last executing test programs: 53.714588772s ago: executing program 2 (id=296): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4e, 0x10, 0x1, 0x44}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r8, 0xfd0, 0x9d59, 0x28, 0x0, 0xffffffffffffff96) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x40442, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xa, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x42, &(0x7f00000004c0)=""/66, 0x41000, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r0, r0], &(0x7f0000000800), 0x10, 0xfffffeb8}, 0x94) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 52.768090438s ago: executing program 2 (id=300): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000002300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000800)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 51.704459464s ago: executing program 2 (id=303): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x40, 0x4}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0x8a, 0x1, 0xff, 0x9, 0x2, 0x6, 0x1b4e23dd, {0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x3}}, 0xffff, 0x7, 0x4, 0x10001, 0x401}}, &(0x7f0000000400)=0x99) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="2100000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syslog(0x3, &(0x7f00000003c0)=""/33, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002fe39bcc79fcda3aaf757dacf5d643d0763bfee9ec8294bdaedc1619d2d600e3a96815644d324e4284680d774d1f075781901624fde2e812492ae80b72dbe508941f03bab7ed78b0ca7edfaa64070451d2e2a96efddf8828e445d947a3241778d16c18f583f5aa36ad22d683b1690e1589a9f8f22be04ff868859498c50fb15018afb802588996dab178b759da097fd7079fc9aa8d95af6ed5ce967701acf7d8352a78e7afa429797a78316053d4880865ab5e9d4a979501ed2adc076b", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000955a850000001600000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000895}, 0x44094) write$P9_RWALK(r12, 0x0, 0x30) 51.543148015s ago: executing program 2 (id=306): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000002300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000800)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 50.60899076s ago: executing program 2 (id=324): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) sync() 49.656622407s ago: executing program 2 (id=325): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000002300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000800)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 33.983928079s ago: executing program 32 (id=325): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000002300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000800)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 5.884658074s ago: executing program 3 (id=555): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file3\x00', 0x11e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, &(0x7f0000000280)="b89ce8aea1"}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000e9ffffffffffffff00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfabe}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', r5, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='mm_vmscan_lru_shrink_active\x00', r0, 0x0, 0x1000000000000000}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000004400048014000180090001"], 0xf4}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000280), 0x50, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 5.632010556s ago: executing program 0 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) alarm(0x8000000000000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000280)=0xbe, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xe200, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x20, 0xfffffb98, 0x7bc, {{0xb, 0x4, 0x3, 0x3d, 0x2c, 0x64, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0x13, 0xd8, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) 5.435684497s ago: executing program 5 (id=558): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000002300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000800)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w82+74z7+48T+br3ffdDaBrDWV/kogdEfFbRAw0qksbDDWerl05N3n9yrnJJBYWXv8zydtdvXJusmxavm57URlOI9KPkmIjS82eOXtiol6vnS7qo3Mn3x6dPXP2iXdPThyvHa+dGj9y5PChsaefGn+yI3lmeV3d98HM/r0vvnnxlcmjF9/66Zss3h3F+uY8OmUoS/yvhVzrukc7vbGK7WwqJ70VBsIt6YmIbHf15ef/QPTEjZ03EC98WGlwwLrK7k1b2q+eXwBuY0lUHQFQjfJGn33+LR8b1PXYFC4/2/gAlOV9rXg01vRGWrTpa/l820lDEXF0/u8vskes0zgEAECzTyY/fzl7fv/61y9lfY+BxTVp3JM//57/3VXMoQxGxJ0RsTsi7oqIPRFxd0Te9t6IuG+N8dzc/0kvrfEtV5T1/54p5raW9v/K3l8M9hS1nXn+fcmx6XrtYPE/GY6+LVl9bIVtfPf8r5+2W9fc/8se2fbLvmARx6XelgG6qYm5ibxT2gGXL0Ts610u/2RxJiCJiL0Rse/W3npXWZh+7Kv97Rqtnv8KOjDPtPBllt58lv98tORfSprnJ6dvmp8c3Rr12sHR8qi42c+/fPxau+2vKf8OuFxrPDft/9Ymg0nzfO1sZ7f/H4//tD95I59n7i+WvTcxN3d6LKI/yS9nS5eP33htWS/bZ8f/8IHlz//dxWuy/O+PiOwgfiAiHoyIh4rYH46IRyLiwAo5/vjc6vlHWtH+vxAxtez1b/H4b9n/t17oOfHDt+22/+/2/+G8NFwsya9/q1gunOxy0RrgWv53AAAA8H+R5t+BT9KRxXKajow0vsO/J+5I6zOzc48fm3nn1FTju/KD0ZeWI10DxXhofbpeG0vmi3dsjI+OF2PF5XjpoWLc+LOebXl9ZHKmPlVx7tDttrc5/zN/9FQdHbDOti27dLx/wwMBKtA6j54urZ5/NVwM4Hbl99rQvVY5/9ONigPYeO7/0L2WO//Pt9TNBcDtyf0fupfzH7pU+n3VEQAVcv+HrrSW3/WvY2Hr5gijmsJm3Sl5IaIspJsiHoV1KlR9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwIAAP//2wzmew==") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 5.427577467s ago: executing program 3 (id=559): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) sigaltstack(0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x82, 0x40001) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r9) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRES32=r10, @ANYRES16=r5], &(0x7f0000000200)='GPL\x00', 0x6d6, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x22}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x2e, 0x4}, &(0x7f0000000280)=0x6, 0x0, 0x97, 0x5, 0x7, 0x8000000000000000, 0x11, 0x1}}], 0x58}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) write$P9_RWALK(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="300000006f02000300080000000000400200000005000000000003851f2d2054bac8a43f9d74e8000002030000000800000000000000"], 0x30) 5.208063299s ago: executing program 3 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) alarm(0x8000000000000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000280)=0xbe, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xe200, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x20, 0xfffffb98, 0x7bc, {{0xb, 0x4, 0x3, 0x3d, 0x2c, 0x64, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0x13, 0xd8, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) 4.686080622s ago: executing program 0 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe49) r3 = gettid() timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, &(0x7f0000040fe0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000100)={{r5, r6+10000000}, {r7, r8+10000000}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r9) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf2509000000050008000f00000008000100010000000500070001"], 0x2c}}, 0x64000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r16}, 0x10) r17 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r17, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r15, 0x5f101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_EVENT={0x8, 0x2c, 0xfff}, @IFLA_MTU={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r12, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) getitimer(0x1, &(0x7f0000000080)) 4.290604904s ago: executing program 3 (id=568): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0xc5ff09c48f0113c7) r2 = syz_open_dev$evdev(0x0, 0x3, 0x40) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@nfc, &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x1, 0x682}, 0xc) syz_usb_disconnect(r2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0xe7b, 0x0, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x0, 0x10000, 0x8, 0x4, 0x9a, "48b4a99e84a222bf0a7c190500000000050002"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x5, 0x7ffd, 0x90, "9900000000a6f200"}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="7a53ce367c817f7d00000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x401}, 0x11) 4.164129885s ago: executing program 5 (id=569): r0 = inotify_init() r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x4e22, @empty}}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x100000001}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r6, 0x4000, r8}, 0x18) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bind$unix(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, 0x0, 0x2, 0x0) write$cgroup_devices(r11, &(0x7f00000000c0)={'c', ' *:* ', 'wm\x00'}, 0x9) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_open_procfs(0x0, 0x0) 4.162442815s ago: executing program 0 (id=580): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r0, &(0x7f0000000540), 0x0}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000ef950000000000000e020000"], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="075292a1a815c81011020000211c1b326c000002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xffff}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x38, 0x18, 0x101, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r10 = socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x4) sendmsg$key(r10, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000015fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002be901"], 0xa0}}, 0x0) r11 = socket(0x10, 0x3, 0x9) connect$netlink(r11, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.746363637s ago: executing program 1 (id=573): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000fc0000000c0000000904a1343aeaa1c2ab970f9b930000000700000000000008"], 0x0, 0x2d}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380", @ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) writev(r2, &(0x7f0000000c40), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000040)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x3}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000206050000000000000000000000020105000100070000000900020073797a30000000001400073aa66ed8000000000008001340000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x64}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4004010) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r10, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r9, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000004c0)={0x800100, 0x1, 0x200, 0x8, 0x3ff, 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, r3}}, 0x18) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)) 3.677673358s ago: executing program 5 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = open$dir(&(0x7f0000000180)='./file1\x00', 0x800, 0x24) open_tree(r11, &(0x7f00000002c0)='./file1\x00', 0x80001) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x0, 0x8, 0x2, 0xfffff001, 0x7, 0x2, 0x4, 0xff, 0x9, 0x7, 0x19, 0x15, 0xdb, 0x6, 0xf21}}]}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x1c}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3.616582658s ago: executing program 0 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) alarm(0x8000000000000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000280)=0xbe, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xe200, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x20, 0xfffffb98, 0x7bc, {{0xb, 0x4, 0x3, 0x3d, 0x2c, 0x64, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0x13, 0xd8, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) 3.544282529s ago: executing program 4 (id=577): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xa, 0xc9f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20420, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000300)}, 0x0, 0x40000000000, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x10, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x200) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x4b44, 0x10000000000013) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000480)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) r7 = epoll_create1(0x80000) epoll_pwait2(r7, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000600)={0x10, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000", @ANYRES16=r1, @ANYRES8=r4], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 3.445669609s ago: executing program 4 (id=578): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2a, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffff8}, [@alu={0x4, 0x1, 0xc, 0x6, 0xa, 0xc, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @tail_call, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x3, 0x0, 0xc, 0x5, 0x1, 0x30}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x4, 0x6, 0x8, 0x6e09, 0x9}, @tail_call]}, &(0x7f00000001c0)='syzkaller\x00', 0xf, 0xd1, &(0x7f0000000200)=""/209, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x5, 0x4, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r2, r1, r1, r2, r1, r2], &(0x7f00000003c0)=[{0x4, 0x3, 0x3}, {0x4, 0x5, 0xc, 0x1}, {0x3, 0x5, 0x9, 0x5}, {0x1, 0x1, 0xd}], 0x10, 0x6}, 0x94) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x35, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018380000010000000000000000000000cf28200004000000181b0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000400000085000000620000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008080000d4040000000000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000001642c6ffc20de4333e35f97022337e517511dd768eab99ddec8d50d55d9c3cc88b01a3342580e0139cff29ee1ce53b51f5cd3568932f"], &(0x7f0000000580)='syzkaller\x00', 0x7ff, 0x71, &(0x7f0000000ec0)=""/113, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newchain={0x34, 0x64, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0x9, 0x12}, {0xf, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004810}, 0x20000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) r13 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fcntl$notify(r13, 0x402, 0x3c) close_range(r13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x8, 0xff, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) close(r0) preadv2(r11, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000a00)=""/108, 0x6c}, {&(0x7f0000000c00)=""/181, 0xb5}, {&(0x7f0000000dc0)=""/228, 0xe4}], 0x6, 0x10001, 0x7, 0x2) 3.38471741s ago: executing program 4 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) alarm(0x8000000000000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000280)=0xbe, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xe200, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x20, 0xfffffb98, 0x7bc, {{0xb, 0x4, 0x3, 0x3d, 0x2c, 0x64, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0x13, 0xd8, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) 3.36207245s ago: executing program 5 (id=581): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x40, 0x4}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0x8a, 0x1, 0xff, 0x9, 0x2, 0x6, 0x1b4e23dd, {0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x3}}, 0xffff, 0x7, 0x4, 0x10001, 0x401}}, &(0x7f0000000400)=0x99) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="2100000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syslog(0x3, &(0x7f00000003c0)=""/33, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002fe39bcc79fcda3aaf757dacf5d643d0763bfee9ec8294bdaedc1619d2d600e3a96815644d324e4284680d774d1f075781901624fde2e812492ae80b72dbe508941f03bab7ed78b0ca7edfaa64070451d2e2a96efddf8828e445d947a3241778d16c18f583f5aa36ad22d683b1690e1589a9f8f22be04ff868859498c50fb15018afb802588996dab178b759da097fd7079fc9aa8d95af6ed5ce967701acf7d8352a78e7afa429797a78316053d4880865ab5e9d4a979501ed2adc076b", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000955a850000001600000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000895}, 0x44094) write$P9_RWALK(r11, 0x0, 0x30) 3.28953406s ago: executing program 1 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) alarm(0x8000000000000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000280)=0xbe, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xe200, 0x0) close(0xffffffffffffffff) 3.177078121s ago: executing program 5 (id=583): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000002300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000800)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 3.121116911s ago: executing program 4 (id=584): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r1, 0x372) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r4, 0x50, 0x6, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@loopback, @dev, 0x0}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r4, 0x0, 0x40) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) utimes(0x0, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) recvmsg(r6, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x200000000000018a, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r5, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket(0x1e, 