last executing test programs: 6m53.947711779s ago: executing program 0 (id=71): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 6m53.786725936s ago: executing program 0 (id=72): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b337d9cc2c86df42", "7d05dacec51d55ff3c13567ddffb04317d0256f6506fca0a5f49cc3c88081372", "de2925ea", "0c2ae32fb6d80f6a"}, 0x38) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000)) io_setup(0x239f, &(0x7f0000000380)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000035c0)={'sit0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000004f80)={'syztnl0\x00', &(0x7f0000004f00)={'syztnl0\x00', 0x0, 0x4, 0xfa, 0xc0, 0x9, 0x40, @local, @local, 0x0, 0x20, 0x2eba, 0x81}}) 6m52.502824424s ago: executing program 0 (id=79): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r3, 0x0, 0xc001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x8000}, 0x114905, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m50.376422325s ago: executing program 0 (id=82): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = gettid() prlimit64(r2, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xfe, 0x2}, &(0x7f0000000100)) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448f0, 0x0) 6m49.173514568s ago: executing program 0 (id=84): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000002a40)=""/4042, 0xfca}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000d00)=""/261, 0x105}, {&(0x7f0000000240)=""/167, 0xa7}, {&(0x7f0000000940)=""/96, 0x60}, {&(0x7f0000000f80)=""/71, 0x47}, {&(0x7f0000000e80)=""/232, 0xe8}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/193, 0xc1}], 0xc}, 0x0) 6m49.085491253s ago: executing program 0 (id=85): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x800084, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x3, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 6m34.014305962s ago: executing program 32 (id=85): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x800084, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x3, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 15.550757846s ago: executing program 2 (id=3214): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x40844) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x9, 0x6}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000e80)={&(0x7f00000003c0), 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d80)=""/205, 0xcd}, 0x42) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x4, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af3653c001a0008286d0e3af93a08ae0017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e7860400c80004", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc080) 15.245946182s ago: executing program 2 (id=3217): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001040)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4008800) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14.194808557s ago: executing program 2 (id=3221): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 13.977263579s ago: executing program 2 (id=3223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe70, 0x1}}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5402, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) 13.129755933s ago: executing program 2 (id=3227): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r0 = add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket(0x1a, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001400)="83a01293", 0x4}], 0x1}, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) recvmmsg(r2, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) unshare(0x24020400) getresuid(0x0, &(0x7f0000000400), 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r5, &(0x7f0000000200)={&(0x7f0000000300)=@in={0x2, 0x4e23, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x51, 0xdffffff7}}], 0x18}, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xf7fffff8, 0xf21f96ab, 0x7, 0x9, 0x2, "000d0000001a5b0800000d00000000000000cb", 0xeeb0, 0x6}) 12.247028889s ago: executing program 2 (id=3231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private=0xa010100, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x3b}, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000000000, 0xfffffffffffffffd}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x10) 12.197495312s ago: executing program 33 (id=3231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private=0xa010100, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x3b}, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000000000, 0xfffffffffffffffd}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x10) 6.859694621s ago: executing program 1 (id=3257): r0 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000005940)={0x0, 0x0, &(0x7f0000005900)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x4090) 6.552901907s ago: executing program 1 (id=3258): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0x8, 0x1}, 0x800, 0x60, &(0x7f0000000280)="fc9f845283461cda5d1c45dc8fc79fe36b926a1d457760acf2", 0x19, 0x5, 0x0, 0x0, 0x74, 0x4, &(0x7f0000000340)="2d201d"}) 6.322818759s ago: executing program 1 (id=3260): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x2e, 0x30]}}, 0x0, 0x38}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 6.248760623s ago: executing program 1 (id=3261): r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) 6.187625056s ago: executing program 3 (id=3262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x10, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0x2, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0x896, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x22020400) bind$can_raw(r9, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000002c0)=""/182, 0xb6, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 5.965261118s ago: executing program 1 (id=3263): r0 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x2881, 0x10, 0x0, 0x59}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404e084}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x25, &(0x7f0000000000)="01", 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 5.858756363s ago: executing program 1 (id=3264): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) write$cgroup_type(r0, &(0x7f0000000040), 0x9) 4.702793814s ago: executing program 3 (id=3274): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x23) r1 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x55d81000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') write(r1, 0x0, 0x0) 4.077528097s ago: executing program 6 (id=3277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40014) 3.962676523s ago: executing program 6 (id=3278): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b1600000000000000004a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001a00a800327e16e64985c7b131fe0b327937e20ee515ea00682c0000"], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff327310ffff0000000000000002"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.931144077s ago: executing program 3 (id=3279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb60400", 0xf5}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a8", 0xe}, {&(0x7f0000000400)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819aca6122c350602553d81b6eacf6ce927868337808dde804a048fd8696e524b2934126c443ce93d82e931eb9918", 0x6a}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea", 0x149}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c5", 0xc5}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962", 0xad}, {&(0x7f0000000040)="7542473782798be019c2", 0xa}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.895465508s ago: executing program 6 (id=3280): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x20000830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000000c00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfc\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\xec\xb3\xd8\x96\xbcq\xe6\xb3\xbc\xb9\xf3N\xb4f\x168\xaf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x8a[^\xaa\x0e\xe7\xa4\x8dE\xeaj\xa0\x83\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x997\xb5W\x8c<\x89#\xaf\xce\xe8\xb7-\xe3~4\xe6\xdc\x96\xa7\xa3\xbd;\xd6\xef.\x19\xdcV\x83Zir\tK\xc2&@o\xc1\xe0\xf2/\vS7U\xe5\x95\xe7&\xf5\xdd\x85K6\xc0\xcb\xa3\xcf\xff\xf5\xc3\xf3]*n\x88\x82\xc9a(\xa7\xe8\x88\x12\x9e}\xc5\xe9B\xeb\xa5\np\x10\xbc\xf4]\xbc\xcf\xf8\xc5\x97A\xd6A\xf1s\xf0\xed\x8azX?\x97\x92\x90\xbb\xa7\x94\xd1Z\n\xbb[\x04\x16\xeaJ\x9ciJg\x05\xe2q)\xd0\xc6]\x88\x83\xf4\x95\xb8\x80e/XB\xb1\x10\xe0W\xd1\x99\x06S\xf4\x05\xa9\xad\xe2;X\xb5s\x02\tG\xa5\xb02\x8e\xd0\xf1\x96en\xb7Ga\xc5\xd2\xefP\x993\xcak\xf0\x1c\xa9\x8dj7>\xcfs\xa1\x1c\xb5j*m\x99X\x10\xae\x84\xe9\x9b?\x93dI\xf1yEQ\x187y\xe3\xbf\xb9f\xd3S022\xa2o\xd59\xb7\xa1F\x01\x1a\x18\x91\xd3\xb3\r\xd5n.T_\xcc3:\xdb\x00\xbb\xd0YH\xc9\xd3 \xd4\xdav\v\x1e|6k\xbf\xe2r\xa5\x00\xc0\xbf\x01\xc4S\xe5\xb2\xc9\xc6\x93/l\xc13=7\x8e\x9e', 0x4) fcntl$addseals(r0, 0x409, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) brk(0xfffffffffffffffd) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0x9, 0x8}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0x9, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000008400000000000000061501012a000600"], 0x18, 0x40}, 0x6008045) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.8606623s ago: executing program 3 (id=3281): unshare(0x14030400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_config_ext={0x4, 0x1}, 0x100000, 0x2, 0xfffffffe, 0x1, 0xfffffffffffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000680)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb110018000000000000000c0000005bfffffff721bb"], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2}, 0x28) perf_event_open(0x0, 0x0, 0x7, r1, 0x4) read(0xffffffffffffffff, &(0x7f0000001180)=""/4096, 0x1000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB=',cache=loose,trans=f']) syz_open_dev$sg(0x0, 0x0, 0x802) syz_read_part_table(0x59b, &(0x7f0000000000)="$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") 2.66956313s ago: executing program 4 (id=3283): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) migrate_pages(r1, 0x5, &(0x7f0000000240)=0xc, &(0x7f0000000280)=0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x1, @perf_bp={&(0x7f0000000140), 0xd}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='net/ptype\x00', &(0x7f0000000100)="b435d4934e5da93c4063078fdb25fdd6615f2f83d18b4720e1623123f11c88086d151c6ee6", 0x25) unshare(0x48040080) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xa, {"a2e3ad214fc752f91b29090955f70e0dd038e7ff7fc6e5539b3266078b089b3b08384409089020878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b333b0d07680936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0afc9397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6258742317662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76ccc2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2e57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849d11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f9d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f0712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1ccced94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xff04}}, 