last executing test programs: 2m24.199897217s ago: executing program 3 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 2m24.112661174s ago: executing program 3 (id=142): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0x4}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20a6, 0x2400) ioctl$USBDEVFS_CONNECTINFO(r10, 0x40085511, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x8000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000000c0)={[{@grpquota}, {@block_validity}, {@grpid}, {@oldalloc}, {@nombcache}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r12, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) fcntl$lock(r12, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 2m23.630683574s ago: executing program 3 (id=146): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x0, 0x1}, 0x48) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) 2m22.650161333s ago: executing program 3 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 2m21.586258929s ago: executing program 3 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m20.658482935s ago: executing program 3 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f00000002c0)) 2m20.521722216s ago: executing program 32 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f00000002c0)) 7.319863816s ago: executing program 5 (id=1172): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 6.717940725s ago: executing program 2 (id=1176): socket(0x10, 0x80003, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x12c2, &(0x7f0000000140)={0x0, 0x5eda, 0x10100, 0x1, 0x12a}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.413257189s ago: executing program 5 (id=1177): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @rand_addr, 0x4}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200008, &(0x7f0000000800)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@block_validity}, {@dax_never}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x1, 0x516, &(0x7f0000001540)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r0, @ANYRES8=r1, @ANYRES64], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x727fed28d3a6b689, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0xffffffffffffff3d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}) rt_tgsigqueueinfo(0x0, 0x0, 0x41, 0x0) llistxattr(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0800, 0x0) fallocate(r5, 0x20, 0x8, 0x7fffffffffffffff) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="0000101a000000006e3f1fd101160401fc010000000000000000000000000000ff0100000000000000000000000000010809000000000000010400000000040108c91020010000000000000000000000000000050200080502fffc010700000000000000c20400000001c910fc010000000000000000000000000000000100c204000000000000002b08000700000000fe880000000000000000000000000001fe8000000000000000000000000000aafc01000000000000000000000000000100000000000000000000ffff0a0101022c08040409080000fe8000000000400000000000000000aafe8000000000000000000000000000aafc010000000000001000000000000000fc020000000000000000000000000001967f41a2ce7f74b7c77f9c556aaaf02e2126518976d4452dfb2161488c9e7b2015f3a73d0755aeb7def9e99216429f9103c3a96baf560798631f732a352c9fe5f7157fa28621568617ac4bbb49b59b784f4d0fbbf0b0bee5b3d54fbb2d314ab3ab7b06c1906f9aa5e82c669ad535f8ef208e807aeab0a476f97a68b128d3b16f997af18eb0421e6c376befae67b4453a028c08f771ea50daeb578590b397144fa80e1afc5d93fe679e610fcf7aab78f3039969d31ec0624522570200"/483], 0x156) sendmsg$SEG6_CMD_GET_TUNSRC(r4, 0x0, 0x4000000) r6 = io_uring_setup(0x79c4, &(0x7f0000000500)={0x0, 0x90fb, 0x400, 0x2, 0x64}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x400) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x8500017e) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x0, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 6.249486753s ago: executing program 5 (id=1180): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 6.201890256s ago: executing program 1 (id=1182): syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "26739c"}}}}}, 0x0) 6.03009602s ago: executing program 5 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x510, &(0x7f0000000fc0)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x14) pipe(&(0x7f0000000640)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000580)={0x0, 0x8000000003ff, 0x5, 0x100}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_drop_inode\x00', r7}, 0x18) r8 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000240000e00000119078000000000000000000000000ea43d6"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x1ab, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004800019d00000002001190"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 6.029855841s ago: executing program 1 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x4c}}, 0x24040084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$rds(0x15, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bind$rds(r9, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4d}}], 0x30}, 0x24000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 3.81866925s ago: executing program 1 (id=1185): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000001801400020073797a5f74756e000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = memfd_secret(0x80000) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x3, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000400)=@assoc_value, &(0x7f00000004c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000080000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='(pu&00\t||') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x400, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8, 0x0, 0x20000}, 0x18) r9 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.762952205s ago: executing program 2 (id=1187): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 3.546164442s ago: executing program 5 (id=1189): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000190081084e81f783db4cb9040a07290006007c09e8fc55a10a0015000600142603600e12080002008100040104000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getcwd(&(0x7f0000000340)=""/107, 0x6b) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket(0x28, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bind$vsock_stream(r4, 0x0, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) 3.545755142s ago: executing program 0 (id=1190): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 3.117861967s ago: executing program 4 (id=1194): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x5, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000100) r7 = syz_io_uring_setup(0x1289, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x1, 0xfffffffe}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) iopl(0x2) iopl(0x1) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000940), 0x1, 0x79d, &(0x7f0000000980)="$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") r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x1de, 0x0, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r11, 0x0, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, 0x0) 3.117343557s ago: executing program 1 (id=1195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x400000008000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x114, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x5e1, 0xfffffffffffffd3b) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = io_uring_setup(0x1694, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240), 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0xc, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r11, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xdc, r11, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "20a310dca45ead8e4578e9e844f0cd4a634fc3fb9b4b8ad090f91c2503da5978dae3b1148a52fbd91687d2e9bb4629a500aae562d6096c80e9529e87517cd37858b18e42933a219ca8317bb4a350957e7dc2877793bb36682ac4064abafd0c17af800e937f51b08883cfdfbf1713da88e97bcf006b498c7d0742be00a9d2e1226f81409393cf515672a2c7d244aeacfc8144080a9a86f8239b03fe238dfb8b410d95bad2614b3e0e0c52c2"}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4010}, 0x8014) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) 2.882797586s ago: executing program 2 (id=1196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000086b6b5b7716befd500"/36], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00000e0000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x106263, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000020, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r9, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) unshare(0x2c010000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 2.768487365s ago: executing program 1 (id=1197): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10238d, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x6, 0x401}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/41, 0x29, 0x0, &(0x7f0000000540)=""/133, 0x85}, &(0x7f0000000480)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(r3, 0x7, 0xfffffffffffffef8) socket(0x10, 0x803, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x20, 0x4, 0x0, @empty, @empty}}}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x3ff}, 0x18) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r7, 0x0, 0xffffffbf) read$snapshot(r7, 0x0, 0x0) 2.123815537s ago: executing program 4 (id=1198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "0f00", "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x6934, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) fdatasync(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10220, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$l2tp6(0xa, 0x2, 0x73) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "26739c"}}}}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x39b46c9e31435028, 0x80, 0x4, 0x8, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x67, 0x0, 0x6, 0x6, 0x0, @multicast1, @broadcast}}}}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x1000, 0x4e21, 0x2, 0xa, 0x180, 0xa0, 0x3a, r5, r6}, {0x1, 0x4, 0x537d, 0x4, 0xd7ba, 0x100000001, 0x5, 0x56f}, {0x80, 0x101, 0x40, 0x2}, 0x6, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@remote, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x3505, 0x0, 0x0, 0xf7, 0x7f, 0x4, 0xe10}}, 0xe8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1.980589019s ago: executing program 4 (id=1199): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, &(0x7f00000001c0)) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000004c00)=""/4090, 0xffa}, {&(0x7f0000000040)=""/169, 0xa9}], 0x2) semget$private(0x0, 0x3, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0c00000000e70000000000000000000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300"/28], 0x50) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r7 = getpid() syz_pidfd_open(r7, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r8) 1.820785312s ago: executing program 2 (id=1200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0xc4, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfe}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x21}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040004}, 0x8801) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, [@hopopts={0x29}], "24a6505bfa1bf61f"}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="000227bd7000ffdbdf250d0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3c000180140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08c451728b5d5e79d1000305000000000000000065727370616e30000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000300060000000800030002000000080003000200000008000300010000000800030001000000080003000400000004000180"], 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000300)=[0xffffffc0, 0x80000001], 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x185080) creat(&(0x7f0000000040)='./file0\x00', 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) 1.819282753s ago: executing program 1 (id=1201): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x3fed, &(0x7f0000000380), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000000c0)={0x3, 0x0, '\x00', 0x1, &(0x7f0000000040)}) brk(0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x81440c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x488, &(0x7f0000002000)="$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") ioperm(0x99, 0x0, 0x100000001) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x280c021, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1.766395797s ago: executing program 0 (id=1202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "0f00", "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1.666692145s ago: executing program 0 (id=1203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x8008044}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) 1.665599895s ago: executing program 4 (id=1204): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYBLOB='\x00'/17], 0x48) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x9fe, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0xffff0000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000cb4b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.155244866s ago: executing program 4 (id=1205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "0f00", "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x6934, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) fdatasync(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10220, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$l2tp6(0xa, 0x2, 0x73) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "26739c"}}}}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x39b46c9e31435028, 0x80, 0x4, 0x8, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x67, 0x0, 0x6, 0x6, 0x0, @multicast1, @broadcast}}}}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x1000, 0x4e21, 0x2, 0xa, 0x180, 0xa0, 0x3a, r7, r8}, {0x1, 0x4, 0x537d, 0x4, 0xd7ba, 0x100000001, 0x5, 0x56f}, {0x80, 0x101, 0x40, 0x2}, 0x6, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@remote, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x3505, 0x0, 0x0, 0xf7, 0x7f, 0x4, 0xe10}}, 0xe8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r6, r7, 0x25, 0x2, @val=@iter={0x0}}, 0x20) mq_notify(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mq_timedreceive(r5, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 950.112573ms ago: executing program 2 (id=1206): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@fallback=r0, r0, 0x2f, 0x2028, 0x4}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x74}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x1, 0x3, &(0x7f00000000c0)="eb77ec06c0e0af95d3be025b910dba5be03a7e6e323742e5686b5dbf7e9374afcb6ea65cc8a3"}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/348], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind:7', @ANYBLOB='f']) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1004014, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d3073581b858556", @ANYRESHEX, @ANYBLOB=',\x00']) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)) 697.512944ms ago: executing program 0 (id=1207): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) capset(0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 634.847959ms ago: executing program 0 (id=1208): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) getdents(r3, &(0x7f0000000180)=""/136, 0xc9) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x840000000002, 0x3, 0xff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="5825be57aff935e67ca2746357d1787935589db15a23319e3f64fdf5f88b2078", 0x20}], 0x1}}], 0x1, 0x840) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x74}}, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r8 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r8, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 345.528442ms ago: executing program 0 (id=1209): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='#&-!