0x80000, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000780)=@req3={0x7, 0x59e1, 0x9, 0x4, 0x4, 0x3, 0x9}, 0x1c) close(r8) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x5}, 0x0, 0x0) 2.713625193s ago: executing program 0 (id=585): io_uring_setup(0xf09, &(0x7f0000000600)={0x0, 0x4ff46, 0x3890, 0x87, 0x400363}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x2ad6, 0x0, &(0x7f0000000440)=0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0x7f, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000800)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="527f01d396bde38f83e5b11d872043b5bbbf993e1c5e75305b604cb4a71d1c0d9aeb914b581b606734aa48dec88911f00f985103000000e9c7bb88e0f13571830c0000000000000857e28408652b4da97c4ee32a7a9956eb552ca69867d38207920d832bb2ae6f65a39e805c9e7c668c677b3d82f98d5c366f06e5610d87601eb11789375bfef62518597045deffd92aeff90d6cc5c5477dd39dfa80dddcdd70432ad0814ddcc87fb9650c42fc36e9047c68721044a9fb99f57f421f2c101979d3c8c8", 0xc3}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 2.354166695s ago: executing program 1 (id=586): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x4, 0xc, &(0x7f0000001000)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x40e8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newrule={0x48, 0x20, 0x100, 0x70bd29, 0x25dfdbfb, {0x2, 0x94, 0x20, 0x8, 0x76, 0x0, 0x0, 0x8, 0x15}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_DST={0x8, 0x1, @remote}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_FLOW={0x8, 0xb, 0xf}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x50, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) dup3(r8, r7, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001100)=0x12) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xb3) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800d50300000000000000000a0000000000000004000b000800010002"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000085b000/0x1000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000f86000/0x3000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 1.904125358s ago: executing program 4 (id=587): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000002300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000800)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 1.002903183s ago: executing program 0 (id=588): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r8}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) dup2(r9, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.001756523s ago: executing program 1 (id=589): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x30fd, 0x0, 0xfffffffe, 0x21e}, &(0x7f0000000400)=0x0, &(0x7f0000000000)) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x100, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff5e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$evdev(0x0, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='rpm_return_int\x00', r8}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES64=r5, @ANYRESDEC=r9, @ANYRES64, @ANYRES16=r10, @ANYRES8=r7, @ANYRESDEC=r6, @ANYRES64=r8], &(0x7f0000000200)='GPL\x00', 0x1000001, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12) sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r14 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r14, 0xc0105512, &(0x7f0000000200)) 795.358105ms ago: executing program 5 (id=590): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0xfd, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x37}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x4000, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000040000", @ANYRES32, @ANYBLOB="e90500000400000000000000d7ffffffffffffff", @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 604.002666ms ago: executing program 1 (id=591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}, {&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f4267dd3559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b6", 0x68}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000640), 0x2, 0xbdf, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xb) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x1, 0x9}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1e, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffff00}, @alu={0x7, 0x1, 0xa, 0x0, 0xa, 0x18}, @alu={0x7, 0x0, 0x8, 0xa, 0x8, 0x30, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8f6b}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x204031, 0xffffffffffffffff, 0x5dd93000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 102.362869ms ago: executing program 1 (id=592): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$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") chdir(&(0x7f00000001c0)='./file0\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="0000ffffffffe8fffffffffffffd", @ANYRES64], 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={&(0x7f00000003c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/25, 0x19}], 0x2, &(0x7f0000000680)=""/12, 0xc}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x1}, &(0x7f0000000200)=0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/116, 0x74, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x44010) 101.906659ms ago: executing program 3 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f4267dd3559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b6", 0x68}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x2}, 0x20000880) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000640), 0x2, 0xbdf, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xb) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x1, 0x9}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1e, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffff00}, @alu={0x7, 0x1, 0xa, 0x0, 0xa, 0x18}, @alu={0x7, 0x0, 0x8, 0xa, 0x8, 0x30, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8f6b}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x204031, 0xffffffffffffffff, 0x5dd93000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 47.506949ms ago: executing program 4 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = open$dir(&(0x7f0000000180)='./file1\x00', 0x800, 0x24) open_tree(r11, &(0x7f00000002c0)='./file1\x00', 0x80001) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x0, 0x8, 0x2, 0xfffff001, 0x7, 0x2, 0x4, 0xff, 0x9, 0x7, 0x19, 0x15, 0xdb, 0x6, 0xf21}}]}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x1c}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 0s ago: executing program 3 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) unshare(0x400) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = dup(r2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2003, 0x0, 0xfedb, 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000600)=0x14) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzszzFqAkEABdC/zGSzIQnJEWwsBAsPYut99jz2Nlp6H1tLhXVXvICI8B5TzPz/mwkv9vv5+Opy/ksuSXcck/o1Xr6Hk11zH9d+ti5lkaSpqflJf8uXJZlPo0PalP+PZJWhP+27duo22yd/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADewjUAAP//xWIKDA==") close(r6) mount(&(0x7f0000001080)=@filename='./bus\x00', &(0x7f00000010c0)='./bus\x00', &(0x7f0000001100)='nsfs\x00', 0x2000, &(0x7f0000001140)='\x94$\x00') sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x19) io_uring_setup(0x55e3, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x12, 0x627faedf4974790c}, 0x20) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1790) kernel console output (not intermixed with test programs): oop4p1, 10) failed: No such file or directory [ 99.833830][ T5174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.845442][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 99.853720][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 99.890098][ T5174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.920352][ T5174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.930294][ T5272] loop0: detected capacity change from 0 to 8192 [ 99.937235][ T5174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.944294][ T5286] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5286 comm=syz.4.410 [ 99.969085][ T5272] __nla_validate_parse: 2 callbacks suppressed [ 99.969100][ T5272] netlink: 536 bytes leftover after parsing attributes in process `syz.0.406'. [ 99.985157][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 99.985239][ T29] audit: type=1326 audit(1762328816.665:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 100.014758][ T29] audit: type=1326 audit(1762328816.665:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f65dd841494 code=0x7ffc0000 [ 100.021850][ T5272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.406'. [ 100.038969][ T29] audit: type=1326 audit(1762328816.665:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.070236][ T29] audit: type=1326 audit(1762328816.665:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.093602][ T29] audit: type=1326 audit(1762328816.705:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.116885][ T29] audit: type=1326 audit(1762328816.705:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.140257][ T29] audit: type=1326 audit(1762328816.705:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.163672][ T29] audit: type=1326 audit(1762328816.705:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.176759][ T5290] hub 1-0:1.0: USB hub found [ 100.186987][ T29] audit: type=1326 audit(1762328816.705:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.215116][ T29] audit: type=1326 audit(1762328816.705:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 100.222788][ T5290] hub 1-0:1.0: 8 ports detected [ 100.242791][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.254992][ T5174] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.264449][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.271540][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.292917][ T5312] vhci_hcd: invalid port number 85 [ 100.293091][ T5174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.298045][ T5312] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 100.315676][ T5174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.330648][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.337726][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.514818][ T4232] hid_parser_main: 25 callbacks suppressed [ 100.514835][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x7 [ 100.528161][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.535684][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.543266][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.550808][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.558434][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.565957][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.573620][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.581151][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.588674][ T4232] hid-generic 0000:0000:10001.0004: unknown main item tag 0x0 [ 100.593468][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.604527][ T4232] hid-generic 0000:0000:10001.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.712231][ T5342] serio: Serial port ptm2 [ 100.770276][ T5174] veth0_vlan: entered promiscuous mode [ 100.778222][ T5174] veth1_vlan: entered promiscuous mode [ 100.795936][ T5174] veth0_macvtap: entered promiscuous mode [ 100.804109][ T5174] veth1_macvtap: entered promiscuous mode [ 100.815901][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.827997][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.840935][ T147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.856712][ T147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.873125][ T147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.889136][ T147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.166523][ T5365] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.275581][ T5368] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.505986][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 101.573944][ T5371] $Hÿ: renamed from bond0 [ 101.592703][ T5371] $Hÿ: entered promiscuous mode [ 101.597857][ T5371] bond_slave_0: entered promiscuous mode [ 101.603859][ T5371] bond_slave_1: entered promiscuous mode [ 101.664943][ T5375] loop4: detected capacity change from 0 to 256 [ 101.685273][ T5375] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.722393][ T5375] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.771855][ T5377] IPVS: Error connecting to the multicast addr [ 101.964028][ T5381] bridge0: entered promiscuous mode [ 101.972133][ T5381] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 101.980623][ T5381] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.989526][ T5381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.005079][ T36] lo speed is unknown, defaulting to 1000 [ 102.010972][ T36] s{z2: Port: 1 Link ACTIVE [ 102.187661][ T5393] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 102.194306][ T5393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.201890][ T5393] vhci_hcd vhci_hcd.0: Device attached [ 102.214862][ T5395] vhci_hcd: cannot find the pending unlink 1023 [ 102.229245][ T5393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 102.238169][ T5393] tipc: Cannot configure node identity twice [ 102.250498][ T5394] lo speed is unknown, defaulting to 1000 [ 102.256484][ T5395] vhci_hcd: connection closed [ 102.259939][ T2269] vhci_hcd: stop threads [ 102.268878][ T2269] vhci_hcd: release socket [ 102.273351][ T2269] vhci_hcd: disconnect device [ 102.289991][ T5402] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 102.365233][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 102.380114][ T5394] lo speed is unknown, defaulting to 1000 [ 102.386408][ T5394] lo speed is unknown, defaulting to 1000 [ 102.392240][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 102.857914][ T5422] bond0: option arp_interval: invalid value (18446744073265055750) [ 102.865990][ T5422] bond0: option arp_interval: allowed values 0 - 2147483647 [ 102.892890][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 102.911593][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 102.922017][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 102.944937][ T5423] loop0: detected capacity change from 0 to 8192 [ 103.251897][ T5443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.434'. [ 103.428407][ T5453] loop4: detected capacity change from 0 to 8192 [ 103.441158][ T5450] capability: warning: `syz.1.439' uses deprecated v2 capabilities in a way that may be insecure [ 103.606821][ T5459] loop0: detected capacity change from 0 to 512 [ 103.705640][ T5459] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.441: ea_inode file size=0 entry size=6 [ 103.718591][ T5459] EXT4-fs (loop0): 1 orphan inode deleted [ 103.724734][ T5459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.997950][ T5454] syz.0.441 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 104.008854][ T5454] CPU: 1 UID: 0 PID: 5454 Comm: syz.0.441 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.008924][ T5454] Tainted: [W]=WARN [ 104.008931][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.008942][ T5454] Call Trace: [ 104.008948][ T5454] [ 104.008956][ T5454] __dump_stack+0x1d/0x30 [ 104.008977][ T5454] dump_stack_lvl+0xe8/0x140 [ 104.008996][ T5454] dump_stack+0x15/0x1b [ 104.009081][ T5454] dump_header+0x81/0x220 [ 104.009099][ T5454] oom_kill_process+0x342/0x400 [ 104.009130][ T5454] out_of_memory+0x979/0xb80 [ 104.009210][ T5454] try_charge_memcg+0x610/0xa10 [ 104.009309][ T5454] charge_memcg+0x51/0xc0 [ 104.009332][ T5454] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 104.009360][ T5454] __read_swap_cache_async+0x17b/0x2d0 [ 104.009399][ T5454] swap_cluster_readahead+0x362/0x3c0 [ 104.009428][ T5454] swapin_readahead+0xde/0x6f0 [ 104.009448][ T5454] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 104.009505][ T5454] ? __rcu_read_unlock+0x34/0x70 [ 104.009532][ T5454] ? __rcu_read_unlock+0x4f/0x70 [ 104.009583][ T5454] ? swap_cache_get_folio+0x277/0x280 [ 104.009606][ T5454] do_swap_page+0x2ae/0x2370 [ 104.009633][ T5454] ? css_rstat_updated+0xb7/0x240 [ 104.009712][ T5454] ? __pfx_default_wake_function+0x10/0x10 [ 104.009744][ T5454] handle_mm_fault+0x9a5/0x2be0 [ 104.009771][ T5454] ? vma_start_read+0x141/0x1f0 [ 104.009813][ T5454] do_user_addr_fault+0x630/0x1080 [ 104.009876][ T5454] exc_page_fault+0x62/0xa0 [ 104.009904][ T5454] asm_exc_page_fault+0x26/0x30 [ 104.009922][ T5454] RIP: 0033:0x7fa73fbb5929 [ 104.009936][ T5454] Code: 38 00 00 0f 8e 09 fe ff ff e8 d3 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 69 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 f2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 80 7b 20 [ 104.009957][ T5454] RSP: 002b:00007ffdce16da20 EFLAGS: 00010206 [ 104.010023][ T5454] RAX: 0000000000019628 RBX: 00007fa73ff35fa0 RCX: 0000000000019258 [ 104.010035][ T5454] RDX: 00000000000003d0 RSI: 00007ffdce16da00 RDI: 00000000000003e8 [ 104.010144][ T5454] RBP: 00007fa73ff37da0 R08: 000000003a36cfda R09: 7fffffffffffffff [ 104.010158][ T5454] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000196fc [ 104.010233][ T5454] R13: 00007fa73ff36180 R14: ffffffffffffffff R15: 00007ffdce16db30 [ 104.010330][ T5454] [ 104.232063][ T5454] memory: usage 307200kB, limit 307200kB, failcnt 5477 [ 104.238938][ T5454] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 104.246845][ T5454] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 104.254215][ T5454] Memory cgroup stats for /syz0: [ 104.254527][ T5454] cache 8192 [ 104.262650][ T5454] rss 0 [ 104.265395][ T5454] shmem 0 [ 104.268308][ T5454] mapped_file 0 [ 104.271764][ T5454] dirty 0 [ 104.274716][ T5454] writeback 0 [ 104.277985][ T5454] workingset_refault_anon 3177 [ 104.282743][ T5454] workingset_refault_file 512 [ 104.287402][ T5454] swap 442368 [ 104.290689][ T5454] swapcached 24576 [ 104.294423][ T5454] pgpgin 94161 [ 104.297779][ T5454] pgpgout 94148 [ 104.301229][ T5454] pgfault 75460 [ 104.304722][ T5454] pgmajfault 519 [ 104.308244][ T5454] inactive_anon 0 [ 104.311869][ T5454] active_anon 24576 [ 104.315655][ T5454] inactive_file 0 [ 104.319335][ T5454] active_file 16384 [ 104.323260][ T5454] unevictable 0 [ 104.326703][ T5454] hierarchical_memory_limit 314572800 [ 104.332089][ T5454] hierarchical_memsw_limit 9223372036854771712 [ 104.338220][ T5454] total_cache 8192 [ 104.341937][ T5454] total_rss 0 [ 104.345315][ T5454] total_shmem 0 [ 104.348754][ T5454] total_mapped_file 0 [ 104.352736][ T5454] total_dirty 0 [ 104.356177][ T5454] total_writeback 0 [ 104.359989][ T5454] total_workingset_refault_anon 3177 [ 104.365336][ T5454] total_workingset_refault_file 512 [ 104.370600][ T5454] total_swap 442368 [ 104.374392][ T5454] total_swapcached 24576 [ 104.378610][ T5454] total_pgpgin 94161 [ 104.382508][ T5454] total_pgpgout 94148 [ 104.386488][ T5454] total_pgfault 75460 [ 104.390503][ T5454] total_pgmajfault 519 [ 104.394592][ T5454] total_inactive_anon 0 [ 104.398727][ T5454] total_active_anon 24576 [ 104.403046][ T5454] total_inactive_file 0 [ 104.407204][ T5454] total_active_file 16384 [ 104.411551][ T5454] total_unevictable 0 [ 104.415624][ T5454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.441,pid=5454,uid=0 [ 104.430198][ T5454] Memory cgroup out of memory: Killed process 5454 (syz.0.441) total-vm:94088kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 104.524287][ T5468] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 104.694198][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.798212][ T5482] loop4: detected capacity change from 0 to 8192 [ 104.811426][ T5478] loop5: detected capacity change from 0 to 8192 [ 104.989930][ T29] kauditd_printk_skb: 1461 callbacks suppressed [ 104.989943][ T29] audit: type=1326 audit(1762328821.645:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73fcdf6c9 code=0x7ffc0000 [ 105.019666][ T29] audit: type=1326 audit(1762328821.645:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa73fcdf6c9 code=0x7ffc0000 [ 105.043057][ T29] audit: type=1326 audit(1762328821.645:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa73fcdf703 code=0x7ffc0000 [ 105.066216][ T29] audit: type=1326 audit(1762328821.665:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa73fcde17f code=0x7ffc0000 [ 105.100007][ T147] Bluetooth: hci1: Frame reassembly failed (-84) [ 105.132146][ T5491] hub 1-0:1.0: USB hub found [ 105.136861][ T5491] hub 1-0:1.0: 8 ports detected [ 105.171966][ T5480] loop0: detected capacity change from 0 to 8192 [ 105.181015][ T5491] netdevsim netdevsim5: Direct firmware load for þ failed with error -2 [ 105.203193][ T5491] team_slave_0: entered promiscuous mode [ 105.208869][ T5491] team_slave_1: entered promiscuous mode [ 105.216890][ T4227] hid-generic 0000:0000:10001.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 105.226971][ T29] audit: type=1326 audit(1762328821.855:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa73fcdf757 code=0x7ffc0000 [ 105.250377][ T29] audit: type=1326 audit(1762328821.855:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa73fcddf10 code=0x7ffc0000 [ 105.273866][ T29] audit: type=1326 audit(1762328821.855:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa73fcdf2cb code=0x7ffc0000 [ 105.319065][ T5491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.332665][ T5493] SELinux: ebitmap: truncated map [ 105.369923][ T5493] SELinux: failed to load policy [ 105.381102][ T5493] __nla_validate_parse: 4 callbacks suppressed [ 105.381116][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 105.444141][ T29] audit: type=1326 audit(1762328821.985:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa73fcde32a code=0x7ffc0000 [ 105.468082][ T29] audit: type=1326 audit(1762328821.985:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa73fcde32a code=0x7ffc0000 [ 105.491271][ T29] audit: type=1326 audit(1762328821.985:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa73fcdde17 code=0x7ffc0000 [ 105.518451][ T5491] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 105.526179][ T2168] Bluetooth: hci2: Frame reassembly failed (-84) [ 105.540226][ T5503] Bluetooth: hci2: Frame reassembly failed (-90) [ 106.485301][ T5512] serio: Serial port ptm6 [ 106.585352][ T5519] loop5: detected capacity change from 0 to 1024 [ 106.645353][ T5519] EXT4-fs: Ignoring removed orlov option [ 106.651126][ T5519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.786393][ T5519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.910015][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.083088][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.457'. [ 107.139779][ T5536] syz.5.457: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 107.154306][ T5536] CPU: 1 UID: 0 PID: 5536 Comm: syz.5.457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.154413][ T5536] Tainted: [W]=WARN [ 107.154420][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.154434][ T5536] Call Trace: [ 107.154441][ T5536] [ 107.154449][ T5536] __dump_stack+0x1d/0x30 [ 107.154474][ T5536] dump_stack_lvl+0xe8/0x140 [ 107.154495][ T5536] dump_stack+0x15/0x1b [ 107.154568][ T5536] warn_alloc+0x12b/0x1a0 [ 107.154604][ T5536] ? __rcu_read_unlock+0x4f/0x70 [ 107.154633][ T5536] __vmalloc_node_range_noprof+0x9d/0xed0 [ 107.154705][ T5536] ? __futex_wait+0x1fa/0x260 [ 107.154725][ T5536] ? __pfx_futex_wake_mark+0x10/0x10 [ 107.154744][ T5536] ? __rcu_read_unlock+0x4f/0x70 [ 107.154768][ T5536] ? avc_has_perm_noaudit+0x1b1/0x200 [ 107.154788][ T5536] ? should_fail_ex+0x30/0x280 [ 107.154844][ T5536] ? xskq_create+0x36/0xe0 [ 107.154869][ T5536] vmalloc_user_noprof+0x7d/0xb0 [ 107.154900][ T5536] ? xskq_create+0x80/0xe0 [ 107.154938][ T5536] xskq_create+0x80/0xe0 [ 107.154960][ T5536] xsk_init_queue+0x95/0xf0 [ 107.154982][ T5536] xsk_setsockopt+0x3f5/0x640 [ 107.155019][ T5536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.155040][ T5536] __sys_setsockopt+0x184/0x200 [ 107.155075][ T5536] __x64_sys_setsockopt+0x64/0x80 [ 107.155154][ T5536] x64_sys_call+0x20ec/0x3000 [ 107.155177][ T5536] do_syscall_64+0xd2/0x200 [ 107.155195][ T5536] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.155221][ T5536] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.155282][ T5536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.155304][ T5536] RIP: 0033:0x7fa64bb7f6c9 [ 107.155320][ T5536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.155372][ T5536] RSP: 002b:00007fa64a17a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.155392][ T5536] RAX: ffffffffffffffda RBX: 00007fa64bdd6270 RCX: 00007fa64bb7f6c9 [ 107.155405][ T5536] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 107.155418][ T5536] RBP: 00007fa64bc01f91 R08: 0000000000000004 R09: 0000000000000000 [ 107.155431][ T5536] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.155444][ T5536] R13: 00007fa64bdd6308 R14: 00007fa64bdd6270 R15: 00007ffee75bea88 [ 107.155466][ T5536] [ 107.155473][ T5536] Mem-Info: [ 107.206055][ T5523] syz.3.456 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 107.209324][ T5536] active_anon:26518 inactive_anon:7 isolated_anon:0 [ 107.209324][ T5536] active_file:10638 inactive_file:8368 isolated_file:0 [ 107.209324][ T5536] unevictable:0 dirty:18 writeback:0 [ 107.209324][ T5536] slab_reclaimable:3590 slab_unreclaimable:84551 [ 107.209324][ T5536] mapped:30571 shmem:18082 pagetables:1871 [ 107.209324][ T5536] sec_pagetables:0 bounce:0 [ 107.209324][ T5536] kernel_misc_reclaimable:0 [ 107.209324][ T5536] free:1541052 free_pcp:14858 free_cma:0 [ 107.215058][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.3.456 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.215163][ T5523] Tainted: [W]=WARN [ 107.215171][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.215184][ T5523] Call Trace: [ 107.215191][ T5523] [ 107.215200][ T5523] __dump_stack+0x1d/0x30 [ 107.215224][ T5523] dump_stack_lvl+0xe8/0x140 [ 107.215246][ T5523] dump_stack+0x15/0x1b [ 107.215265][ T5523] dump_header+0x81/0x220 [ 107.215290][ T5523] oom_kill_process+0x342/0x400 [ 107.215325][ T5523] out_of_memory+0x979/0xb80 [ 107.215361][ T5523] try_charge_memcg+0x610/0xa10 [ 107.215398][ T5523] obj_cgroup_charge_pages+0xa6/0x150 [ 107.215473][ T5523] __memcg_kmem_charge_page+0x9f/0x170 [ 107.215497][ T5523] __alloc_frozen_pages_noprof+0x188/0x360 [ 107.215525][ T5523] alloc_pages_mpol+0xb3/0x260 [ 107.215550][ T5523] alloc_pages_noprof+0x90/0x130 [ 107.215573][ T5523] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 107.215655][ T5523] __kvmalloc_node_noprof+0x483/0x670 [ 107.215690][ T5523] ? ip_set_alloc+0x24/0x30 [ 107.215801][ T5523] ? ip_set_alloc+0x24/0x30 [ 107.215864][ T5523] ip_set_alloc+0x24/0x30 [ 107.215969][ T5523] hash_netiface_create+0x282/0x740 [ 107.216003][ T5523] ? __pfx_hash_netiface_create+0x10/0x10 [ 107.216038][ T5523] ip_set_create+0x3cc/0x970 [ 107.216071][ T5523] ? __nla_parse+0x40/0x60 [ 107.216097][ T5523] nfnetlink_rcv_msg+0x4c6/0x590 [ 107.216183][ T5523] ? do_user_addr_fault+0xd9e/0x1080 [ 107.216230][ T5523] netlink_rcv_skb+0x123/0x220 [ 107.216334][ T5523] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 107.216372][ T5523] nfnetlink_rcv+0x167/0x16c0 [ 107.216403][ T5523] ? kmem_cache_free+0xe4/0x3d0 [ 107.216456][ T5523] ? __kfree_skb+0x109/0x150 [ 107.216488][ T5523] ? nlmon_xmit+0x4f/0x60 [ 107.216578][ T5523] ? consume_skb+0x49/0x150 [ 107.216608][ T5523] ? nlmon_xmit+0x4f/0x60 [ 107.216634][ T5523] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 107.216672][ T5523] ? __dev_queue_xmit+0x1200/0x2000 [ 107.216721][ T5523] ? __dev_queue_xmit+0x182/0x2000 [ 107.216756][ T5523] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 107.216781][ T5523] ? ref_tracker_free+0x37d/0x3e0 [ 107.216869][ T5523] ? __netlink_deliver_tap+0x4dc/0x500 [ 107.216910][ T5523] netlink_unicast+0x5c0/0x690 [ 107.217003][ T5523] netlink_sendmsg+0x58b/0x6b0 [ 107.217026][ T5523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.217047][ T5523] __sock_sendmsg+0x145/0x180 [ 107.217172][ T5523] ____sys_sendmsg+0x31e/0x4e0 [ 107.217211][ T5523] ___sys_sendmsg+0x17b/0x1d0 [ 107.217248][ T5523] __x64_sys_sendmsg+0xd4/0x160 [ 107.217274][ T5523] x64_sys_call+0x191e/0x3000 [ 107.217318][ T5523] do_syscall_64+0xd2/0x200 [ 107.217339][ T5523] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.217369][ T5523] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.217402][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.217491][ T5523] RIP: 0033:0x7fcae0fcf6c9 [ 107.217508][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.217527][ T5523] RSP: 002b:00007fcadfa16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.217547][ T5523] RAX: ffffffffffffffda RBX: 00007fcae1226090 RCX: 00007fcae0fcf6c9 [ 107.217561][ T5523] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 107.217669][ T5523] RBP: 00007fcae1051f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.217682][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.217694][ T5523] R13: 00007fcae1226128 R14: 00007fcae1226090 R15: 00007ffe42ed1c98 [ 107.217792][ T5523] [ 107.217799][ T5523] memory: usage 307200kB, limit 307200kB, failcnt 1828 [ 107.219802][ T5536] Node 0 active_anon:106072kB inactive_anon:28kB active_file:42552kB inactive_file:33472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122284kB dirty:72kB writeback:0kB shmem:72328kB kernel_stack:4128kB pagetables:7484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.225288][ T5523] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 107.230207][ T5536] Node 0 [ 107.235627][ T5523] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 107.240323][ T5536] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.244697][ T5523] Memory cgroup stats for /syz3 [ 107.249610][ T5536] lowmem_reserve[]: 0 [ 107.254014][ T5523] : [ 107.254216][ T5523] cache 0 [ 107.258240][ T5536] 2881 7859 7859 [ 107.258260][ T5536] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 107.262768][ T5523] rss 0 [ 107.267411][ T5536] lowmem_reserve[]: 0 [ 107.272601][ T5523] shmem 0 [ 107.277421][ T5536] 0 4978 [ 107.282491][ T5523] mapped_file 0 [ 107.287130][ T5536] 4978 [ 107.287142][ T5536] Node 0 Normal free:3202220kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106072kB inactive_anon:28kB active_file:42552kB inactive_file:33472kB unevictable:0kB writepending:72kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:55800kB local_pcp:45200kB free_cma:0kB [ 107.291656][ T5523] dirty 0 [ 107.291664][ T5523] writeback 0 [ 107.297701][ T5536] lowmem_reserve[]: 0 [ 107.303415][ T5523] workingset_refault_anon 3756 [ 107.309276][ T5536] 0 0 [ 107.313683][ T5523] workingset_refault_file 5080 [ 107.313693][ T5523] swap 561152 [ 107.333299][ T5536] 0 [ 107.341722][ T5523] swapcached 16384 [ 107.349668][ T5536] [ 107.349674][ T5536] Node 0 [ 107.357717][ T5523] pgpgin 209167 [ 107.357726][ T5523] pgpgout 209163 [ 107.357732][ T5523] pgfault 113429 [ 107.357738][ T5523] pgmajfault 613 [ 107.357744][ T5523] inactive_anon 12288 [ 107.357751][ T5523] active_anon 4096 [ 107.365716][ T5536] DMA: 0*4kB [ 107.373704][ T5523] inactive_file 0 [ 107.381648][ T5536] 0*8kB 0*16kB [ 107.384647][ T5523] active_file 0 [ 107.384656][ T5523] unevictable 0 [ 107.387734][ T5536] 0*32kB 0*64kB [ 107.401692][ T5523] hierarchical_memory_limit 314572800 [ 107.401702][ T5523] hierarchical_memsw_limit 9223372036854771712 [ 107.401712][ T5523] total_cache 0 [ 107.401723][ T5523] total_rss 0 [ 107.446681][ T5536] 0*128kB [ 107.457846][ T5523] total_shmem 0 [ 107.457855][ T5523] total_mapped_file 0 [ 107.457862][ T5523] total_dirty 0 [ 107.457868][ T5523] total_writeback 0 [ 107.457875][ T5523] total_workingset_refault_anon 3756 [ 107.457883][ T5523] total_workingset_refault_file 5080 [ 107.457891][ T5523] total_swap 561152 [ 107.457920][ T5523] total_swapcached 16384 [ 107.457927][ T5523] total_pgpgin 209167 [ 107.457934][ T5523] total_pgpgout 209163 [ 107.457940][ T5523] total_pgfault 113429 [ 107.457947][ T5523] total_pgmajfault 613 [ 107.461772][ T5536] 0*256kB 0*512kB [ 107.471823][ T5523] total_inactive_anon 12288 [ 107.471833][ T5523] total_active_anon 4096 [ 107.475112][ T5536] 1*1024kB [ 107.478036][ T5523] total_inactive_file 0 [ 107.482344][ T5536] (U) 1*2048kB (M) [ 107.486912][ T5523] total_active_file 0 [ 107.491055][ T5536] 3*4096kB (M) [ 107.495363][ T5523] total_unevictable 0 [ 107.500202][ T5536] = 15360kB [ 107.500228][ T5536] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB [ 107.504839][ T5523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 107.509661][ T5536] (M) 2*128kB [ 107.515078][ T5523] ,cpuset=/ [ 107.520519][ T5536] (M) [ 107.526302][ T5523] ,mems_allowed=0 [ 107.531037][ T5536] 2*256kB [ 107.535951][ T5523] ,oom_memcg= [ 107.541747][ T5536] (M) [ 107.547084][ T5523] /syz3 [ 107.551570][ T5536] 3*512kB [ 107.556060][ T5523] ,task_memcg= [ 107.560544][ T5536] (M) [ 107.565606][ T5523] /syz3,task=syz.3.456,pid=5521,uid=0 [ 107.571323][ T5536] 3*1024kB (M) 2*2048kB (M) 717*4096kB [ 107.575968][ T5523] Memory cgroup out of memory: Killed process 5521 (syz.3.456) total-vm:94088kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 107.580377][ T5536] (M) [ 107.601319][ T3799] Bluetooth: hci1: command 0x1003 tx timeout [ 107.605438][ T5536] = 2946628kB [ 107.610555][ T3790] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 107.615000][ T5536] Node 0 [ 107.619316][ T3799] Bluetooth: hci2: command 0x1003 tx timeout [ 107.623811][ T5536] Normal: 261*4kB [ 107.629546][ T3573] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 107.633421][ T5536] (ME) [ 108.146401][ T5545] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.149840][ T5536] 478*8kB (UME) 390*16kB (ME) 234*32kB (UME) 441*64kB (UME) 327*128kB (UM) 156*256kB (UM) 129*512kB (UM) 111*1024kB (UME) 49*2048kB (UM) 682*4096kB (UM) = 3202148kB [ 