][ T5121] loop1: detected capacity change from 0 to 1024 [ 67.061200][ T5121] EXT4-fs: Ignoring removed orlov option [ 67.076465][ T5126] FAULT_INJECTION: forcing a failure. [ 67.076465][ T5126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.089623][ T5126] CPU: 0 UID: 0 PID: 5126 Comm: syz.4.588 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.089680][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.089693][ T5126] Call Trace: [ 67.089700][ T5126] [ 67.089710][ T5126] __dump_stack+0x1d/0x30 [ 67.089808][ T5126] dump_stack_lvl+0xe8/0x140 [ 67.089833][ T5126] dump_stack+0x15/0x1b [ 67.089853][ T5126] should_fail_ex+0x265/0x280 [ 67.089921][ T5126] should_fail+0xb/0x20 [ 67.090009][ T5126] should_fail_usercopy+0x1a/0x20 [ 67.090104][ T5126] _copy_from_user+0x1c/0xb0 [ 67.090128][ T5126] xfrm_user_policy+0x19b/0x540 [ 67.090195][ T5126] do_ipv6_setsockopt+0x1266/0x2160 [ 67.090232][ T5126] ? kstrtoull+0x111/0x140 [ 67.090261][ T5126] ? __rcu_read_unlock+0x4f/0x70 [ 67.090292][ T5126] ? avc_has_perm_noaudit+0x1b1/0x200 [ 67.090332][ T5126] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 67.090368][ T5126] ipv6_setsockopt+0x59/0x130 [ 67.090476][ T5126] rawv6_setsockopt+0x1d2/0x420 [ 67.090515][ T5126] sock_common_setsockopt+0x69/0x80 [ 67.090547][ T5126] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.090577][ T5126] __sys_setsockopt+0x184/0x200 [ 67.090820][ T5126] __x64_sys_setsockopt+0x64/0x80 [ 67.090858][ T5126] x64_sys_call+0x20ec/0x3000 [ 67.090917][ T5126] do_syscall_64+0xd2/0x200 [ 67.090946][ T5126] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.090976][ T5126] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.091177][ T5126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.091204][ T5126] RIP: 0033:0x7f9e9da9f6c9 [ 67.091222][ T5126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.091243][ T5126] RSP: 002b:00007f9e9c4ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.091296][ T5126] RAX: ffffffffffffffda RBX: 00007f9e9dcf5fa0 RCX: 00007f9e9da9f6c9 [ 67.091312][ T5126] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000005 [ 67.091327][ T5126] RBP: 00007f9e9c4ff090 R08: 000000000000005c R09: 0000000000000000 [ 67.091341][ T5126] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 67.091358][ T5126] R13: 00007f9e9dcf6038 R14: 00007f9e9dcf5fa0 R15: 00007fffcac28338 [ 67.091379][ T5126] [ 67.370196][ T5121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.402263][ T5121] __nla_validate_parse: 15 callbacks suppressed [ 67.402299][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 67.430498][ T5133] FAULT_INJECTION: forcing a failure. [ 67.430498][ T5133] name failslab, interval 1, probability 0, space 0, times 0 [ 67.443195][ T5133] CPU: 0 UID: 0 PID: 5133 Comm: syz.4.589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.443232][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.443245][ T5133] Call Trace: [ 67.443251][ T5133] [ 67.443317][ T5133] __dump_stack+0x1d/0x30 [ 67.443345][ T5133] dump_stack_lvl+0xe8/0x140 [ 67.443371][ T5133] dump_stack+0x15/0x1b [ 67.443472][ T5133] should_fail_ex+0x265/0x280 [ 67.443500][ T5133] should_failslab+0x8c/0xb0 [ 67.443535][ T5133] kmem_cache_alloc_noprof+0x50/0x480 [ 67.443643][ T5133] ? security_inode_alloc+0x37/0x100 [ 67.443670][ T5133] security_inode_alloc+0x37/0x100 [ 67.443695][ T5133] inode_init_always_gfp+0x4b7/0x500 [ 67.443781][ T5133] ? __pfx_sock_alloc_inode+0x10/0x10 [ 67.443811][ T5133] alloc_inode+0x58/0x170 [ 67.443835][ T5133] __sock_create+0x122/0x5b0 [ 67.443865][ T5133] ? __rcu_read_unlock+0x4f/0x70 [ 67.443952][ T5133] sock_create_kern+0x38/0x50 [ 67.443977][ T5133] udp_sock_create4+0x66/0x2a0 [ 67.444020][ T5133] wg_socket_init+0x21e/0x600 [ 67.444056][ T5133] ? __pfx_wg_receive+0x10/0x10 [ 67.444095][ T5133] wg_open+0xfd/0x1b0 [ 67.444119][ T5133] __dev_open+0x2d5/0x530 [ 67.444146][ T5133] __dev_change_flags+0x163/0x400 [ 67.444181][ T5133] netif_change_flags+0x5a/0xd0 [ 67.444216][ T5133] dev_change_flags+0xce/0x180 [ 67.444244][ T5133] dev_ifsioc+0x44b/0xaa0 [ 67.444272][ T5133] ? __rcu_read_unlock+0x4f/0x70 [ 67.444297][ T5133] dev_ioctl+0x70a/0x960 [ 67.444319][ T5133] sock_do_ioctl+0x197/0x220 [ 67.444349][ T5133] sock_ioctl+0x41b/0x610 [ 67.444408][ T5133] ? __pfx_sock_ioctl+0x10/0x10 [ 67.444433][ T5133] __se_sys_ioctl+0xce/0x140 [ 67.444459][ T5133] __x64_sys_ioctl+0x43/0x50 [ 67.444484][ T5133] x64_sys_call+0x1816/0x3000 [ 67.444545][ T5133] do_syscall_64+0xd2/0x200 [ 67.444580][ T5133] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.444686][ T5133] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.444856][ T5133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.444881][ T5133] RIP: 0033:0x7f9e9da9f6c9 [ 67.444900][ T5133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.444917][ T5133] RSP: 002b:00007f9e9c4ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.444938][ T5133] RAX: ffffffffffffffda RBX: 00007f9e9dcf5fa0 RCX: 00007f9e9da9f6c9 [ 67.444978][ T5133] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000007 [ 67.445057][ T5133] RBP: 00007f9e9c4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 67.445125][ T5133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.445215][ T5133] R13: 00007f9e9dcf6038 R14: 00007f9e9dcf5fa0 R15: 00007fffcac28338 [ 67.445234][ T5133] [ 67.445245][ T5133] socket: no more sockets [ 67.719752][ T5133] wireguard: wg2: Could not create IPv4 socket [ 67.725923][ T5133] wg2: entered promiscuous mode [ 67.730828][ T5133] wg2: entered allmulticast mode [ 67.820251][ T5143] syz.2.592 uses obsolete (PF_INET,SOCK_PACKET) [ 67.833473][ T5143] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 67.833473][ T5143] Q׿2:[kz' to dns_resolver key: bad/missing value [ 67.864723][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.930662][ T5155] netlink: 188 bytes leftover after parsing attributes in process `syz.2.598'. [ 68.100715][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 68.100730][ T29] audit: type=1400 audit(1762615871.833:1480): avc: denied { create } for pid=5176 comm="syz.1.608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.104242][ T5180] wg2: left promiscuous mode [ 68.132473][ T5180] wg2: left allmulticast mode [ 68.138114][ T5179] netlink: 56 bytes leftover after parsing attributes in process `syz.1.608'. [ 68.155968][ T5180] wg2: entered promiscuous mode [ 68.161037][ T5180] wg2: entered allmulticast mode [ 68.227242][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 68.236113][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 68.335244][ T5193] netlink: 188 bytes leftover after parsing attributes in process `syz.4.613'. [ 68.456231][ T5191] ======================================================= [ 68.456231][ T5191] WARNING: The mand mount option has been deprecated and [ 68.456231][ T5191] and is ignored by this kernel. Remove the mand [ 68.456231][ T5191] option from the mount to silence this warning. [ 68.456231][ T5191] ======================================================= [ 68.491372][ T29] audit: type=1400 audit(1762615872.183:1481): avc: denied { mounton } for pid=5176 comm="syz.1.608" path="/136/file0" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.529668][ T5191] ./file0: Can't open blockdev [ 68.623884][ T29] audit: type=1400 audit(1762615872.353:1482): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.731593][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 68.748922][ T29] audit: type=1400 audit(1762615872.473:1483): avc: denied { read write } for pid=5216 comm="syz.4.617" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.772906][ T29] audit: type=1400 audit(1762615872.473:1484): avc: denied { open } for pid=5216 comm="syz.4.617" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.838959][ T5220] netlink: 188 bytes