0x1006) 2.620758093s ago: executing program 5 (id=3284): r0 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000005940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005900)={&(0x7f0000002040)=@delchain={0x1828, 0x65, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x667047262bf81873}, {0x6, 0x1003a}, {0xb, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x17f8, 0x2, [@TCA_CGROUP_ACT={0x17f0, 0x1, [@m_xt={0x1bc, 0x15, 0x0, 0x0, {{0x7}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc5, 0x6, {0x3, 'filter\x00', 0x4, 0x7, "c8d3b5c8491c258f892ab0eebfed202229f28e27ac54e294154a69208c80c708b9fa175175f55f37ed167921c407c32c9728c187f082960cfb69e507c93b6197457314955bace519dab6e432362f0af0881f6570c2669eb40b6d99fe098b11848cd16794ef9014ff56c81e08c6d415dded5cfafd37effd5e817c57e28e1f4a06eab802cd896690a3401b8a506c37f88ae849acd1949e5a714c7c06"}}, @TCA_IPT_HOOK={0x8}]}, {0xc2, 0x6, "95f70897c94fc7d8fc35d7d772ef3f88d7133005e4415fbd09a2abfdb612157ada0f800cc6a84a641715ee336a0c7adfe85cb68abad1de7e370e3d64b45df7b29b48a243d031ed81f1a0b33182733cca1774cec9e8e12bc85bc25b49d57e8b3615ec54a31a2a70b8fe1b4e4926359c91a0242b9f4e8084e93b075952d0d165d64e41c89a8ae17802fdd77af8ddbc55b35f9bf74b9985b173c603b0560490f3f55b3566d4d294ae1fa8e7aa5377eb9ccc404f7ff2915b2f6efed88b9f70bc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x1038, 0x12, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x11c, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x2, 0x4, 0xffffffff, 0x6}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}]}, {0xce, 0x6, "fb460c0e991b553dd8d724207111a7e4c6bb6785a3891c5b56e65c40d0a23d6cd4ae43d3096d1d23533874a8362571da4f0132e3ce164ab46bd28b31383a6ea3c02eb1bf05004de7500cbcd09ced2600f8521723eff5e3d7e777220a34fab5542c9adf2a926b074e535238b63abc88d7dcf8ea579354cb448f1cf0227fb769f3a461991a9bd4c6293c43f7c41dc954bfb54757797c79a9a1cf4ff48a5201eb9ab341b239e166607fdc7d1e33d8732cc344b29ce403a26748d60fb4a4d279264ccf6097d9dfdf975ffe07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x104, 0x2, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x7, 0x5, 0x1ff, 0x10001}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x8a, 0x6, "f3a3206caf54627a517a9db50db39b5825f3461fb87b42ffe1c748904fb6e56037560d44897533acdb91f90d6bcf0b53427b29f5973b26b1c6eea1fc7fe71cf09970572f3c13458363e7978567ac52d01336a42053efb2a7c3ba7ab38f0571383fb1a419974023e98448dab4b95e317ecf6d84bb1bc7dfe7a95ae2ffc57d24b5f2fd490dbc58"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x118, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fff}]}, {0xd1, 0x6, "a53de34d5f13c8f5a4a49de8a410dd9336035d51ab89a5aff42a95deae0a3f5064fa10bc6e549b9a1db013d3d91ab5fb7d25d12df193933e6f6b875ae70e317368fdfc2aeafd0c86ef58f0ef8c2bc7155d541f9f1fb57027f6071c1cc8ab0e18bcc837e8df6aac9fae91ae50d8396b4493ceea41d970281e416274c059621fe25ccd18526a1098e48d3fb7f6d3d112f4b2f5ab0a876f5fa25e5e40aaf630bb3019cd5b2f52d6c3932c3323991e9a46594beef7ae35377cb8e03ecada41f714ec4754c3e4a08520080ad5068c7f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0xfe23b377d06d7ecf}}}}, @m_skbmod={0x14c, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfbe5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffd}]}, {0xf0, 0x6, "9556f51e4ceaa61ddf65e89f79b70b514b012fa500cc3a2f1212f3e1ac3dd49a1bbe1f6705266ceada5dc21c92c1e928a9b7af6432249611fe51d47b51e25d2872c9c70a0255fcd57897d4b6173fbe15fddfcfbfeea27a1e348ba6917946ae11e582e070aec59933d66acd601dacf10a8186d6af4e1411d67a3d3c593d55bfdab46b84336b63670cabc6699b21e217d5a85d19315ac0f720398ff32d1d536d525195f916553d97502fec494c4dd7f11b407a26df6ea8ad4947b8650dae952590f2a491a9abc108cab1e60ea187e894185d8832421afb7d320d19a019fbd63e931354e1f35cc16f3bedf6f0bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x174, 0x1b, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4f7, 0x7, 0x7, 0x582, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x65, 0x5, 0x2, 0x7, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0xffffffffeffffff8, 0x10, 0xd}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xa01a, 0x2, 0x123, 0x2000000e}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5a9, 0x2, 0x0, 0xacc8, 0xa}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x20000000, 0x9, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x7, 0x7fffffff, 0x9}}}]}, {0x66, 0x6, "52881fd1ac1562e2990f3a80fb348aaa7545cd495550d70f6dc4426e3fcdd122434234a1a4ddf500b1e0facc808eb6e48f61d9ffe8f0b2e2390dd43f7cd40e7bee85aa7522efda02d145ce1568c2e4a59eee3fd9a705b6d596a3bde3ba5ce9b3e77b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x1828}, 0x1, 0x0, 0x0, 0x8000000}, 0x4090) 2.443478412s ago: executing program 3 (id=3285): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) migrate_pages(r1, 0x5, &(0x7f0000000240)=0xc, &(0x7f0000000280)=0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x1, @perf_bp={&(0x7f0000000140), 0xd}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x48040080) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xa, {"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", 0xff04}}, 0x1006) 1.370471318s ago: executing program 5 (id=3286): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (fail_nth: 2) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.085857653s ago: executing program 4 (id=3287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40014) 771.750419ms ago: executing program 4 (id=3288): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x40844) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x9, 0x6}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000e80)={&(0x7f00000003c0), 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d80)=""/205, 0xcd}, 0x42) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x4, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af3653c001a0008286d0e3af93a08ae0017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e7860400c80004000300c5bb5b64f69853", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc080) 771.410839ms ago: executing program 5 (id=3289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x3, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, 0x0}, 0x4005) 695.347703ms ago: executing program 3 (id=3290): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) fsopen(&(0x7f0000000300)='proc\x00', 0x1) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) write$cgroup_type(r0, &(0x7f0000000040), 0x9) 677.355024ms ago: executing program 6 (id=3291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x4}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 554.710941ms ago: executing program 4 (id=3292): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) (fail_nth: 2) 142.473283ms ago: executing program 6 (id=3293): r0 = socket(0x2, 0x3, 0xff) (async) r1 = socket(0x2, 0x80805, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000340)='wrr\x00', 0x6}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0xfca2238337819a4d) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1fc, r7, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43da}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb7d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x50}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ee3a28e30d3384a75070a40dd24452b594560c7bb982"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4c, 0x3, "392b06a1a3ff6fd6db1daa195e80361c55c66ca71b3e692120f68c8303a42f94c1df2d1cca53a395e5799847cbcf579a79769d1f67fcfc1aae5053da3e0fdca9deab4bbf121bbfe2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}]}]}, 0x1fc}}, 0x4000004) (async) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0x4c, 0x30, 0xb, 0x0, 0x0, {}, [{0x38, 0x1, [@m_pedit={0x34, 0x2, 0x0, 0x0, {{0xa}, {0x8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x3, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x0, 0xc9, 0x80012d58, 0x12d5c}}, 0x44) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e27, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c880}, 0x48800) 142.057243ms ago: executing program 4 (id=3294): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0x8, 0x1}, 0x800, 0x60, &(0x7f0000000280)="fc9f845283461cda5d", 0x9, 0x5, 0x0, 0x0, 0x74, 0x4, &(0x7f0000000340)="2d201d"}) 141.741163ms ago: executing program 6 (id=3295): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000000300)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) write$cgroup_type(r0, &(0x7f0000000040), 0x9) 93.156885ms ago: executing program 5 (id=3296): creat(&(0x7f0000000340)='./file0\x00', 0x28) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 67.639756ms ago: executing program 5 (id=3297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) 646.75µs ago: executing program 5 (id=3298): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8918, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003f25adbe27"], 0x48) 0s ago: executing program 4 (id=3299): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x5, 0x8, 0x7f, 0x5, 0x40, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r3, 0x12) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000780)={r3, 0xffffffffffffffff, r6}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r9) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x7, 0x0) kernel console output (not intermixed with test programs): mit 314572800 [ 432.733832][T13670] hierarchical_memsw_limit 9223372036854771712 [ 432.733842][T13670] total_cache 0 [ 432.733850][T13670] total_rss 4096 [ 432.733886][T13670] total_shmem 0 [ 432.733895][T13670] total_mapped_file 0 [ 432.733914][T13670] total_dirty 0 [ 432.733924][T13670] total_writeback 0 [ 432.733946][T13670] total_workingset_refault_anon 61 [ 432.733979][T13670] total_workingset_refault_file 2250 [ 432.733987][T13670] total_swap 200704 [ 432.733996][T13670] total_swapcached 5570560 [ 432.734005][T13670] total_pgpgin 416135 [ 432.734014][T13670] total_pgpgout 416134 [ 432.734023][T13670] total_pgfault 387397 [ 432.734032][T13670] total_pgmajfault 29 [ 432.734041][T13670] total_inactive_anon 0 [ 432.734057][T13670] total_active_anon 4096 [ 432.734066][T13670] total_inactive_file 0 [ 432.734075][T13670] total_active_file 0 [ 432.734085][T13670] total_unevictable 0 [ 432.734094][T13670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3050,pid=13670,uid=0 [ 432.734178][T13670] Memory cgroup out of memory: Killed process 13670 (syz.5.3050) total-vm:96344kB, anon-rss:1232kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 432.874854][T13705] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3062'. [ 432.874875][T13705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3062'. [ 432.996615][T13712] tipc: Failed to obtain node identity [ 432.996630][T13712] tipc: Enabling of bearer rejected, failed to enable media [ 432.997476][ T28] audit: type=1400 audit(1776805776.121:631): avc: denied { create } for pid=13706 comm="syz.3.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 433.062169][ T28] audit: type=1400 audit(1776805776.191:632): avc: denied { setopt } for pid=13706 comm="syz.3.