\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r5 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(r3, &(0x7f0000000300)='./bus\x00', 0x100, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r8, 0x0) getgroups(0x6, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f00000005c0)=0xc) r11 = fcntl$getown(r1, 0x9) shmctl$IPC_SET(r5, 0x1, &(0x7f00000007c0)={{0x1, r6, r7, r8, r9, 0x0, 0x6}, 0x40, 0x9, 0x100000001, 0xff, r10, r11, 0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x14) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r12, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000755f3220dd1700555ef30102030109"], 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000506010800000000000000000300000105000100"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4, 0xfffffff9}]}) close_range(r13, 0xffffffffffffffff, 0x0) 102.289132ms ago: executing program 4 (id=1210): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x10000, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e, 0x4002) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000083e9f443a9897451c42400000007020000f8ffffffb703000008000000b70421000000000085000000030000009500000000000000ac29fe6bb645b9fe710a5c07d703a73fe487dd63c135d41b8d32822230a61421a9e4d4d3f5117c07ffa3a97af3d8d043746fa41860bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0xfffffffffffffe0f) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000004144100"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x1000, 0x0, 0x3}}, {0xa, 0x2, [0x9, 0xc, 0x6]}}, {{0x1c, 0x1, {0x6, 0x7e, 0x0, 0x4, 0x1, 0x9, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) 17.882809ms ago: executing program 5 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x20002, 0xaded, 0x0, 0x8, 0x0, 0xd58}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x5, 0x4, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x4, {@in6_addr=@loopback, 0x8edd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040880) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000004) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r9, &(0x7f000001b240)=""/102388, 0x18ff4, 0x7) r10 = dup(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x1b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x2, 0xc, 0xb, 0x80, 0x3ff}, @exit, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4feb}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x0, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x9, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r10], 0x0, 0x10, 0xffffffff}, 0x94) r11 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x11}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x58}}, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="0bc904012edd67ed6ad66cfa425785d351808767fb9cd330e0cbc961caf78392afd0b7a0f3f9425b17809ebe0002702cc41a"], 0x1c}}, 0x4000054) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x220a00) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="bc21d72aee01af026b2b7d3e485a5c1f6356b1b3c17658d5e5b57199ad539670abb928070d26bd76fbaef928b020e1fc09d53c34096cddca1e371068f8b8436b6e47ac5e263805879b62b4a9cd", @ANYRES32=r0, @ANYRES32, @ANYBLOB="ffff000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r12) 0s ago: executing program 2 (id=1212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "0f00", "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x6934, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) fdatasync(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10220, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$l2tp6(0xa, 0x2, 0x73) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "26739c"}}}}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x39b46c9e31435028, 0x80, 0x4, 0x8, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x67, 0x0, 0x6, 0x6, 0x0, @multicast1, @broadcast}}}}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x1000, 0x4e21, 0x2, 0xa, 0x180, 0xa0, 0x3a, r7, r8}, {0x1, 0x4, 0x537d, 0x4, 0xd7ba, 0x100000001, 0x5, 0x56f}, {0x80, 0x101, 0x40, 0x2}, 0x6, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@remote, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x3505, 0x0, 0x0, 0xf7, 0x7f, 0x4, 0xe10}}, 0xe8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r6, r7, 0x25, 0x2, @val=@iter={0x0}}, 0x20) mq_notify(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mq_timedreceive(r5, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x77/0x200 [ 124.415650][ T6163] do_swap_page+0x301/0x2430 [ 124.415676][ T6163] ? css_rstat_updated+0xb7/0x240 [ 124.415755][ T6163] ? __pfx_default_wake_function+0x10/0x10 [ 124.415789][ T6163] handle_mm_fault+0x9a5/0x2c20 [ 124.415833][ T6163] do_user_addr_fault+0x636/0x1090 [ 124.415876][ T6163] ? fpregs_restore_userregs+0xe2/0x1d0 [ 124.415916][ T6163] ? switch_fpu_return+0xe/0x20 [ 124.415975][ T6163] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 124.416080][ T6163] exc_page_fault+0x62/0xa0 [ 124.416109][ T6163] asm_exc_page_fault+0x26/0x30 [ 124.416187][ T6163] RIP: 0033:0x7f07c14c13d3 [ 124.416212][ T6163] Code: f6 08 00 48 8d 3d 96 f6 08 00 e8 08 49 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 7e 71 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 124.416237][ T6163] RSP: 002b:00007ffc94bf6528 EFLAGS: 00010293 [ 124.416288][ T6163] RAX: 00000000fffffffa RBX: 00007f07c16b5fa0 RCX: 0000000000000000 [ 124.416304][ T6163] RDX: 00007ffc94bf6540 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.416371][ T6163] RBP: 00007f07c16b7ba0 R08: 0000000035cd218b R09: 7fffffffffffffff [ 124.416386][ T6163] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e5a9 [ 124.416402][ T6163] R13: 00007f07c16b6160 R14: ffffffffffffffff R15: 00007ffc94bf6680 [ 124.416505][ T6163] [ 124.664142][ T6163] memory: usage 302000kB, limit 307200kB, failcnt 932 [ 124.672608][ T6163] memory+swap: usage 287360kB, limit 9007199254740988kB, failcnt 0 [ 124.681179][ T6163] kmem: usage 266608kB, limit 9007199254740988kB, failcnt 0 [ 124.689648][ T6163] Memory cgroup stats for /syz5: [ 124.692602][ T6163] cache 0 [ 124.702024][ T6163] rss 24576 [ 124.706132][ T6163] shmem 0 [ 124.710013][ T6163] mapped_file 0 [ 124.714721][ T6163] dirty 0 [ 124.718092][ T6163] writeback 0 [ 124.721403][ T6163] workingset_refault_anon 51 [ 124.727089][ T6163] workingset_refault_file 17 [ 124.732679][ T6163] swap 184320 [ 124.736913][ T6163] swapcached 32768 [ 124.737486][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.741333][ T6163] pgpgin 64904 [ 124.741347][ T6163] pgpgout 64895 [ 124.763136][ T6163] pgfault 75510 [ 124.767428][ T6163] pgmajfault 21 [ 124.770923][ T6163] inactive_anon 32768 [ 124.775785][ T6163] active_anon 0 [ 124.779932][ T6163] inactive_file 4096 [ 124.783929][ T6163] active_file 0 [ 124.787924][ T6163] unevictable 0 [ 124.791713][ T6163] hierarchical_memory_limit 314572800 [ 124.798031][ T6163] hierarchical_memsw_limit 9223372036854771712 [ 124.804722][ T6163] total_cache 0 [ 124.808442][ T6163] total_rss 24576 [ 124.810625][ T6173] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.813207][ T6163] total_shmem 0 [ 124.828434][ T6163] total_mapped_file 0 [ 124.832950][ T6163] total_dirty 0 [ 124.837150][ T6163] total_writeback 0 [ 124.841327][ T6163] total_workingset_refault_anon 51 [ 124.847118][ T6163] total_workingset_refault_file 17 [ 124.852899][ T6163] total_swap 184320 [ 124.857085][ T6163] total_swapcached 32768 [ 124.861764][ T6163] total_pgpgin 64904 [ 124.865671][ T6163] total_pgpgout 64895 [ 124.869923][ T6163] total_pgfault 75510 [ 124.874671][ T6163] total_pgmajfault 21 [ 124.878818][ T6163] total_inactive_anon 32768 [ 124.883601][ T6163] total_active_anon 0 [ 124.888006][ T6163] total_inactive_file 4096 [ 124.892972][ T6163] total_active_file 0 [ 124.897794][ T6163] total_unevictable 0 [ 124.901964][ T6163] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.780,pid=6163,uid=0 [ 124.917915][ T6163] Memory cgroup out of memory: Killed process 6163 (syz.5.780) total-vm:95944kB, anon-rss:944kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 125.097260][ T6183] loop5: detected capacity change from 0 to 2048 [ 125.126051][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.139817][ T6183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 125.927088][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 125.937833][ T6197] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 125.949135][ T6203] loop4: detected capacity change from 0 to 512 [ 125.958931][ T6197] __nla_validate_parse: 6 callbacks suppressed [ 125.958947][ T6197] netlink: 100 bytes leftover after parsing attributes in process `syz.1.778'. [ 125.962548][ T6203] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.789: bg 0: block 5: invalid block bitmap [ 125.978085][ T6197] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 125.989946][ T6203] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 126.004958][ T6207] netlink: 56 bytes leftover after parsing attributes in process `syz.0.777'. [ 126.017676][ T6203] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.789: invalid indirect mapped block 3 (level 2) [ 126.036654][ T6203] EXT4-fs (loop4): 1 orphan inode deleted [ 126.042718][ T6203] EXT4-fs (loop4): 1 truncate cleaned up [ 126.052433][ T6203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.099011][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.781'. [ 126.130077][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.161875][ T6215] loop1: detected capacity change from 0 to 164 [ 126.169889][ T6215] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.191860][ T6219] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.799867][ T6226] random: crng reseeded on system resumption [ 126.879120][ T6228] netlink: 9 bytes leftover after parsing attributes in process `syz.0.785'. [ 127.454173][ T6233] loop4: detected capacity change from 0 to 2048 [ 127.487522][ T6233] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 127.671843][ T6246] blktrace: Concurrent blktraces are not allowed on loop5 [ 127.712034][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 127.727767][ T6249] 9pnet_fd: Insufficient options for proto=fd [ 127.889383][ T6261] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 127.896292][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.904363][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 127.917272][ T6262] vhci_hcd: unknown pdu 2 [ 127.922809][ T37] vhci_hcd: stop threads [ 127.927677][ T37] vhci_hcd: release socket [ 127.932627][ T37] vhci_hcd: disconnect device [ 128.019178][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.798'. [ 128.033923][ T6269] loop4: detected capacity change from 0 to 512 [ 128.042128][ T6269] EXT4-fs: Ignoring removed bh option [ 128.049523][ T6269] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.059436][ T6269] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 128.070538][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.071886][ T6269] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 128.080380][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.089094][ T6269] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 128.104780][ T29] kauditd_printk_skb: 840 callbacks suppressed [ 128.104804][ T29] audit: type=1400 audit(2000524359.785:6468): avc: denied { create } for pid=6272 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.106013][ T6269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.111506][ T29] audit: type=1400 audit(2000524359.785:6469): avc: denied { bind } for pid=6272 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.165747][ T29] audit: type=1400 audit(2000524359.785:6470): avc: denied { write } for pid=6272 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.201044][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.220109][ T29] audit: type=1326 audit(2000524359.905:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 128.246124][ T29] audit: type=1326 audit(2000524359.905:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 128.270462][ T29] audit: type=1326 audit(2000524359.905:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 128.270908][ T6277] loop4: detected capacity change from 0 to 1024 [ 128.295220][ T29] audit: type=1326 audit(2000524359.905:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 128.326292][ T29] audit: type=1326 audit(2000524359.905:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 128.350790][ T29] audit: type=1326 audit(2000524359.905:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 128.353537][ T6277] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.375618][ T29] audit: type=1326 audit(2000524359.905:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 128.416821][ T6277] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.803: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.434381][ T6277] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.803: Failed to acquire dquot type 0 [ 128.447229][ T6277] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.803: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.462592][ T6277] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.803: Invalid inode bitmap blk 0 in block_group 0 [ 128.476767][ T6277] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 128.487466][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.503327][ T6277] EXT4-fs (loop4): 1 orphan inode deleted [ 128.511389][ T6277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.527938][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 128.542192][ T6277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.605448][ T6277] loop4: detected capacity change from 0 to 2048 [ 128.652132][ T6277] Alternate GPT is invalid, using primary GPT. [ 128.653323][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 128.658931][ T6277] loop4: p1 p2 p3 [ 128.667310][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 128.680313][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.688365][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.696700][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.704990][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.713473][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.722110][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.730415][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.739101][ T3409] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 128.748655][ T3409] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 128.790409][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.806'. [ 128.802076][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 128.815283][ T6288] bridge0: port 1(macvlan2) entered blocking state [ 128.822943][ T6288] bridge0: port 1(macvlan2) entered disabled state [ 128.830599][ T6288] macvlan2: entered allmulticast mode [ 128.837169][ T6288] bridge0: entered allmulticast mode [ 128.843928][ T6288] macvlan2: left allmulticast mode [ 128.849717][ T6288] bridge0: left allmulticast mode [ 128.988035][ T6291] tipc: Enabled bearer , priority 0 [ 129.006616][ T6291] lo speed is unknown, defaulting to 1000 [ 129.013844][ T6291] lo speed is unknown, defaulting to 1000 [ 129.135448][ T6294] @: renamed from vlan0 (while