108.310122][ T5536] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 108.319407][ T5536] 40765 total pagecache pages [ 108.324128][ T5536] 11 pages in swap cache [ 108.328722][ T5536] Free swap = 123864kB [ 108.332907][ T5536] Total swap = 124996kB [ 108.337051][ T5536] 2097051 pages RAM [ 108.340918][ T5536] 0 pages HighMem/MovableOnly [ 108.345625][ T5536] 81086 pages reserved [ 108.444378][ T5551] loop0: detected capacity change from 0 to 512 [ 108.480029][ T5551] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 108.519472][ T5551] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.461: bg 0: block 104: invalid block bitmap [ 108.540576][ T5551] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 108.551797][ T5553] netlink: 536 bytes leftover after parsing attributes in process `syz.3.462'. [ 108.560865][ T5553] netlink: 60 bytes leftover after parsing attributes in process `syz.3.462'. [ 108.570207][ T5551] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.461: invalid indirect mapped block 1 (level 1) [ 108.600145][ T5551] EXT4-fs (loop0): 1 truncate cleaned up [ 108.606238][ T5551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.666095][ T5551] netlink: '+}[@': attribute type 10 has an invalid length. [ 108.682992][ T5551] team0: Port device dummy0 added [ 108.719708][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.743196][ T5561] bridge_slave_0: left allmulticast mode [ 108.748870][ T5561] bridge_slave_0: left promiscuous mode [ 108.754933][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.769142][ T5561] bridge_slave_1: left allmulticast mode [ 108.774885][ T5561] bridge_slave_1: left promiscuous mode [ 108.780638][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.792963][ T5561] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 108.812329][ T5561] bond_slave_0: left promiscuous mode [ 108.831541][ T5561] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 108.850578][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 108.863686][ T5561] bond_slave_1: left promiscuous mode [ 108.881450][ T5561] team0: Port device team_slave_0 removed [ 108.909164][ T5561] team0: Port device team_slave_1 removed [ 108.926546][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.943250][ T5568] hub 1-0:1.0: USB hub found [ 108.952392][ T5568] hub 1-0:1.0: 8 ports detected [ 108.959133][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.527742][ T5572] syz.0.466 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 109.541836][ T5572] CPU: 1 UID: 0 PID: 5572 Comm: syz.0.466 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.541872][ T5572] Tainted: [W]=WARN [ 109.541878][ T5572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.541889][ T5572] Call Trace: [ 109.541896][ T5572] [ 109.541904][ T5572] __dump_stack+0x1d/0x30 [ 109.541930][ T5572] dump_stack_lvl+0xe8/0x140 [ 109.541984][ T5572] dump_stack+0x15/0x1b [ 109.542001][ T5572] dump_header+0x81/0x220 [ 109.542019][ T5572] oom_kill_process+0x342/0x400 [ 109.542128][ T5572] out_of_memory+0x979/0xb80 [ 109.542188][ T5572] try_charge_memcg+0x610/0xa10 [ 109.542232][ T5572] obj_cgroup_charge_pages+0xa6/0x150 [ 109.542253][ T5572] __memcg_kmem_charge_page+0x9f/0x170 [ 109.542273][ T5572] __alloc_frozen_pages_noprof+0x188/0x360 [ 109.542295][ T5572] alloc_pages_mpol+0xb3/0x260 [ 109.542339][ T5572] ? alloc_pages_noprof+0x61/0x130 [ 109.542361][ T5572] alloc_pages_noprof+0x90/0x130 [ 109.542380][ T5572] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 109.542463][ T5572] __kvmalloc_node_noprof+0x483/0x670 [ 109.542562][ T5572] ? ip_set_alloc+0x24/0x30 [ 109.542590][ T5572] ? ip_set_alloc+0x24/0x30 [ 109.542686][ T5572] ip_set_alloc+0x24/0x30 [ 109.542714][ T5572] hash_netiface_create+0x282/0x740 [ 109.542747][ T5572] ? __pfx_hash_netiface_create+0x10/0x10 [ 109.542811][ T5572] ip_set_create+0x3cc/0x970 [ 109.542840][ T5572] ? __nla_parse+0x40/0x60 [ 109.542863][ T5572] nfnetlink_rcv_msg+0x4c6/0x590 [ 109.542911][ T5572] netlink_rcv_skb+0x123/0x220 [ 109.542971][ T5572] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 109.543006][ T5572] nfnetlink_rcv+0x167/0x16c0 [ 109.543031][ T5572] ? ebitmap_destroy+0x7d/0xa0 [ 109.543055][ T5572] ? security_compute_sid+0x120b/0x1290 [ 109.543106][ T5572] ? __rcu_read_unlock+0x4f/0x70 [ 109.543146][ T5572] ? security_transition_sid+0x5a/0x70 [ 109.543182][ T5572] ? _raw_spin_unlock+0x26/0x50 [ 109.543205][ T5572] ? inode_doinit_with_dentry+0x3a9/0x7a0 [ 109.543231][ T5572] ? perf_callchain_user+0xae0/0xb50 [ 109.543263][ T5572] ? ___slab_alloc+0xc9/0xb60 [ 109.543281][ T5572] ? should_fail_ex+0x30/0x280 [ 109.543300][ T5572] ? selinux_nlmsg_lookup+0x99/0x890 [ 109.543327][ T5572] ? __rcu_read_unlock+0x34/0x70 [ 109.543352][ T5572] ? __netlink_lookup+0x266/0x2a0 [ 109.543374][ T5572] netlink_unicast+0x5c0/0x690 [ 109.543406][ T5572] netlink_sendmsg+0x58b/0x6b0 [ 109.543444][ T5572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.543462][ T5572] __sock_sendmsg+0x145/0x180 [ 109.543549][ T5572] ____sys_sendmsg+0x31e/0x4e0 [ 109.543585][ T5572] ___sys_sendmsg+0x17b/0x1d0 [ 109.543618][ T5572] __x64_sys_sendmsg+0xd4/0x160 [ 109.543668][ T5572] x64_sys_call+0x191e/0x3000 [ 109.543700][ T5572] do_syscall_64+0xd2/0x200 [ 109.543717][ T5572] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.543744][ T5572] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.543774][ T5572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.543835][ T5572] RIP: 0033:0x7fa73fcdf6c9 [ 109.543850][ T5572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.543867][ T5572] RSP: 002b:00007fa73e6fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.543886][ T5572] RAX: ffffffffffffffda RBX: 00007fa73ff36180 RCX: 00007fa73fcdf6c9 [ 109.543904][ T5572] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 109.543984][ T5572] RBP: 00007fa73fd61f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.543996][ T5572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.544007][ T5572] R13: 00007fa73ff36218 R14: 00007fa73ff36180 R15: 00007ffdce16d8b8 [ 109.544026][ T5572] [ 109.544036][ T5572] memory: usage 307200kB, limit 307200kB, failcnt 5721 [ 109.598131][ T5566] loop0: detected capacity change from 0 to 512 [ 109.602704][ T5572] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 109.693650][ T5566] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.466: ea_inode file size=0 entry size=6 [ 109.694275][ T5572] kmem: usage 306676kB, limit 9007199254740988kB, failcnt 0 [ 109.700059][ T5566] EXT4-fs (loop0): 1 orphan inode deleted [ 109.704493][ T5572] Memory cgroup stats for [ 109.709582][ T5566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.714757][ T5572] /syz0: [ 109.714948][ T5572] cache 376832 [ 109.835449][ T5573] netlink: 76 bytes leftover after parsing attributes in process `syz.5.468'. [ 109.850604][ T5572] rss 131072 [ 109.850615][ T5572] shmem 126976 [ 109.892865][ T4227] hid_parser_main: 60 callbacks suppressed [ 109.892883][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x7 [ 109.899006][ T5572] mapped_file 225280 [ 109.899015][ T5572] dirty 16384 [ 109.899022][ T5572] writeback 0 [ 109.902083][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 109.908900][ T5572] workingset_refault_anon 3203 [ 109.915154][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 109.923122][ T5572] workingset_refault_file 768 [ 109.935702][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 109.942867][ T5572] swap 204800 [ 109.942876][ T5572] swapcached 135168 [ 109.942883][ T5572] pgpgin 98695 [ 109.942889][ T5572] pgpgout 98564 [ 109.942895][ T5572] pgfault 79939 [ 109.942901][ T5572] pgmajfault 531 [ 109.942907][ T5572] inactive_anon 20480 [ 109.948651][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 109.953060][ T5572] active_anon 241664 [ 109.965467][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 109.968276][ T5572] inactive_file 126976 [ 109.971680][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 109.980470][ T5572] active_file 139264 [ 109.983659][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 109.986991][ T5572] unevictable 0 [ 109.986999][ T5572] hierarchical_memory_limit 314572800 [ 109.992883][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 110.000320][ T5572] hierarchical_memsw_limit 9223372036854771712 [ 110.004206][ T4227] hid-generic 0000:0000:10001.0006: unknown main item tag 0x0 [ 110.007451][ T5572] total_cache 376832 [ 110.007459][ T5572] total_rss 131072 [ 110.007465][ T5572] total_shmem 126976 [ 110.007472][ T5572] total_mapped_file 225280 [ 110.007478][ T5572] total_dirty 16384 [ 110.007486][ T5572] total_writeback 0 [ 110.162901][ T5572] total_workingset_refault_anon 3203 [ 110.168173][ T5572] total_workingset_refault_file 768 [ 110.173383][ T5572] total_swap 204800 [ 110.177186][ T5572] total_swapcached 135168 [ 110.181533][ T5572] total_pgpgin 98695 [ 110.185385][ T4227] hid-generic 0000:0000:10001.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 110.195043][ T5572] total_pgpgout 98564 [ 110.199041][ T5572] total_pgfault 79939 [ 110.203074][ T5572] total_pgmajfault 531 [ 110.207129][ T5572] total_inactive_anon 20480 [ 110.211720][ T5572] total_active_anon 241664 [ 110.216167][ T5572] total_inactive_file 126976 [ 110.220770][ T5572] total_active_file 139264 [ 110.225169][ T5572] total_unevictable 0 [ 110.229130][ T5572] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.466,pid=5562,uid=0 [ 110.243724][ T5572] Memory cgroup out of memory: Killed process 5572 (syz.0.466) total-vm:94088kB, anon-rss:1392kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 110.261527][ T5561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.278578][ T5564] team0: Mode changed to "loadbalance" [ 110.434065][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.549398][ T5603] loop5: detected capacity change from 0 to 1024 [ 110.568867][ T5594] netlink: 536 bytes leftover after parsing attributes in process `syz.1.469'. [ 110.621336][ T5603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.633459][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 110.633474][ T29] audit: type=1326 audit(1762328827.305:10002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.663283][ T29] audit: type=1326 audit(1762328827.305:10003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.679771][ T5594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.469'. [ 110.686911][ T29] audit: type=1326 audit(1762328827.305:10004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.719048][ T29] audit: type=1326 audit(1762328827.305:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.742437][ T29] audit: type=1326 audit(1762328827.305:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.749567][ T5604] loop0: detected capacity change from 0 to 8192 [ 110.765850][ T29] audit: type=1326 audit(1762328827.305:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.795572][ T29] audit: type=1326 audit(1762328827.305:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.818944][ T29] audit: type=1326 audit(1762328827.305:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.842404][ T29] audit: type=1326 audit(1762328827.305:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.865807][ T29] audit: type=1326 audit(1762328827.305:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 110.941533][ T5603] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.473: reserved inode found cleared - inode=2 [ 110.992453][ T5603] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.473: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 111.095573][ T5611] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.473: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 111.173031][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.473'. [ 111.306391][ T5620] netlink: 536 bytes leftover after parsing attributes in process `syz.1.476'. [ 111.318833][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.347704][ T5620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.476'. [ 111.478281][ T5626] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 111.484827][ T5626] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.492329][ T5626] vhci_hcd vhci_hcd.0: Device attached [ 111.499741][ T5627] vhci_hcd: cannot find the pending unlink 1023 [ 111.526730][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 111.535807][ T5626] tipc: Cannot configure node identity twice [ 111.542835][ T5627] vhci_hcd: connection closed [ 111.542971][ T2269] vhci_hcd: stop threads [ 111.552074][ T2269] vhci_hcd: release socket [ 111.556512][ T2269] vhci_hcd: disconnect device [ 112.256667][ T3401] hid-generic 0000:0000:10001.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.385264][ T5677] fido_id[5677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.812568][ T5653] syz.1.483 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 112.823496][ T5653] CPU: 0 UID: 0 PID: 5653 Comm: syz.1.483 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.823563][ T5653] Tainted: [W]=WARN [ 112.823569][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.823580][ T5653] Call Trace: [ 112.823587][ T5653] [ 112.823596][ T5653] __dump_stack+0x1d/0x30 [ 112.823621][ T5653] dump_stack_lvl+0xe8/0x140 [ 112.823709][ T5653] dump_stack+0x15/0x1b [ 112.823727][ T5653] dump_header+0x81/0x220 [ 112.823745][ T5653] oom_kill_process+0x342/0x400 [ 112.823774][ T5653] out_of_memory+0x979/0xb80 [ 112.823822][ T5653] try_charge_memcg+0x610/0xa10 [ 112.823920][ T5653] charge_memcg+0x51/0xc0 [ 112.823945][ T5653] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 112.823971][ T5653] __read_swap_cache_async+0x17b/0x2d0 [ 112.824023][ T5653] swap_cluster_readahead+0x362/0x3c0 [ 112.824054][ T5653] swapin_readahead+0xde/0x6f0 [ 112.824079][ T5653] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 112.824118][ T5653] ? __rcu_read_unlock+0x34/0x70 [ 112.824145][ T5653] ? __rcu_read_unlock+0x4f/0x70 [ 112.824167][ T5653] ? swap_cache_get_folio+0x277/0x280 [ 112.824228][ T5653] do_swap_page+0x2ae/0x2370 [ 112.824255][ T5653] ? css_rstat_updated+0xb7/0x240 [ 112.824278][ T5653] ? __pfx_default_wake_function+0x10/0x10 [ 112.824305][ T5653] handle_mm_fault+0x9a5/0x2be0 [ 112.824370][ T5653] ? vma_start_read+0x141/0x1f0 [ 112.824404][ T5653] do_user_addr_fault+0x630/0x1080 [ 112.824515][ T5653] exc_page_fault+0x62/0xa0 [ 112.824625][ T5653] asm_exc_page_fault+0x26/0x30 [ 112.824647][ T5653] RIP: 0033:0x7f5cc57e593c [ 112.824665][ T5653] Code: 66 0f 1f 44 00 00 69 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 112.824761][ T5653] RSP: 002b:00007fff488197e0 EFLAGS: 00010287 [ 112.824780][ T5653] RAX: 0000000000000000 RBX: 00007f5cc5b66090 RCX: 0000000000000000 [ 112.824794][ T5653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556ace4808 [ 112.824806][ T5653] RBP: 00007f5cc5b67da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 112.824859][ T5653] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001b92e [ 112.824871][ T5653] R13: 00007f5cc5b66180 R14: ffffffffffffffff R15: 00007fff488198f0 [ 112.824892][ T5653] [ 112.824900][ T5653] memory: usage 307200kB, limit 307200kB, failcnt 1487 [ 113.054610][ T5653] memory+swap: usage 307756kB, limit 9007199254740988kB, failcnt 0 [ 113.062522][ T5653] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 113.069791][ T5653] Memory cgroup stats for /syz1: [ 113.070005][ T5653] cache 4096 [ 113.078091][ T5653] rss 0 [ 113.080868][ T5653] shmem 0 [ 113.083789][ T5653] mapped_file 0 [ 113.087226][ T5653] dirty 0 [ 113.090167][ T5653] writeback 0 [ 113.093508][ T5653] workingset_refault_anon 1056 [ 113.098254][ T5653] workingset_refault_file 1867 [ 113.103016][ T5653] swap 569344 [ 113.106284][ T5653] swapcached 0 [ 113.109641][ T5653] pgpgin 134196 [ 113.113157][ T5653] pgpgout 134195 [ 113.116683][ T5653] pgfault 106863 [ 113.120315][ T5653] pgmajfault 358 [ 113.123839][ T5653] inactive_anon 0 [ 113.127452][ T5653] active_anon 0 [ 113.130908][ T5653] inactive_file 0 [ 113.134522][ T5653] active_file 4096 [ 113.138221][ T5653] unevictable 0 [ 113.141712][ T5653] hierarchical_memory_limit 314572800 [ 113.147075][ T5653] hierarchical_memsw_limit 9223372036854771712 [ 113.153302][ T5653] total_cache 4096 [ 113.157097][ T5653] total_rss 0 [ 113.160388][ T5653] total_shmem 0 [ 113.163847][ T5653] total_mapped_file 0 [ 113.167821][ T5653] total_dirty 0 [ 113.171303][ T5653] total_writeback 0 [ 113.175101][ T5653] total_workingset_refault_anon 1056 [ 113.180390][ T5653] total_workingset_refault_file 1867 [ 113.185679][ T5653] total_swap 569344 [ 113.189558][ T5653] total_swapcached 0 [ 113.193493][ T5653] total_pgpgin 134196 [ 113.197458][ T5653] total_pgpgout 134195 [ 113.201577][ T5653] total_pgfault 106863 [ 113.205624][ T5653] total_pgmajfault 358 [ 113.209667][ T5653] total_inactive_anon 0 [ 113.213847][ T5653] total_active_anon 0 [ 113.217827][ T5653] total_inactive_file 0 [ 113.221978][ T5653] total_active_file 4096 [ 113.226260][ T5653] total_unevictable 