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 433.062202][ T28] audit: type=1400 audit(1776805776.191:633): avc: denied { connect } for pid=13706 comm="syz.3.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 433.316323][T13729] loop2: detected capacity change from 0 to 512 [ 433.323220][T13724] loop5: detected capacity change from 0 to 512 [ 433.343315][T13731] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.3070'. [ 433.345286][T13729] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 433.378974][T13724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 433.469773][T13729] EXT4-fs (loop2): 1 truncate cleaned up [ 433.478119][ T28] audit: type=1400 audit(1776805776.601:634): avc: denied { map } for pid=13726 comm="syz.3.3068" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 433.479107][T13731] veth0_to_team: entered promiscuous mode [ 433.523594][T13724] EXT4-fs (loop5): 1 orphan inode deleted [ 433.533836][T13724] EXT4-fs (loop5): 1 truncate cleaned up [ 433.534556][T13729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.555189][T13724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.610475][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 433.625318][T13731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3070'. [ 433.636242][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'. [ 433.645508][T13731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.653170][T13731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.663045][T13731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.671999][T13731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.686353][T13741] loop3: detected capacity change from 0 to 256 [ 433.707423][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.724611][T13741] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 434.014112][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3074'. [ 434.343680][T13729] Cannot find del_set index 0 as target [ 434.352004][T13759] loop3: detected capacity change from 0 to 512 [ 434.459588][T13760] loop1: detected capacity change from 0 to 128 [ 434.618363][T13759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.687584][T13759] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.708951][T13759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.973013][T12896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.202519][ T28] audit: type=1400 audit(1776805778.301:635): avc: denied { create } for pid=13770 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 435.222094][ T28] audit: type=1400 audit(1776805778.301:636): avc: denied { write } for pid=13770 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 435.249062][T13773] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 435.718695][T13776] loop2: detected capacity change from 0 to 764 [ 436.034829][T13776] FAULT_INJECTION: forcing a failure. [ 436.034829][T13776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.048952][T13776] CPU: 0 UID: 0 PID: 13776 Comm: syz.2.3084 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.049051][T13776] Tainted: [W]=WARN [ 436.049059][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 436.049071][T13776] Call Trace: [ 436.049077][T13776] [ 436.049084][T13776] __dump_stack+0x1d/0x30 [ 436.049111][T13776] dump_stack_lvl+0x95/0xd0 [ 436.049216][T13776] dump_stack+0x15/0x1b [ 436.049239][T13776] should_fail_ex+0x263/0x280 [ 436.049331][T13776] should_fail+0xb/0x20 [ 436.049357][T13776] should_fail_usercopy+0x1a/0x20 [ 436.049413][T13776] strncpy_from_user+0x27/0x250 [ 436.049516][T13776] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 436.049588][T13776] do_getname+0x59/0x1c0 [ 436.049618][T13776] getname_flags+0x1d/0x30 [ 436.049643][T13776] do_sys_openat2+0x60/0x130 [ 436.049676][T13776] __x64_sys_openat+0xf2/0x120 [ 436.049776][T13776] x64_sys_call+0x1e39/0x3020 [ 436.049808][T13776] do_syscall_64+0x12c/0x3b0 [ 436.049869][T13776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.049890][T13776] RIP: 0033:0x7f8d354cc819 [ 436.049907][T13776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.049924][T13776] RSP: 002b:00007f8d33f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.049946][T13776] RAX: ffffffffffffffda RBX: 00007f8d35745fa0 RCX: 00007f8d354cc819 [ 436.050002][T13776] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 436.050081][T13776] RBP: 00007f8d33f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.050150][T13776] R10: 00000000000001fd R11: 0000000000000246 R12: 0000000000000001 [ 436.050163][T13776] R13: 00007f8d35746038 R14: 00007f8d35745fa0 R15: 00007fff24c49488 [ 436.050185][T13776] [ 436.984622][T13794] FAULT_INJECTION: forcing a failure. [ 436.984622][T13794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.009953][T13794] CPU: 0 UID: 0 PID: 13794 Comm: syz.4.3090 Tainted: G W syzkaller #0 PREEMPT(full) [ 437.009992][T13794] Tainted: [W]=WARN [ 437.010028][T13794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.010121][T13794] Call Trace: [ 437.010129][T13794] [ 437.010137][T13794] __dump_stack+0x1d/0x30 [ 437.010171][T13794] dump_stack_lvl+0x95/0xd0 [ 437.010200][T13794] dump_stack+0x15/0x1b [ 437.010266][T13794] should_fail_ex+0x263/0x280 [ 437.010301][T13794] should_fail+0xb/0x20 [ 437.010341][T13794] should_fail_usercopy+0x1a/0x20 [ 437.010395][T13794] strncpy_from_user+0x27/0x250 [ 437.010423][T13794] ? __kmalloc_cache_noprof+0x18a/0x400 [ 437.010520][T13794] __se_sys_memfd_create+0x20f/0x3b0 [ 437.010558][T13794] __x64_sys_memfd_create+0x31/0x40 [ 437.010661][T13794] x64_sys_call+0x1f22/0x3020 [ 437.010693][T13794] do_syscall_64+0x12c/0x3b0 [ 437.010722][T13794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.010834][T13794] RIP: 0033:0x7f3204e1c819 [ 437.010863][T13794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.010885][T13794] RSP: 002b:00007f320386ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 437.010911][T13794] RAX: ffffffffffffffda RBX: 0000000000000805 RCX: 00007f3204e1c819 [ 437.010925][T13794] RDX: 00007f320386eee0 RSI: 0000000000000000 RDI: 00007f3204eb2e71 [ 437.010938][T13794] RBP: 0000200000001580 R08: 00000000ffffffff R09: 0000000000000000 [ 437.011030][T13794] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 437.011042][T13794] R13: 00007f320386eee0 R14: 00007f320386eea0 R15: 0000200000000140 [ 437.011124][T13794] [ 437.015290][T13797] loop1: detected capacity change from 0 to 512 [ 437.202658][T13803] loop3: detected capacity change from 0 to 512 [ 437.211708][T13803] EXT4-fs: Ignoring removed nobh option [ 437.218258][T13797] EXT4-fs: Ignoring removed nobh option [ 437.244964][T13804] loop5: detected capacity change from 0 to 764 [ 437.357082][T13804] Symlink component flag not implemented [ 437.362795][T13804] Symlink component flag not implemented [ 437.429157][T13803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 437.458150][T13797] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 437.482226][T13803] EXT4-fs (loop3): 1 truncate cleaned up [ 437.495350][T13797] EXT4-fs (loop1): 1 truncate cleaned up [ 437.507234][T13803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.527719][T13797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.641608][T13810] loop2: detected capacity change from 0 to 512 [ 437.677232][T13810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 437.740415][T13810] EXT4-fs (loop2): 1 orphan inode deleted [ 437.771321][T13810] EXT4-fs (loop2): 1 truncate cleaned up [ 437.812503][T13810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.897167][T12896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.153292][T13824] loop2: detected capacity change from 0 to 764 [ 438.264894][T13824] Symlink component flag not implemented [ 438.266001][ T28] audit: type=1400 audit(1776805781.391:637): avc: denied { unmount } for pid=13384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 438.274982][T13824] Symlink component flag not implemented [ 438.521250][T13114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.603915][T13840] FAULT_INJECTION: forcing a failure. [ 438.603915][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 438.641050][T13844] loop3: detected capacity change from 0 to 512 [ 438.656777][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.5.3106 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.656818][T13840] Tainted: [W]=WARN [ 438.656827][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.656849][T13840] Call Trace: [ 438.656857][T13840] [ 438.656865][T13840] __dump_stack+0x1d/0x30 [ 438.657006][T13840] dump_stack_lvl+0x95/0xd0 [ 438.657035][T13840] dump_stack+0x15/0x1b [ 438.657063][T13840] should_fail_ex+0x263/0x280 [ 438.657224][T13840] should_failslab+0x8c/0xb0 [ 438.657244][T13840] __kmalloc_cache_node_noprof+0x6b/0x470 [ 438.657277][T13840] ? __get_vm_area_node+0x106/0x1d0 [ 438.657309][T13840] ? perf_cgroup_set_timestamp+0xfe/0x120 [ 438.657356][T13840] __get_vm_area_node+0x106/0x1d0 [ 438.657399][T13840] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 438.657430][T13840] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 438.657520][T13840] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 438.657551][T13840] ? cred_has_capability+0x224/0x2a0 [ 438.657581][T13840] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 438.657687][T13840] __vmalloc_noprof+0xa4/0xf0 [ 438.657711][T13840] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 438.657771][T13840] bpf_prog_alloc_no_stats+0x47/0x390 [ 438.657800][T13840] ? bpf_prog_alloc+0x2a/0x150 [ 438.657868][T13840] bpf_prog_alloc+0x3c/0x150 [ 438.657897][T13840] bpf_prog_load+0x50d/0x1030 [ 438.658009][T13840] ? security_bpf+0x2b/0x90 [ 438.658033][T13840] __sys_bpf+0x505/0x7e0 [ 438.658154][T13840] __x64_sys_bpf+0x41/0x50 [ 438.658232][T13840] x64_sys_call+0x10cb/0x3020 [ 438.658282][T13840] do_syscall_64+0x12c/0x3b0 [ 438.658398][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.658420][T13840] RIP: 0033:0x7fdbb069c819 [ 438.658436][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.658457][T13840] RSP: 002b:00007fdbaf0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.658481][T13840] RAX: ffffffffffffffda RBX: 00007fdbb0915fa0 RCX: 00007fdbb069c819 [ 438.658524][T13840] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 438.658539][T13840] RBP: 00007fdbaf0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 438.658610][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.658696][T13840] R13: 00007fdbb0916038 R14: 00007fdbb0915fa0 R15: 00007ffde1dc8368 [ 438.658716][T13840] [ 438.950166][T13840] syz.5.3106: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 438.968404][T13790] syz.1.3089 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 439.000217][T13790] CPU: 0 UID: 0 PID: 13790 Comm: syz.1.3089 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.000254][T13790] Tainted: [W]=WARN [ 439.000262][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.000339][T13790] Call Trace: [ 439.000347][T13790] [ 439.000426][T13790] __dump_stack+0x1d/0x30 [ 439.000457][T13790] dump_stack_lvl+0x95/0xd0 [ 439.000528][T13790] dump_stack+0x15/0x1b [ 439.000555][T13790] dump_header+0x80/0x240 [ 