leftover after parsing attributes in process `syz.2.624'. [ 68.882045][ T29] audit: type=1400 audit(1762615872.613:1485): avc: denied { bind } for pid=5226 comm="syz.2.626" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.902441][ T29] audit: type=1400 audit(1762615872.613:1486): avc: denied { node_bind } for pid=5226 comm="syz.2.626" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.925557][ T5227] veth5: entered promiscuous mode [ 68.946757][ T5231] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 68.966690][ T5231] bond1: entered promiscuous mode [ 68.966865][ T5231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.016080][ T5231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.016776][ T5231] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 69.016852][ T5231] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 69.018929][ T5231] bond1: (slave xfrm1): making interface the new active one [ 69.018945][ T5231] xfrm1: entered promiscuous mode [ 69.021312][ T5231] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 69.051949][ T29] audit: type=1400 audit(1762615872.783:1487): avc: denied { getopt } for pid=5232 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.107299][ T29] audit: type=1326 audit(1762615872.833:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4521f6c9 code=0x7ffc0000 [ 69.108173][ T29] audit: type=1326 audit(1762615872.833:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a4521f6c9 code=0x7ffc0000 [ 69.112584][ T5237] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.112707][ T5237] vhci_hcd: invalid port number 96 [ 69.112718][ T5237] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 69.279411][ T5257] netlink: 188 bytes leftover after parsing attributes in process `syz.4.637'. [ 70.587425][ T5291] netlink: 188 bytes leftover after parsing attributes in process `syz.4.649'. [ 70.621476][ T5297] 9pnet_fd: Insufficient options for proto=fd [ 70.781050][ T5304] syzkaller0: entered allmulticast mode [ 70.793086][ T5304] syzkaller0: entered promiscuous mode [ 70.981401][ T5311] syzkaller0 (unregistering): left allmulticast mode [ 70.988155][ T5311] syzkaller0 (unregistering): left promiscuous mode [ 72.776417][ T5396] syzkaller0: entered allmulticast mode [ 72.794611][ T5396] syzkaller0: entered promiscuous mode [ 72.819967][ T5396] syzkaller0 (unregistering): left allmulticast mode [ 72.826726][ T5396] syzkaller0 (unregistering): left promiscuous mode [ 72.830096][ T5405] __nla_validate_parse: 4 callbacks suppressed [ 72.830111][ T5405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 73.258433][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 73.258526][ T29] audit: type=1400 audit(1762615876.983:1505): avc: denied { append } for pid=5451 comm="syz.2.679" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.287994][ T29] audit: type=1400 audit(1762615876.983:1506): avc: denied { ioctl } for pid=5451 comm="syz.2.679" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.314223][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 73.446745][ T5469] sch_fq: defrate 4294967295 ignored. [ 73.452925][ T5469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5469 comm=syz.2.679 [ 73.466413][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 73.475778][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 73.489831][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 73.521728][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 73.559107][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 73.559678][ T29] audit: type=1400 audit(1762615877.253:1507): avc: denied { getopt } for pid=5467 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.731423][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 73.847916][ T29] audit: type=1326 audit(1762615877.573:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 73.909669][ T29] audit: type=1326 