0 [ 113.230251][ T5653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.483,pid=5653,uid=0 [ 113.244824][ T5653] Memory cgroup out of memory: Killed process 5653 (syz.1.483) total-vm:94088kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 113.292616][ T5686] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 113.300910][ T5686] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 113.420904][ T5695] loop4: detected capacity change from 0 to 512 [ 113.441739][ T5695] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.488: ea_inode file size=0 entry size=6 [ 113.454591][ T5695] EXT4-fs (loop4): 1 orphan inode deleted [ 113.460673][ T5695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.629782][ T5708] SELinux: failed to load policy [ 113.701351][ T5701] loop5: detected capacity change from 0 to 8192 [ 113.716625][ T5710] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 113.723178][ T5710] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.730627][ T5710] vhci_hcd vhci_hcd.0: Device attached [ 113.770529][ T5708] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 113.789962][ T5701] netlink: 536 bytes leftover after parsing attributes in process `syz.5.490'. [ 113.818310][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.860918][ T5701] netlink: 60 bytes leftover after parsing attributes in process `syz.5.490'. [ 113.875438][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 113.884380][ T5710] tipc: Started in network mode [ 113.889225][ T5710] tipc: Node identity 7, cluster identity 4711 [ 113.895403][ T5710] tipc: Node number set to 7 [ 113.901329][ T5713] vhci_hcd: connection closed [ 113.908711][ T5727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.909233][ T12] vhci_hcd: stop threads [ 113.919865][ T3568] vhci_hcd: vhci_device speed not set [ 113.922971][ T12] vhci_hcd: release socket [ 113.937066][ T12] vhci_hcd: disconnect device [ 113.984385][ T3568] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 114.001670][ T3568] usb 1-1: enqueue for inactive port 0 [ 114.007241][ T3568] usb 1-1: enqueue for inactive port 0 [ 114.030030][ T3568] usb 1-1: enqueue for inactive port 0 [ 114.180914][ T3568] vhci_hcd: vhci_device speed not set [ 114.369434][ T5751] netlink: 536 bytes leftover after parsing attributes in process `syz.1.498'. [ 114.378707][ T5753] loop5: detected capacity change from 0 to 8192 [ 114.542945][ T5758] C: renamed from team_slave_0 [ 114.666641][ T5758] loop4: detected capacity change from 0 to 4096 [ 114.783070][ T5768] loop5: detected capacity change from 0 to 512 [ 114.820559][ T5768] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.501: ea_inode file size=0 entry size=6 [ 114.833953][ T5768] EXT4-fs (loop5): 1 orphan inode deleted [ 114.840259][ T5768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.017304][ T5773] loop0: detected capacity change from 0 to 512 [ 115.276104][ T5761] syz.5.501 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 115.290173][ T5761] CPU: 0 UID: 0 PID: 5761 Comm: syz.5.501 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.290287][ T5761] Tainted: [W]=WARN [ 115.290293][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.290304][ T5761] Call Trace: [ 115.290311][ T5761] [ 115.290320][ T5761] __dump_stack+0x1d/0x30 [ 115.290413][ T5761] dump_stack_lvl+0xe8/0x140 [ 115.290433][ T5761] dump_stack+0x15/0x1b [ 115.290449][ T5761] dump_header+0x81/0x220 [ 115.290521][ T5761] oom_kill_process+0x342/0x400 [ 115.290638][ T5761] out_of_memory+0x979/0xb80 [ 115.290674][ T5761] try_charge_memcg+0x610/0xa10 [ 115.290709][ T5761] obj_cgroup_charge_pages+0xa6/0x150 [ 115.290729][ T5761] __memcg_kmem_charge_page+0x9f/0x170 [ 115.290749][ T5761] __alloc_frozen_pages_noprof+0x188/0x360 [ 115.290879][ T5761] alloc_pages_mpol+0xb3/0x260 [ 115.290901][ T5761] alloc_pages_noprof+0x90/0x130 [ 115.290924][ T5761] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 115.290973][ T5761] __kvmalloc_node_noprof+0x483/0x670 [ 115.291016][ T5761] ? ip_set_alloc+0x24/0x30 [ 115.291045][ T5761] ? ip_set_alloc+0x24/0x30 [ 115.291079][ T5761] ip_set_alloc+0x24/0x30 [ 115.291165][ T5761] hash_netiface_create+0x282/0x740 [ 115.291205][ T5761] ? __pfx_hash_netiface_create+0x10/0x10 [ 115.291237][ T5761] ip_set_create+0x3cc/0x970 [ 115.291265][ T5761] ? __nla_parse+0x40/0x60 [ 115.291328][ T5761] nfnetlink_rcv_msg+0x4c6/0x590 [ 115.291380][ T5761] netlink_rcv_skb+0x123/0x220 [ 115.291500][ T5761] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 115.291534][ T5761] nfnetlink_rcv+0x167/0x16c0 [ 115.291562][ T5761] ? kmem_cache_free+0xe4/0x3d0 [ 115.291613][ T5761] ? __kfree_skb+0x109/0x150 [ 115.291645][ T5761] ? nlmon_xmit+0x4f/0x60 [ 115.291671][ T5761] ? consume_skb+0x49/0x150 [ 115.291747][ T5761] ? nlmon_xmit+0x4f/0x60 [ 115.291773][ T5761] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 115.291839][ T5761] ? __dev_queue_xmit+0x1200/0x2000 [ 115.291871][ T5761] ? __dev_queue_xmit+0x182/0x2000 [ 115.291988][ T5761] ? ref_tracker_free+0x37d/0x3e0 [ 115.292031][ T5761] ? __netlink_deliver_tap+0x4dc/0x500 [ 115.292068][ T5761] netlink_unicast+0x5c0/0x690 [ 115.292121][ T5761] netlink_sendmsg+0x58b/0x6b0 [ 115.292144][ T5761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.292165][ T5761] __sock_sendmsg+0x145/0x180 [ 115.292197][ T5761] ____sys_sendmsg+0x31e/0x4e0 [ 115.292280][ T5761] ___sys_sendmsg+0x17b/0x1d0 [ 115.292316][ T5761] __x64_sys_sendmsg+0xd4/0x160 [ 115.292388][ T5761] x64_sys_call+0x191e/0x3000 [ 115.292408][ T5761] do_syscall_64+0xd2/0x200 [ 115.292444][ T5761] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.292475][ T5761] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.292509][ T5761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.292563][ T5761] RIP: 0033:0x7fa64bb7f6c9 [ 115.292579][ T5761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.292599][ T5761] RSP: 002b:00007fa64a5be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.292620][ T5761] RAX: ffffffffffffffda RBX: 00007fa64bdd6090 RCX: 00007fa64bb7f6c9 [ 115.292633][ T5761] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 115.292647][ T5761] RBP: 00007fa64bc01f91 R08: 0000000000000000 R09: 0000000000000000 [ 115.292689][ T5761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.292712][ T5761] R13: 00007fa64bdd6128 R14: 00007fa64bdd6090 R15: 00007ffee75bea88 [ 115.292733][ T5761] [ 115.292740][ T5761] memory: usage 307200kB, limit 307200kB, failcnt 179 [ 115.638482][ T5761] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 115.646432][ T5761] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 115.653733][ T5761] Memory cgroup stats for /syz5: [ 115.662165][ T5761] cache 24576 [ 115.667538][ T5758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.670417][ T5761] rss 4096 [ 115.670425][ T5761] shmem 4096 [ 115.670432][ T5761] mapped_file 0 [ 115.670438][ T5761] dirty 0 [ 115.670444][ T5761] writeback 12288 [ 115.670450][ T5761] workingset_refault_anon 34 [ 115.670462][ T5761] workingset_refault_file 0 [ 115.670470][ T5761] swap 454656 [ 115.670477][ T5761] swapcached 8192 [ 115.670484][ T5761] pgpgin 46816 [ 115.670491][ T5761] pgpgout 46808 [ 115.670498][ T5761] pgfault 29799 [ 115.670505][ T5761] pgmajfault 12 [ 115.670511][ T5761] inactive_anon 4096 [ 115.670519][ T5761] active_anon 8192 [ 115.683783][ T5773] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.504: ea_inode file size=0 entry size=6 [ 115.686039][ T5761] inactive_file 0 [ 115.689462][ T5773] EXT4-fs (loop0): 1 orphan inode deleted [ 115.692684][ T5761] active_file 20480 [ 115.692694][ T5761] unevictable 0 [ 115.696084][ T5773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.699231][ T5761] hierarchical_memory_limit 314572800 [ 115.750321][ T29] kauditd_printk_skb: 1058 callbacks suppressed [ 115.750356][ T29] audit: type=1326 audit(1762328832.435:11070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65dd83df10 code=0x7ffc0000 [ 115.752810][ T5761] hierarchical_memsw_limit 9223372036854771712 [ 115.752820][ T5761] total_cache 24576 [ 115.752840][ T5761] total_rss 4096 [ 115.752846][ T5761] total_shmem 4096 [ 115.752853][ T5761] total_mapped_file 0 [ 115.764855][ T29] audit: type=1326 audit(1762328832.445:11071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f65dd83e417 code=0x7ffc0000 [ 115.765831][ T5761] total_dirty 0 [ 115.778278][ T29] audit: type=1326 audit(1762328832.445:11072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65dd83df10 code=0x7ffc0000 [ 115.783624][ T5761] total_writeback 12288 [ 115.789887][ T29] audit: type=1326 audit(1762328832.445:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 115.813347][ T5761] total_workingset_refault_anon 34 [ 115.819502][ T29] audit: type=1326 audit(1762328832.455:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 115.823283][ T5761] total_workingset_refault_file 0 [ 115.826815][ T29] audit: type=1326 audit(1762328832.455:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 115.830518][ T5761] total_swap 454656 [ 115.830527][ T5761] total_swapcached 8192 [ 115.834487][ T29] audit: type=1326 audit(1762328832.455:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 115.857732][ T5761] total_pgpgin 46816 [ 115.857795][ T5761] total_pgpgout 46808 [ 115.861301][ T29] audit: type=1326 audit(1762328832.455:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 115.884585][ T5761] total_pgfault 29799 [ 115.884595][ T5761] total_pgmajfault 12 [ 115.888751][ T29] audit: type=1326 audit(1762328832.455:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 115.888807][ T29] audit: type=1326 audit(1762328832.455:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dd83f6c9 code=0x7ffc0000 [ 115.912137][ T5761] total_inactive_anon 4096 [ 115.953308][ T5775] SELinux: policydb magic number 0xcfec9c78 does not match expected magic number 0xf97cff8c [ 115.968944][ T5761] total_active_anon 8192 [ 115.968956][ T5761] total_inactive_file 0 [ 116.013636][ T5775] SELinux: failed to load policy [ 116.031699][ T5761] total_active_file 20480 [ 116.031712][ T5761] total_unevictable 0 [ 116.031720][ T5761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.501,pid=5756,uid=0 [ 116.137526][ T5761] Memory cgroup out of memory: Killed process 5756 (syz.5.501) total-vm:94088kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 116.244406][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.275185][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.320973][ T5782] program syz.3.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.330866][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.352517][ T5784] loop4: detected capacity change from 0 to 1024 [ 116.472201][ T5784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.489052][ T5786] __nla_validate_parse: 4 callbacks suppressed [ 116.489064][ T5786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.509'. [ 116.506941][ T5784] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.507: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 116.529424][ T5784] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.507: reserved inode found cleared - inode=2 [ 116.553021][ T5784] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.507: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 116.711132][ T5784] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.507: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 116.763514][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 116.798196][ T5803] netlink: '+}[@': attribute type 10 has an invalid length. [ 116.816843][ T5797] loop5: detected capacity change from 0 to 8192 [ 116.839323][ T5797] netlink: 536 bytes leftover after parsing attributes in process `syz.5.511'. [ 116.848563][ T5797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.511'. [ 116.857693][ T5784] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.507: path /98/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 116.931852][ T5806] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 116.938433][ T5806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.945869][ T5806] vhci_hcd vhci_hcd.0: Device attached [ 116.952917][ T5807] vhci_hcd: cannot find the pending unlink 1023 [ 116.966050][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 116.975042][ T5806] tipc: Started in network mode [ 116.979969][ T5806] tipc: Node identity 7, cluster identity 4711 [ 116.986115][ T5806] tipc: Node number set to 7 [ 116.994765][ T5807] vhci_hcd: connection closed [ 116.994975][ T2269] vhci_hcd: stop threads [ 117.004006][ T2269] vhci_hcd: release socket [ 117.008436][ T2269] vhci_hcd: disconnect device [ 117.082692][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.155450][ T5812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 117.189145][ T5814] loop5: detected capacity change from 0 to 8192 [ 117.373698][ T5820] SELinux: policydb magic number 0xcfec9c78 does not match expected magic number 0xf97cff8c [ 117.384100][ T5820] SELinux: failed to load policy [ 117.506514][ T5823] loop0: detected capacity change from 0 to 512 [ 117.876004][ T5823] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.519: ea_inode file size=0 entry size=6 [ 117.888942][ T5823] EXT4-fs (loop0): 1 orphan inode deleted [ 117.895240][ T5823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.984827][ T5817] syz.0.519 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 117.995730][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: syz.0.519 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.995808][ T5817] Tainted: [W]=WARN [ 117.995814][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.995828][ T5817] Call Trace: [ 117.995835][ T5817] [ 117.995844][ T5817] __dump_stack+0x1d/0x30 [ 117.995881][ T5817] dump_stack_lvl+0xe8/0x140 [ 117.995901][ T5817] dump_stack+0x15/0x1b [ 117.995986][ T5817] dump_header+0x81/0x220 [ 117.996006][ T5817] oom_kill_process+0x342/0x400 [ 117.996065][ T5817] out_of_memory+0x979/0xb80 [ 117.996100][ T5817] try_charge_memcg+0x610/0xa10 [ 117.996200][ T5817] charge_memcg+0x51/0xc0 [ 117.996224][ T5817] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 117.996258][ T5817] __read_swap_cache_async+0x17b/0x2d0 [ 117.996285][ T5817] swap_cluster_readahead+0x262/0x3c0 [ 117.996337][ T5817] swapin_readahead+0xde/0x6f0 [ 117.996356][ T5817] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 117.996388][ T5817] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 117.996420][ T5817] ? __rcu_read_unlock+0x4f/0x70 [ 117.996448][ T5817] ? swap_cache_get_folio+0x277/0x280 [ 117.996547][ T5817] do_swap_page+0x2ae/0x2370 [ 117.996571][ T5817] ? css_rstat_updated+0xb7/0x240 [ 117.996641][ T5817] ? __pfx_default_wake_function+0x10/0x10 [ 117.996672][ T5817] handle_mm_fault+0x9a5/0x2be0 [ 117.996699][ T5817] ? vma_start_read+0x141/0x1f0 [ 117.996737][ T5817] do_user_addr_fault+0x630/0x1080 [ 117.996820][ T5817] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 117.996918][ T5817] exc_page_fault+0x62/0xa0 [ 117.996950][ T5817] asm_exc_page_fault+0x26/0x30 [ 117.996969][ T5817] RIP: 0033:0x7fa73fcdf626 [ 117.996985][ T5817] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 117.997022][ T5817] RSP: 002b:00007ffdce16d9f0 EFLAGS: 00010246 [ 117.997036][ T5817] RAX: 000000000001ccc9 RBX: 00007fa73ff35fa0 RCX: 000000000001c908 [ 117.997073][ T5817] RDX: 00000000000003c1 RSI: 0000000000000000 RDI: 00000000000003e8 [ 117.997084][ T5817] RBP: 00007fa73ff37da0 R08: 00000000394e2d5e R09: 7fffffffffffffff [ 117.997096][ T5817] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000001cd2d [ 117.997107][ T5817] R13: 00007fa73ff36090 R14: ffffffffffffffff R15: 00007ffdce16db30 [ 117.997187][ T5817] [ 117.997193][ T5817] memory: usage 307200kB, limit 307200kB, failcnt 6028 [ 118.232700][ T5817] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 118.240651][ T5817] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 118.247975][ T5817] Memory cgroup stats for /syz0: [ 118.248229][ T5817] cache 16384 [ 118.256426][ T5817] rss 0 [ 118.259231][ T5817] shmem 0 [ 118.262160][ T5817] mapped_file 4096 [ 118.265863][ T5817] dirty 16384 [ 118.269129][ T5817] writeback 4096 [ 118.272681][ T5817] workingset_refault_anon 3269 [ 118.277422][ T5817] workingset_refault_file 1022 [ 118.282203][ T5817] swap 471040 [ 118.285472][ T5817] swapcached 4096 [ 118.289084][ T5817] pgpgin 129230 [ 118.292543][ T5817] pgpgout 129217 [ 118.296073][ T5817] pgfault 88806 [ 118.299518][ T5817] pgmajfault 560 [ 118.303085][ T5817] inactive_anon 4096 [ 118.307027][ T5817] active_anon 0 [ 118.310478][ T5817] inactive_file 49152 [ 118.314435][ T5817] active_file 0 [ 118.317947][ T5817] unevictable 0 [ 118.321483][ T5817] hierarchical_memory_limit 314572800 [ 118.326831][ T5817] hierarchical_memsw_limit 9223372036854771712 [ 118.333023][ T5817] total_cache 16384 [ 118.336813][ T5817] total_rss 0 [ 118.340103][ T5817] total_shmem 0 [ 118.343578][ T5817] total_mapped_file 4096 [ 118.347801][ T5817] total_dirty 16384 [ 