439.000582][T13790] oom_kill_process+0x295/0x350 [ 439.000605][T13790] out_of_memory+0x97d/0xb80 [ 439.000629][T13790] try_charge_memcg+0x62f/0xa10 [ 439.000672][T13790] __obj_cgroup_charge+0xc0/0x1f0 [ 439.000702][T13790] __memcg_slab_post_alloc_hook+0x4a0/0x7d0 [ 439.000758][T13790] ? bdev_getblk+0x35a/0x3f0 [ 439.000804][T13790] kmem_cache_alloc_noprof+0x1e2/0x3f0 [ 439.000829][T13790] ? alloc_buffer_head+0x35/0x1f0 [ 439.000868][T13790] alloc_buffer_head+0x35/0x1f0 [ 439.000990][T13790] folio_alloc_buffers+0x11d/0x3d0 [ 439.001022][T13790] create_empty_buffers+0x2c/0x200 [ 439.001132][T13790] __block_write_begin_int+0x1d4/0xf90 [ 439.001218][T13790] ? __ext4_mark_inode_dirty+0x2fc/0x3d0 [ 439.001258][T13790] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 439.001283][T13790] ? __list_add_valid_or_report+0x38/0xe0 [ 439.001323][T13790] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 439.001421][T13790] ? __mark_inode_dirty+0x49d/0x710 [ 439.001453][T13790] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 439.001477][T13790] block_page_mkwrite+0x183/0x300 [ 439.001556][T13790] ext4_page_mkwrite+0x835/0xad0 [ 439.001584][T13790] ? folio_unlock+0xfe/0x150 [ 439.001606][T13790] handle_mm_fault+0x1bc3/0x2e70 [ 439.001701][T13790] ? __pfx_filemap_fault+0x10/0x10 [ 439.001731][T13790] do_user_addr_fault+0x3fd/0x1050 [ 439.001862][T13790] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 439.001958][T13790] exc_page_fault+0x62/0xa0 [ 439.002031][T13790] asm_exc_page_fault+0x26/0x30 [ 439.002055][T13790] RIP: 0033:0x7fd7619b16b2 [ 439.002075][T13790] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 73 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 439.002095][T13790] RSP: 002b:00007fff1b0e64a0 EFLAGS: 00010202 [ 439.002115][T13790] RAX: 0000000000015008 RBX: 00007fd762885720 RCX: 0000000000000000 [ 439.002174][T13790] RDX: 0000001b3470f000 RSI: 0000000000000008 RDI: 00007fd762885720 [ 439.002190][T13790] RBP: 000000000000064c R08: 00007fd761d40000 R09: 00007fd761d56038 [ 439.002223][T13790] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff859aa439 [ 439.002238][T13790] R13: 00007fd761d56038 R14: 000000000000006d R15: fffffffffffeb000 [ 439.002310][T13790] ? mas_next_slot+0x199/0x8d0 [ 439.002340][T13790] [ 439.002365][T13790] memory: usage 307200kB, limit 307200kB, failcnt 415 [ 439.028795][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.5.3106 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.028848][T13840] Tainted: [W]=WARN [ 439.028855][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.028868][T13840] Call Trace: [ 439.028875][T13840] [ 439.028884][T13840] __dump_stack+0x1d/0x30 [ 439.028960][T13840] dump_stack_lvl+0x95/0xd0 [ 439.028986][T13840] dump_stack+0x15/0x1b [ 439.029080][T13840] warn_alloc+0x145/0x1c0 [ 439.029109][T13840] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 439.029135][T13840] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 439.029226][T13840] ? cred_has_capability+0x224/0x2a0 [ 439.029256][T13840] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 439.029284][T13840] __vmalloc_noprof+0xa4/0xf0 [ 439.029308][T13840] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 439.029342][T13840] bpf_prog_alloc_no_stats+0x47/0x390 [ 439.029436][T13840] ? bpf_prog_alloc+0x2a/0x150 [ 439.029462][T13840] bpf_prog_alloc+0x3c/0x150 [ 439.029488][T13840] bpf_prog_load+0x50d/0x1030 [ 439.029599][T13840] ? security_bpf+0x2b/0x90 [ 439.029656][T13840] __sys_bpf+0x505/0x7e0 [ 439.029689][T13840] __x64_sys_bpf+0x41/0x50 [ 439.029745][T13840] x64_sys_call+0x10cb/0x3020 [ 439.029785][T13840] do_syscall_64+0x12c/0x3b0 [ 439.029811][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.029834][T13840] RIP: 0033:0x7fdbb069c819 [ 439.029850][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.029869][T13840] RSP: 002b:00007fdbaf0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.029918][T13840] RAX: ffffffffffffffda RBX: 00007fdbb0915fa0 RCX: 00007fdbb069c819 [ 439.029973][T13840] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 439.029987][T13840] RBP: 00007fdbaf0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 439.030000][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.030013][T13840] R13: 00007fdbb0916038 R14: 00007fdbb0915fa0 R15: 00007ffde1dc8368 [ 439.030033][T13840] [ 439.030040][T13840] Mem-Info: [ 439.038293][T13844] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 439.058961][T13840] active_anon:10649 inactive_anon:1243 isolated_anon:0 [ 439.058961][T13840] active_file:10757 inactive_file:2843 isolated_file:0 [ 439.058961][T13840] unevictable:0 dirty:4 writeback:8 [ 439.058961][T13840] slab_reclaimable:3499 slab_unreclaimable:20275 [ 439.058961][T13840] mapped:32589 shmem:4427 pagetables:3929 [ 439.058961][T13840] sec_pagetables:0 bounce:0 [ 439.058961][T13840] kernel_misc_reclaimable:0 [ 439.058961][T13840] free:1754557 free_pcp:28912 free_cma:0 [ 439.068815][T13790] memory+swap: usage 312104kB, limit 9007199254740988kB, failcnt 0 [ 439.104171][T13840] Node 0 active_anon:42612kB inactive_anon:4972kB active_file:43088kB inactive_file:11376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130384kB dirty:124kB writeback:0kB shmem:17812kB kernel_stack:4352kB pagetables:15796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 439.106029][T13790] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 439.110562][T13840] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.110723][T13840] lowmem_reserve[]: 0 2878 7857 7857 [ 439.110755][T13840] Node 0 DMA32 free:2946980kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947344kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:0kB free_cma:0kB [ 439.110898][T13840] lowmem_reserve[]: 0 0 4978 4978 [ 439.110928][T13840] Node 0 Normal free:4060932kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42612kB inactive_anon:4972kB active_file:43088kB inactive_file:11376kB unevictable:0kB writepending:124kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:110484kB local_pcp:40216kB free_cma:0kB [ 439.111077][T13840] lowmem_reserve[]: 0 0 0 0 [ 439.111104][T13840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 439.111356][T13840] Node 0 DMA32: 5*4kB (M) [ 439.118543][T13844] EXT4-fs (loop3): 1 orphan inode deleted [ 439.123726][T13840] 2*8kB [ 439.134265][T13844] EXT4-fs (loop3): 1 truncate cleaned up [ 439.140120][T13840] (M) [ 439.163257][T13844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.166552][T13790] Memory cgroup stats for [ 439.179523][T13840] 4*16kB [ 439.189702][T13849] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3108'. [ 439.197673][T13840] (M) [ 439.202130][T13849] netlink: zone id is out of range [ 439.202140][T13849] netlink: zone id is out of range [ 439.202277][T13849] netlink: zone id is out of range [ 439.202284][T13849] netlink: zone id is out of range [ 439.202292][T13849] netlink: zone id is out of range [ 439.202373][T13849] netlink: zone id is out of range [ 439.202382][T13849] netlink: zone id is out of range [ 439.210924][T13849] netlink: set zone limit has 8 unknown bytes [ 439.231792][T13840] 4*32kB [ 439.239133][T13790] /syz1 [ 439.246081][T13840] (M) [ 439.263793][T13790] : [ 439.273277][T13840] 5*64kB [ 439.279142][T13790] cache 8192 [ 439.297320][T13840] (M) [ 439.332158][T13853] loop2: detected capacity change from 0 to 512 [ 439.360180][T13790] rss 0 [ 439.367283][T13840] 5*128kB [ 439.518329][T13853] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 439.536790][T13790] shmem 0 [ 439.599251][T13840] (M) [ 439.618229][T13853] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3108: bg 0: block 142: padding at end of block bitmap is not set [ 439.624296][T13840] 3*256kB [ 439.689898][T13853] loop2: lost filesystem error report for type 5 error -117 [ 439.699712][T13790] mapped_file 0 [ 439.729308][T13840] (M) [ 439.745745][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 439.745766][ C0] EXT4-fs (loop2): initial error at time 1776805782: ext4_validate_block_bitmap:441 [ 439.745788][ C0] EXT4-fs (loop2): last error at time 1776805782: ext4_validate_block_bitmap:441 [ 439.789349][T13853] EXT4-fs (loop2): Remounting filesystem read-only [ 439.792579][T13114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.795434][T13853] EXT4-fs (loop2): 1 truncate cleaned up [ 439.804549][T13790] dirty 0 [ 439.819253][T13853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.824279][T13790] writeback 0 [ 439.879219][T13840] 4*512kB [ 439.885627][T13790] workingset_refault_anon 40 [ 439.885640][T13790] workingset_refault_file 448 [ 439.885649][T13790] swap 5021696 [ 439.885655][T13790] swapcached 7249920 [ 439.885663][T13790] pgpgin 362443 [ 439.895596][T13840] (M) [ 439.898619][T13790] pgpgout 362441 [ 439.901238][T13840] 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946980kB [ 439.901296][T13840] Node 0 Normal: 1928*4kB (UME) [ 439.916596][T13790] pgfault 403502 [ 439.918658][T13840] 1499*8kB (UME) 1242*16kB (UME) 898*32kB [ 439.926120][T13790] pgmajfault 44 [ 439.929416][T13840] (UME) 690*64kB (UME) 424*128kB (UME) 316*256kB (UME) 173*512kB (UME) 152*1024kB (UM) 80*2048kB (UM) 921*4096kB (UM) = 4428120kB [ 439.929572][T13840] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 439.929600][T13840] 18046 total pagecache pages [ 439.929607][T13840] 10 pages in swap cache [ 439.929614][T13840] Free swap = 107144kB [ 439.929621][T13840] Total swap = 124996kB [ 439.929630][T13840] 2097051 pages RAM [ 439.929690][T13840] 0 pages HighMem/MovableOnly [ 439.929732][T13840] 81816 pages reserved [ 440.020690][T13857] FAULT_INJECTION: forcing a failure. [ 440.020690][T13857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.021800][T13790] inactive_anon 0 [ 440.024329][T13857] CPU: 1 UID: 0 PID: 13857 Comm: syz.3.3109 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.024410][T13857] Tainted: [W]=WARN [ 440.024417][T13857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 440.024429][T13857] Call Trace: [ 440.024435][T13857] [ 440.024442][T13857] __dump_stack+0x1d/0x30 [ 440.024530][T13857] dump_stack_lvl+0x95/0xd0 [ 440.024555][T13857] dump_stack+0x15/0x1b [ 440.024586][T13857] should_fail_ex+0x263/0x280 [ 440.024661][T13857] should_fail+0xb/0x20 [ 440.024744][T13857] should_fail_usercopy+0x1a/0x20 [ 440.024774][T13857] _copy_from_user+0x1c/0xb0 [ 440.024794][T13857] __copy_msghdr+0x244/0x300 [ 440.024823][T13857] ___sys_sendmsg+0x10c/0x1e0 [ 440.024867][T13857] __x64_sys_sendmsg+0xd4/0x160 [ 440.024898][T13857] x64_sys_call+0x194c/0x3020 [ 440.024926][T13857] do_syscall_64+0x12c/0x3b0 [ 440.024952][T13857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.025027][T13857] RIP: 0033:0x7fcf2af2c819 [ 440.025044][T13857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.025062][T13857] RSP: 002b:00007fcf2997f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.025118][T13857] RAX: ffffffffffffffda RBX: 00007fcf2b1a5fa0 RCX: 00007fcf2af2c819 [ 440.025134][T13857] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 440.025148][T13857] RBP: 00007fcf2997f090 R08: 0000000000000000 R09: 0000000000000000 [ 