UP) [ 129.154241][ T6290] tipc: Resetting bearer [ 129.186807][ T6290] tipc: Disabling bearer [ 129.673281][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 129.685145][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 129.846008][ T6318] siw: device registration error -23 [ 130.069709][ T6327] pim6reg: entered allmulticast mode [ 130.152561][ T6330] lo speed is unknown, defaulting to 1000 [ 130.153154][ T6330] lo speed is unknown, defaulting to 1000 [ 130.960483][ T6324] pim6reg: left allmulticast mode [ 131.111445][ T6340] loop5: detected capacity change from 0 to 2048 [ 131.242168][ T6349] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 131.297512][ T6349] team0: Port device dummy0 added [ 131.344507][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.832'. [ 131.364447][ T6349] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 131.419198][ T6349] team0: Port device dummy0 removed [ 131.439570][ T6349] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.543434][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 131.912754][ T6365] siw: device registration error -23 [ 132.315546][ T6369] Set syz1 is full, maxelem 65536 reached [ 132.380307][ T6378] siw: device registration error -23 [ 132.480799][ T6382] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.581365][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 132.597852][ T6385] lo speed is unknown, defaulting to 1000 [ 132.609416][ T6382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.831'. [ 132.615725][ T6385] lo speed is unknown, defaulting to 1000 [ 132.723187][ T6387] netlink: 'syz.0.833': attribute type 21 has an invalid length. [ 132.731474][ T6387] netlink: 128 bytes leftover after parsing attributes in process `syz.0.833'. [ 132.780223][ T6387] netlink: 'syz.0.833': attribute type 5 has an invalid length. [ 132.789452][ T6387] netlink: 3 bytes leftover after parsing attributes in process `syz.0.833'. [ 133.175911][ T6394] loop5: detected capacity change from 0 to 1024 [ 133.205279][ T6394] EXT4-fs: Ignoring removed nobh option [ 133.225535][ T6394] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.301539][ T6394] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.835: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 133.411784][ T6394] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.835: couldn't read orphan inode 11 (err -117) [ 133.467227][ T6394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.514350][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 133.514368][ T29] audit: type=1400 audit(2000524365.181:7259): avc: denied { mount } for pid=6391 comm="syz.5.835" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 133.609913][ T29] audit: type=1400 audit(2000524365.271:7260): avc: denied { ioctl } for pid=6389 comm="syz.0.834" path="socket:[15116]" dev="sockfs" ino=15116 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.722479][ T29] audit: type=1400 audit(2000524365.311:7261): avc: denied { read write } for pid=6389 comm="syz.0.834" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 133.747771][ T29] audit: type=1400 audit(2000524365.311:7262): avc: denied { open } for pid=6389 comm="syz.0.834" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 133.773301][ T29] audit: type=1400 audit(2000524365.321:7263): avc: denied { create } for pid=6389 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.795331][ T29] audit: type=1400 audit(2000524365.321:7264): avc: denied { bind } for pid=6389 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.815792][ T29] audit: type=1400 audit(2000524365.331:7265): avc: denied { listen } for pid=6389 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.251151][ T6407] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 134.260473][ T29] audit: type=1326 audit(2000524365.910:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 134.284245][ T29] audit: type=1326 audit(2000524365.910:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 134.309115][ T29] audit: type=1326 audit(2000524365.910:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 134.337204][ T6407] dummy0: left promiscuous mode [ 134.344757][ T6407] team0: Port device dummy0 added [ 134.352313][ T6410] netlink: 116 bytes leftover after parsing attributes in process `syz.4.837'. [ 134.382189][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.838'. [ 134.392232][ T6407] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 134.403966][ T6407] team0: Port device dummy0 removed [ 134.412017][ T6407] dummy0: entered promiscuous mode [ 134.418946][ T6407] $H: (slave dummy0): Enslaving as an active interface with an up link [ 134.507503][ T6415] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 134.606634][ T3409] hid_parser_main: 6 callbacks suppressed [ 134.606654][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.620842][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.644096][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.652068][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.659797][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.667881][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.676084][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.683962][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.691769][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.695778][ T6422] lo speed is unknown, defaulting to 1000 [ 134.699754][ T3409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.706854][ T6422] lo speed is unknown, defaulting to 1000 [ 134.720160][ T3409] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 134.819906][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 134.833747][ T6430] netlink: 'syz.4.845': attribute type 16 has an invalid length. [ 134.847323][ T6432] 9pnet_fd: Insufficient options for proto=fd [ 134.912604][ T6435] block device autoloading is deprecated and will be removed. [ 134.995041][ T6397] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 135.165772][ T6442] lo speed is unknown, defaulting to 1000 [ 135.179180][ T6442] lo speed is unknown, defaulting to 1000 [ 135.720299][ T6445] team0: entered promiscuous mode [ 135.725578][ T6445] team0: entered allmulticast mode [ 135.800986][ T6445] lo speed is unknown, defaulting to 1000 [ 135.836399][ T6445] lo speed is unknown, defaulting to 1000 [ 136.095221][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.128549][ T6454] loop5: detected capacity change from 0 to 1024 [ 136.148525][ T6454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.170817][ T6454] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 136.183655][ T6454] EXT4-fs (loop5): This should not happen!! Data will be lost [ 136.183655][ T6454] [ 136.193469][ T6454] EXT4-fs (loop5): Total free blocks count 0 [ 136.199710][ T6454] EXT4-fs (loop5): Free/Dirty block details [ 136.205729][ T6454] EXT4-fs (loop5): free_blocks=0 [ 136.210846][ T6454] EXT4-fs (loop5): dirty_blocks=0 [ 136.216463][ T6454] EXT4-fs (loop5): Block reservation details [ 136.222648][ T6454] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 136.245873][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.335715][ T6439] syz.0.848 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 136.350760][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.0.848 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 136.350802][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.350820][ T6439] Call Trace: [ 136.350827][ T6439] [ 136.350836][ T6439] __dump_stack+0x1d/0x30 [ 136.350859][ T6439] dump_stack_lvl+0xe8/0x140 [ 136.350885][ T6439] dump_stack+0x15/0x1b [ 136.350987][ T6439] dump_header+0x81/0x220 [ 136.351044][ T6439] oom_kill_process+0x342/0x400 [ 136.351097][ T6439] out_of_memory+0x979/0xb80 [ 136.351144][ T6439] try_charge_memcg+0x5e6/0x9e0 [ 136.351258][ T6439] obj_cgroup_charge_pages+0xa6/0x150 [ 136.351369][ T6439] __memcg_kmem_charge_page+0x9f/0x170 [ 136.351456][ T6439] __alloc_frozen_pages_noprof+0x188/0x360 [ 136.351497][ T6439] alloc_pages_mpol+0xb3/0x250 [ 136.351580][ T6439] alloc_pages_noprof+0x90/0x130 [ 136.351691][ T6439] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 136.351752][ T6439] __kvmalloc_node_noprof+0x30f/0x4e0 [ 136.351843][ T6439] ? ip_set_alloc+0x1f/0x30 [ 136.351891][ T6439] ? ip_set_alloc+0x1f/0x30 [ 136.351919][ T6439] ? __kmalloc_cache_noprof+0x189/0x320 [ 136.351954][ T6439] ip_set_alloc+0x1f/0x30 [ 136.351986][ T6439] hash_netiface_create+0x282/0x740 [ 136.352056][ T6439] ? __pfx_hash_netiface_create+0x10/0x10 [ 136.352123][ T6439] ip_set_create+0x3cc/0x960 [ 136.352179][ T6439] ? __nla_parse+0x40/0x60 [ 136.352242][ T6439] nfnetlink_rcv_msg+0x4c6/0x590 [ 136.352307][ T6439] netlink_rcv_skb+0x120/0x220 [ 136.352348][ T6439] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 136.352411][ T6439] nfnetlink_rcv+0x16b/0x1690 [ 136.352447][ T6439] ? nlmon_xmit+0x4f/0x60 [ 136.352476][ T6439] ? consume_skb+0x49/0x150 [ 136.352514][ T6439] ? nlmon_xmit+0x4f/0x60 [ 136.352604][ T6439] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 136.352650][ T6439] ? __dev_queue_xmit+0x1200/0x2000 [ 136.352691][ T6439] ? __dev_queue_xmit+0x182/0x2000 [ 136.352794][ T6439] ? ref_tracker_free+0x37d/0x3e0 [ 136.352844][ T6439] ? __netlink_deliver_tap+0x4dc/0x500 [ 136.352953][ T6439] netlink_unicast+0x5c0/0x690 [ 136.352987][ T6439] netlink_sendmsg+0x58b/0x6b0 [ 136.353024][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.353139][ T6439] __sock_sendmsg+0x145/0x180 [ 136.353184][ T6439] ____sys_sendmsg+0x31e/0x4e0 [ 136.353237][ T6439] ___sys_sendmsg+0x17b/0x1d0 [ 136.353298][ T6439] __x64_sys_sendmsg+0xd4/0x160 [ 136.353400][ T6439] x64_sys_call+0x191e/0x2ff0 [ 136.353425][ T6439] do_syscall_64+0xd2/0x200 [ 136.353483][ T6439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.353515][ T6439] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.353543][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.353596][ T6439] RIP: 0033:0x7fbee091eb69 [ 136.353612][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.353629][ T6439] RSP: 002b:00007fbedef7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.353648][ T6439] RAX: ffffffffffffffda RBX: 00007fbee0b45fa0 RCX: 00007fbee091eb69 [ 136.353659][ T6439] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 136.353708][ T6439] RBP: 00007fbee09a1df1 R08: 0000000000000000 R09: 0000000000000000 [ 136.353719][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.353730][ T6439] R13: 0000000000000000 R14: 00007fbee0b45fa0 R15: 00007ffdafe96728 [ 136.353749][ T6439] [ 136.353756][ T6439] memory: usage 307200kB, limit 307200kB, failcnt 1468 [ 136.723173][ T6439] memory+swap: usage 323956kB, limit 9007199254740988kB, failcnt 0 [ 136.731215][ T6439] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 136.738600][ T6439] Memory cgroup stats for /syz0: [ 136.738775][ T6439] cache 0 [ 136.747571][ T6439] rss 0 [ 136.750609][ T6439] shmem 0 [ 136.753602][ T6439] mapped_file 0 [ 136.757918][ T6439] dirty 0 [ 136.761163][ T6439] writeback 0 [ 136.764671][ T6439] workingset_refault_anon 91 [ 136.770024][ T6439] workingset_refault_file 316 [ 136.774811][ T6439] swap 17158144 [ 136.778396][ T6439] swapcached 4096 [ 136.782041][ T6439] pgpgin 210565 [ 136.785588][ T6439] pgpgout 210564 [ 136.789180][ T6439] pgfault 168303 [ 136.792741][ T6439] pgmajfault 64 [ 136.796386][ T6439] inactive_anon 0 [ 136.800096][ T6439] active_anon 4096 [ 136.803835][ T6439] inactive_file 0 [ 136.807495][ T6439] active_file 0 [ 136.811129][ T6439] unevictable 0 [ 136.814697][ T6439] hierarchical_memory_limit 314572800 [ 136.820239][ T6439] hierarchical_memsw_limit 9223372036854771712 [ 136.826417][ T6439] total_cache 0 [ 136.829939][ T6439] total_rss 0 [ 136.833305][ T6439] total_shmem 0 [ 136.836762][ T6439] total_mapped_file 0 [ 136.840856][ T6439] total_dirty 0 [ 136.844338][ T6439] total_writeback 0 [ 136.848272][ T6439] total_workingset_refault_anon 91 [ 136.853387][ T6439] total_workingset_refault_file 316 [ 136.858787][ T6439] total_swap 17158144 [ 136.862782][ T6439] total_swapcached 4096 [ 136.867018][ T6439] total_pgpgin 210565 [ 136.871044][ T6439] total_pgpgout 210564 [ 136.875156][ T6439] total_pgfault 168303 [ 136.879284][ T6439] total_pgmajfault 64 [ 136.883463][ T6439] total_inactive_anon 0 [ 136.887751][ T6439] total_active_anon 4096 [ 136.892172][ T6439] total_inactive_file 0 [ 136.896704][ T6439] total_active_file 0 [ 136.900818][ T6439] total_unevictable 0 [ 136.904919][ T6439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.848,pid=6438,uid=0 [ 136.919659][ T6439] Memory cgroup out of memory: Killed process 6438 (syz.0.848) total-vm:100180kB, anon-rss:944kB, file-rss:26600kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 137.194048][ T6474] lo speed is unknown, defaulting to 1000 [ 137.201739][ T6474] lo speed is unknown, defaulting to 1000 [ 137.463770][ T6479] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 137.601104][ T6473] __nla_validate_parse: 3 callbacks suppressed [ 137.601123][ T6473] netlink: 100 bytes leftover after parsing attributes in process `syz.5.859'. [ 137.681375][ T6490] siw: device registration error -23 [ 137.688357][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 137.705225][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 137.863552][ T6494] loop1: detected capacity change from 0 to 128 [ 138.047922][ T6496] loop5: detected capacity change from 0 to 2048 [ 138.055623][ T6496] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 138.284071][ T6504] netlink: 'syz.5.865': attribute type 12 has an invalid length. [ 138.308498][ T6502] hub 6-0:1.0: USB hub found [ 138.314354][ T6502] hub 6-0:1.0: 8 ports detected [ 138.353303][ T6506] IPv6: Can't replace route, no match found [ 138.357045][ T6508] siw: device registration error -23 [ 138.371679][ T6508] loop5: detected capacity change from 0 to 512 [ 138.378491][ T6508] EXT4-fs: Ignoring removed oldalloc option [ 138.528288][ T6508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.541904][ T6508] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.557604][ T6508] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.867: bg 0: block 217: padding at end of block bitmap is not set [ 138.645631][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 138.654861][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 138.910827][ T29] kauditd_printk_skb: 980 callbacks suppressed [ 138.910849][ T29] audit: type=1400 audit(2000524370.522:8249): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 138.965115][ T6524] 9pnet_fd: Insufficient options for proto=fd [ 138.986921][ T6520] lo speed is unknown, defaulting to 1000 [ 138.994017][ T6520] lo speed is unknown, defaulting to 1000 [ 139.049686][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.102204][ T6531] lo speed is unknown, defaulting to 1000 [ 139.134165][ T6519] block device autoloading is deprecated and will be removed. [ 139.156467][ T6531] lo speed is unknown, defaulting to 1000 [ 139.231028][ T29] audit: type=1400 audit(2000524370.751:8250): avc: denied { write } for pid=6518 comm="syz.2.881" name="file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.398165][ T6536] netlink: 'syz.2.874': attribute type 16 has an invalid length. [ 139.407480][ T6536] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.874'. [ 139.430138][ T6540] loop5: detected capacity change from 0 to 2048 [ 139.443481][ T6540] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.459295][ T29] audit: type=1400 audit(2000524371.111:8251): avc: denied { write } for pid=6537 