audit(1762615877.613:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 73.933083][ T29] audit: type=1326 audit(1762615877.613:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 73.956405][ T29] audit: type=1326 audit(1762615877.613:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 73.979767][ T29] audit: type=1326 audit(1762615877.613:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 74.003171][ T29] audit: type=1326 audit(1762615877.613:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 74.026523][ T29] audit: type=1326 audit(1762615877.613:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c42af6c9 code=0x7ffc0000 [ 74.211551][ T5510] 9pnet_fd: Insufficient options for proto=fd [ 74.433116][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 74.448800][ T5525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 75.712819][ T5578] syzkaller0: entered allmulticast mode [ 75.725000][ T5578] syzkaller0: entered promiscuous mode [ 75.734871][ T5578] syzkaller0 (unregistering): left allmulticast mode [ 75.741779][ T5578] syzkaller0 (unregistering): left promiscuous mode [ 76.908864][ T5602] syz.4.732 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 76.919829][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: syz.4.732 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.919858][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.919937][ T5602] Call Trace: [ 76.919945][ T5602] [ 76.919955][ T5602] __dump_stack+0x1d/0x30 [ 76.919981][ T5602] dump_stack_lvl+0xe8/0x140 [ 76.920006][ T5602] dump_stack+0x15/0x1b [ 76.920024][ T5602] dump_header+0x81/0x220 [ 76.920060][ T5602] oom_kill_process+0x342/0x400 [ 76.920091][ T5602] out_of_memory+0x979/0xb80 [ 76.920120][ T5602] try_charge_memcg+0x610/0xa10 [ 76.920178][ T5602] charge_memcg+0x51/0xc0 [ 76.920199][ T5602] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 76.920228][ T5602] __read_swap_cache_async+0x17b/0x2d0 [ 76.920314][ T5602] swap_cluster_readahead+0x262/0x3c0 [ 76.920339][ T5602] swapin_readahead+0xde/0x6f0 [ 76.920361][ T5602] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 76.920396][ T5602] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 76.920428][ T5602] ? __rcu_read_unlock+0x4f/0x70 [ 76.920452][ T5602] ? swap_cache_get_folio+0x277/0x280 [ 76.920477][ T5602] do_swap_page+0x2ae/0x2370 [ 76.920530][ T5602] ? css_rstat_updated+0xb7/0x240 [ 76.920551][ T5602] ? __pfx_default_wake_function+0x10/0x10 [ 76.920579][ T5602] handle_mm_fault+0x9a5/0x2be0 [ 76.920605][ T5602] ? vma_start_read+0x141/0x1f0 [ 76.920661][ T5602] do_user_addr_fault+0x630/0x1080 [ 76.920683][ T5602] ? task_work_run+0x16a/0x1a0 [ 76.920709][ T5602] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 76.920745][ T5602] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 76.920858][ T5602] exc_page_fault+0x62/0xa0 [ 76.920892][ T5602] asm_exc_page_fault+0x26/0x30 [ 76.920914][ T5602] RIP: 0033:0x7f9e9d975918 [ 76.920938][ T5602] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d aa 24 38 00 00 0f 8e 09 fe ff ff e8 d3 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 [ 76.920958][ T5602] RSP: 002b:00007fffcac284a0 EFLAGS: 00010212 [ 76.921031][ T5602] RAX: 0000000000012c28 RBX: 00007f9e9dcf7da0 RCX: 00000000000128e0 [ 76.921047][ T5602] RDX: 0000000000000348 RSI: 00007fffcac28480 RDI: 0000000000000001 [ 76.921063][ T5602] RBP: 00007f9e9dcf7da0 R08: 00000000321251eb R09: 7fffffffffffffff [ 76.921084][ T5602] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000012c96 [ 76.921098][ T5602] R13: 00007f9e9dcf6090 R14: ffffffffffffffff R15: 00007fffcac285b0 [ 76.921164][ T5602] [ 76.921172][ T5602] memory: usage 307200kB, limit 307200kB, failcnt 187 [ 77.164580][ T5602] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 77.172660][ T5602] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 77.180133][ T5602] Memory cgroup stats for /syz4: [ 77.180382][ T5602] cache 0 [ 77.188295][ T5602] rss 0 [ 77.191102][ T5602] shmem 0 [ 77.194042][ T5602] mapped_file 0 [ 77.197509][ T5602] dirty 0 [ 77.200484][ T5602] writeback 0 [ 77.203917][ T5602] workingset_refault_anon 9 [ 77.208428][ T5602] workingset_refault_file 1 [ 77.212952][ T5602] swap 385024 [ 77.216339][ T5602] swapcached 8192 [ 77.220065][ T5602] pgpgin 127441 [ 77.224006][ T5602] pgpgout 127439 [ 77.227566][ T5602] pgfault 85863 [ 77.231250][ T5602] pgmajfault 8 [ 77.234849][ T5602] inactive_anon 8192 [ 77.238773][ T5602] active_anon 0 [ 77.242261][ T5602] inactive_file 0 [ 77.245897][ T5602] active_file 0 [ 77.249533][ T5602] unevictable 0 [ 77.253086][ T5602] hierarchical_memory_limit 314572800 [ 77.258461][ T5602] hierarchical_memsw_limit 9223372036854771712 [ 77.264669][ T5602] total_cache 0 [ 77.268145][ T5602] total_rss 0 [ 77.271445][ T5602] total_shmem 0 [ 77.274907][ T5602] total_mapped_file 0 [ 77.278870][ T5602] total_dirty 0 [ 77.282333][ T5602] total_writeback 0 [ 77.286140][ T5602] total_workingset_refault_anon 9 [ 77.291170][ T5602] total_workingset_refault_file 1 [ 77.296194][ T5602] total_swap 385024 [ 77.300040][ T5602] total_swapcached 8192 [ 77.304198][ T5602] total_pgpgin 127441 [ 77.308163][ T5602] total_pgpgout 127439 [ 77.312279][ T5602] total_pgfault 85863 [ 77.316337][ T5602] total_pgmajfault 8 [ 77.320244][ T5602] total_inactive_anon 8192 [ 77.324657][ T5602] total_active_anon 0 [ 77.328644][ T5602] total_inactive_file 0 [ 77.332881][ T5602] total_active_file 0 [ 77.336859][ T5602] total_unevictable 0 [ 77.340870][ T5602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.732,pid=5602,uid=0 [ 77.355424][ T5602] Memory cgroup out of memory: Killed process 5602 (syz.4.732) total-vm:96004kB, anon-rss:1136kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 77.466759][ T5637] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.100603][ T5672] 9pnet_fd: Insufficient options for proto=fd [ 78.796444][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 78.796461][ T29] audit: type=1400 audit(1762615882.523:1558): avc: denied { module_load } for pid=5695 comm="syz.0.761" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 78.968613][ T5698] FAULT_INJECTION: forcing a failure. [ 78.968613][ T5698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.981943][ T5698] CPU: 1 UID: 0 PID: 5698 Comm: syz.0.761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.981977][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.982046][ T5698] Call Trace: [ 78.982052][ T5698] [ 78.982061][ T5698] __dump_stack+0x1d/0x30 [ 78.982088][ T5698] dump_stack_lvl+0xe8/0x140 [ 78.982133][ T5698] dump_stack+0x15/0x1b [ 78.982155][ T5698] should_fail_ex+0x265/0x280 [ 78.982180][ T5698] should_fail+0xb/0x20 [ 78.982199][ T5698] should_fail_usercopy+0x1a/0x20 [ 78.982308][ T5698] _copy_from_user+0x1c/0xb0 [ 78.982339][ T5698] xt_copy_counters+0x243/0x2d0 [ 78.982370][ T5698] ? security_capable+0x83/0x90 [ 78.982410][ T5698] do_arpt_set_ctl+0xb3/0x9a0 [ 78.982503][ T5698] ? _raw_spin_unlock_bh+0x36/0x40 [ 78.982529][ T5698] ? tcp_release_cb+0xf1/0x370 [ 78.982547][ T5698] ? _raw_spin_unlock_bh+0x36/0x40 [ 78.982619][ T5698] ? sockopt_release_sock+0x42/0x50 [ 78.982663][ T5698] ? do_ip_setsockopt+0x1af3/0x2240 [ 78.982706][ T5698] nf_setsockopt+0x199/0x1b0 [ 78.982794][ T5698] ip_setsockopt+0x102/0x110 [ 78.982831][ T5698] tcp_setsockopt+0x98/0xb0 [ 78.982856][ T5698] sock_common_setsockopt+0x69/0x80 [ 78.982886][ T5698] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 78.982973][ T5698] smc_setsockopt+0x183/0x750 [ 78.982997][ T5698] ? __pfx_smc_setsockopt+0x10/0x10 [ 78.983020][ T5698] __sys_setsockopt+0x184/0x200 [ 78.983127][ T5698] __x64_sys_setsockopt+0x64/0x80 [ 78.983185][ T5698] x64_sys_call+0x20ec/0x3000 [ 78.983213][ T5698] do_syscall_64+0xd2/0x200 [ 78.983233][ T5698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.983259][ T5698] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.983361][ T5698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.983388][ T5698] RIP: 0033:0x7fc78acef6c9 [ 78.983407][ T5698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.983459][ T5698] RSP: 002b:00007fc789736038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.983480][ T5698] RAX: ffffffffffffffda RBX: 00007fc78af46090 RCX: 00007fc78acef6c9 [ 78.983493][ T5698] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000005 [ 78.983504][ T5698] RBP: 00007fc789736090 R08: 0000000000000068 R09: 0000000000000000 [ 78.983518][ T5698] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.983533][ T5698] R13: 00007fc78af46128 R14: 00007fc78af46090 R15: 00007ffe43a93378 [ 78.983555][ T5698] [ 79.382776][ T29] audit: type=1326 audit(1762615883.113:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4521f6c9 code=0x7ffc0000 [ 79.448494][ T29] audit: type=1326 audit(1762615883.133:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a4521f6c9 code=0x7ffc0000 [ 79.518041][ T29] audit: type=1326 audit(1762615883.223:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4521f6c9 code=0x7ffc0000 [ 79.631162][ T29] audit: type=1326 audit(1762615883.353:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.2.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 79.710417][ T29] audit: type=1326 audit(1762615883.363:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.2.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 79.733802][ T29] audit: type=1326 audit(1762615883.363:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.2.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 79.757181][ T29] audit: type=1326 audit(1762615883.363:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.2.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 79.780543][ T29] audit: type=1326 audit(1762615883.363:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.2.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 79.803903][ T29] audit: type=1326 audit(1762615883.363:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.2.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4835f6c9 code=0x7ffc0000 [ 80.109348][ T5752] vxcan1: tx drop: invalid da for name 0xfffffffffffffffb [ 80.118083][ T5754] ================================================================== [ 80.126192][ T5754] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 80.133769][ T5754] [ 80.136104][ T5754] write to 0xffff88810421a208 of 8 bytes by task 5751 on cpu 0: [ 80.143744][ T5754] mas_wr_store_entry+0x1192/0x26e0 [ 80.148957][ T5754] mas_store_prealloc+0x74d/0xa80 [ 80.153999][ T5754] commit_merge+0x6a5/0x730 [ 80.158525][ T5754] vma_expand+0x220/0x320 [ 80.162873][ T5754] vma_merge_new_range+0x296/0x310 [ 80.168010][ T5754] mmap_region+0xa50/0x1620 [ 80.172536][ T5754] do_mmap+0x9b3/0xbe0 [ 80.176624][ T5754] vm_mmap_pgoff+0x17a/0x2e0 [ 80.181238][ T5754] ksys_mmap_pgoff+0xc2/0x310 [ 80.185924][ T5754] x64_sys_call+0x14a3/0x3000 [ 80.190616][ T5754] do_syscall_64+0xd2/0x200 [ 80.195149][ T5754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.201064][ T5754] [ 80.203414][ T5754] read to 0xffff88810421a208 of 8 bytes by task 5754 on cpu 1: [ 80.211045][ T5754] mas_state_walk+0x28f/0x650 [ 80.215752][ T5754] mas_walk+0x60/0x150 [ 80.219855][ T5754] lock_vma_under_rcu+0x95/0x170 [ 80.224812][ T5754] do_user_addr_fault+0x233/0x1080 [ 80.229946][ T5754] exc_page_fault+0x62/0xa0 [ 80.234474][ T5754] asm_exc_page_fault+0x26/0x30 [ 80.239347][ T5754] [ 80.241682][ T5754] value changed: 0x00007eff46d5cfff -> 0x00007eff46d3bfff [ 80.248796][ T5754] [ 80.251126][ T5754] Reported by Kernel Concurrency Sanitizer on: [ 80.257290][ T5754] CPU: 1 UID: 0 PID: 5754 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.266939][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.276999][ T5754] ==================================================================