440.025161][T13857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.025174][T13857] R13: 00007fcf2b1a6038 R14: 00007fcf2b1a5fa0 R15: 00007ffc64492f88 [ 440.025193][T13857] [ 440.071032][T13861] loop3: detected capacity change from 0 to 128 [ 440.072496][T13861] vfat: Unknown parameter '0x0000000000000000ÿ' [ 440.080653][T13790] active_anon 0 [ 440.111853][T12896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.152797][T13790] inactive_file 4096 [ 440.152821][T13790] active_file 4096 [ 440.152830][T13790] unevictable 0 [ 440.152839][T13790] hierarchical_memory_limit 314572800 [ 440.152851][T13790] hierarchical_memsw_limit 9223372036854771712 [ 440.350674][T13790] total_cache 8192 [ 440.350686][T13790] total_rss 0 [ 440.357841][T13790] total_shmem 0 [ 440.357851][T13790] total_mapped_file 0 [ 440.357901][T13790] total_dirty 0 [ 440.357940][T13790] total_writeback 0 [ 440.373227][T13790] total_workingset_refault_anon 40 [ 440.373240][T13790] total_workingset_refault_file 448 [ 440.373249][T13790] total_swap 5021696 [ 440.373315][T13790] total_swapcached 7249920 [ 440.393780][T13790] total_pgpgin 362443 [ 440.393793][T13790] total_pgpgout 362441 [ 440.393800][T13790] total_pgfault 403502 [ 440.393817][T13790] total_pgmajfault 44 [ 440.393827][T13790] total_inactive_anon 0 [ 440.393838][T13790] total_active_anon 0 [ 440.418459][T13790] total_inactive_file 4096 [ 440.418472][T13790] total_active_file 4096 [ 440.418481][T13790] total_unevictable 0 [ 440.418489][T13790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3089,pid=13790,uid=0 [ 440.447116][T13790] Memory cgroup out of memory: Killed process 13790 (syz.1.3089) total-vm:96212kB, anon-rss:1224kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 440.583392][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.608236][T13874] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 440.636390][T13881] loop5: detected capacity change from 0 to 512 [ 440.670628][T13881] EXT4-fs: Ignoring removed nobh option [ 440.679988][ T28] audit: type=1400 audit(1776805783.801:638): avc: denied { sys_module } for pid=13873 comm="syz.2.3117" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 440.723480][T13881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 440.782984][T13892] FAULT_INJECTION: forcing a failure. [ 440.782984][T13892] name failslab, interval 1, probability 0, space 0, times 0 [ 440.813081][T13892] CPU: 0 UID: 0 PID: 13892 Comm: syz.1.3122 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.813142][T13892] Tainted: [W]=WARN [ 440.813151][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 440.813166][T13892] Call Trace: [ 440.813174][T13892] [ 440.813182][T13892] __dump_stack+0x1d/0x30 [ 440.813210][T13892] dump_stack_lvl+0x95/0xd0 [ 440.813261][T13892] dump_stack+0x15/0x1b [ 440.813288][T13892] should_fail_ex+0x263/0x280 [ 440.813331][T13892] should_failslab+0x8c/0xb0 [ 440.813422][T13892] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 440.813448][T13892] ? __alloc_skb+0x2d6/0x690 [ 440.813471][T13892] __alloc_skb+0x2d6/0x690 [ 440.813493][T13892] ? __alloc_skb+0x200/0x690 [ 440.813534][T13892] netlink_alloc_large_skb+0xbf/0xf0 [ 440.813562][T13892] netlink_sendmsg+0x40c/0x6f0 [ 440.813624][T13892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.813654][T13892] ____sys_sendmsg+0x563/0x5b0 [ 440.813713][T13892] ___sys_sendmsg+0x195/0x1e0 [ 440.813748][T13892] __x64_sys_sendmsg+0xd4/0x160 [ 440.813783][T13892] x64_sys_call+0x194c/0x3020 [ 440.813838][T13892] do_syscall_64+0x12c/0x3b0 [ 440.813871][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.813895][T13892] RIP: 0033:0x7fd761adc819 [ 440.813913][T13892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.813933][T13892] RSP: 002b:00007fd760537028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.814001][T13892] RAX: ffffffffffffffda RBX: 00007fd761d55fa0 RCX: 00007fd761adc819 [ 440.814019][T13892] RDX: 0000000004000090 RSI: 0000200000000240 RDI: 0000000000000004 [ 440.814032][T13892] RBP: 00007fd760537090 R08: 0000000000000000 R09: 0000000000000000 [ 440.814044][T13892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.814057][T13892] R13: 00007fd761d56038 R14: 00007fd761d55fa0 R15: 00007fff1b0e63f8 [ 440.814078][T13892] [ 440.814337][T13881] EXT4-fs (loop5): 1 truncate cleaned up [ 441.051118][T13881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.251501][T13904] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3125'. [ 441.567895][T13914] vhci_hcd vhci_hcd.2: invalid port number 32 [ 441.574616][T13914] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0020 l0 [ 441.584138][T13919] FAULT_INJECTION: forcing a failure. [ 441.584138][T13919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.589014][ T28] audit: type=1400 audit(1776805784.711:639): avc: denied { accept } for pid=13911 comm="syz.3.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.644905][T13919] CPU: 1 UID: 0 PID: 13919 Comm: syz.2.3131 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.644938][T13919] Tainted: [W]=WARN [ 441.644946][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 441.645011][T13919] Call Trace: [ 441.645018][T13919] [ 441.645026][T13919] __dump_stack+0x1d/0x30 [ 441.645123][T13919] dump_stack_lvl+0x95/0xd0 [ 441.645152][T13919] dump_stack+0x15/0x1b [ 441.645224][T13919] should_fail_ex+0x263/0x280 [ 441.645258][T13919] should_fail+0xb/0x20 [ 441.645319][T13919] should_fail_usercopy+0x1a/0x20 [ 441.645356][T13919] _copy_from_user+0x1c/0xb0 [ 441.645379][T13919] __copy_msghdr+0x244/0x300 [ 441.645420][T13919] ___sys_sendmsg+0x10c/0x1e0 [ 441.645465][T13919] __x64_sys_sendmsg+0xd4/0x160 [ 441.645503][T13919] x64_sys_call+0x194c/0x3020 [ 441.645560][T13919] do_syscall_64+0x12c/0x3b0 [ 441.645616][T13919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.645643][T13919] RIP: 0033:0x7f8d354cc819 [ 441.645660][T13919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.645748][T13919] RSP: 002b:00007f8d33f1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.645774][T13919] RAX: ffffffffffffffda RBX: 00007f8d35745fa0 RCX: 00007f8d354cc819 [ 441.645790][T13919] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 441.645814][T13919] RBP: 00007f8d33f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 441.645829][T13919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.645844][T13919] R13: 00007f8d35746038 R14: 00007f8d35745fa0 R15: 00007fff24c49488 [ 441.645931][T13919] [ 441.844470][T13878] syz.5.3119 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 441.867775][T13878] CPU: 1 UID: 0 PID: 13878 Comm: syz.5.3119 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.867852][T13878] Tainted: [W]=WARN [ 441.867860][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 441.867889][T13878] Call Trace: [ 441.867896][T13878] [ 441.867903][T13878] __dump_stack+0x1d/0x30 [ 441.867934][T13878] dump_stack_lvl+0x95/0xd0 [ 441.868011][T13878] dump_stack+0x15/0x1b [ 441.868084][T13878] dump_header+0x80/0x240 [ 441.868108][T13878] oom_kill_process+0x295/0x350 [ 441.868134][T13878] out_of_memory+0x97d/0xb80 [ 441.868201][T13878] try_charge_memcg+0x62f/0xa10 [ 441.868237][T13878] charge_memcg+0x6d/0x120 [ 441.868267][T13878] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 441.868359][T13878] __swap_cache_prepare_and_add+0x69/0x4a0 [ 441.868389][T13878] ? alloc_pages_mpol+0x217/0x260 [ 441.868455][T13878] swap_cache_alloc_folio+0xa2/0x120 [ 441.868509][T13878] swap_cluster_readahead+0x25f/0x3c0 [ 441.868548][T13878] swapin_readahead+0xde/0x840 [ 441.868580][T13878] ? _raw_spin_unlock+0x9/0x30 [ 441.868645][T13878] ? swap_put_entries_cluster+0x46c/0x490 [ 441.868680][T13878] ? __rcu_read_unlock+0x4e/0x70 [ 441.868707][T13878] ? swap_cache_get_folio+0x1e0/0x1f0 [ 441.868750][T13878] do_swap_page+0x31e/0x2180 [ 441.868813][T13878] ? css_rstat_updated+0xbb/0x280 [ 441.868846][T13878] ? __rcu_read_lock+0x36/0x50 [ 441.868869][T13878] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 441.868901][T13878] handle_mm_fault+0xb2e/0x2e70 [ 441.868997][T13878] ? vma_start_read+0x1c7/0x2c0 [ 441.869028][T13878] do_user_addr_fault+0x62f/0x1050 [ 441.869067][T13878] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 441.869142][T13878] ? trace_page_fault_user+0x1f/0xa0 [ 441.869178][T13878] exc_page_fault+0x62/0xa0 [ 441.869239][T13878] asm_exc_page_fault+0x26/0x30 [ 441.869280][T13878] RIP: 0033:0x7fdbb0569f51 [ 441.869370][T13878] Code: 24 80 00 00 00 48 89 c6 4c 89 e2 e8 b9 bd ff ff e9 a4 f3 ff ff 83 3d 69 de 3a 00 00 48 8b ac 24 98 00 00 00 0f 8f ce 01 00 00 <80> 3d 82 b7 ed 00 00 74 35 31 c9 31 c0 ba 1e 00 00 00 be 03 00 00 [ 441.869390][T13878] RSP: 002b:00007ffde1dc84d0 EFLAGS: 00010246 [ 441.869410][T13878] RAX: 0000001b31324000 RBX: 00007fdbb0917da0 RCX: 0000001b31324000 [ 441.869424][T13878] RDX: 000000000000000c RSI: 000000000000000d RDI: 0000001b3190f11c [ 441.869439][T13878] RBP: 00007fdbb0917da0 R08: 00007fdbb0917cb0 R09: 0000000000000006 [ 441.869453][T13878] R10: 0000001b3132421c R11: 000000000000000c R12: 000000000006bc28 [ 441.869535][T13878] R13: 00007fdbb091609c R14: 000000000006bb5d R15: 00007fdbb0916090 [ 441.869557][T13878] [ 442.164983][T13878] memory: usage 307200kB, limit 307200kB, failcnt 732 [ 442.172391][T13878] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 442.180949][T13928] loop2: detected capacity change from 0 to 2048 [ 442.184218][T13878] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 442.197946][T13878] Memory cgroup stats for /syz5: [ 442.198379][T13878] cache 24576 [ 442.207114][T13878] rss 4096 [ 442.210674][T13878] shmem 0 [ 442.213791][T13878] mapped_file 0 [ 442.217376][T13878] dirty 0 [ 442.220621][T13927] FAULT_INJECTION: forcing a failure. [ 442.220621][T13927] name failslab, interval 1, probability 0, space 0, times 0 [ 442.236432][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.3.3134 Tainted: G W syzkaller #0 PREEMPT(full) [ 442.236466][T13927] Tainted: [W]=WARN [ 442.236473][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 442.236496][T13927] Call Trace: [ 442.236505][T13927] [ 442.236514][T13927] __dump_stack+0x1d/0x30 [ 442.236616][T13927] dump_stack_lvl+0x95/0xd0 [ 442.236647][T13927] dump_stack+0x15/0x1b [ 442.236745][T13927] should_fail_ex+0x263/0x280 [ 442.236784][T13927] should_failslab+0x8c/0xb0 [ 442.236810][T13927] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 442.236856][T13927] ? __alloc_skb+0x2d6/0x690 [ 442.236890][T13927] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 442.236941][T13927] __alloc_skb+0x2d6/0x690 [ 442.236962][T13927] ? xas_load+0x413/0x430 [ 442.236983][T13927] tipc_msg_create+0x47/0x230 [ 442.237011][T13927] ? __rcu_read_unlock+0x4e/0x70 [ 442.237124][T13927] tipc_group_proto_xmit+0xb7/0x2f0 [ 442.237177][T13927] tipc_group_cong+0x284/0x2b0 [ 442.237213][T13927] tipc_group_bc_cong+0xe5/0x110 [ 442.237247][T13927] tipc_send_group_bcast+0x1d0/0x6f0 [ 442.237303][T13927] ? __pfx_woken_wake_function+0x10/0x10 [ 442.237411][T13927] __tipc_sendmsg+0x186/0x1be0 [ 442.237436][T13927] ? avc_has_perm+0x101/0x190 [ 442.237466][T13927] ? selinux_socket_sendmsg+0x192/0x1c0 [ 