118.351634][ T5817] total_writeback 4096 [ 118.355769][ T5817] total_workingset_refault_anon 3269 [ 118.361053][ T5817] total_workingset_refault_file 1022 [ 118.366318][ T5817] total_swap 471040 [ 118.370130][ T5817] total_swapcached 4096 [ 118.374268][ T5817] total_pgpgin 129230 [ 118.378264][ T5817] total_pgpgout 129217 [ 118.382351][ T5817] total_pgfault 88806 [ 118.386312][ T5817] total_pgmajfault 560 [ 118.390376][ T5817] total_inactive_anon 4096 [ 118.394839][ T5817] total_active_anon 0 [ 118.398832][ T5817] total_inactive_file 49152 [ 118.403322][ T5817] total_active_file 0 [ 118.407278][ T5817] total_unevictable 0 [ 118.411252][ T5817] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.519,pid=5817,uid=0 [ 118.425810][ T5817] Memory cgroup out of memory: Killed process 5817 (syz.0.519) total-vm:98324kB, anon-rss:1136kB, file-rss:26668kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 118.587952][ T5826] ip6gretap0: entered promiscuous mode [ 118.617527][ T5826] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5826 comm=syz.1.520 [ 118.657862][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.827703][ T5836] loop5: detected capacity change from 0 to 512 [ 118.844553][ T5838] loop0: detected capacity change from 0 to 512 [ 118.895277][ T5838] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.524: inode has both inline data and extents flags [ 118.909292][ T5838] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.524: couldn't read orphan inode 15 (err -117) [ 118.923365][ T5838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.982397][ T5836] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.523: ea_inode file size=0 entry size=6 [ 118.995427][ T5836] EXT4-fs (loop5): 1 orphan inode deleted [ 119.001664][ T5836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.034374][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.067656][ T5846] syz!: rxe_newlink: already configured on team_slave_0 [ 119.200155][ T5834] syz.5.523 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 119.214228][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz.5.523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.214267][ T5834] Tainted: [W]=WARN [ 119.214273][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.214321][ T5834] Call Trace: [ 119.214329][ T5834] [ 119.214337][ T5834] __dump_stack+0x1d/0x30 [ 119.214361][ T5834] dump_stack_lvl+0xe8/0x140 [ 119.214383][ T5834] dump_stack+0x15/0x1b [ 119.214402][ T5834] dump_header+0x81/0x220 [ 119.214457][ T5834] oom_kill_process+0x342/0x400 [ 119.214488][ T5834] out_of_memory+0x979/0xb80 [ 119.214524][ T5834] try_charge_memcg+0x610/0xa10 [ 119.214609][ T5834] obj_cgroup_charge_pages+0xa6/0x150 [ 119.214633][ T5834] __memcg_kmem_charge_page+0x9f/0x170 [ 119.214733][ T5834] __alloc_frozen_pages_noprof+0x188/0x360 [ 119.214758][ T5834] alloc_pages_mpol+0xb3/0x260 [ 119.214779][ T5834] ? alloc_pages_noprof+0x61/0x130 [ 119.214816][ T5834] alloc_pages_noprof+0x90/0x130 [ 119.214837][ T5834] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 119.214887][ T5834] __kvmalloc_node_noprof+0x483/0x670 [ 119.214932][ T5834] ? ip_set_alloc+0x24/0x30 [ 119.215003][ T5834] ? ip_set_alloc+0x24/0x30 [ 119.215069][ T5834] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 119.215104][ T5834] ip_set_alloc+0x24/0x30 [ 119.215152][ T5834] hash_netiface_create+0x282/0x740 [ 119.215185][ T5834] ? __pfx_hash_netiface_create+0x10/0x10 [ 119.215239][ T5834] ip_set_create+0x3cc/0x970 [ 119.215271][ T5834] ? __nla_parse+0x40/0x60 [ 119.215296][ T5834] nfnetlink_rcv_msg+0x4c6/0x590 [ 119.215343][ T5834] netlink_rcv_skb+0x123/0x220 [ 119.215394][ T5834] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 119.215553][ T5834] nfnetlink_rcv+0x167/0x16c0 [ 119.215676][ T5834] ? kmem_cache_free+0xe4/0x3d0 [ 119.215766][ T5834] ? __kfree_skb+0x109/0x150 [ 119.215864][ T5834] ? nlmon_xmit+0x4f/0x60 [ 119.215890][ T5834] ? consume_skb+0x49/0x150 [ 119.215916][ T5834] ? nlmon_xmit+0x4f/0x60 [ 119.215938][ T5834] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 119.215996][ T5834] ? __dev_queue_xmit+0x1200/0x2000 [ 119.216028][ T5834] ? __dev_queue_xmit+0x182/0x2000 [ 119.216061][ T5834] ? ref_tracker_free+0x37d/0x3e0 [ 119.216136][ T5834] ? __netlink_deliver_tap+0x4dc/0x500 [ 119.216176][ T5834] netlink_unicast+0x5c0/0x690 [ 119.216285][ T5834] netlink_sendmsg+0x58b/0x6b0 [ 119.216308][ T5834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.216389][ T5834] __sock_sendmsg+0x145/0x180 [ 119.216458][ T5834] ____sys_sendmsg+0x31e/0x4e0 [ 119.216497][ T5834] ___sys_sendmsg+0x17b/0x1d0 [ 119.216536][ T5834] __x64_sys_sendmsg+0xd4/0x160 [ 119.216557][ T5834] x64_sys_call+0x191e/0x3000 [ 119.216579][ T5834] do_syscall_64+0xd2/0x200 [ 119.216620][ T5834] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.216648][ T5834] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.216734][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.216756][ T5834] RIP: 0033:0x7fa64bb7f6c9 [ 119.216773][ T5834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.216791][ T5834] RSP: 002b:00007fa64a5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.216809][ T5834] RAX: ffffffffffffffda RBX: 00007fa64bdd5fa0 RCX: 00007fa64bb7f6c9 [ 119.216889][ T5834] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 119.216903][ T5834] RBP: 00007fa64bc01f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.216916][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.216930][ T5834] R13: 00007fa64bdd6038 R14: 00007fa64bdd5fa0 R15: 00007ffee75bea88 [ 119.216948][ T5834] [ 119.216954][ T5834] memory: usage 307200kB, limit 307200kB, failcnt 417 [ 119.572917][ T5834] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 119.580827][ T5834] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 119.588108][ T5834] Memory cgroup stats for /syz5: [ 119.588282][ T5834] cache 8192 [ 119.596412][ T5834] rss 4096 [ 119.599430][ T5834] shmem 0 [ 119.602384][ T5834] mapped_file 0 [ 119.605877][ T5834] dirty 0 [ 119.608842][ T5834] writeback 0 [ 119.612201][ T5834] workingset_refault_anon 121 [ 119.616865][ T5834] workingset_refault_file 0 [ 119.621388][ T5834] swap 454656 [ 119.624713][ T5849] loop4: detected capacity change from 0 to 512 [ 119.628332][ T5849] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 119.630974][ T5834] swapcached 4096 [ 119.630983][ T5834] pgpgin 52046 [ 119.630989][ T5834] pgpgout 52042 [ 119.630996][ T5834] pgfault 35227 [ 119.631004][ T5834] pgmajfault 42 [ 119.645723][ T5849] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.527: bg 0: block 104: invalid block bitmap [ 119.646134][ T5834] inactive_anon 0 [ 119.646143][ T5834] active_anon 4096 [ 119.646151][ T5834] inactive_file 12288 [ 119.650122][ T5849] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 119.653057][ T5834] active_file 0 [ 119.656876][ T5849] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.527: invalid indirect mapped block 1 (level 1) [ 119.668819][ T5834] unevictable 0 [ 119.668830][ T5834] hierarchical_memory_limit 314572800 [ 119.668887][ T5834] hierarchical_memsw_limit 9223372036854771712 [ 119.675267][ T5849] EXT4-fs (loop4): 1 truncate cleaned up [ 119.676300][ T5834] total_cache 8192 [ 119.681173][ T5849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.689001][ T5834] total_rss 4096 [ 119.689010][ T5834] total_shmem 0 [ 119.689018][ T5834] total_mapped_file 0 [ 119.689025][ T5834] total_dirty 0 [ 119.689032][ T5834] total_writeback 0 [ 119.760422][ T5834] total_workingset_refault_anon 121 [ 119.760436][ T5834] total_workingset_refault_file 0 [ 119.760445][ T5834] total_swap 454656 [ 119.760452][ T5834] total_swapcached 4096 [ 119.760460][ T5834] total_pgpgin 52046 [ 119.778566][ T5849] netlink: '+}[@': attribute type 10 has an invalid length. [ 119.778798][ T5834] total_pgpgout 52042 [ 119.793973][ T5834] total_pgfault 35227 [ 119.794010][ T5834] total_pgmajfault 42 [ 119.794059][ T5834] total_inactive_anon 0 [ 119.794066][ T5834] total_active_anon 4096 [ 119.794073][ T5834] total_inactive_file 12288 [ 119.794080][ T5834] total_active_file 0 [ 119.794086][ T5834] total_unevictable 0 [ 119.794093][ T5834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.523,pid=5833,uid=0 [ 119.794217][ T5834] Memory cgroup out of memory: Killed process 5833 (syz.5.523) total-vm:93956kB, anon-rss:1264kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 119.978543][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.993417][ T5854] ip6t_srh: unknown srh match flags 4000 [ 120.018125][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.075039][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 120.106198][ T5862] lo speed is unknown, defaulting to 1000 [ 120.112740][ T5867] loop5: detected capacity change from 0 to 4096 [ 120.130885][ T5867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.152201][ T5865] loop4: detected capacity change from 0 to 512 [ 120.161172][ T5860] loop0: detected capacity change from 0 to 1024 [ 120.170233][ T5860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.191460][ T5865] EXT4-fs (loop4): too many log groups per flexible block group [ 120.199951][ T5865] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 120.208543][ T5860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.231669][ T5865] EXT4-fs (loop4): mount failed [ 120.279255][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.303629][ T5862] lo speed is unknown, defaulting to 1000 [ 120.310213][ T5862] lo speed is unknown, defaulting to 1000 [ 120.349880][ T5868] pim6reg: entered allmulticast mode [ 120.370607][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.392899][ T5868] pim6reg: left allmulticast mode [ 120.468221][ T5879] loop0: detected capacity change from 0 to 8192 [ 120.548033][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.533'. [ 120.563428][ T5881] loop4: detected capacity change from 0 to 8192 [ 120.576356][ T5888] SELinux: policydb magic number 0xcfec9c78 does not match expected magic number 0xf97cff8c [ 120.587489][ T5888] SELinux: failed to load policy [ 120.598808][ T5877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.716940][ T5891] SELinux: failed to load policy [ 120.725592][ T5877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.750511][ T29] kauditd_printk_skb: 1340 callbacks suppressed [ 120.750522][ T29] audit: type=1326 audit(1762328837.435:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.782364][ T29] audit: type=1326 audit(1762328837.435:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.805775][ T29] audit: type=1326 audit(1762328837.435:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.829231][ T29] audit: type=1326 audit(1762328837.435:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.852704][ T29] audit: type=1326 audit(1762328837.435:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.876150][ T29] audit: type=1326 audit(1762328837.435:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.899587][ T29] audit: type=1326 audit(1762328837.435:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.923067][ T29] audit: type=1326 audit(1762328837.435:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.946533][ T29] audit: type=1326 audit(1762328837.435:12428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.969907][ T29] audit: type=1326 audit(1762328837.435:12429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcae1001f85 code=0x7ffc0000 [ 120.997717][ T5877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.052939][ T5877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.107174][ T2168] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.118570][ T2168] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.130347][ T2168] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.141816][ T2168] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.213586][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.539'. [ 121.922854][ T5899] loop4: detected capacity change from 0 to 512 [ 121.931576][ T5899] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.541: ea_inode file size=0 entry size=6 [ 121.944604][ T5899] EXT4-fs (loop4): 1 orphan inode deleted [ 121.950880][ T5899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.989983][ T5897] syz.4.541 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 122.000891][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.4.541 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.000923][ T5897] Tainted: [W]=WARN [ 122.000929][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.000972][ T5897] Call Trace: [ 122.000980][ T5897] [ 122.000988][ T5897] __dump_stack+0x1d/0x30 [ 122.001017][ T5897] dump_stack_lvl+0xe8/0x140 [ 122.001143][ T5897] dump_stack+0x15/0x1b [ 122.001162][ T5897] dump_header+0x81/0x220 [ 122.001181][ T5897] oom_kill_process+0x342/0x400 [ 122.001227][ T5897] out_of_memory+0x979/0xb80 [ 122.001261][ T5897] try_charge_memcg+0x610/0xa10 [ 122.001389][ T5897] charge_memcg+0x51/0xc0 [ 122.001411][ T5897] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 122.001436][ T5897] __read_swap_cache_async+0x17b/0x2d0 [ 122.001506][ T5897] swap_cluster_readahead+0x262/0x3c0 [ 122.001530][ T5897] swapin_readahead+0xde/0x6f0 [ 122.001549][ T5897] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 122.001582][ T5897] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 122.001620][ T5897] ? __rcu_read_unlock+0x4f/0x70 [ 122.001647][ T5897] ? swap_cache_get_folio+0x277/0x280 [ 122.001669][ T5897] do_swap_page+0x2ae/0x2370 [ 122.001693][ T5897] ? sysvec_call_function_single+0xe/0x80 [ 122.001803][ T5897] ? __pfx_default_wake_function+0x10/0x10 [ 122.001833][ T5897] handle_mm_fault+0x9a5/0x2be0 [ 122.001878][ T5897] ? vma_start_read+0x141/0x1f0 [ 122.001970][ T5897] do_user_addr_fault+0x630/0x1080 [ 122.001992][ T5897] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 122.002025][ T5897] exc_page_fault+0x62/0xa0 [ 122.002099][ T5897] asm_exc_page_fault+0x26/0x30 [ 122.002120][ T5897] RIP: 0033:0x7f65dd871f33 [ 122.002140][ T5897] Code: ed 08 00 48 8d 3d b6 ed 08 00 e8 b8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 122.002162][ T5897] RSP: 002b:00007ffc10fa8fb8 EFLAGS: 00010293 [ 122.002183][ T5897] RAX: 00000000fffffffa RBX: 00007f65dda95fa0 RCX: 0000000000000000 [ 122.002196][ T5897] RDX: 00007ffc10fa8fd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.002207][ T5897] RBP: 00007f65dda97da0 R08: 00000000398c8acf R09: 7fffffffffffffff [ 122.002218][ T5897] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001dd20 [ 122.002230][ T5897] R13: 00007f65dda95fa0 R14: ffffffffffffffff R15: 00007ffc10fa9110 [ 122.002248][ T5897] [ 122.002254][ T5897] memory: usage 307200kB, limit 307200kB, failcnt 1608 [ 122.194910][ T5896] serio: Serial port ptm2 [ 122.196658][ T5897] memory+swap: usage 307800kB, limit 9007199254740988kB, failcnt 0 [ 122.251238][ T5897] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 122.258534][ T5897] Memory cgroup stats for /syz4: [ 122.258808][ T5897] cache 24576 [ 122.267019][ T5897] rss 0 [ 122.269759][ T5897] shmem 0 [ 122.272695][ T5897] mapped_file 4096 [ 122.276456][ T5897] dirty 4096 [ 122.279635][ T5897] writeback 20480 [ 122.283271][ T5897] workingset_refault_anon 393 [ 122.287940][ T5897] workingset_refault_file 1743 [ 122.292780][ T5897] swap 614400 [ 122.296082][ T5897] swapcached 36864 [ 122.299849][ T5897] pgpgin 124097 [ 122.303299][ T5897] pgpgout 124075 [ 122.306837][ T5897] pgfault 98569 [ 122.310362][ T5897] pgmajfault 195 [ 122.314049][ T5897] inactive_anon 8192 [ 122.318092][ T5897] active_anon 28672 [ 122.322041][ T5897] inactive_file 0 [ 122.326093][ T5897] active_file 53248 [ 122.329919][ T5897] unevictable 0 [ 122.333358][ T5897] hierarchical_memory_limit 314572800 [ 122.338760][ T5897] hierarchical_memsw_limit 9223372036854771712 [ 122.338905][ T5906] loop0: detected capacity change from 0 to 1024 [ 122.344928][ T5897] total_cache 24576 [ 122.355049][ T5897] total_rss 0 [ 122.358322][ T5897] total_shmem 0 [ 122.361826][ T5897] total_mapped_file 4096 [ 122.366058][ T5897] total_dirty 4096 [ 122.369765][ T5897] total_writeback 20480 [ 122.374109][ T5897] total_workingset_refault_anon 393 [ 122.379298][ T5897] total_workingset_refault_file 1743 [ 122.382200][ T5918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=5918 comm=syz.3.545 [ 122.384649][ T5897] total_swap 614400 [ 122.400944][ T5897] total_swapcached 36864 [ 122.405167][ T5897] total_pgpgin 124097 [ 122.409135][ T5897] total_pgpgout 124075 [ 122.413298][ T5897] total_pgfault 98569 [ 122.417283][ T5897] total_pgmajfault 195 [ 122.417767][ T5906] EXT4-fs: Ignoring removed orlov option [ 122.421419][ T5897] total_inactive_anon 8192 [ 122.421428][ T5897] total_active_anon 28672 [ 122.427084][ T5906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.431450][ T5897] total_inactive_file 0 [ 122.431460][ T5897] total_active_file 53248 [ 122.431468][ T5897] total_unevictable 0 [ 122.455076][ T5897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.541,pid=5897,uid=0 [ 122.467970][ T5923] SELinux: Context system_u:object is not valid (left unmapped). [ 122.469672][ T5897] Memory cgroup out of memory: Killed process 5897 (syz.4.541) total-vm:94088kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 122.530568][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.562520][ T5929] block device autoloading is deprecated and will be removed. [ 122.601970][ T5916] macvtap0: refused to change device tx_queue_len [ 122.622488][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.683881][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.705388][ T5929] lo speed is unknown, defaulting to 1000 [ 122.768721][ T5929] lo speed is unknown, defaulting to 1000 [ 122.774909][ T5929] lo speed is unknown, defaulting to 1000 [ 122.983445][ T5943] loop5: detected capacity change from 0 to 512 [ 123.386885][ T5942] syz.5.550 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 123.401117][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.5.550 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.401221][ T5942] Tainted: [W]=WARN [ 123.401229][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.401242][ T5942] Call Trace: [ 123.401248][ T5942] [ 123.401255][ T5942] __dump_stack+0x1d/0x30 [ 123.401277][ T5942] dump_stack_lvl+0xe8/0x140 [ 123.401296][ T5942] dump_stack+0x15/0x1b [ 123.401312][ T5942] dump_header+0x81/0x220 [ 123.401344][ T5942] oom_kill_process+0x342/0x400 [ 123.401451][ T5942] out_of_memory+0x979/0xb80 [ 123.401486][ T5942] try_charge_memcg+0x610/0xa10 [ 123.401518][ T5942] obj_cgroup_charge_pages+0xa6/0x150 [ 123.401545][ T5942] __memcg_kmem_charge_page+0x9f/0x170 [ 123.401565][ T5942] __alloc_frozen_pages_noprof+0x188/0x360 [ 123.401589][ T5942] alloc_pages_mpol+0xb3/0x260 [ 123.401611][ T5942] ? alloc_pages_noprof+0x61/0x130 [ 123.401679][ T5942] alloc_pages_noprof+0x90/0x130 [ 123.401701][ T5942] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 123.401749][ T5942] __kvmalloc_node_noprof+0x483/0x670 [ 123.401825][ T5942] ? ip_set_alloc+0x24/0x30 [ 123.401959][ T5942] ? ip_set_alloc+0x24/0x30 [ 123.401993][ T5942] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 123.402027][ T5942] ip_set_alloc+0x24/0x30 [ 123.402056][ T5942] hash_netiface_create+0x282/0x740 [ 123.402150][ T5942] ? __pfx_hash_netiface_create+0x10/0x10 [ 123.402251][ T5942] ip_set_create+0x3cc/0x970 [ 123.402338][ T5942] ? __nla_parse+0x40/0x60 [ 123.402364][ T5942] nfnetlink_rcv_msg+0x4c6/0x590 [ 123.402422][ T5942] netlink_rcv_skb+0x123/0x220 [ 123.402515][ T5942] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 123.402550][ T5942] nfnetlink_rcv+0x167/0x16c0 [ 123.402573][ T5942] ? kmem_cache_free+0xe4/0x3d0 [ 123.402681][ T5942] ? __kfree_skb+0x109/0x150 [ 123.402718][ T5942] ? nlmon_xmit+0x4f/0x60 [ 123.402751][ T5942] ? consume_skb+0x49/0x150 [ 123.402781][ T5942] ? nlmon_xmit+0x4f/0x60 [ 123.402803][ T5942] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 123.402836][ T5942] ? __dev_queue_xmit+0x1200/0x2000 [ 123.402866][ T5942] ? __dev_queue_xmit+0x182/0x2000 [ 123.402958][ T5942] ? ref_tracker_free+0x37d/0x3e0 [ 123.402995][ T5942] ? __netlink_deliver_tap+0x4dc/0x500 [ 123.403095][ T5942] netlink_unicast+0x5c0/0x690 [ 123.403128][ T5942] netlink_sendmsg+0x58b/0x6b0 [ 123.403151][ T5942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.403169][ T5942] __sock_sendmsg+0x145/0x180 [ 123.403193][ T5942] ____sys_sendmsg+0x31e/0x4e0 [ 123.403287][ T5942] ___sys_sendmsg+0x17b/0x1d0 [ 123.403319][ T5942] __x64_sys_sendmsg+0xd4/0x160 [ 123.403343][ T5942] x64_sys_call+0x191e/0x3000 [ 123.403425][ T5942] do_syscall_64+0xd2/0x200 [ 123.403455][ T5942] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.403484][ T5942] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.403568][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.403589][ T5942] RIP: 0033:0x7fa64bb7f6c9 [ 123.403603][ T5942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.403621][ T5942] RSP: 002b:00007fa64a59d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.403640][ T5942] RAX: ffffffffffffffda RBX: 00007fa64bdd6180 RCX: 00007fa64bb7f6c9 [ 123.403653][ T5942] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 123.403665][ T5942] RBP: 00007fa64bc01f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.403720][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.403732][ T5942] R13: 00007fa64bdd6218 R14: 00007fa64bdd6180 R15: 00007ffee75bea88 [ 123.403751][ T5942] [ 123.403760][ T5942] memory: usage 306980kB, limit 307200kB, failcnt 620 [ 123.466833][ T5939] loop0: detected capacity change from 0 to 8192 [ 123.472056][ T5942] memory+swap: usage 307316kB, limit 9007199254740988kB, failcnt 0 [ 123.472074][ T5942] kmem: usage 306832kB, limit 9007199254740988kB, failcnt 0 [ 123.472086][ T5942] Memory cgroup stats for /syz5: [ 123.489510][ T5943] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.550: ea_inode file size=0 entry size=6 [ 123.493642][ T5942] cache 57344 [ 123.498688][ T5943] EXT4-fs (loop5): 1 orphan inode deleted [ 123.504163][ T5942] rss 24576 [ 123.504172][ T5942] shmem 40960 [ 123.504179][ T5942] mapped_file 0 [ 123.504191][ T5942] dirty 12288 [ 123.504197][ T5942] writeback 0 [ 123.504205][ T5942] workingset_refault_anon 157 [ 123.504213][ T5942] workingset_refault_file 0 [ 123.504220][ T5942] swap 290816 [ 123.504227][ T5942] swapcached 135168 [ 123.504234][ T5942] pgpgin 58662 [ 123.504242][ T5942] pgpgout 58611 [ 123.510088][ T5943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.514162][ T5942] pgfault 42293 [ 123.842970][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 123.845090][ T5942] pgmajfault 61 [ 123.845100][ T5942] inactive_anon 155648 [ 123.845108][ T5942] active_anon 28672 [ 123.884670][ T5942] inactive_file 12288 [ 123.888648][ T5942] active_file 0 [ 123.892140][ T5942] unevictable 0 [ 123.895618][ T5942] hierarchical_memory_limit 314572800 [ 123.901015][ T5942] hierarchical_memsw_limit 9223372036854771712 [ 123.907215][ T5942] total_cache 57344 [ 123.911042][ T5942] total_rss 24576 [ 123.914675][ T5942] total_shmem 40960 [ 123.918472][ T5942] total_mapped_file 0 [ 123.922488][ T5942] total_dirty 12288 [ 123.926282][ T5942] total_writeback 0 [ 123.930101][ T5942] total_workingset_refault_anon 157 [ 123.935287][ T5942] total_workingset_refault_file 0 [ 123.940335][ T5942] total_swap 290816 [ 123.944127][ T5942] total_swapcached 135168 [ 123.948501][ T5942] total_pgpgin 58662 [ 123.952526][ T5942] total_pgpgout 58611 [ 123.956513][ T5942] total_pgfault 42293 [ 123.960506][ T5942] total_pgmajfault 61 [ 123.964579][ T5942] total_inactive_anon 155648 [ 123.969153][ T5942] total_active_anon 28672 [ 123.973587][ T5942] total_inactive_file 12288 [ 123.978072][ T5942] total_active_file 0 [ 123.982097][ T5942] total_unevictable 0 [ 123.986087][ T5942] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.550,pid=5935,uid=0 [ 124.000617][ T5942] Memory cgroup out of memory: Killed process 5935 (syz.5.550) total-vm:98324kB, anon-rss:1136kB, file-rss:26532kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 124.167658][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.359729][ T5962] loop5: detected capacity change from 0 to 128 [ 124.394743][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 124.403652][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 124.437028][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 124.445944][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 124.526365][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 124.535277][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 124.724728][ T5984] atomic_op ffff888102a64928 conn xmit_atomic 0000000000000000 [ 124.743979][ T5984] program syz.3.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.807777][ T5983] loop5: detected capacity change from 0 to 512 [ 124.901430][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 124.912715][ T5990] lo speed is unknown, defaulting to 1000 [ 124.930221][ T5983] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.558: ea_inode file size=0 entry size=6 [ 124.943208][ T5983] EXT4-fs (loop5): 1 orphan inode deleted [ 124.949487][ T5983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.017342][ T5990] lo speed is unknown, defaulting to 1000 [ 125.023453][ T5990] lo speed is unknown, defaulting to 1000 [ 125.236206][ T5978] syz.5.558 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 125.247140][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.5.558 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.247170][ T5978] Tainted: [W]=WARN [ 125.247176][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.247187][ T5978] Call Trace: [ 125.247194][ T5978] [ 125.247201][ T5978] __dump_stack+0x1d/0x30 [ 125.247223][ T5978] dump_stack_lvl+0xe8/0x140 [ 125.247246][ T5978] dump_stack+0x15/0x1b [ 125.247265][ T5978] dump_header+0x81/0x220 [ 125.247283][ T5978] oom_kill_process+0x342/0x400 [ 125.247320][ T5978] out_of_memory+0x979/0xb80 [ 125.247352][ T5978] try_charge_memcg+0x610/0xa10 [ 125.247388][ T5978] charge_memcg+0x51/0xc0 [ 125.247414][ T5978] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 125.247486][ T5978] __read_swap_cache_async+0x17b/0x2d0 [ 125.247508][ T5978] swap_cluster_readahead+0x262/0x3c0 [ 125.247570][ T5978] swapin_readahead+0xde/0x6f0 [ 125.247589][ T5978] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 125.247681][ T5978] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 125.247716][ T5978] ? __rcu_read_unlock+0x4f/0x70 [ 125.247792][ T5978] ? swap_cache_get_folio+0x277/0x280 [ 125.247815][ T5978] do_swap_page+0x2ae/0x2370 [ 125.247838][ T5978] ? css_rstat_updated+0xb7/0x240 [ 125.247859][ T5978] ? __pfx_default_wake_function+0x10/0x10 [ 125.247955][ T5978] handle_mm_fault+0x9a5/0x2be0 [ 125.248126][ T5978] ? vma_start_read+0x141/0x1f0 [ 125.248165][ T5978] do_user_addr_fault+0x630/0x1080 [ 125.248189][ T5978] ? fpregs_restore_userregs+0xad/0x1d0 [ 125.248283][ T5978] ? switch_fpu_return+0xe/0x20 [ 125.248380][ T5978] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 125.248475][ T5978] exc_page_fault+0x62/0xa0 [ 125.248582][ T5978] asm_exc_page_fault+0x26/0x30 [ 125.248600][ T5978] RIP: 0033:0x7fa64ba55918 [ 125.248686][ T5978] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d aa 24 38 00 00 0f 8e 09 fe ff ff e8 d3 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 [ 125.248702][ T5978] RSP: 002b:00007ffee75bebf0 EFLAGS: 00010202 [ 125.248717][ T5978] RAX: 000000000001e91e RBX: 00007fa64bdd7da0 RCX: 000000000001e848 [ 125.248757][ T5978] RDX: 00000000000000d6 RSI: 00007ffee75bebd0 RDI: 0000000000000001 [ 125.248771][ T5978] RBP: 00007fa64bdd7da0 R08: 000000000ccff197 R09: 7fffffffffffffff [ 125.248785][ T5978] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000001e9fe [ 125.248797][ T5978] R13: 00007fa64bdd6090 R14: ffffffffffffffff R15: 00007ffee75bed00 [ 125.248851][ T5978] [ 125.248859][ T5978] memory: usage 307200kB, limit 307200kB, failcnt 786 [ 125.476379][ T6007] gtp0: entered promiscuous mode [ 125.477725][ T5978] memory+swap: usage 307788kB, limit 9007199254740988kB, failcnt 0 [ 125.508232][ T5978] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 125.515526][ T5978] Memory cgroup stats for /syz5: [ 125.515761][ T5978] cache 20480 [ 125.524077][ T5978] rss 0 [ 125.526826][ T5978] shmem 0 [ 125.529734][ T5978] mapped_file 0 [ 125.533221][ T5978] dirty 0 [ 125.536143][ T5978] writeback 20480 [ 125.539772][ T5978] workingset_refault_anon 214 [ 125.544440][ T5978] workingset_refault_file 0 [ 125.548921][ T5978] swap 602112 [ 125.552214][ T5978] swapcached 28672 [ 125.555911][ T5978] pgpgin 61869 [ 125.559325][ T5978] pgpgout 61854 [ 125.562799][ T5978] pgfault 45659 [ 125.566305][ T5978] pgmajfault 95 [ 125.569797][ T5978] inactive_anon 28672 [ 125.573802][ T5978] active_anon 0 [ 125.577251][ T5978] inactive_file 28672 [ 125.581281][ T5978] active_file 4096 [ 125.585002][ T5978] unevictable 0 [ 125.588530][ T5978] hierarchical_memory_limit 314572800 [ 125.593926][ T5978] hierarchical_memsw_limit 9223372036854771712 [ 125.600088][ T5978] total_cache 20480 [ 125.603881][ T5978] total_rss 0 [ 125.607152][ T5978] total_shmem 0 [ 125.610905][ T5978] total_mapped_file 0 [ 125.615110][ T5978] total_dirty 0 [ 125.618577][ T5978] total_writeback 20480 [ 125.622753][ T5978] total_workingset_refault_anon 214 [ 125.627940][ T5978] total_workingset_refault_file 0 [ 125.633003][ T5978] total_swap 602112 [ 125.636851][ T5978] total_swapcached 28672 [ 125.641125][ T5978] total_pgpgin 61869 [ 125.645002][ T5978] total_pgpgout 61854 [ 125.648977][ T5978] total_pgfault 45659 [ 125.652986][ T5978] total_pgmajfault 95 [ 125.657001][ T5978] total_inactive_anon 28672 [ 125.661527][ T5978] total_active_anon 0 [ 125.665542][ T5978] total_inactive_file 28672 [ 125.670049][ T5978] total_active_file 4096 [ 125.674286][ T5978] total_unevictable 0 [ 125.676343][ T6009] loop4: detected capacity change from 0 to 8192 [ 125.678258][ T5978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.558,pid=5978,uid=0 [ 125.699098][ T5978] Memory cgroup out of memory: Killed process 5978 (syz.5.558) total-vm:93956kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 125.761270][ T29] kauditd_printk_skb: 1381 callbacks suppressed [ 125.761284][ T29] audit: type=1400 audit(1762328842.445:13811): avc: denied { bind } for pid=6008 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.799579][ T6009] netlink: 536 bytes leftover after parsing attributes in process `syz.4.567'. [ 125.838716][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.853282][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.567'. [ 125.893570][ T6013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6013 comm=syz.0.580 [ 125.913629][ T29] audit: type=1400 audit(1762328842.465:13812): avc: denied { setopt } for pid=6008 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.933145][ T29] audit: type=1400 audit(1762328842.465:13813): avc: denied { bind } for pid=6008 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.953028][ T29] audit: type=1400 audit(1762328842.475:13814): avc: denied { setopt } for pid=6008 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.972931][ T29] audit: type=1400 audit(1762328842.475:13815): avc: denied { write } for pid=6008 comm="syz.4.567" path="socket:[13561]" dev="sockfs" ino=13561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.996669][ T29] audit: type=1326 audit(1762328842.495:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae0fcf6c9 code=0x7ffc0000 [ 126.020117][ T29] audit: type=1326 audit(1762328842.495:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae0fcf6c9 code=0x7ffc0000 [ 126.043510][ T29] audit: type=1326 audit(1762328842.495:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcae0fcf6c9 code=0x7ffc0000 [ 126.066841][ T29] audit: type=1326 audit(1762328842.495:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae0fcf6c9 code=0x7ffc0000 [ 126.090245][ T29] audit: type=1326 audit(1762328842.495:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae0fcf6c9 code=0x7ffc0000 [ 126.203294][ T6017] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.239769][ T6011] loop3: detected capacity change from 0 to 8192 [ 126.302743][ T6027] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 126.320212][ T6013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6013 comm=syz.0.580 [ 126.333146][ T6027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.333438][ T6013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6013 comm=syz.0.580 [ 126.368322][ T6034] Bluetooth: hci1: Frame reassembly failed (-90) [ 126.376964][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 126.390433][ T6027] veth3: entered promiscuous mode [ 126.413536][ T6027] bond3: (slave veth3): Enslaving as an active interface with a down link [ 126.475079][ T6043] macvtap0: refused to change device tx_queue_len [ 126.481044][ T6036] serio: Serial port ptm2 [ 126.538114][ T6044] loop5: detected capacity change from 0 to 1024 [ 126.553785][ T6044] EXT4-fs: Ignoring removed orlov option [ 126.559586][ T6044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.571655][ T6044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.683868][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.308059][ T6128] loop5: detected capacity change from 0 to 512 [ 127.405483][ T6130] loop0: detected capacity change from 0 to 2048 [ 127.641276][ T6127] syz.5.583 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 127.655386][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.5.583 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.655420][ T6127] Tainted: [W]=WARN [ 127.655427][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.655440][ T6127] Call Trace: [ 127.655446][ T6127] [ 127.655532][ T6127] __dump_stack+0x1d/0x30 [ 127.655583][ T6127] dump_stack_lvl+0xe8/0x140 [ 127.655602][ T6127] dump_stack+0x15/0x1b [ 127.655694][ T6127] dump_header+0x81/0x220 [ 127.655786][ T6127] oom_kill_process+0x342/0x400 [ 127.655819][ T6127] out_of_memory+0x979/0xb80 [ 127.655907][ T6127] try_charge_memcg+0x610/0xa10 [ 127.655940][ T6127] obj_cgroup_charge_pages+0xa6/0x150 [ 127.655962][ T6127] __memcg_kmem_charge_page+0x9f/0x170 [ 127.655985][ T6127] __alloc_frozen_pages_noprof+0x188/0x360 [ 127.656047][ T6127] alloc_pages_mpol+0xb3/0x260 [ 127.656066][ T6127] ? alloc_pages_noprof+0x61/0x130 [ 127.656087][ T6127] alloc_pages_noprof+0x90/0x130 [ 127.656110][ T6127] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 127.656194][ T6127] __kvmalloc_node_noprof+0x483/0x670 [ 127.656227][ T6127] ? ip_set_alloc+0x24/0x30 [ 127.656308][ T6127] ? ip_set_alloc+0x24/0x30 [ 127.656402][ T6127] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 127.656438][ T6127] ip_set_alloc+0x24/0x30 [ 127.656472][ T6127] hash_netiface_create+0x282/0x740 [ 127.656519][ T6127] ? __pfx_hash_netiface_create+0x10/0x10 [ 127.656563][ T6127] ip_set_create+0x3cc/0x970 [ 127.656589][ T6127] ? __nla_parse+0x40/0x60 [ 127.656616][ T6127] nfnetlink_rcv_msg+0x4c6/0x590 [ 127.656664][ T6127] netlink_rcv_skb+0x123/0x220 [ 127.656769][ T6127] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 127.656805][ T6127] nfnetlink_rcv+0x167/0x16c0 [ 127.656892][ T6127] ? dev_hard_start_xmit+0x1e5/0x3e0 [ 127.656927][ T6127] ? dev_hard_start_xmit+0x39b/0x3e0 [ 127.656964][ T6127] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 127.657122][ T6127] ? __dev_queue_xmit+0x1200/0x2000 [ 127.657157][ T6127] ? __dev_queue_xmit+0x182/0x2000 [ 127.657189][ T6127] ? ref_tracker_free+0x37d/0x3e0 [ 127.657310][ T6127] ? __netlink_deliver_tap+0x4dc/0x500 [ 127.657380][ T6127] netlink_unicast+0x5c0/0x690 [ 127.657428][ T6127] netlink_sendmsg+0x58b/0x6b0 [ 127.657453][ T6127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.657533][ T6127] __sock_sendmsg+0x145/0x180 [ 127.657580][ T6127] ____sys_sendmsg+0x31e/0x4e0 [ 127.657620][ T6127] ___sys_sendmsg+0x17b/0x1d0 [ 127.657654][ T6127] __x64_sys_sendmsg+0xd4/0x160 [ 127.657674][ T6127] x64_sys_call+0x191e/0x3000 [ 127.657722][ T6127] do_syscall_64+0xd2/0x200 [ 127.657747][ T6127] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.657798][ T6127] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.657831][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.657850][ T6127] RIP: 0033:0x7fa64bb7f6c9 [ 127.657914][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.657934][ T6127] RSP: 002b:00007fa64a59d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.657952][ T6127] RAX: ffffffffffffffda RBX: 00007fa64bdd6180 RCX: 00007fa64bb7f6c9 [ 127.657964][ T6127] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 127.657977][ T6127] RBP: 00007fa64bc01f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.657992][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.658006][ T6127] R13: 00007fa64bdd6218 R14: 00007fa64bdd6180 R15: 00007ffee75bea88 [ 127.658104][ T6127] [ 127.658112][ T6127] memory: usage 307200kB, limit 307200kB, failcnt 1063 [ 127.812164][ T6127] memory+swap: usage 307840kB, limit 9007199254740988kB, failcnt 0 [ 127.812182][ T6127] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 127.812195][ T6127] Memory cgroup stats for /syz5: [ 128.017127][ T6127] cache 4096 [ 128.025242][ T6127] rss 0 [ 128.028008][ T6127] shmem 0 [ 128.031000][ T6127] mapped_file 0 [ 128.034447][ T6127] dirty 0 [ 128.037363][ T6127] writeback 0 [ 128.040658][ T6127] workingset_refault_anon 276 [ 128.045402][ T6127] workingset_refault_file 0 [ 128.049931][ T6127] swap 655360 [ 128.053202][ T6127] swapcached 0 [ 128.056564][ T6127] pgpgin 65202 [ 128.060029][ T6127] pgpgout 65197 [ 128.063477][ T6127] pgfault 49258 [ 128.066922][ T6127] pgmajfault 137 [ 128.070497][ T6127] inactive_anon 0 [ 128.074117][ T6127] active_anon 0 [ 128.077625][ T6127] inactive_file 20480 [ 128.081614][ T6127] active_file 0 [ 128.085077][ T6127] unevictable 0 [ 128.088520][ T6127] hierarchical_memory_limit 314572800 [ 128.093902][ T6127] hierarchical_memsw_limit 9223372036854771712 [ 128.100082][ T6127] total_cache 4096 [ 128.103909][ T6127] total_rss 0 [ 128.107183][ T6127] total_shmem 0 [ 128.110653][ T6127] total_mapped_file 0 [ 128.114675][ T6127] total_dirty 0 [ 128.118130][ T6127] total_writeback 0 [ 128.121949][ T6127] total_workingset_refault_anon 276 [ 128.127146][ T6127] total_workingset_refault_file 0 [ 128.132332][ T6127] total_swap 655360 [ 128.136203][ T6127] total_swapcached 0 [ 128.140132][ T6127] total_pgpgin 65202 [ 128.144016][ T6127] total_pgpgout 65197 [ 128.147988][ T6127] total_pgfault 49258 [ 128.151979][ T6127] total_pgmajfault 137 [ 128.156031][ T6127] total_inactive_anon 0 [ 128.160190][ T6127] total_active_anon 0 [ 128.164165][ T6127] total_inactive_file 20480 [ 128.168658][ T6127] total_active_file 0 [ 128.172655][ T6127] total_unevictable 0 [ 128.176626][ T6127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.583,pid=6063,uid=0 [ 128.191214][ T6127] Memory cgroup out of memory: Killed process 6063 (syz.5.583) total-vm:98324kB, anon-rss:1136kB, file-rss:26540kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 128.224247][ T6128] EXT4-fs: error -4 creating inode table initialization thread [ 128.272558][ T6128] EXT4-fs (loop5): mount failed [ 128.320567][ T6130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.381952][ T6130] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.429870][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 128.498360][ T6144] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.585: bg 0: block 345: padding at end of block bitmap is not set [ 128.515087][ T6144] EXT4-fs (loop0): Remounting filesystem read-only [ 128.521896][ T6099] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 128.643468][ T6145] loop4: detected capacity change from 0 to 512 [ 129.041914][ T6143] syz.4.587 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 129.056010][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.4.587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.056044][ T6143] Tainted: [W]=WARN [ 129.056050][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.056062][ T6143] Call Trace: [ 129.056068][ T6143] [ 129.056076][ T6143] __dump_stack+0x1d/0x30 [ 129.056100][ T6143] dump_stack_lvl+0xe8/0x140 [ 129.056122][ T6143] dump_stack+0x15/0x1b [ 129.056213][ T6143] dump_header+0x81/0x220 [ 129.056234][ T6143] oom_kill_process+0x342/0x400 [ 129.056329][ T6143] out_of_memory+0x979/0xb80 [ 129.056399][ T6143] try_charge_memcg+0x610/0xa10 [ 129.056461][ T6143] obj_cgroup_charge_pages+0xa6/0x150 [ 129.056634][ T6143] __memcg_kmem_charge_page+0x9f/0x170 [ 129.056655][ T6143] __alloc_frozen_pages_noprof+0x188/0x360 [ 129.056815][ T6143] alloc_pages_mpol+0xb3/0x260 [ 129.056836][ T6143] alloc_pages_noprof+0x90/0x130 [ 129.056854][ T6143] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 129.056893][ T6143] __kvmalloc_node_noprof+0x483/0x670 [ 129.057026][ T6143] ? ip_set_alloc+0x24/0x30 [ 129.057056][ T6143] ? ip_set_alloc+0x24/0x30 [ 129.057085][ T6143] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 129.057171][ T6143] ip_set_alloc+0x24/0x30 [ 129.057203][ T6143] hash_netiface_create+0x282/0x740 [ 129.057267][ T6143] ? __pfx_hash_netiface_create+0x10/0x10 [ 129.057362][ T6143] ip_set_create+0x3cc/0x970 [ 129.057394][ T6143] ? __nla_parse+0x40/0x60 [ 129.057420][ T6143] nfnetlink_rcv_msg+0x4c6/0x590 [ 129.057474][ T6143] netlink_rcv_skb+0x123/0x220 [ 129.057545][ T6143] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 129.057583][ T6143] nfnetlink_rcv+0x167/0x16c0 [ 129.057657][ T6143] ? ebitmap_destroy+0x7d/0xa0 [ 129.057684][ T6143] ? security_compute_sid+0x120b/0x1290 [ 129.057786][ T6143] ? __rcu_read_unlock+0x4f/0x70 [ 129.057896][ T6143] ? security_transition_sid+0x5a/0x70 [ 129.057927][ T6143] ? _raw_spin_unlock+0x26/0x50 [ 129.057968][ T6143] ? inode_doinit_with_dentry+0x3a9/0x7a0 [ 129.057993][ T6143] ? __d_rehash+0x139/0x1f0 [ 129.058012][ T6143] ? _raw_spin_unlock+0x26/0x50 [ 129.058041][ T6143] ? __d_add+0x3bd/0x4a0 [ 129.058061][ T6143] ? should_fail_ex+0x30/0x280 [ 129.058082][ T6143] ? selinux_nlmsg_lookup+0x99/0x890 [ 129.058108][ T6143] ? __rcu_read_unlock+0x34/0x70 [ 129.058207][ T6143] ? __netlink_lookup+0x266/0x2a0 [ 129.058247][ T6143] netlink_unicast+0x5c0/0x690 [ 129.058277][ T6143] netlink_sendmsg+0x58b/0x6b0 [ 129.058297][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.058318][ T6143] __sock_sendmsg+0x145/0x180 [ 129.058352][ T6143] ____sys_sendmsg+0x31e/0x4e0 [ 129.058394][ T6143] ___sys_sendmsg+0x17b/0x1d0 [ 129.058426][ T6143] __x64_sys_sendmsg+0xd4/0x160 [ 129.058448][ T6143] x64_sys_call+0x191e/0x3000 [ 129.058514][ T6143] do_syscall_64+0xd2/0x200 [ 129.058531][ T6143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.058558][ T6143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 129.058609][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.058633][ T6143] RIP: 0033:0x7f65dd83f6c9 [ 129.058651][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.058744][ T6143] RSP: 002b:00007f65dc265038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.058765][ T6143] RAX: ffffffffffffffda RBX: 00007f65dda96180 RCX: 00007f65dd83f6c9 [ 129.058778][ T6143] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 129.058791][ T6143] RBP: 00007f65dd8c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 129.058806][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.058819][ T6143] R13: 00007f65dda96218 R14: 00007f65dda96180 R15: 00007ffc10fa8e98 [ 129.058906][ T6143] [ 129.058914][ T6143] memory: usage 307200kB, limit 307200kB, failcnt 1804 [ 129.211677][ T6149] __nla_validate_parse: 3 callbacks suppressed [ 129.211693][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 129.213537][ T6143] memory+swap: usage 307744kB, limit 9007199254740988kB, failcnt 0 [ 129.359599][ T6152] loop5: detected capacity change from 0 to 512 [ 129.367734][ T6143] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 129.367752][ T6143] Memory cgroup stats for /syz4: [ 129.462330][ T6143] cache 8192 [ 129.470513][ T6143] rss 4096 [ 129.473537][ T6143] shmem 0 [ 129.476470][ T6143] mapped_file 4096 [ 129.480198][ T6143] dirty 4096 [ 129.483377][ T6143] writeback 0 [ 129.486687][ T6143] workingset_refault_anon 422 [ 129.491378][ T6143] workingset_refault_file 1871 [ 129.496140][ T6143] swap 557056 [ 129.499415][ T6143] swapcached 102400 [ 129.503277][ T6143] pgpgin 130841 [ 129.506753][ T6143] pgpgout 130806 [ 129.510351][ T6143] pgfault 105935 [ 129.513887][ T6143] pgmajfault 209 [ 129.517418][ T6143] inactive_anon 102400 [ 129.521519][ T6143] active_anon 0 [ 129.524967][ T6143] inactive_file 40960 [ 129.528941][ T6143] active_file 0 [ 129.532411][ T6143] unevictable 0 [ 129.535879][ T6143] hierarchical_memory_limit 314572800 [ 129.541246][ T6143] hierarchical_memsw_limit 9223372036854771712 [ 129.547380][ T6143] total_cache 8192 [ 129.551476][ T6143] total_rss 4096 [ 129.555085][ T6143] total_shmem 0 [ 129.558530][ T6143] total_mapped_file 4096 [ 129.563158][ T6143] total_dirty 4096 [ 129.566893][ T6143] total_writeback 0 [ 129.570721][ T6143] total_workingset_refault_anon 422 [ 129.575901][ T6143] total_workingset_refault_file 1871 [ 129.581277][ T6143] total_swap 557056 [ 129.585073][ T6143] total_swapcached 102400 [ 129.589383][ T6143] total_pgpgin 130841 [ 129.593429][ T6143] total_pgpgout 130806 [ 129.597494][ T6143] total_pgfault 105935 [ 129.601621][ T6143] total_pgmajfault 209 [ 129.605674][ T6143] total_inactive_anon 102400 [ 129.610274][ T6143] total_active_anon 0 [ 129.614336][ T6143] total_inactive_file 40960 [ 129.618819][ T6143] total_active_file 0 [ 129.622899][ T6143] total_unevictable 0 [ 129.625472][ T6154] C: renamed from team_slave_0 [ 129.626936][ T6143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.587,pid=6136,uid=0 [ 129.646281][ T6143] Memory cgroup out of memory: Killed process 6136 (syz.4.587) total-vm:98324kB, anon-rss:1136kB, file-rss:26536kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 129.664434][ T6154] netlink: 152 bytes leftover after parsing attributes in process `syz.1.591'. [ 129.677621][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.711033][ T6152] EXT4-fs (loop5): orphan cleanup on readonly fs [ 129.729571][ T6152] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.590: bad orphan inode 13 [ 129.791150][ T6145] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 129.791205][ T6145] EXT4-fs: failed to create workqueue [ 129.791361][ T6152] ext4_test_bit(bit=12, block=18) = 1 [ 129.800728][ T6145] EXT4-fs (loop4): mount failed [ 129.816361][ T6152] is_bad_inode(inode)=0 [ 129.820534][ T6152] NEXT_ORPHAN(inode)=2130706432 [ 129.825366][ T6152] max_ino=32 [ 129.828545][ T6152] i_nlink=1 [ 129.852243][ T6157] loop0: detected capacity change from 0 to 1024 [ 129.859156][ T6157] EXT4-fs: Ignoring removed orlov option [ 129.901995][ T6152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.904727][ T6157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.977628][ T6164] loop3: detected capacity change from 0 to 4096 [ 129.998625][ T6152] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 129.998848][ T6164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.017597][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 130.029995][ T6152] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.590: bg 0: block 248: padding at end of block bitmap is not set [ 130.045276][ T6152] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.590: Failed to acquire dquot type 1 [ 130.057178][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.067105][ T6152] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.108456][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.590'. [ 130.117488][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.590'. [ 130.162363][ T6173] loop3: detected capacity change from 0 to 8192 [ 130.180839][ T6157] ================================================================== [ 130.188945][ T6157] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / redirty_tail_locked [ 130.197894][ T6157] [ 130.200207][ T6157] read-write to 0xffff888119ab4a50 of 4 bytes by task 6171 on cpu 0: [ 130.208264][ T6157] redirty_tail_locked+0x56/0x280 [ 130.213300][ T6157] writeback_single_inode+0x224/0x3f0 [ 130.218678][ T6157] sync_inode_metadata+0x5b/0x90 [ 130.223634][ T6157] generic_buffers_fsync_noflush+0xd9/0x120 [ 130.229546][ T6157] ext4_sync_file+0x1ab/0x690 [ 130.234221][ T6157] vfs_fsync_range+0x10d/0x130 [ 130.238991][ T6157] ext4_buffered_write_iter+0x34f/0x3c0 [ 130.244534][ T6157] ext4_file_write_iter+0x387/0xf60 [ 130.249730][ T6157] iter_file_splice_write+0x666/0xa60 [ 130.255082][ T6157] direct_splice_actor+0x156/0x2a0 [ 130.260171][ T6157] splice_direct_to_actor+0x312/0x680 [ 130.265521][ T6157] do_splice_direct+0xda/0x150 [ 130.270263][ T6157] do_sendfile+0x380/0x650 [ 130.274663][ T6157] __x64_sys_sendfile64+0x105/0x150 [ 130.279845][ T6157] x64_sys_call+0x2bb4/0x3000 [ 130.284520][ T6157] do_syscall_64+0xd2/0x200 [ 130.289005][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.294884][ T6157] [ 130.297189][ T6157] read to 0xffff888119ab4a50 of 4 bytes by task 6157 on cpu 1: [ 130.304706][ T6157] generic_buffers_fsync_noflush+0x80/0x120 [ 130.310582][ T6157] ext4_sync_file+0x1ab/0x690 [ 130.315236][ T6157] vfs_fsync_range+0x10d/0x130 [ 130.319982][ T6157] ext4_buffered_write_iter+0x34f/0x3c0 [ 130.325506][ T6157] ext4_file_write_iter+0x387/0xf60 [ 130.330683][ T6157] iter_file_splice_write+0x666/0xa60 [ 130.336034][ T6157] direct_splice_actor+0x156/0x2a0 [ 130.341126][ T6157] splice_direct_to_actor+0x312/0x680 [ 130.346482][ T6157] do_splice_direct+0xda/0x150 [ 130.351226][ T6157] do_sendfile+0x380/0x650 [ 130.355629][ T6157] __x64_sys_sendfile64+0x105/0x150 [ 130.360808][ T6157] x64_sys_call+0x2bb4/0x3000 [ 130.365462][ T6157] do_syscall_64+0xd2/0x200 [ 130.369943][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.375815][ T6157] [ 130.378117][ T6157] value changed: 0x00000072 -> 0x00000002 [ 130.383983][ T6157] [ 130.386282][ T6157] Reported by Kernel Concurrency Sanitizer on: [ 130.392410][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.0.588 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.403581][ T6157] Tainted: [W]=WARN [ 130.407360][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.417395][ T6157] ================================================================== [ 130.451028][ T6170] serio: Serial port ptm1 [ 130.490109][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.507599][ T6176] loop4: detected capacity change from 0 to 1024 [ 130.524229][ T6176] EXT4-fs: Ignoring removed orlov option [ 130.530014][ T6176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.554361][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.569424][ T6176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.697261][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.