comm="syz.0.873" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.492439][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 139.493841][ T6540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.624386][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'. [ 139.820867][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.217362][ T29] audit: type=1326 audit(2000524371.870:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 140.254817][ T6551] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 140.275491][ T6551] netlink: 100 bytes leftover after parsing attributes in process `syz.2.876'. [ 140.290895][ T29] audit: type=1326 audit(2000524371.890:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 140.315097][ T29] audit: type=1326 audit(2000524371.890:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 140.338817][ T29] audit: type=1326 audit(2000524371.890:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 140.362604][ T29] audit: type=1326 audit(2000524371.890:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 140.386804][ T29] audit: type=1326 audit(2000524371.900:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 140.410964][ T29] audit: type=1326 audit(2000524371.900:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 140.497197][ T6560] hub 6-0:1.0: USB hub found [ 140.502048][ T6560] hub 6-0:1.0: 8 ports detected [ 140.526862][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 140.551480][ T6563] openvswitch: netlink: Message has 6 unknown bytes. [ 140.606492][ T6567] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.616671][ T6565] loop1: detected capacity change from 0 to 512 [ 140.638199][ T6565] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 140.646516][ T6565] EXT4-fs (loop1): orphan cleanup on readonly fs [ 140.655555][ T6565] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.882: corrupted inode contents [ 140.667639][ T6565] EXT4-fs (loop1): Remounting filesystem read-only [ 140.675186][ T6565] EXT4-fs (loop1): 1 truncate cleaned up [ 140.681062][ T1690] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.691819][ T1690] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.703632][ T1690] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 140.714634][ T6565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.729502][ T6565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.739952][ T6571] siw: device registration error -23 [ 141.708102][ T6594] hub 6-0:1.0: USB hub found [ 141.712841][ T6594] hub 6-0:1.0: 8 ports detected [ 141.794686][ T6599] loop1: detected capacity change from 0 to 764 [ 141.840315][ T6599] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 142.156555][ T6597] Set syz1 is full, maxelem 65536 reached [ 142.159609][ T6611] openvswitch: netlink: Message has 6 unknown bytes. [ 142.190142][ T6612] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 142.263436][ T6618] loop4: detected capacity change from 0 to 1024 [ 142.277609][ T6618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.290345][ T6616] loop5: detected capacity change from 0 to 512 [ 142.290663][ T6618] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.317732][ T6616] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 142.326298][ T6616] EXT4-fs (loop5): orphan cleanup on readonly fs [ 142.334650][ T6616] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.899: corrupted inode contents [ 142.347465][ T6616] EXT4-fs (loop5): Remounting filesystem read-only [ 142.394578][ T6616] EXT4-fs (loop5): 1 truncate cleaned up [ 142.401283][ T59] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 142.411911][ T59] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 142.424953][ T59] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 142.429424][ T6628] netlink: zone id is out of range [ 142.436459][ T6616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.453278][ T6616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.465334][ T6628] netlink: zone id is out of range [ 142.471543][ T6628] netlink: zone id is out of range [ 142.476878][ T6628] netlink: zone id is out of range [ 142.482417][ T6628] netlink: zone id is out of range [ 142.489838][ T6628] netlink: zone id is out of range [ 142.495075][ T6628] netlink: zone id is out of range [ 142.563625][ T6632] tipc: Started in network mode [ 142.568804][ T6632] tipc: Node identity 4, cluster identity 4711 [ 142.575004][ T6632] tipc: Node number set to 4 [ 142.585732][ T6632] SELinux: ebitmap: truncated map [ 142.601346][ T6632] SELinux: failed to load policy [ 142.608582][ T6633] netlink: 'syz.0.902': attribute type 39 has an invalid length. [ 142.694991][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.933420][ T6644] __nla_validate_parse: 3 callbacks suppressed [ 142.933444][ T6644] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 143.126170][ T6649] lo speed is unknown, defaulting to 1000 [ 143.133323][ T6649] lo speed is unknown, defaulting to 1000 [ 143.194606][ T6649] siw: device registration error -23 [ 143.256540][ T6648] siw: device registration error -23 [ 143.368292][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 143.406011][ T6648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.909'. [ 143.609017][ T6656] netlink: 'syz.0.920': attribute type 6 has an invalid length. [ 143.694899][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 143.829992][ T6653] delete_channel: no stack [ 143.918088][ T3409] hid_parser_main: 17 callbacks suppressed [ 143.918111][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.931749][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.940820][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 143.940836][ T29] audit: type=1326 audit(2000524375.595:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 143.971463][ T29] audit: type=1326 audit(2000524375.595:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 143.995194][ T29] audit: type=1326 audit(2000524375.595:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 144.019813][ T29] audit: type=1326 audit(2000524375.595:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 144.048145][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.055603][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.063304][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.071129][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.076877][ T6672] lo speed is unknown, defaulting to 1000 [ 144.078890][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.078943][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.099769][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.107906][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.117453][ T3409] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 144.129765][ T29] audit: type=1326 audit(2000524375.625:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 144.153764][ T29] audit: type=1326 audit(2000524375.625:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 144.177510][ T29] audit: type=1326 audit(2000524375.635:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 144.183726][ T6678] netlink: 'syz.5.918': attribute type 1 has an invalid length. [ 144.200950][ T29] audit: type=1326 audit(2000524375.635:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 144.232030][ T29] audit: type=1326 audit(2000524375.635:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 144.255504][ T29] audit: type=1326 audit(2000524375.675:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54128cd4d0 code=0x7ffc0000 [ 144.282221][ T6672] lo speed is unknown, defaulting to 1000 [ 144.302512][ T6683] 9pnet_fd: Insufficient options for proto=fd [ 144.514731][ T6695] siw: device registration error -23 [ 144.634841][ T6705] siw: device registration error -23 [ 144.671569][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.682006][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.696600][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 144.720966][ T6715] IPv6: Can't replace route, no match found [ 144.740126][ T6709] wireguard0: entered promiscuous mode [ 144.745676][ T6709] wireguard0: entered allmulticast mode [ 144.785136][ T6718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.925'. [ 144.800503][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.925'. [ 144.918137][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 144.933398][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 145.716050][ T6786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 145.721738][ T6787] siw: device registration error -23 [ 145.750637][ T6786] bridge0: port 1(macvlan2) entered blocking state [ 145.757394][ T6786] bridge0: port 1(macvlan2) entered disabled state [ 145.771384][ T6786] macvlan2: entered allmulticast mode [ 145.776882][ T6786] bridge0: entered allmulticast mode [ 145.785337][ T6786] macvlan2: left allmulticast mode [ 145.790572][ T6786] bridge0: left allmulticast mode [ 145.821549][ T6793] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 145.840170][ T6793] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 145.866247][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.886376][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.682097][ T6863] team1: entered promiscuous mode [ 146.687309][ T6863] team1: entered allmulticast mode [ 146.780540][ T6863] lo speed is unknown, defaulting to 1000 [ 146.793057][ T6863] lo speed is unknown, defaulting to 1000 [ 146.941903][ T6870] 9pnet_fd: Insufficient options for proto=fd [ 146.956582][ T6870] block device autoloading is deprecated and will be removed. [ 146.999375][ T6872] siw: device registration error -23 [ 147.009273][ T6872] loop0: detected capacity change from 0 to 512 [ 147.017366][ T6872] EXT4-fs: Ignoring removed oldalloc option [ 147.033323][ T6872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.046578][ T6872] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.063331][ T6872] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.937: bg 0: block 217: padding at end of block bitmap is not set [ 147.096806][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.394076][ T6881] loop9: detected capacity change from 0 to 7 [ 147.400368][ T6881] buffer_io_error: 535 callbacks suppressed [ 147.400382][ T6881] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.415525][ T6881] Buffer I/O error on dev loop9, logical block 0, async page read [ 147.423588][ T6881] loop9: unable to read partition table [ 147.429259][ T6881] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 147.429259][ T6881] ) failed (rc=-5) [ 147.769119][ T6897] siw: device registration error -23 [ 148.565529][ T6906] __nla_validate_parse: 8 callbacks suppressed [ 148.565545][ T6906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'. [ 148.595414][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 148.618560][ T6906] bridge0: port 3(macvlan2) entered blocking state [ 148.625240][ T6906] bridge0: port 3(macvlan2) entered disabled state [ 148.632322][ T6906] macvlan2: entered allmulticast mode [ 148.637979][ T6906] bridge0: entered allmulticast mode [ 148.665556][ T6906] macvlan2: left allmulticast mode [ 148.670762][ T6906] bridge0: left allmulticast mode [ 148.712353][ T6912] 9pnet_virtio: no channels available for device syz [ 148.785223][ T6910] loop0: detected capacity change from 0 to 1024 [ 148.822924][ T6910] EXT4-fs: Ignoring removed nobh option [ 148.836729][ T6910] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.861723][ T6910] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.956: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 148.902529][ T6910] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.956: couldn't read orphan inode 11 (err -117) [ 148.955010][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 148.955029][ T29] audit: type=1326 audit(2000524380.600:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 148.985011][ T29] audit: type=1326 audit(2000524380.600:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.4.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 149.011590][ T6922] lo speed is unknown, defaulting to 1000 [ 149.018243][ T6922] lo speed is unknown, defaulting to 1000 [ 149.021971][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.072581][ T29] audit: type=1326 audit(2000524380.720:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 149.109607][ T6910] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.956: Invalid block bitmap block 0 in block_group 0 [ 149.124171][ T6910] Quota error (device loop0): write_blk: dquota write failed [ 149.131806][ T6910] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 149.171168][ T6910] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.956: Failed to acquire dquot type 0 [ 149.855393][ T6913] syz.2.958 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 149.869659][ T6913] CPU: 1 UID: 0 PID: 6913 Comm: syz.2.958 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 149.869691][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.869706][ T6913] Call Trace: [ 149.869715][ T6913] [ 149.869736][ T6913] __dump_stack+0x1d/0x30 [ 149.869765][ T6913] dump_stack_lvl+0xe8/0x140 [ 149.869812][ T6913] dump_stack+0x15/0x1b [ 149.869896][ T6913] dump_header+0x81/0x220 [ 149.869943][ T6913] oom_kill_process+0x342/0x400 [ 149.869983][ T6913] out_of_memory+0x979/0xb80 [ 149.870062][ T6913] try_charge_memcg+0x5e6/0x9e0 [ 149.870104][ T6913] obj_cgroup_charge_pages+0xa6/0x150 [ 149.870202][ T6913] __memcg_kmem_charge_page+0x9f/0x170 [ 149.870236][ T6913] __alloc_frozen_pages_noprof+0x188/0x360 [ 149.870333][ T6913] alloc_pages_mpol+0xb3/0x250 [ 149.870373][ T6913] alloc_pages_noprof+0x90/0x130 [ 149.870424][ T6913] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 149.870594][ T6913] __kvmalloc_node_noprof+0x30f/0x4e0 [ 149.870667][ T6913] ? ip_set_alloc+0x1f/0x30 [ 149.870702][ T6913] ? ip_set_alloc+0x1f/0x30 [ 149.870746][ T6913] ? __kmalloc_cache_noprof+0x189/0x320 [ 149.870785][ T6913] ip_set_alloc+0x1f/0x30 [ 149.870812][ T6913] hash_netiface_create+0x282/0x740 [ 149.870902][ T6913] ? __pfx_hash_netiface_create+0x10/0x10 [ 149.870936][ T6913] ip_set_create+0x3cc/0x960 [ 149.871014][ T6913] ? __nla_parse+0x40/0x60 [ 149.871036][ T6913] nfnetlink_rcv_msg+0x4c6/0x590 [ 149.871160][ T6913] netlink_rcv_skb+0x120/0x220 [ 149.871270][ T6913] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.871331][ T6913] nfnetlink_rcv+0x16b/0x1690 [ 149.871364][ T6913] ? free_frozen_page_commit+0x6f/0x2a0 [ 149.871410][ T6913] ? _raw_spin_unlock+0x26/0x50 [ 149.871496][ T6913] ? __free_frozen_pages+0x25a/0x4e0 [ 149.871531][ T6913] ? free_large_kmalloc+0xb1/0x100 [ 149.871619][ T6913] ? bpf_check+0x29d6/0xd9e0 [ 149.871648][ T6913] ? __rcu_read_unlock+0x4f/0x70 [ 149.871704][ T6913] ? do_jit+0x306/0x7f70 [ 149.871799][ T6913] ? emit_mov_imm64+0x2ca/0x2e0 [ 149.871820][ T6913] ? css_rstat_updated+0xb7/0x240 [ 149.871905][ T6913] ? css_rstat_updated+0xb7/0x240 [ 149.871935][ T6913] ? refill_stock+0x32f/0x390 [ 149.871955][ T6913] ? page_counter_cancel+0xe1/0x1e0 [ 149.872012][ T6913] ? __rcu_read_unlock+0x4f/0x70 [ 149.872041][ T6913] ? should_fail_ex+0x30/0x280 [ 149.872084][ T6913] ? selinux_nlmsg_lookup+0x99/0x890 [ 149.872125][ T6913] ? __rcu_read_unlock+0x34/0x70 [ 149.872211][ T6913] ? __netlink_lookup+0x266/0x2a0 [ 149.872267][ T6913] netlink_unicast+0x5c0/0x690 [ 149.872299][ T6913] netlink_sendmsg+0x58b/0x6b0 [ 149.872346][ T6913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.872435][ T6913] __sock_sendmsg+0x145/0x180 [ 149.872493][ T6913] ____sys_sendmsg+0x31e/0x4e0 [ 149.872534][ T6913] ___sys_sendmsg+0x17b/0x1d0 [ 149.872683][ T6913] __x64_sys_sendmsg+0xd4/0x160 [ 149.872762][ T6913] x64_sys_call+0x191e/0x2ff0 [ 149.872789][ T6913] do_syscall_64+0xd2/0x200 [ 149.872818][ T6913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.872845][ T6913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.872940][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.872985][ T6913] RIP: 0033:0x7fbaddeceb69 [ 149.873003][ T6913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.873100][ T6913] RSP: 002b:00007fbadc52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.873126][ T6913] RAX: ffffffffffffffda RBX: 00007fbade0f5fa0 RCX: 00007fbaddeceb69 [ 149.873142][ T6913] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 149.873155][ T6913] RBP: 00007fbaddf51df1 R08: 0000000000000000 R09: 0000000000000000 [ 149.873167][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.873179][ T6913] R13: 0000000000000000 R14: 00007fbade0f5fa0 R15: 00007ffef348fd98 [ 149.873199][ T6913] [ 150.256888][ T6913] memory: usage 307200kB, limit 307200kB, failcnt 507 [ 150.263825][ T6913] memory+swap: usage 311928kB, limit 9007199254740988kB, failcnt 0 [ 150.271846][ T6913] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 150.279282][ T6913] Memory cgroup stats for /syz2: [ 150.292936][ T29] audit: type=1400 audit(2000524381.929:9553): avc: denied { create } for pid=6930 comm="syz.4.951" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.305418][ T6913] cache 0 [ 150.319376][ T29] audit: type=1326 audit(2000524381.929:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 150.322189][ T6913] rss 0 [ 150.322200][ T6913] shmem 0 [ 150.345702][ T29] audit: type=1326 audit(2000524381.929:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 150.348422][ T6913] mapped_file 0 [ 150.351374][ T29] audit: type=1326 audit(2000524381.929:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 150.374910][ T6913] dirty 0 [ 150.374922][ T6913] writeback 0 [ 150.374931][ T6913] workingset_refault_anon 179 [ 150.378469][ T29] audit: type=1326 audit(2000524381.929:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 150.401766][ T6913] workingset_refault_file 239 [ 150.440724][ T6913] swap 4841472 [ 150.444216][ T6913] swapcached 0 [ 150.447592][ T6913] pgpgin 114037 [ 150.451123][ T6913] pgpgout 114037 [ 150.454801][ T6913] pgfault 131205 [ 150.458360][ T6913] pgmajfault 65 [ 150.461921][ T6913] inactive_anon 0 [ 150.465759][ T6913] active_anon 0 [ 150.469248][ T6913] inactive_file 0 [ 150.472986][ T6913] active_file 0 [ 150.476810][ T6913] unevictable 0 [ 150.480287][ T6913] hierarchical_memory_limit 314572800 [ 150.485724][ T6913] hierarchical_memsw_limit 9223372036854771712 [ 150.491900][ T6913] total_cache 0 [ 150.495412][ T6913] total_rss 0 [ 150.499780][ T6913] total_shmem 0 [ 150.503326][ T6913] total_mapped_file 0 [ 150.507329][ T6913] total_dirty 0 [ 150.510884][ T6913] total_writeback 0 [ 150.514983][ T6913] total_workingset_refault_anon 179 [ 150.520183][ T6913] total_workingset_refault_file 239 [ 150.525476][ T6913] total_swap 4841472 [ 150.529392][ T6913] total_swapcached 0 [ 150.533386][ T6913] total_pgpgin 114037 [ 150.537376][ T6913] total_pgpgout 114037 [ 150.541478][ T6913] total_pgfault 131205 [ 150.545588][ T6913] total_pgmajfault 65 [ 150.549628][ T6913] total_inactive_anon 0 [ 150.553832][ T6913] total_active_anon 0 [ 150.557850][ T6913] total_inactive_file 0 [ 150.562018][ T6913] total_active_file 0 [ 150.566115][ T6913] total_unevictable 0 [ 150.570106][ T6913] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.958,pid=6911,uid=0 [ 150.584819][ T6913] Memory cgroup out of memory: Killed process 6911 (syz.2.958) total-vm:95944kB, anon-rss:944kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 150.789056][ T6940] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 150.959952][ T6939] net_ratelimit: 45 callbacks suppressed [ 150.959986][ T6939] netlink: zone id is out of range [ 150.999660][ T6939] netlink: zone id is out of range [ 151.020560][ T6939] netlink: zone id is out of range [ 151.025967][ T6939] netlink: zone id is out of range [ 151.044126][ T6939] netlink: zone id is out of range [ 151.051816][ T6939] netlink: zone id is out of range [ 151.064155][ T6939] netlink: zone id is out of range [ 151.070073][ T6939] netlink: zone id is out of range [ 151.090962][ T6939] netlink: zone id is out of range [ 151.104730][ T6939] netlink: zone id is out of range [ 151.172937][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.953'. [ 151.279434][ T6937] kexec: Could not allocate control_code_buffer [ 151.489746][ T3390] hid_parser_main: 17 callbacks suppressed [ 151.489764][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.503359][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.521171][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.528962][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.536797][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.544272][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.551997][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.559565][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.567015][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.574478][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.588735][ T6953] lo speed is unknown, defaulting to 1000 [ 151.595320][ T6953] lo speed is unknown, defaulting to 1000 [ 151.602897][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 151.627662][ T3390] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.639053][ T6954] batadv0 (unregistering): left allmulticast mode [ 151.646172][ T6954] batadv0 (unregistering): left promiscuous mode [ 151.652654][ T6954] bridge0: port 2(batadv0) entered disabled state [ 151.819396][ T6963] netlink: 256 bytes leftover after parsing attributes in process `syz.2.959'. [ 152.185389][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.231583][ T3390] hid-generic 0000:0000:0000.0006: item fetching failed at offset 4/35 [ 152.244347][ T3390] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 152.264637][ T6982] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 152.380741][ T6982] bond_slave_1: entered promiscuous mode [ 152.388350][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 152.416724][ T6982] bond_slave_1 (unregistering): left promiscuous mode [ 152.427403][ T6981] netlink: 'syz.1.964': attribute type 9 has an invalid length. [ 152.655027][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.968'. [ 152.664326][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.968'. [ 152.712340][ T6994] 9pnet_fd: Insufficient options for proto=fd [ 152.726057][ T6993] netlink: 'syz.0.978': attribute type 12 has an invalid length. [ 152.762376][ T6992] block device autoloading is deprecated and will be removed. [ 152.826088][ T6996] netlink: 'syz.0.969': attribute type 21 has an invalid length. [ 152.834056][ T6996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.969'. [ 152.843456][ T6996] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 152.954182][ T6996] lo speed is unknown, defaulting to 1000 [ 152.985310][ T6996] lo speed is unknown, defaulting to 1000 [ 152.998139][ T7000] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 153.303940][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.972'. [ 153.411982][ T7014] bridge0: port 1(macvlan2) entered blocking state [ 153.419107][ T7014] bridge0: port 1(macvlan2) entered disabled state [ 153.447587][ T7014] macvlan2: entered allmulticast mode [ 153.453246][ T7014] bridge0: entered allmulticast mode [ 153.463990][ T7014] macvlan2: left allmulticast mode [ 153.469397][ T7014] bridge0: left allmulticast mode [ 153.546985][ T7014] loop2: detected capacity change from 0 to 512 [ 153.585942][ T7014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.614578][ T7014] ext4 filesystem being mounted at /223/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.641534][ T7014] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.972: corrupted inode contents [ 153.668418][ T7014] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.972: mark_inode_dirty error [ 153.693632][ T7014] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.972: corrupted inode contents [ 153.718451][ T7014] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.972: mark_inode_dirty error [ 153.742184][ T7014] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.972: Failed to acquire dquot type 1 [ 153.742272][ T7020] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.972: corrupted inode contents [ 153.823333][ T7020] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.972: mark_inode_dirty error [ 153.842488][ T7020] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.972: corrupted inode contents [ 153.867766][ T7020] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.972: mark_inode_dirty error [ 153.892989][ T7020] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.972: Failed to acquire dquot type 1 [ 154.170353][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.212922][ T7025] $H: renamed from bond0 [ 154.227756][ T7025] $H: entered promiscuous mode [ 154.233174][ T7025] dummy0: entered promiscuous mode [ 154.252649][ T7027] loop2: detected capacity change from 0 to 1024 [ 154.278169][ T7028] __nla_validate_parse: 1 callbacks suppressed [ 154.278187][ T7028] netlink: 256 bytes leftover after parsing attributes in process `syz.0.975'. [ 154.307256][ T7027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.321738][ T29] kauditd_printk_skb: 731 callbacks suppressed [ 154.321764][ T29] audit: type=1326 audit(2000524385.967:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.350212][ T7027] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.379506][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 154.383284][ T29] audit: type=1326 audit(2000524385.997:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.412342][ T29] audit: type=1326 audit(2000524385.997:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.436546][ T29] audit: type=1326 audit(2000524385.997:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.460235][ T29] audit: type=1326 audit(2000524386.007:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.483926][ T29] audit: type=1326 audit(2000524386.017:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.507745][ T29] audit: type=1326 audit(2000524386.017:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.531560][ T29] audit: type=1326 audit(2000524386.017:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.555246][ T29] audit: type=1326 audit(2000524386.017:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 154.578778][ T29] audit: type=1326 audit(2000524386.017:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d427d1425 code=0x7ffc0000 [ 154.998160][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.254504][ T7048] netlink: 'syz.1.981': attribute type 12 has an invalid length. [ 156.488055][ T7065] loop0: detected capacity change from 0 to 32768 [ 156.547516][ T7065] loop0: p1 p2 p3 < > [ 156.552211][ T7065] loop0: p1 size 242222080 extends beyond EOD, truncated [ 156.561260][ T7074] loop2: detected capacity change from 0 to 512 [ 156.568725][ T7065] loop0: p2 start 4294967295 is beyond EOD, truncated [ 156.576485][ T7074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.584616][ T7074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.593268][ T7074] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.747420][ T7074] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c018, mo2=0102] [ 156.757438][ T7074] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.988: Allocating blocks 41-42 which overlap fs metadata [ 156.784594][ T7074] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.988: Failed to acquire dquot type 1 [ 156.814180][ T7074] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 156.908188][ T7074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.988: corrupted inode contents [ 156.953475][ T7084] loop0: detected capacity change from 0 to 512 [ 157.281644][ T7074] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.988: mark_inode_dirty error [ 157.281918][ T7084] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 157.293874][ T7074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.988: corrupted inode contents [ 157.301782][ T7084] EXT4-fs (loop0): 1 truncate cleaned up [ 157.314128][ T7074] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.988: mark_inode_dirty error [ 157.319644][ T7084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.331169][ T7074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.988: corrupted inode contents [ 157.355442][ T7074] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 157.365463][ T7074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.988: corrupted inode contents [ 157.377874][ T7074] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.988: mark_inode_dirty error [ 157.389347][ T7074] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 157.399216][ T7074] EXT4-fs (loop2): 1 truncate cleaned up [ 157.405664][ T7074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.493290][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.579292][ T7088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.629179][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.650367][ T7088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.693480][ T7088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.745320][ T7088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.788144][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.800529][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.812945][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.824192][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.880098][ T7096] netlink: 'syz.4.995': attribute type 12 has an invalid length. [ 157.899614][ T7098] siw: device registration error -23 [ 157.925453][ T7102] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 157.925453][ T7102] program syz.1.996 not setting count and/or reply_len properly [ 158.750083][ T7123] loop0: detected capacity change from 0 to 1764 [ 158.796138][ T7124] netlink: 'syz.1.1003': attribute type 10 has an invalid length. [ 158.804114][ T7124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1003'. [ 158.817399][ T7124] team0: Port device geneve1 added [ 158.836093][ T1690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.845500][ T1690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.854425][ T1690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.863436][ T1690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.079845][ T7136] netlink: 'syz.4.1008': attribute type 6 has an invalid length. [ 159.098106][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'. [ 159.148476][ T7137] team0: entered promiscuous mode [ 159.153862][ T7137] team0: entered allmulticast mode [ 159.160729][ T7140] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1007'. [ 159.246323][ T7137] lo speed is unknown, defaulting to 1000 [ 159.262065][ T7137] lo speed is unknown, defaulting to 1000 [ 159.299501][ T7134] delete_channel: no stack [ 159.438797][ T29] kauditd_printk_skb: 710 callbacks suppressed [ 159.438813][ T29] audit: type=1326 audit(2000524391.084:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.469454][ T29] audit: type=1326 audit(2000524391.084:11002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.506869][ T29] audit: type=1326 audit(2000524391.134:11003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.530784][ T29] audit: type=1326 audit(2000524391.134:11004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.554503][ T29] audit: type=1326 audit(2000524391.134:11005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.567720][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 159.578032][ T29] audit: type=1326 audit(2000524391.134:11006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.610708][ T29] audit: type=1326 audit(2000524391.134:11007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.634287][ T29] audit: type=1326 audit(2000524391.134:11008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.658008][ T29] audit: type=1326 audit(2000524391.134:11009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.681965][ T29] audit: type=1326 audit(2000524391.144:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 159.965378][ T7155] loop9: detected capacity change from 0 to 7 [ 159.976550][ T7158] siw: device registration error -23 [ 159.981846][ T7155] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.990635][ T7155] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.998565][ T7155] loop9: unable to read partition table [ 160.004313][ T7155] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 160.004313][ T7155] ) failed (rc=-5) [ 160.019328][ T7155] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.052781][ T7155] lo speed is unknown, defaulting to 1000 [ 160.060138][ T7155] lo speed is unknown, defaulting to 1000 [ 160.724175][ T7180] netlink: 'syz.4.1019': attribute type 8 has an invalid length. [ 160.754530][ T7181] loop2: detected capacity change from 0 to 512 [ 160.762488][ T7181] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 160.819308][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1020'. [ 160.928140][ T3363] hid_parser_main: 18 callbacks suppressed [ 160.928160][ T3363] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 160.941707][ T3363] hid-generic 0000:0000:0000.0007: item fetching failed at offset 4/35 [ 160.956965][ T3363] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 161.052510][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 161.064989][ T7191] ipvlan2: entered promiscuous mode [ 161.119837][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 161.295517][ T7199] 9pnet_virtio: no channels available for device syz [ 161.649774][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 161.754627][ T7211] lo speed is unknown, defaulting to 1000 [ 161.779745][ T7211] lo speed is unknown, defaulting to 1000 [ 161.937933][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 162.026222][ T7216] usb usb1: check_ctrlrecip: process 7216 (+}[@) requesting ep 01 but needs 81 [ 162.052000][ T7216] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 162.133834][ T7229] program syz.2.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.374364][ T7233] lo speed is unknown, defaulting to 1000 [ 162.381001][ T7233] lo speed is unknown, defaulting to 1000 [ 162.515297][ T7231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.522587][ T7231] IPv6: NLM_F_CREATE should be set when creating new route [ 162.529968][ T7231] IPv6: NLM_F_CREATE should be set when creating new route [ 162.537985][ T7231] ------------[ cut here ]------------ [ 162.544023][ T7231] WARNING: CPU: 0 PID: 7231 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xc41/0xcb0 [ 162.554306][ T7231] Modules linked in: [ 162.558244][ T7231] CPU: 0 UID: 0 PID: 7231 Comm: syz.0.1032 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 162.570477][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.580594][ T7231] RIP: 0010:nsim_fib_event_nb+0xc41/0xcb0 [ 162.586422][ T7231] Code: 17 13 fe be 01 00 00 00 4c 8b 74 24 18 49 8d 7e 2c e8 b3 87 a8 fe 4c 8b 2c 24 48 8b 6c 24 10 e9 93 f6 ff ff e8 10 17 13 fe 90 <0f> 0b 90 e9 5a fc ff ff e8 02 17 13 fe e9 a5 f9 ff ff e8 f8 16 13 [ 162.606300][ T7231] RSP: 0018:ffffc90002ea7618 EFLAGS: 00010283 [ 162.612499][ T7231] RAX: ffffffff8344e1e0 RBX: 0000000000000000 RCX: 0000000000080000 [ 162.620577][ T7231] RDX: ffffc9000362e000 RSI: 0000000000001dc3 RDI: 0000000000001dc4 [ 162.628586][ T7231] RBP: 0000000000000001 R08: 000188812073521f R09: 0000000000000000 [ 162.636640][ T7231] R10: ffff88812d963350 R11: 0000000000000002 R12: ffffc90002ea7718 [ 162.644728][ T7231] R13: ffff888118d45000 R14: ffff888120735218 R15: 0000000000000001 [ 162.652770][ T7231] FS: 00007fbedef3d6c0(0000) GS:ffff8882aee47000(0000) knlGS:0000000000000000 [ 162.661800][ T7231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.668950][ T7231] CR2: 0000001b3210dff8 CR3: 0000000155410000 CR4: 00000000003506f0 [ 162.677108][ T7231] Call Trace: [ 162.680478][ T7231] [ 162.683551][ T7231] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 162.689117][ T7231] atomic_notifier_call_chain+0x76/0x1c0 [ 162.694874][ T7231] call_fib_notifiers+0x65/0xa0 [ 162.699894][ T7231] call_fib6_notifiers+0x30/0x40 [ 162.704882][ T7231] call_fib6_multipath_entry_notifiers+0x94/0xc0 [ 162.711382][ T7231] inet6_rtm_newroute+0xaf1/0x1020 [ 162.716615][ T7231] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 162.722405][ T7231] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 162.727586][ T7231] netlink_rcv_skb+0x120/0x220 [ 162.732584][ T7231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.738135][ T7231] rtnetlink_rcv+0x1c/0x30 [ 162.742706][ T7231] netlink_unicast+0x5c0/0x690 [ 162.747564][ T7231] netlink_sendmsg+0x58b/0x6b0 [ 162.752491][ T7231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.758053][ T7231] __sock_sendmsg+0x145/0x180 [ 162.762830][ T7231] ____sys_sendmsg+0x31e/0x4e0 [ 162.767639][ T7231] ___sys_sendmsg+0x17b/0x1d0 [ 162.772509][ T7231] __x64_sys_sendmsg+0xd4/0x160 [ 162.777423][ T7231] x64_sys_call+0x191e/0x2ff0 [ 162.782213][ T7231] do_syscall_64+0xd2/0x200 [ 162.786829][ T7231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.793023][ T7231] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 162.798795][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.805119][ T7231] RIP: 0033:0x7fbee091eb69 [ 162.812424][ T7231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.832135][ T7231] RSP: 002b:00007fbedef3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.841324][ T7231] RAX: ffffffffffffffda RBX: 00007fbee0b46160 RCX: 00007fbee091eb69 [ 162.849371][ T7231] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 162.857462][ T7231] RBP: 00007fbee09a1df1 R08: 0000000000000000 R09: 0000000000000000 [ 162.866301][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.874791][ T7231] R13: 0000000000000000 R14: 00007fbee0b46160 R15: 00007ffdafe96728 [ 162.882960][ T7231] [ 162.886033][ T7231] ---[ end trace 0000000000000000 ]--- [ 162.987717][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1037'. [ 163.003364][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 163.061819][ T7244] bridge0: port 1(macvlan3) entered blocking state [ 163.068452][ T7244] bridge0: port 1(macvlan3) entered disabled state [ 163.075954][ T7244] macvlan3: entered allmulticast mode [ 163.081477][ T7244] bridge0: entered allmulticast mode [ 163.091683][ T7244] macvlan3: left allmulticast mode [ 163.096881][ T7244] bridge0: left allmulticast mode [ 163.105256][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1038'. [ 163.163773][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1035'. [ 163.471437][ T3390] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 163.478979][ T3390] hid-generic 0000:0000:0000.0008: item fetching failed at offset 4/35 [ 163.507725][ T3390] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 163.871208][ T7274] net_ratelimit: 102 callbacks suppressed [ 163.871227][ T7274] netlink: zone id is out of range [ 163.883544][ T7274] netlink: zone id is out of range [ 163.888971][ T7274] netlink: zone id is out of range [ 163.894165][ T7274] netlink: zone id is out of range [ 163.899954][ T7274] netlink: zone id is out of range [ 163.905386][ T7274] netlink: zone id is out of range [ 163.911479][ T7274] netlink: zone id is out of range [ 163.916787][ T7274] netlink: zone id is out of range [ 163.923440][ T7274] netlink: zone id is out of range [ 163.928912][ T7274] netlink: zone id is out of range [ 164.113043][ T7279] siw: device registration error -23 [ 164.677013][ T7290] __nla_validate_parse: 3 callbacks suppressed [ 164.677033][ T7290] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1049'. [ 164.792833][ T29] kauditd_printk_skb: 1302 callbacks suppressed [ 164.792866][ T29] audit: type=1326 audit(2000524396.433:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 164.823214][ T29] audit: type=1326 audit(2000524396.433:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 164.910688][ T29] audit: type=1326 audit(2000524396.513:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 164.934387][ T29] audit: type=1326 audit(2000524396.513:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 164.958267][ T29] audit: type=1326 audit(2000524396.523:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 164.982255][ T29] audit: type=1326 audit(2000524396.523:12318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 165.005876][ T29] audit: type=1326 audit(2000524396.523:12319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 165.029508][ T29] audit: type=1326 audit(2000524396.523:12320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 165.053052][ T29] audit: type=1326 audit(2000524396.523:12321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 165.076802][ T29] audit: type=1326 audit(2000524396.523:12322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54128ceb69 code=0x7ffc0000 [ 165.100135][ T7298] siw: device registration error -23 [ 165.301310][ T7302] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 165.319610][ T3390] lo speed is unknown, defaulting to 1000 [ 165.325623][ T3390] syz2: Port: 1 Link DOWN [ 165.331499][ T7302] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 165.349724][ T3390] lo speed is unknown, defaulting to 1000 [ 165.355582][ T3390] syz2: Port: 1 Link ACTIVE [ 165.423610][ T7304] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 165.442286][ T7304] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 165.452278][ T23] lo speed is unknown, defaulting to 1000 [ 165.458136][ T23] syz0: Port: 1 Link ACTIVE [ 165.529612][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.538347][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.855854][ T7315] block device autoloading is deprecated and will be removed. [ 166.056624][ T3390] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 166.064263][ T3390] hid-generic 0000:0000:0000.0009: item fetching failed at offset 4/35 [ 166.085788][ T3390] hid-generic 0000:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 166.475412][ T7336] 9pnet_virtio: no channels available for device syz [ 166.809579][ T7339] block device autoloading is deprecated and will be removed. [ 167.233456][ T7351] siw: device registration error -23 [ 167.244987][ T7352] loop1: detected capacity change from 0 to 1024 [ 167.252727][ T7352] EXT4-fs: Ignoring removed orlov option [ 167.258928][ T7352] /dev/loop1: Can't open blockdev [ 167.268227][ T7352] SELinux: policydb version -957581230 does not match my version range 15-35 [ 167.277722][ T7352] SELinux: failed to load policy [ 167.846339][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1072'. [ 167.855651][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1072'. [ 167.959825][ T7371] lo speed is unknown, defaulting to 1000 [ 167.966456][ T7371] lo speed is unknown, defaulting to 1000 [ 168.086332][ T7371] siw: device registration error -23 [ 168.645674][ T7372] $H: left promiscuous mode [ 168.650614][ T7372] dummy0: left promiscuous mode [ 168.656424][ T7372] 8021q: adding VLAN 0 to HW filter on device $H [ 168.665141][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.973226][ T7397] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 168.991707][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.002022][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1081'. [ 169.016822][ T7397] vlan0: entered allmulticast mode [ 169.022262][ T7397] bond0: entered allmulticast mode [ 169.084512][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 169.252125][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 169.261236][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 169.270163][ T7413] netlink: 'syz.2.1084': attribute type 15 has an invalid length. [ 169.284710][ T7413] netem: change failed [ 169.340223][ T7414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7414 comm=syz.2.1084 [ 169.352831][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1084'. [ 169.792085][ T7420] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 169.829860][ T29] kauditd_printk_skb: 1038 callbacks suppressed [ 169.829880][ T29] audit: type=1326 audit(2000524402.466:13361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 169.865013][ T29] audit: type=1326 audit(2000524402.466:13362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 169.889376][ T29] audit: type=1326 audit(2000524402.486:13363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 169.913453][ T29] audit: type=1326 audit(2000524402.486:13364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 169.913829][ T29] audit: type=1326 audit(2000524402.486:13365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4279eb69 code=0x7ffc0000 [ 169.913890][ T29] audit: type=1400 audit(2000524402.506:13366): avc: denied { getopt } for pid=7417 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.913922][ T29] audit: type=1400 audit(2000524402.506:13367): avc: denied { ioctl } for pid=7417 comm="syz.4.1086" path="socket:[19412]" dev="sockfs" ino=19412 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.914629][ T7426] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 169.964549][ T7425] netlink: 'syz.5.1088': attribute type 10 has an invalid length. [ 169.982253][ T7426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1087'. [ 170.007535][ T7425] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1088'. [ 170.087200][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1088'. [ 170.111140][ T7429] SELinux: policydb version -957581230 does not match my version range 15-35 [ 170.120103][ T7429] SELinux: failed to load policy [ 170.148298][ T7433] loop4: detected capacity change from 0 to 512 [ 170.163957][ T7433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.182934][ T29] audit: type=1326 audit(2001048690.822:13368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 170.233714][ T7433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.251156][ T29] audit: type=1326 audit(2001048690.822:13369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 170.275647][ T29] audit: type=1326 audit(2001048690.822:13370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 170.301178][ T7433] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.318964][ T7433] EXT4-fs (loop4): shut down requested (0) [ 170.353932][ T7445] net_ratelimit: 2 callbacks suppressed [ 170.353947][ T7445] openvswitch: netlink: Message has 6 unknown bytes. [ 170.369308][ T7433] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 170.378519][ T7433] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 170.397955][ T7433] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 170.465519][ T7433] Falling back ldisc for ttyS3. [ 170.497829][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.595616][ T7458] lo speed is unknown, defaulting to 1000 [ 170.610363][ T7458] lo speed is unknown, defaulting to 1000 [ 171.543230][ T7479] pimreg: entered allmulticast mode [ 171.574234][ T7479] pimreg: left allmulticast mode [ 171.702413][ T7479] syzkaller1: entered promiscuous mode [ 171.708196][ T7479] syzkaller1: entered allmulticast mode [ 171.927416][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 171.938713][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 171.938758][ T3304] Tainted: [W]=WARN [ 171.938767][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.938784][ T3304] Call Trace: [ 171.938791][ T3304] [ 171.938815][ T3304] __dump_stack+0x1d/0x30 [ 171.938843][ T3304] dump_stack_lvl+0xe8/0x140 [ 171.938870][ T3304] dump_stack+0x15/0x1b [ 171.938929][ T3304] dump_header+0x81/0x220 [ 171.938973][ T3304] oom_kill_process+0x342/0x400 [ 171.939018][ T3304] out_of_memory+0x979/0xb80 [ 171.939139][ T3304] try_charge_memcg+0x5e6/0x9e0 [ 171.939180][ T3304] charge_memcg+0x51/0xc0 [ 171.939205][ T3304] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 171.939237][ T3304] __read_swap_cache_async+0x1df/0x350 [ 171.939303][ T3304] swap_cluster_readahead+0x376/0x3e0 [ 171.939391][ T3304] swapin_readahead+0xde/0x6f0 [ 171.939444][ T3304] ? __filemap_get_folio+0x4f7/0x6b0 [ 171.939482][ T3304] ? ktime_get+0x1eb/0x210 [ 171.939559][ T3304] ? swap_cache_get_folio+0x77/0x200 [ 171.939603][ T3304] do_swap_page+0x301/0x2430 [ 171.939627][ T3304] ? finish_task_switch+0xad/0x2b0 [ 171.939654][ T3304] ? __pfx_default_wake_function+0x10/0x10 [ 171.939831][ T3304] handle_mm_fault+0x9a5/0x2c20 [ 171.939874][ T3304] do_user_addr_fault+0x636/0x1090 [ 171.939995][ T3304] ? fpregs_restore_userregs+0xe2/0x1d0 [ 171.940089][ T3304] ? switch_fpu_return+0xe/0x20 [ 171.940174][ T3304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.940210][ T3304] exc_page_fault+0x62/0xa0 [ 171.940244][ T3304] asm_exc_page_fault+0x26/0x30 [ 171.940270][ T3304] RIP: 0033:0x7fbaddf013e5 [ 171.940286][ T3304] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 7e 71 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 171.940305][ T3304] RSP: 002b:00007ffef34900d8 EFLAGS: 00010246 [ 171.940370][ T3304] RAX: 0000000000000000 RBX: 00000000000002d1 RCX: 00007fbaddf013e3 [ 171.940385][ T3304] RDX: 00007ffef34900f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.940401][ T3304] RBP: 00007ffef349015c R08: 0000000013ea5f0d R09: 0000000000000000 [ 171.940416][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 171.940431][ T3304] R13: 00000000000927c0 R14: 0000000000029b58 R15: 00007ffef34901b0 [ 171.940525][ T3304] [ 172.173742][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 4694 [ 172.181151][ T3304] memory+swap: usage 328320kB, limit 9007199254740988kB, failcnt 0 [ 172.189285][ T3304] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 172.196594][ T3304] Memory cgroup stats for /syz2: [ 172.201838][ T3304] cache 4096 [ 172.210313][ T3304] rss 0 [ 172.213095][ T3304] shmem 0 [ 172.216049][ T3304] mapped_file 4096 [ 172.219905][ T3304] dirty 0 [ 172.222862][ T3304] writeback 0 [ 172.226162][ T3304] workingset_refault_anon 369 [ 172.230953][ T3304] workingset_refault_file 3170 [ 172.235779][ T3304] swap 21626880 [ 172.239367][ T3304] swapcached 0 [ 172.242754][ T3304] pgpgin 154650 [ 172.246315][ T3304] pgpgout 154649 [ 172.249899][ T3304] pgfault 168631 [ 172.253464][ T3304] pgmajfault 176 [ 172.257029][ T3304] inactive_anon 0 [ 172.260716][ T3304] active_anon 0 [ 172.264240][ T3304] inactive_file 4096 [ 172.268173][ T3304] active_file 0 [ 172.271685][ T3304] unevictable 0 [ 172.275244][ T3304] hierarchical_memory_limit 314572800 [ 172.280725][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 172.286920][ T3304] total_cache 4096 [ 172.290711][ T3304] total_rss 0 [ 172.294004][ T3304] total_shmem 0 [ 172.297486][ T3304] total_mapped_file 4096 [ 172.301758][ T3304] total_dirty 0 [ 172.305327][ T3304] total_writeback 0 [ 172.309157][ T3304] total_workingset_refault_anon 369 [ 172.314519][ T3304] total_workingset_refault_file 3170 [ 172.319818][ T3304] total_swap 21626880 [ 172.323894][ T3304] total_swapcached 0 [ 172.327852][ T3304] total_pgpgin 154650 [ 172.332310][ T3304] total_pgpgout 154649 [ 172.336489][ T3304] total_pgfault 168631 [ 172.340594][ T3304] total_pgmajfault 176 [ 172.344729][ T3304] total_inactive_anon 0 [ 172.348905][ T3304] total_active_anon 0 [ 172.352934][ T3304] total_inactive_file 4096 [ 172.357371][ T3304] total_active_file 0 [ 172.361364][ T3304] total_unevictable 0 [ 172.365388][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1094,pid=7446,uid=0 [ 172.380103][ T3304] Memory cgroup out of memory: Killed process 7446 (syz.2.1094) total-vm:100180kB, anon-rss:940kB, file-rss:26420kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 172.612748][ T7549] netlink: 'syz.1.1102': attribute type 3 has an invalid length. [ 172.694403][ T7558] loop1: detected capacity change from 0 to 1024 [ 172.707621][ T7558] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 172.719480][ T7558] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 172.733254][ T7558] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.1105: iget: special inode unallocated [ 172.758104][ T7558] EXT4-fs (loop1): Remounting filesystem read-only [ 172.764834][ T7558] EXT4-fs (loop1): no journal found [ 172.770329][ T7558] EXT4-fs (loop1): can't get journal size [ 172.787585][ T7558] EXT4-fs (loop1): filesystem is read-only [ 172.798030][ T7566] siw: device registration error -23 [ 172.804553][ T7558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.549659][ T7626] cgroup: name respecified [ 173.564313][ T7626] pim6reg: entered allmulticast mode [ 173.567100][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.580911][ T7626] pim6reg: left allmulticast mode [ 173.683403][ T7633] loop1: detected capacity change from 0 to 1024 [ 173.695523][ T7633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.713166][ T7629] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 173.766374][ T7637] loop4: detected capacity change from 0 to 128 [ 173.809896][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 173.817394][ T23] hid-generic 0000:0000:0000.000A: item fetching failed at offset 4/35 [ 173.869663][ T23] hid-generic 0000:0000:0000.000A: probe with driver hid-generic failed with error -22 [ 173.890637][ T7643] siw: device registration error -23 [ 173.911558][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.960543][ T7647] hub 9-0:1.0: USB hub found [ 173.977329][ T7647] hub 9-0:1.0: 8 ports detected [ 174.081708][ T7646] infiniband syz!: set down [ 174.086475][ T7646] infiniband syz!: added team_slave_0 [ 174.123002][ T7646] RDS/IB: syz!: added [ 174.132581][ T7646] smc: adding ib device syz! with port count 1 [ 174.142083][ T7646] smc: ib device syz! port 1 has pnetid [ 174.142428][ T7656] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 174.430084][ T7668] lo speed is unknown, defaulting to 1000 [ 174.443329][ T7668] lo speed is unknown, defaulting to 1000 [ 174.500076][ T7670] loop1: detected capacity change from 0 to 512 [ 174.524600][ T7669] siw: device registration error -23 [ 174.534860][ T7670] EXT4-fs: Ignoring removed oldalloc option [ 174.564431][ T7670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.604785][ T7670] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.631458][ T7669] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1118: bg 0: block 217: padding at end of block bitmap is not set [ 174.677213][ T7662] netlink: 'syz.4.1117': attribute type 13 has an invalid length. [ 174.685194][ T7662] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1117'. [ 174.757068][ T7662] erspan0: refused to change device tx_queue_len [ 174.764122][ T7662] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 175.007574][ T29] kauditd_printk_skb: 926 callbacks suppressed [ 175.007593][ T29] audit: type=1326 audit(2001048695.510:14297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.091032][ T29] audit: type=1326 audit(2001048695.549:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.114745][ T29] audit: type=1326 audit(2001048695.549:14299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.138301][ T29] audit: type=1326 audit(2001048695.549:14300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.162154][ T29] audit: type=1326 audit(2001048695.549:14301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.185754][ T29] audit: type=1326 audit(2001048695.598:14302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.209639][ T29] audit: type=1326 audit(2001048695.598:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.233339][ T29] audit: type=1326 audit(2001048695.598:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.257079][ T29] audit: type=1326 audit(2001048695.598:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.281007][ T29] audit: type=1326 audit(2001048695.598:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee091eb69 code=0x7ffc0000 [ 175.768569][ T7660] syz.2.1116 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 175.782852][ T7660] CPU: 0 UID: 0 PID: 7660 Comm: syz.2.1116 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 175.782911][ T7660] Tainted: [W]=WARN [ 175.782921][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.782938][ T7660] Call Trace: [ 175.782945][ T7660] [ 175.783015][ T7660] __dump_stack+0x1d/0x30 [ 175.783043][ T7660] dump_stack_lvl+0xe8/0x140 [ 175.783067][ T7660] dump_stack+0x15/0x1b [ 175.783087][ T7660] dump_header+0x81/0x220 [ 175.783164][ T7660] oom_kill_process+0x342/0x400 [ 175.783208][ T7660] out_of_memory+0x979/0xb80 [ 175.783313][ T7660] try_charge_memcg+0x5e6/0x9e0 [ 175.783375][ T7660] obj_cgroup_charge_pages+0xa6/0x150 [ 175.783409][ T7660] __memcg_kmem_charge_page+0x9f/0x170 [ 175.783454][ T7660] __alloc_frozen_pages_noprof+0x188/0x360 [ 175.783552][ T7660] alloc_pages_mpol+0xb3/0x250 [ 175.783673][ T7660] alloc_pages_noprof+0x90/0x130 [ 175.783769][ T7660] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 175.783851][ T7660] __kvmalloc_node_noprof+0x30f/0x4e0 [ 175.783893][ T7660] ? ip_set_alloc+0x1f/0x30 [ 175.783920][ T7660] ? ip_set_alloc+0x1f/0x30 [ 175.784016][ T7660] ? hash_netiface_create+0x21b/0x740 [ 175.784056][ T7660] ? __kmalloc_cache_noprof+0x189/0x320 [ 175.784101][ T7660] ip_set_alloc+0x1f/0x30 [ 175.784131][ T7660] hash_netiface_create+0x282/0x740 [ 175.784232][ T7660] ? __pfx_hash_netiface_create+0x10/0x10 [ 175.784332][ T7660] ip_set_create+0x3cc/0x960 [ 175.784445][ T7660] ? __nla_parse+0x40/0x60 [ 175.784474][ T7660] nfnetlink_rcv_msg+0x4c6/0x590 [ 175.784500][ T7660] ? __rcu_read_unlock+0x34/0x70 [ 175.784558][ T7660] netlink_rcv_skb+0x120/0x220 [ 175.784650][ T7660] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.784683][ T7660] nfnetlink_rcv+0x16b/0x1690 [ 175.784711][ T7660] ? nlmon_xmit+0x4f/0x60 [ 175.784740][ T7660] ? consume_skb+0x49/0x150 [ 175.784781][ T7660] ? nlmon_xmit+0x4f/0x60 [ 175.784942][ T7660] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 175.785025][ T7660] ? __dev_queue_xmit+0x1200/0x2000 [ 175.785067][ T7660] ? __dev_queue_xmit+0x182/0x2000 [ 175.785171][ T7660] ? ref_tracker_free+0x37d/0x3e0 [ 175.785217][ T7660] ? __netlink_deliver_tap+0x4dc/0x500 [ 175.785338][ T7660] netlink_unicast+0x5c0/0x690 [ 175.785422][ T7660] netlink_sendmsg+0x58b/0x6b0 [ 175.785502][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.785536][ T7660] __sock_sendmsg+0x145/0x180 [ 175.785592][ T7660] ____sys_sendmsg+0x31e/0x4e0 [ 175.785642][ T7660] ___sys_sendmsg+0x17b/0x1d0 [ 175.785756][ T7660] __x64_sys_sendmsg+0xd4/0x160 [ 175.785802][ T7660] x64_sys_call+0x191e/0x2ff0 [ 175.785824][ T7660] do_syscall_64+0xd2/0x200 [ 175.785891][ T7660] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.785914][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.785936][ T7660] RIP: 0033:0x7fbaddeceb69 [ 175.785956][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.785980][ T7660] RSP: 002b:00007fbadc52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.785999][ T7660] RAX: ffffffffffffffda RBX: 00007fbade0f5fa0 RCX: 00007fbaddeceb69 [ 175.786025][ T7660] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 175.786038][ T7660] RBP: 00007fbaddf51df1 R08: 0000000000000000 R09: 0000000000000000 [ 175.786050][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.786098][ T7660] R13: 0000000000000000 R14: 00007fbade0f5fa0 R15: 00007ffef348fd98 [ 175.786120][ T7660] [ 175.786127][ T7660] memory: usage 307200kB, limit 307200kB, failcnt 7494 [ 176.138044][ T7660] memory+swap: usage 328168kB, limit 9007199254740988kB, failcnt 0 [ 176.146017][ T7660] kmem: usage 306980kB, limit 9007199254740988kB, failcnt 0 [ 176.153463][ T7660] Memory cgroup stats for /syz2: [ 176.153873][ T7660] cache 4096 [ 176.162273][ T7660] rss 45056 [ 176.165482][ T7660] shmem 0 [ 176.168438][ T7660] mapped_file 4096 [ 176.172312][ T7660] dirty 0 [ 176.175315][ T7660] writeback 0 [ 176.178615][ T7660] workingset_refault_anon 482 [ 176.183345][ T7660] workingset_refault_file 3298 [ 176.188137][ T7660] swap 21581824 [ 176.191650][ T7660] swapcached 40960 [ 176.195382][ T7660] pgpgin 161419 [ 176.198884][ T7660] pgpgout 161407 [ 176.202492][ T7660] pgfault 179570 [ 176.206061][ T7660] pgmajfault 272 [ 176.209621][ T7660] inactive_anon 0 [ 176.213347][ T7660] active_anon 20480 [ 176.217232][ T7660] inactive_file 0 [ 176.220876][ T7660] active_file 4096 [ 176.224650][ T7660] unevictable 0 [ 176.228125][ T7660] hierarchical_memory_limit 314572800 [ 176.233718][ T7660] hierarchical_memsw_limit 9223372036854771712 [ 176.240093][ T7660] total_cache 4096 [ 176.243903][ T7660] total_rss 45056 [ 176.247556][ T7660] total_shmem 0 [ 176.251025][ T7660] total_mapped_file 4096 [ 176.255355][ T7660] total_dirty 0 [ 176.258826][ T7660] total_writeback 0 [ 176.262646][ T7660] total_workingset_refault_anon 482 [ 176.268024][ T7660] total_workingset_refault_file 3298 [ 176.273412][ T7660] total_swap 21581824 [ 176.277406][ T7660] total_swapcached 40960 [ 176.281650][ T7660] total_pgpgin 161419 [ 176.285674][ T7660] total_pgpgout 161407 [ 176.289837][ T7660] total_pgfault 179570 [ 176.294064][ T7660] total_pgmajfault 272 [ 176.298230][ T7660] total_inactive_anon 0 [ 176.302532][ T7660] total_active_anon 20480 [ 176.306938][ T7660] total_inactive_file 0 [ 176.311109][ T7660] total_active_file 4096 [ 176.315433][ T7660] total_unevictable 0 [ 176.319494][ T7660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1116,pid=7659,uid=0 [ 176.334220][ T7660] Memory cgroup out of memory: Killed process 7660 (syz.2.1116) total-vm:100180kB, anon-rss:944kB, file-rss:26484kB, shmem-rss:0kB, UID:60928 pgtables:160kB oom_score_adj:1000 [ 176.521867][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.734978][ T7704] hub 6-0:1.0: USB hub found [ 176.753992][ T7704] hub 6-0:1.0: 8 ports detected [ 176.786891][ T7707] loop4: detected capacity change from 0 to 1024 [ 176.802173][ T7707] EXT4-fs: Ignoring removed nobh option [ 176.817359][ T7707] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.840950][ T7698] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 176.860683][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 176.877131][ T7707] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1130: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 176.927884][ T7707] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1130: couldn't read orphan inode 11 (err -117) [ 176.971099][ T7707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.144387][ T7721] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1130: Invalid block bitmap block 0 in block_group 0 [ 177.173198][ T7721] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1130: Failed to acquire dquot type 0 [ 177.332960][ T7724] lo speed is unknown, defaulting to 1000 [ 177.340485][ T7724] lo speed is unknown, defaulting to 1000 [ 178.049954][ T7738] random: crng reseeded on system resumption [ 178.116506][ T7741] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1143'. [ 178.125801][ T7741] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1143'. [ 179.429960][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.491357][ T7772] loop1: detected capacity change from 0 to 1764 [ 179.502397][ T7772] siw: device registration error -23 [ 179.534967][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 179.544908][ T7772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 180.357959][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 180.357979][ T29] audit: type=1400 audit(2001048700.757:14711): avc: denied { setattr } for pid=7793 comm="+}[@" name="ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 180.390808][ T7794] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 180.563706][ T7802] loop4: detected capacity change from 0 to 1024 [ 180.587444][ T7802] EXT4-fs: Ignoring removed nobh option [ 180.615007][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 180.650752][ T7802] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.669995][ T29] audit: type=1400 audit(2001048701.042:14712): avc: denied { write } for pid=7806 comm="syz.5.1165" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.739444][ T7810] netlink: 'syz.5.1165': attribute type 10 has an invalid length. [ 180.770463][ T7802] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1160: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 180.780222][ T7807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=7807 comm=syz.5.1165 [ 180.829812][ T7802] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1160: couldn't read orphan inode 11 (err -117) [ 180.895748][ T7802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.989701][ T7802] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1160: Invalid block bitmap block 0 in block_group 0 [ 181.003755][ T7802] Quota error (device loop4): write_blk: dquota write failed [ 181.011305][ T7802] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 181.011683][ T29] audit: type=1400 audit(2001048701.396:14713): avc: denied { read } for pid=7815 comm="syz.5.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.040948][ T7802] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1160: Failed to acquire dquot type 0 [ 181.097333][ T7816] netlink: 'syz.5.1167': attribute type 13 has an invalid length. [ 181.105548][ T7816] netlink: 'syz.5.1167': attribute type 17 has an invalid length. [ 181.209573][ T29] audit: type=1400 audit(2001048701.583:14714): avc: denied { watch_reads } for pid=7823 comm="syz.0.1168" path="/235/file0" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.240940][ T7816] $H: left promiscuous mode [ 181.245940][ T7816] bond_slave_0: left promiscuous mode [ 181.251999][ T7816] bond_slave_1: left promiscuous mode [ 181.273141][ T7816] dummy0: left promiscuous mode [ 181.278172][ T7816] bond1: left promiscuous mode [ 181.297022][ T7816] 8021q: adding VLAN 0 to HW filter on device $H [ 181.338035][ T7816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.342424][ T7832] Invalid ELF header magic: != ELF [ 181.363845][ T29] audit: type=1400 audit(2001048701.711:14715): avc: denied { module_load } for pid=7831 comm="syz.2.1169" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 181.427816][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.436414][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.447308][ T29] audit: type=1326 audit(2001048701.819:14716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 181.479733][ T29] audit: type=1326 audit(2001048701.858:14717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 181.503564][ T29] audit: type=1326 audit(2001048701.858:14718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaddeceb69 code=0x7ffc0000 [ 181.571572][ T7825] lo speed is unknown, defaulting to 1000 [ 181.582244][ T7825] lo speed is unknown, defaulting to 1000 [ 181.590164][ T7798] lo speed is unknown, defaulting to 1000 [ 181.630758][ T7798] lo speed is unknown, defaulting to 1000 [ 182.304239][ T7847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 182.310961][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.318781][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 182.350293][ T7847] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 182.357046][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.364854][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 182.399327][ T7852] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 182.406212][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 182.413928][ T7852] vhci_hcd vhci_hcd.0: Device attached [ 182.442021][ T7847] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.455856][ T7847] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 182.462502][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.470163][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 182.521421][ T7847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24) [ 182.528162][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 182.535972][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 182.561908][ T3383] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 182.572492][ T7847] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.583742][ T7847] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(29) [ 182.590477][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.598152][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 182.634699][ T7847] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.657351][ T7864] loop1: detected capacity change from 0 to 256 [ 182.665721][ T7847] vhci_hcd vhci_hcd.0: port 0 already used [ 182.679997][ T7864] vfat: Unknown parameter 'uniZxlate' [ 182.689297][ T7860] vhci_hcd: connection closed [ 182.689575][ T12] vhci_hcd: stop threads [ 182.689997][ T7855] vhci_hcd: connection closed [ 182.694491][ T12] vhci_hcd: release socket [ 182.700110][ T7853] vhci_hcd: connection closed [ 182.703634][ T12] vhci_hcd: disconnect device [ 182.715021][ T7850] vhci_hcd: connection closed [ 182.717990][ T7857] vhci_hcd: connection closed [ 182.719505][ T7848] vhci_hcd: connection reset by peer [ 182.761728][ T12] vhci_hcd: stop threads [ 182.766103][ T12] vhci_hcd: release socket [ 182.770558][ T12] vhci_hcd: disconnect device [ 182.874212][ T12] vhci_hcd: stop threads [ 182.878545][ T12] vhci_hcd: release socket [ 182.883242][ T12] vhci_hcd: disconnect device [ 182.946234][ T12] vhci_hcd: stop threads [ 182.950770][ T12] vhci_hcd: release socket [ 182.955412][ T12] vhci_hcd: disconnect device [ 183.107992][ T7880] lo speed is unknown, defaulting to 1000 [ 183.114318][ T7880] lo speed is unknown, defaulting to 1000 [ 183.950588][ T12] vhci_hcd: stop threads [ 183.955005][ T12] vhci_hcd: release socket [ 183.959478][ T12] vhci_hcd: disconnect device [ 184.979749][ T7875] siw: device registration error -23 [ 184.999077][ T12] vhci_hcd: stop threads [ 185.003768][ T12] vhci_hcd: release socket [ 185.008810][ T12] vhci_hcd: disconnect device [ 185.199666][ T7886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1185'. [ 185.457695][ T7896] netlink: 'syz.5.1189': attribute type 21 has an invalid length. [ 185.465719][ T7896] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1189'. [ 185.475975][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 185.475999][ T29] audit: type=1326 audit(2001048705.790:14969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.524237][ T29] audit: type=1326 audit(2001048705.819:14970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.547996][ T29] audit: type=1326 audit(2001048705.819:14971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.571662][ T29] audit: type=1326 audit(2001048705.819:14972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.595343][ T29] audit: type=1326 audit(2001048705.819:14973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07c148d4d0 code=0x7ffc0000 [ 185.618964][ T29] audit: type=1326 audit(2001048705.819:14974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.642680][ T29] audit: type=1326 audit(2001048705.819:14975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.666351][ T29] audit: type=1326 audit(2001048705.819:14976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.689860][ T29] audit: type=1326 audit(2001048705.819:14977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.714249][ T29] audit: type=1326 audit(2001048705.819:14978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7895 comm="syz.5.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c148eb69 code=0x7ffc0000 [ 185.740916][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.751093][ T7896] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.812833][ T7896] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.890801][ T7896] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.951988][ T7896] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.969196][ T7911] loop4: detected capacity change from 0 to 2048 [ 185.979716][ T7911] EXT4-fs (loop4): #clusters per group too big: 151011328 [ 186.024091][ T4967] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.044105][ T4967] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.044535][ T7915] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1195'. [ 186.060987][ T4967] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.074447][ T4967] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.088929][ T7910] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 186.242505][ T7920] loop1: detected capacity change from 0 to 2048 [ 186.273605][ T7920] loop1: p1 < > p4 [ 186.279437][ T7920] loop1: p4 size 8388608 extends beyond EOD, truncated [ 187.486873][ T7939] loop1: detected capacity change from 0 to 1024 [ 187.592422][ T7942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.648880][ T7939] EXT4-fs: Ignoring removed nobh option [ 187.744697][ T7939] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.793381][ T3383] vhci_hcd: vhci_device speed not set [ 187.873638][ T7939] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.1201: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 187.922528][ T7939] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1201: couldn't read orphan inode 11 (err -117) [ 187.957523][ T7939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.030015][ T7939] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1201: Invalid block bitmap block 0 in block_group 0 [ 188.059859][ T7939] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1201: Failed to acquire dquot type 0 [ 188.104617][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 188.127847][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 188.149194][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 188.169249][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 188.194604][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 188.195762][ T7954] tmpfs: Bad value for 'mpol' [ 188.956916][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1211'. [ 188.976569][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1211'. [ 189.024523][ T7964] ================================================================== [ 189.032756][ T7964] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 189.040099][ T7964] [ 189.042533][ T7964] write to 0xffff88812c63f540 of 4 bytes by task 7965 on cpu 1: [ 189.050185][ T7964] touch_atime+0x1e8/0x340 [ 189.054647][ T7964] shmem_file_read_iter+0x477/0x540 [ 189.059886][ T7964] copy_splice_read+0x3c4/0x5f0 [ 189.064776][ T7964] splice_direct_to_actor+0x290/0x680 [ 189.070178][ T7964] do_splice_direct+0xda/0x150 [ 189.074975][ T7964] do_sendfile+0x380/0x650 [ 189.079534][ T7964] __x64_sys_sendfile64+0x105/0x150 [ 189.084765][ T7964] x64_sys_call+0x2bb0/0x2ff0 [ 189.089470][ T7964] do_syscall_64+0xd2/0x200 [ 189.093996][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.099913][ T7964] [ 189.102259][ T7964] read to 0xffff88812c63f540 of 4 bytes by task 7964 on cpu 0: [ 189.110011][ T7964] atime_needs_update+0x25f/0x3e0 [ 189.115164][ T7964] touch_atime+0x4a/0x340 [ 189.119576][ T7964] shmem_file_read_iter+0x477/0x540 [ 189.124833][ T7964] copy_splice_read+0x3c4/0x5f0 [ 189.129829][ T7964] splice_direct_to_actor+0x290/0x680 [ 189.135308][ T7964] do_splice_direct+0xda/0x150 [ 189.140103][ T7964] do_sendfile+0x380/0x650 [ 189.144558][ T7964] __x64_sys_sendfile64+0x105/0x150 [ 189.150245][ T7964] x64_sys_call+0x2bb0/0x2ff0 [ 189.155052][ T7964] do_syscall_64+0xd2/0x200 [ 189.159707][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.165650][ T7964] [ 189.168018][ T7964] value changed: 0x113a7761 -> 0x12688145 [ 189.173744][ T7964] [ 189.176083][ T7964] Reported by Kernel Concurrency Sanitizer on: [ 189.182261][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.0.1209 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 189.195928][ T7964] Tainted: [W]=WARN [ 189.199747][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.209824][ T7964] ================================================================== [ 190.559960][ T3390] usb usb6-port1: attempt power cycle [ 190.763746][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.812052][ T7964] ================================================================== [ 190.820211][ T7964] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 190.828609][ T7964] [ 190.830974][ T7964] write to 0xffff88812c63f544 of 4 bytes by task 7965 on cpu 1: [ 190.838628][ T7964] inode_update_timestamps+0x147/0x270 [ 190.844226][ T7964] file_update_time+0x20e/0x2b0 [ 190.849124][ T7964] shmem_file_write_iter+0x9c/0xf0 [ 190.854272][ T7964] iter_file_splice_write+0x5ef/0x970 [ 190.859677][ T7964] direct_splice_actor+0x156/0x2a0 [ 190.864808][ T7964] splice_direct_to_actor+0x312/0x680 [ 190.870223][ T7964] do_splice_direct+0xda/0x150 [ 190.875109][ T7964] do_sendfile+0x380/0x650 [ 190.879568][ T7964] __x64_sys_sendfile64+0x105/0x150 [ 190.884804][ T7964] x64_sys_call+0x2bb0/0x2ff0 [ 190.889543][ T7964] do_syscall_64+0xd2/0x200 [ 190.894080][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.900019][ T7964] [ 190.902360][ T7964] read to 0xffff88812c63f544 of 4 bytes by task 7964 on cpu 0: [ 190.909934][ T7964] atime_needs_update+0x2a8/0x3e0 [ 190.914996][ T7964] touch_atime+0x4a/0x340 [ 190.919360][ T7964] shmem_file_read_iter+0x477/0x540 [ 190.924588][ T7964] copy_splice_read+0x3c4/0x5f0 [ 190.929480][ T7964] splice_direct_to_actor+0x290/0x680 [ 190.934894][ T7964] do_splice_direct+0xda/0x150 [ 190.939859][ T7964] do_sendfile+0x380/0x650 [ 190.944325][ T7964] __x64_sys_sendfile64+0x105/0x150 [ 190.949557][ T7964] x64_sys_call+0x2bb0/0x2ff0 [ 190.954270][ T7964] do_syscall_64+0xd2/0x200 [ 190.958804][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.964724][ T7964] [ 190.967090][ T7964] value changed: 0x03a7b822 -> 0x043eeb54 [ 190.972911][ T7964] [ 190.975260][ T7964] Reported by Kernel Concurrency Sanitizer on: [ 190.981424][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.0.1209 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 190.995096][ T7964] Tainted: [W]=WARN [ 190.998911][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.008975][ T7964] ================================================================== [ 192.567779][ T3390] usb usb6-port1: unable to enumerate USB device