442.237491][T13927] ? lock_sock_nested+0x84/0x110 [ 442.237558][T13927] tipc_sendmsg+0x3e/0x60 [ 442.237589][T13927] ? __pfx_tipc_sendmsg+0x10/0x10 [ 442.237644][T13927] ____sys_sendmsg+0x563/0x5b0 [ 442.237678][T13927] ___sys_sendmsg+0x195/0x1e0 [ 442.237723][T13927] __x64_sys_sendmsg+0xd4/0x160 [ 442.237759][T13927] x64_sys_call+0x194c/0x3020 [ 442.237786][T13927] do_syscall_64+0x12c/0x3b0 [ 442.237815][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.237856][T13927] RIP: 0033:0x7fcf2af2c819 [ 442.237940][T13927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.237958][T13927] RSP: 002b:00007fcf2997f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.237993][T13927] RAX: ffffffffffffffda RBX: 00007fcf2b1a5fa0 RCX: 00007fcf2af2c819 [ 442.238007][T13927] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 442.238033][T13927] RBP: 00007fcf2997f090 R08: 0000000000000000 R09: 0000000000000000 [ 442.238049][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.238064][T13927] R13: 00007fcf2b1a6038 R14: 00007fcf2b1a5fa0 R15: 00007ffc64492f88 [ 442.238146][T13927] [ 442.238293][T13878] writeback 8192 [ 442.274626][T13928] loop2: p1 p2 p3 [ 442.299325][T13878] workingset_refault_anon 126 [ 442.299341][T13878] workingset_refault_file 2250 [ 442.443963][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 442.456842][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 442.468729][ T6098] udevd[6098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 442.487831][T13878] swap 442368 [ 442.487846][T13878] swapcached 6238208 [ 442.487855][T13878] pgpgin 418642 [ 442.487864][T13878] pgpgout 418632 [ 442.487872][T13878] pgfault 390563 [ 442.487880][T13878] pgmajfault 57 [ 442.559897][T13878] inactive_anon 16384 [ 442.563968][T13878] active_anon 0 [ 442.567505][T13878] inactive_file 24576 [ 442.572098][T13878] active_file 0 [ 442.575670][T13878] unevictable 0 [ 442.579265][T13878] hierarchical_memory_limit 314572800 [ 442.584836][T13878] hierarchical_memsw_limit 9223372036854771712 [ 442.591071][T13878] total_cache 24576 [ 442.594988][T13878] total_rss 4096 [ 442.598604][T13878] total_shmem 0 [ 442.602117][T13878] total_mapped_file 0 [ 442.606162][T13878] total_dirty 0 [ 442.650323][T13878] total_writeback 8192 [ 442.690669][T13944] loop3: detected capacity change from 0 to 512 [ 442.709071][T13878] total_workingset_refault_anon 126 [ 442.711210][T13944] EXT4-fs: Ignoring removed nobh option [ 442.714401][T13878] total_workingset_refault_file 2250 [ 442.714416][T13878] total_swap 442368 [ 442.729124][T13878] total_swapcached 6238208 [ 442.733659][T13878] total_pgpgin 418642 [ 442.737650][T13878] total_pgpgout 418632 [ 442.741783][T13878] total_pgfault 390563 [ 442.745874][T13878] total_pgmajfault 57 [ 442.749872][T13878] total_inactive_anon 16384 [ 442.754478][T13878] total_active_anon 0 [ 442.763185][T13944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 442.781054][T13878] total_inactive_file 24576 [ 442.787964][T13878] total_active_file 0 [ 442.806578][T13878] total_unevictable 0 [ 442.810883][T13878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3119,pid=13878,uid=0 [ 442.825979][T13878] Memory cgroup out of memory: Killed process 13878 (syz.5.3119) total-vm:96212kB, anon-rss:1232kB, file-rss:22472kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 442.854416][T13944] EXT4-fs (loop3): 1 truncate cleaned up [ 442.860958][T13944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.900409][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.921455][T13949] loop1: detected capacity change from 0 to 512 [ 442.971524][T13949] EXT4-fs: Ignoring removed nobh option [ 443.013119][T13949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 443.014680][T13951] xt_hashlimit: max too large, truncated to 1048576 [ 443.094910][T13951] loop5: detected capacity change from 0 to 1764 [ 443.106326][T13949] EXT4-fs (loop1): 1 truncate cleaned up [ 443.126053][T13949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.335099][T13943] syz.3.3138 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 443.346805][ T28] audit: type=1400 audit(1776805786.461:640): avc: denied { create } for pid=13955 comm="syz.4.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.397674][T13956] FAULT_INJECTION: forcing a failure. [ 443.397674][T13956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.426722][T13954] loop5: detected capacity change from 0 to 256 [ 443.451039][T13943] CPU: 1 UID: 0 PID: 13943 Comm: syz.3.3138 Tainted: G W syzkaller #0 PREEMPT(full) [ 443.451079][T13943] Tainted: [W]=WARN [ 443.451088][T13943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.451103][T13943] Call Trace: [ 443.451110][T13943] [ 443.451119][T13943] __dump_stack+0x1d/0x30 [ 443.451202][T13943] dump_stack_lvl+0x95/0xd0 [ 443.451245][T13943] dump_stack+0x15/0x1b [ 443.451272][T13943] dump_header+0x80/0x240 [ 443.451356][T13943] oom_kill_process+0x295/0x350 [ 443.451443][T13943] out_of_memory+0x97d/0xb80 [ 443.451469][T13943] try_charge_memcg+0x62f/0xa10 [ 443.451507][T13943] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 443.451568][T13943] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 443.451602][T13943] __alloc_frozen_pages_noprof+0x18a/0x350 [ 443.451727][T13943] alloc_pages_mpol+0xb3/0x260 [ 443.451759][T13943] ? mod_lruvec_state+0xe0/0xf0 [ 443.451792][T13943] alloc_pages_noprof+0x8f/0x140 [ 443.451922][T13943] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 443.451962][T13943] __kvmalloc_node_noprof+0x3d4/0x640 [ 443.451991][T13943] ? futex_hash_allocate+0x190/0x9a0 [ 443.452018][T13943] ? futex_hash_allocate+0x190/0x9a0 [ 443.452045][T13943] futex_hash_allocate+0x190/0x9a0 [ 443.452078][T13943] ? cap_task_prctl+0x13f/0x6b0 [ 443.452188][T13943] futex_hash_prctl+0xd8/0xf0 [ 443.452212][T13943] __se_sys_prctl+0x4f4/0x1400 [ 443.452250][T13943] __x64_sys_prctl+0x67/0x80 [ 443.452303][T13943] x64_sys_call+0x2533/0x3020 [ 443.452393][T13943] do_syscall_64+0x12c/0x3b0 [ 443.452556][T13943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.452582][T13943] RIP: 0033:0x7fcf2af2c819 [ 443.452601][T13943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.452698][T13943] RSP: 002b:00007fcf2997f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 443.452723][T13943] RAX: ffffffffffffffda RBX: 00007fcf2b1a5fa0 RCX: 00007fcf2af2c819 [ 443.452797][T13943] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 443.452813][T13943] RBP: 00007fcf2afc2c91 R08: 0000000000000000 R09: 0000000000000000 [ 443.452828][T13943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.452844][T13943] R13: 00007fcf2b1a6038 R14: 00007fcf2b1a5fa0 R15: 00007ffc64492f88 [ 443.452867][T13943] [ 443.452875][T13943] memory: usage 283308kB, limit 307200kB, failcnt 202 [ 443.490628][T13956] CPU: 0 UID: 0 PID: 13956 Comm: syz.4.3142 Tainted: G W syzkaller #0 PREEMPT(full) [ 443.490794][T13956] Tainted: [W]=WARN [ 443.490802][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.490815][T13956] Call Trace: [ 443.490822][T13956] [ 443.490830][T13956] __dump_stack+0x1d/0x30 [ 443.490860][T13956] dump_stack_lvl+0x95/0xd0 [ 443.490885][T13956] dump_stack+0x15/0x1b [ 443.490960][T13956] should_fail_ex+0x263/0x280 [ 443.490992][T13956] should_fail+0xb/0x20 [ 443.491100][T13956] should_fail_usercopy+0x1a/0x20 [ 443.491195][T13956] _copy_to_user+0x20/0xa0 [ 443.491215][T13956] simple_read_from_buffer+0xb5/0x130 [ 443.491301][T13956] proc_fail_nth_read+0x10e/0x150 [ 443.491333][T13956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.491391][T13956] vfs_read+0x1ab/0x7f0 [ 443.491422][T13956] ? __rcu_read_unlock+0x4e/0x70 [ 443.491456][T13956] ? __fget_files+0x184/0x1c0 [ 443.491480][T13956] ? mutex_lock+0x57/0x90 [ 443.491550][T13956] ksys_read+0xdc/0x1a0 [ 443.491627][T13956] __x64_sys_read+0x40/0x50 [ 443.491708][T13956] x64_sys_call+0x2886/0x3020 [ 443.491831][T13956] do_syscall_64+0x12c/0x3b0 [ 443.491857][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.491967][T13956] RIP: 0033:0x7f3204ddd04e [ 443.491986][T13956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.492077][T13956] RSP: 002b:00007f320386efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.492138][T13956] RAX: ffffffffffffffda RBX: 00007f320386f6c0 RCX: 00007f3204ddd04e [ 443.492153][T13956] RDX: 000000000000000f RSI: 00007f320386f0a0 RDI: 0000000000000005 [ 443.492167][T13956] RBP: 00007f320386f090 R08: 0000000000000000 R09: 0000000000000000 [ 443.492181][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.492194][T13956] R13: 00007f3205096038 R14: 00007f3205095fa0 R15: 00007fffdf741208 [ 443.492283][T13956] [ 443.715246][T13962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.749100][T13963] loop2: detected capacity change from 0 to 256 [ 443.898944][T13943] memory+swap: usage 252024kB, limit 9007199254740988kB, failcnt 0 [ 443.951798][T13943] kmem: usage 214436kB, limit 9007199254740988kB, failcnt 0 [ 443.961455][T13943] Memory cgroup stats for /syz3: [ 443.961722][T13943] cache 528384 [ 443.970454][T13943] rss 4096 [ 443.973544][T13943] shmem 0 [ 443.976524][T13943] mapped_file 65536 [ 443.980721][T13943] dirty 0 [ 443.983703][T13943] writeback 0 [ 443.987011][T13943] workingset_refault_anon 136 [ 443.992069][T13943] workingset_refault_file 1068 [ 444.019408][T13943] swap 446464 [ 444.032460][T13943] swapcached 22691840 [ 444.042365][T13943] pgpgin 445273 [ 444.089996][T13943] pgpgout 445140 [ 444.099808][T13968] FAULT_INJECTION: forcing a failure. [ 444.099808][T13968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.116240][T13943] pgfault 488187 [ 444.120586][T13943] pgmajfault 103 [ 444.125630][T13943] inactive_anon 12288 [ 444.131956][T13943] active_anon 4096 [ 444.136140][T13968] CPU: 0 UID: 0 PID: 13968 Comm: syz.4.3146 Tainted: G W syzkaller #0 PREEMPT(full) [ 444.136174][T13968] Tainted: [W]=WARN [ 444.136182][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.136195][T13968] Call Trace: [ 444.136204][T13968] [ 444.136271][T13968] __dump_stack+0x1d/0x30 [ 444.136374][T13968] dump_stack_lvl+0x95/0xd0 [ 444.136405][T13968] dump_stack+0x15/0x1b [ 444.136435][T13968] should_fail_ex+0x263/0x280 [ 444.136466][T13968] should_fail+0xb/0x20 [ 444.136517][T13968] should_fail_usercopy+0x1a/0x20 [ 444.136552][T13968] _copy_to_user+0x20/0xa0 [ 444.136574][T13968] simple_read_from_buffer+0xb5/0x130 [ 444.136603][T13968] proc_fail_nth_read+0x10e/0x150 [ 444.136809][T13968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.136845][T13968] vfs_read+0x1ab/0x7f0 [ 444.136881][T13968] ? __rcu_read_unlock+0x4e/0x70 [ 444.136921][T13968] ? __fget_files+0x184/0x1c0 [ 444.136945][T13968] ? mutex_lock+0x57/0x90 [ 444.137043][T13968] ksys_read+0xdc/0x1a0 [ 444.137118][T13968] __x64_sys_read+0x40/0x50 [ 444.137206][T13968] x64_sys_call+0x2886/0x3020 [ 444.137239][T13968] do_syscall_64+0x12c/0x3b0 [ 444.137271][T13968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.137349][T13968] RIP: 0033:0x7f3204ddd04e [ 444.137369][T13968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.137459][T13968] RSP: 002b:00007f320386efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.137486][T13968] RAX: ffffffffffffffda RBX: 00007f320386f6c0 RCX: 00007f3204ddd04e [ 444.137504][T13968] RDX: 000000000000000f RSI: 00007f320386f0a0 RDI: 0000000000000006 [ 444.137520][T13968] RBP: 00007f320386f090 R08: 0000000000000000 R09: 0000000000000000 [ 444.137602][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.137616][T13968] R13: 00007f3205096038 R14: 00007f3205095fa0 R15: 00007fffdf741208 [ 444.137639][T13968] [ 444.137719][T13943] inactive_file 4096 [ 444.349857][T13943] active_file 524288 [ 444.354382][T13943] unevictable 0 [ 444.358148][T13943] hierarchical_memory_limit 314572800 [ 444.387744][T13986] FAULT_INJECTION: forcing a failure. [ 444.387744][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.489095][T13986] CPU: 1 UID: 0 PID: 13986 Comm: syz.4.3152 Tainted: G W syzkaller #0 PREEMPT(full) [ 444.489152][T13986] Tainted: [W]=WARN [ 444.489159][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.489225][T13986] Call Trace: [ 444.489231][T13986] [ 444.489239][T13986] __dump_stack+0x1d/0x30 [ 444.489272][T13986] dump_stack_lvl+0x95/0xd0 [ 444.489303][T13986] dump_stack+0x15/0x1b [ 444.489345][T13986] should_fail_ex+0x263/0x280 [ 444.489427][T13986] should_fail+0xb/0x20 [ 444.489463][T13986] should_fail_usercopy+0x1a/0x20 [ 444.489504][T13986] _copy_from_user+0x1c/0xb0 [ 444.489528][T13986] __copy_msghdr+0x244/0x300 [ 444.489759][T13986] ___sys_sendmsg+0x10c/0x1e0 [ 444.489835][T13986] __x64_sys_sendmsg+0xd4/0x160 [ 444.489870][T13986] x64_sys_call+0x194c/0x3020 [ 444.489896][T13986] do_syscall_64+0x12c/0x3b0 [ 444.489940][T13986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.489968][T13986] RIP: 0033:0x7f3204e1c819 [ 444.489988][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.490009][T13986] RSP: 002b:00007f320386f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.490036][T13986] RAX: ffffffffffffffda RBX: 00007f3205095fa0 RCX: 00007f3204e1c819 [ 444.490133][T13986] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 444.490149][T13986] RBP: 00007f320386f090 R08: 0000000000000000 R09: 0000000000000000 [ 444.490162][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.490174][T13986] R13: 00007f3205096038 R14: 00007f3205095fa0 R15: 00007fffdf741208 [ 444.490276][T13986] [ 444.501973][T13943] hierarchical_memsw_limit 9223372036854771712 [ 444.687660][T13943] total_cache 528384 [ 444.692623][T13943] total_rss 4096 [ 444.696372][T13943] total_shmem 0 [ 444.714352][T13943] total_mapped_file 65536 [ 444.720335][T13943] total_dirty 0 [ 444.729048][T13943] total_writeback 0 [ 444.732914][T13943] total_workingset_refault_anon 136 [ 444.738143][T13943] total_workingset_refault_file 1068 [ 444.755417][ T28] audit: type=1326 audit(1776805787.881:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d354cc819 code=0x7ffc0000 [ 444.780174][T13943] total_swap 446464 [ 444.789096][T13943] total_swapcached 22691840 [ 444.799081][T13943] total_pgpgin 445273 [ 444.808671][T13943] total_pgpgout 445140 [ 444.816768][T13943] total_pgfault 488187 [ 444.826582][ T28] audit: type=1326 audit(1776805787.881:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d354cc819 code=0x7ffc0000 [ 444.851385][T13943] total_pgmajfault 103 [ 444.856815][T13997] loop5: detected capacity change from 0 to 512 [ 444.863274][T13943] total_inactive_anon 12288 [ 444.868353][T13997] EXT4-fs: Ignoring removed bh option [ 444.873958][T13943] total_active_anon 4096 [ 444.879704][T13943] total_inactive_file 4096 [ 444.884280][T13997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.894552][T13943] total_active_file 524288 [ 444.899368][T13997] EXT4-fs (loop5): unable to read superblock [ 444.905541][T13943] total_unevictable 0 [ 444.909691][ T28] audit: type=1326 audit(1776805787.881:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f8d354cc819 code=0x7ffc0000 [ 444.934199][T13943] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3138,pid=13942,uid=0 [ 444.949260][T13943] Memory cgroup out of memory: Killed process 13942 (syz.3.3138) total-vm:94164kB, anon-rss:1228kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 444.973325][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3157'. [ 444.984906][ T28] audit: type=1326 audit(1776805787.881:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d354cc819 code=0x7ffc0000 [ 444.984941][ T28] audit: type=1326 audit(1776805787.881:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d354cc819 code=0x7ffc0000 [ 444.984994][ T28] audit: type=1326 audit(1776805787.911:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f8d354cc819 code=0x7ffc0000 [ 444.985021][ T28] audit: type=1326 audit(1776805787.911:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d354cc819 code=0x7ffc0000 [ 445.085714][T13114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.331543][T14009] loop5: detected capacity change from 0 to 164 [ 445.338423][T14009] iso9660: Unknown parameter ' [ 446.017612][T14027] __dump_stack+0x1d/0x30 [ 446.017646][T14027] dump_stack_lvl+0x95/0xd0 [ 446.017678][T14027] dump_stack+0x15/0x1b [ 446.017773][T14027] should_fail_ex+0x263/0x280 [ 446.017910][T14027] should_failslab+0x8c/0xb0 [ 446.017935][T14027] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 446.017963][T14027] ? __alloc_skb+0x2d6/0x690 [ 446.017992][T14027] __alloc_skb+0x2d6/0x690 [ 446.018020][T14027] ? __alloc_skb+0x200/0x690 [ 446.018119][T14027] netlink_alloc_large_skb+0xbf/0xf0 [ 446.018150][T14027] netlink_sendmsg+0x40c/0x6f0 [ 446.018188][T14027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.018254][T14027] ____sys_sendmsg+0x563/0x5b0 [ 446.018285][T14027] ___sys_sendmsg+0x195/0x1e0 [ 446.018332][T14027] __x64_sys_sendmsg+0xd4/0x160 [ 446.018368][T14027] x64_sys_call+0x194c/0x3020 [ 446.018407][T14027] do_syscall_64+0x12c/0x3b0 [ 446.018444][T14027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.018499][T14027] RIP: 0033:0x7f8d354cc819 [ 446.018525][T14027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.018600][T14027] RSP: 002b:00007f8d33f1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.018624][T14027] RAX: ffffffffffffffda RBX: 00007f8d35745fa0 RCX: 00007f8d354cc819 [ 446.018638][T14027] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 446.018651][T14027] RBP: 00007f8d33f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.018664][T14027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.018678][T14027] R13: 00007f8d35746038 R14: 00007f8d35745fa0 R15: 00007fff24c49488 [ 446.018742][T14027] [ 446.338542][T14039] FAULT_INJECTION: forcing a failure. [ 446.338542][T14039] name failslab, interval 1, probability 0, space 0, times 0 [ 446.360355][T14040] loop5: detected capacity change from 0 to 512 [ 446.364104][T14039] CPU: 1 UID: 0 PID: 14039 Comm: syz.3.3170 Tainted: G W syzkaller #0 PREEMPT(full) [ 446.364139][T14039] Tainted: [W]=WARN [ 446.364147][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.364160][T14039] Call Trace: [ 446.364231][T14039] [ 446.364240][T14039] __dump_stack+0x1d/0x30 [ 446.364270][T14039] dump_stack_lvl+0x95/0xd0 [ 446.364296][T14039] dump_stack+0x15/0x1b [ 446.364320][T14039] should_fail_ex+0x263/0x280 [ 446.364389][T14039] should_failslab+0x8c/0xb0 [ 446.364410][T14039] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 446.364433][T14039] ? __alloc_skb+0x2d6/0x690 [ 446.364516][T14039] __alloc_skb+0x2d6/0x690 [ 446.364539][T14039] ? __alloc_skb+0x200/0x690 [ 446.364562][T14039] netlink_alloc_large_skb+0xbf/0xf0 [ 446.364591][T14039] netlink_sendmsg+0x40c/0x6f0 [ 446.364706][T14039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.364737][T14039] ____sys_sendmsg+0x563/0x5b0 [ 446.364800][T14039] ___sys_sendmsg+0x195/0x1e0 [ 446.364843][T14039] __x64_sys_sendmsg+0xd4/0x160 [ 446.364874][T14039] x64_sys_call+0x194c/0x3020 [ 446.364960][T14039] do_syscall_64+0x12c/0x3b0 [ 446.365030][T14039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.365053][T14039] RIP: 0033:0x7fcf2af2c819 [ 446.365143][T14039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.365162][T14039] RSP: 002b:00007fcf2997f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.365184][T14039] RAX: ffffffffffffffda RBX: 00007fcf2b1a5fa0 RCX: 00007fcf2af2c819 [ 446.365290][T14039] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 446.365355][T14039] RBP: 00007fcf2997f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.365368][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.365382][T14039] R13: 00007fcf2b1a6038 R14: 00007fcf2b1a5fa0 R15: 00007ffc64492f88 [ 446.365401][T14039] [ 446.479489][T14045] loop3: detected capacity change from 0 to 512 [ 446.547421][T14040] EXT4-fs: Ignoring removed nobh option [ 446.610318][T14045] EXT4-fs: Ignoring removed nobh option [ 446.660194][T14040] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 446.684375][T14048] EXT4-fs: Ignoring removed nobh option [ 446.693815][T14045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 446.736699][T14048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.774950][T14040] EXT4-fs (loop5): 1 truncate cleaned up [ 446.792300][T14045] EXT4-fs (loop3): 1 truncate cleaned up [ 446.807357][T14040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.833542][T14045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.890608][T14048] EXT4-fs (loop2): 1 truncate cleaned up [ 446.948391][T14048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.200621][T13990] ipip0: entered promiscuous mode [ 447.223738][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.368145][T14042] syz.3.3171 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 447.410398][T14042] CPU: 1 UID: 0 PID: 14042 Comm: syz.3.3171 Tainted: G W syzkaller #0 PREEMPT(full) [ 447.410439][T14042] Tainted: [W]=WARN [ 447.410448][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.410511][T14042] Call Trace: [ 447.410620][T14042] [ 447.410628][T14042] __dump_stack+0x1d/0x30 [ 447.410661][T14042] dump_stack_lvl+0x95/0xd0 [ 447.410724][T14042] dump_stack+0x15/0x1b [ 447.410792][T14042] dump_header+0x80/0x240 [ 447.410828][T14042] oom_kill_process+0x295/0x350 [ 447.410851][T14042] out_of_memory+0x97d/0xb80 [ 447.410874][T14042] try_charge_memcg+0x62f/0xa10 [ 447.410966][T14042] charge_memcg+0x6d/0x120 [ 447.411000][T14042] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 447.411091][T14042] __swap_cache_prepare_and_add+0x69/0x4a0 [ 447.411136][T14042] ? alloc_pages_mpol+0x217/0x260 [ 447.411219][T14042] swap_cache_alloc_folio+0xa2/0x120 [ 447.411257][T14042] swap_cluster_readahead+0x25f/0x3c0 [ 447.411335][T14042] swapin_readahead+0xde/0x840 [ 447.411365][T14042] ? _raw_spin_unlock+0x9/0x30 [ 447.411397][T14042] ? swap_put_entries_cluster+0x46c/0x490 [ 447.411457][T14042] ? __rcu_read_unlock+0x4e/0x70 [ 447.411480][T14042] ? swap_cache_get_folio+0x1e0/0x1f0 [ 447.411509][T14042] do_swap_page+0x31e/0x2180 [ 447.411536][T14042] ? css_rstat_updated+0xbb/0x280 [ 447.411560][T14042] ? __rcu_read_lock+0x36/0x50 [ 447.411584][T14042] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 447.411659][T14042] handle_mm_fault+0xb2e/0x2e70 [ 447.411687][T14042] ? vma_start_read+0x1c7/0x2c0 [ 447.411791][T14042] do_user_addr_fault+0x62f/0x1050 [ 447.411830][T14042] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 447.411856][T14042] ? trace_page_fault_user+0x1f/0xa0 [ 447.411957][T14042] exc_page_fault+0x62/0xa0 [ 447.411987][T14042] asm_exc_page_fault+0x26/0x30 [ 447.412034][T14042] RIP: 0033:0x7fcf2adf4f83 [ 447.412050][T14042] Code: 53 48 83 ec 38 80 3d 9b d0 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 80 3d 6a 07 ee 00 00 49 89 f1 41 89 d2 89 cb 05 76 d0 3a 00 01 41 89 d7 0f 85 45 04 00 00 80 3d 36 07 ee 00 [ 447.412067][T14042] RSP: 002b:00007ffc64493080 EFLAGS: 00010202 [ 447.412150][T14042] RAX: 00007fcf2b1a5fa0 RBX: 0000000000000026 RCX: 0000000000000026 [ 447.412162][T14042] RDX: 0000000000000001 RSI: 00007fcf2b1a6038 RDI: 0000000000000000 [ 447.412174][T14042] RBP: 00007fcf2b1a7da0 R08: 0000000000000000 R09: 00007fcf2b1a6038 [ 447.412187][T14042] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000006d2e3 [ 447.412199][T14042] R13: 00007fcf2b1a609c R14: 000000000006d24d R15: 00007fcf2b1a6090 [ 447.412217][T14042] [ 447.670181][T14042] memory: usage 307200kB, limit 307200kB, failcnt 354 [ 447.677548][T14042] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 447.712109][T14042] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 447.731525][T14042] Memory cgroup stats for /syz3: [ 447.731806][T14042] cache 4096 [ 447.768052][T14042] rss 0 [ 447.778197][T14042] shmem 0 [ 447.786021][T14042] mapped_file 0 [ 447.796100][T14042] dirty 0 [ 447.804695][T14042] writeback 0 [ 447.831349][T14042] workingset_refault_anon 196 [ 447.848160][T14042] workingset_refault_file 1522 [ 447.868492][T14042] swap 462848 [ 447.879254][T14042] swapcached 23326720 [ 447.887115][T14042] pgpgin 448890 [ 447.897276][T14042] pgpgout 448889 [ 447.932577][T14042] pgfault 491418 [ 447.953448][T14042] pgmajfault 133 [ 447.970449][T14042] inactive_anon 0 [ 447.988050][T14042] active_anon 0 [ 448.002165][T14042] inactive_file 4096 [ 448.021502][T14042] active_file 0 [ 448.028070][T14063] netlink: 'syz.5.3175': attribute type 33 has an invalid length. [ 448.047418][T14042] unevictable 0 [ 448.063800][T14042] hierarchical_memory_limit 314572800 [ 448.069558][T14063] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3175'. [ 448.095698][T14042] hierarchical_memsw_limit 9223372036854771712 [ 448.121435][T14042] total_cache 4096 [ 448.135513][T14042] total_rss 0 [ 448.150193][T14042] total_shmem 0 [ 448.163883][T14042] total_mapped_file 0 [ 448.179036][T14042] total_dirty 0 [ 448.182610][T14042] total_writeback 0 [ 448.186577][T14042] total_workingset_refault_anon 196 [ 448.192024][T14042] total_workingset_refault_file 1522 [ 448.197320][T14042] total_swap 462848 [ 448.219062][T14042] total_swapcached 23326720 [ 448.225689][T14042] total_pgpgin 448890 [ 448.237491][T14042] total_pgpgout 448889 [ 448.248849][T14042] total_pgfault 491418 [ 448.262781][T14042] total_pgmajfault 133 [ 448.268341][T12896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.279409][T14042] total_inactive_anon 0 [ 448.283630][T14042] total_active_anon 0 [ 448.287668][T14042] total_inactive_file 4096 [ 448.304334][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3177'. [ 448.314399][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3177'. [ 448.324422][T14042] total_active_file 0 [ 448.335782][T14042] total_unevictable 0 [ 448.345649][T14042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3171,pid=14042,uid=0 [ 448.390577][T14042] Memory cgroup out of memory: Killed process 14042 (syz.3.3171) total-vm:94164kB, anon-rss:1228kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 448.390961][T14068] set_capacity_and_notify: 1 callbacks suppressed [ 448.390976][T14068] loop5: detected capacity change from 0 to 2048 [ 448.444987][T14074] SELinux: policydb string SE L does not match my string SE Linux [ 448.478669][T13114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.491151][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 448.491171][ T28] audit: type=1400 audit(1776805791.621:667): avc: denied { read } for pid=14075 comm="syz.2.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 448.498517][T14074] SELinux: failed to load policy [ 448.566338][T14068] loop5: p1 p2 p3 [ 448.620983][T14078] loop2: detected capacity change from 0 to 512 [ 448.672231][T14078] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 448.741097][T14078] EXT4-fs (loop2): 1 truncate cleaned up [ 448.749900][T14078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.771959][T14078] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3182'. [ 448.864869][T14078] xt_hashlimit: max too large, truncated to 1048576 [ 448.917870][T14078] ipt_REJECT: TCP_RESET invalid for non-tcp [ 448.934362][T14091] netlink: 'syz.5.3186': attribute type 33 has an invalid length. [ 448.946831][T14091] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3186'. [ 448.999572][T12896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.103740][T14097] loop5: detected capacity change from 0 to 512 [ 449.117377][T14097] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 449.301248][T14097] EXT4-fs (loop5): 1 truncate cleaned up [ 449.325936][T14097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.419051][T14108] loop2: detected capacity change from 0 to 512 [ 449.508336][T14108] EXT4-fs: Ignoring removed nobh option [ 449.556017][T14108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 449.584030][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.679942][T14108] EXT4-fs (loop2): 1 truncate cleaned up [ 449.696678][T14108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.929968][ T28] audit: type=1400 audit(1776805793.061:668): avc: denied { ioctl } for pid=14111 comm="syz.5.3192" path="socket:[44035]" dev="sockfs" ino=44035 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 449.965840][T14121] SELinux: policydb string SE L does not match my string SE Linux [ 449.985443][T14121] SELinux: failed to load policy [ 450.483571][T12896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.647059][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 450.733268][T14133] netlink: 'syz.2.3199': attribute type 33 has an invalid length. [ 450.800267][T14133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3199'. [ 450.940382][T14144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.949260][T14145] loop5: detected capacity change from 0 to 512 [ 450.964750][T14145] EXT4-fs: Ignoring removed nobh option [ 450.977386][T14145] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 451.056444][T14145] EXT4-fs (loop5): 1 truncate cleaned up [ 451.122012][T14145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.585965][T14158] loop3: detected capacity change from 0 to 512 [ 451.651799][T14158] EXT4-fs: Ignoring removed nobh option [ 451.660083][T14158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 451.703281][T14158] EXT4-fs (loop3): 1 truncate cleaned up [ 451.818805][T14158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.576755][T14175] loop1: detected capacity change from 0 to 512 [ 454.617558][T14175] EXT4-fs: Ignoring removed nobh option [ 454.649194][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.659986][T13114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.690934][T14175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 454.775751][T14187] netlink: 'syz.2.3214': attribute type 33 has an invalid length. [ 454.788698][T14175] EXT4-fs (loop1): 1 truncate cleaned up [ 454.813877][T14188] loop5: detected capacity change from 0 to 512 [ 454.829780][T14187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3214'. [ 454.847069][T14175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.876288][T14188] EXT4-fs: Ignoring removed nobh option [ 454.948834][T14188] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 455.022479][T14188] EXT4-fs (loop5): 1 truncate cleaned up [ 455.079547][T14188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.357156][T14178] chnl_net:caif_netlink_parms(): no params data found [ 455.567446][T14182] syz.5.3210 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 455.585458][T14182] CPU: 0 UID: 0 PID: 14182 Comm: syz.5.3210 Tainted: G W syzkaller #0 PREEMPT(full) [ 455.585498][T14182] Tainted: [W]=WARN [ 455.585513][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.585527][T14182] Call Trace: [ 455.585534][T14182] [ 455.585544][T14182] __dump_stack+0x1d/0x30 [ 455.585670][T14182] dump_stack_lvl+0x95/0xd0 [ 455.585701][T14182] dump_stack+0x15/0x1b [ 455.585848][T14182] dump_header+0x80/0x240 [ 455.585880][T14182] oom_kill_process+0x295/0x350 [ 455.585906][T14182] out_of_memory+0x97d/0xb80 [ 455.585963][T14182] try_charge_memcg+0x62f/0xa10 [ 455.586010][T14182] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 455.586045][T14182] __alloc_frozen_pages_noprof+0x18a/0x350 [ 455.586153][T14182] alloc_pages_mpol+0xb3/0x260 [ 455.586237][T14182] ? mod_lruvec_state+0xe0/0xf0 [ 455.586259][T14182] alloc_pages_noprof+0x8f/0x140 [ 455.586287][T14182] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 455.586384][T14182] __kvmalloc_node_noprof+0x3d4/0x640 [ 455.586469][T14182] ? futex_hash_allocate+0x190/0x9a0 [ 455.586497][T14182] ? futex_hash_allocate+0x190/0x9a0 [ 455.586525][T14182] futex_hash_allocate+0x190/0x9a0 [ 455.586571][T14182] ? cap_task_prctl+0x13f/0x6b0 [ 455.586599][T14182] futex_hash_prctl+0xd8/0xf0 [ 455.586618][T14182] __se_sys_prctl+0x4f4/0x1400 [ 455.586656][T14182] __x64_sys_prctl+0x67/0x80 [ 455.586756][T14182] x64_sys_call+0x2533/0x3020 [ 455.586815][T14182] do_syscall_64+0x12c/0x3b0 [ 455.586843][T14182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.586912][T14182] RIP: 0033:0x7fdbb069c819 [ 455.586930][T14182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.586948][T14182] RSP: 002b:00007fdbaf0ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 455.586989][T14182] RAX: ffffffffffffffda RBX: 00007fdbb0915fa0 RCX: 00007fdbb069c819 [ 455.587074][T14182] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 455.587087][T14182] RBP: 00007fdbb0732c91 R08: 0000000000000000 R09: 0000000000000000 [ 455.587100][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.587116][T14182] R13: 00007fdbb0916038 R14: 00007fdbb0915fa0 R15: 00007ffde1dc8368 [ 455.587139][T14182] [ 455.587300][T14182] memory: usage 307200kB, limit 307200kB, failcnt 926 [ 455.594196][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.608801][T14182] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 455.612947][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3218'. [ 455.666173][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.668957][T14182] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 455.692508][T14178] bridge_slave_0: entered allmulticast mode [ 455.696228][T14182] Memory cgroup stats for [ 455.876138][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.876225][T14178] bridge_slave_0: entered promiscuous mode [ 455.896998][T14182] /syz5: [ 455.897199][T14182] cache 24576 [ 455.904609][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.912780][T14182] rss 4096 [ 455.915975][T14182] shmem 0 [ 455.919166][T14182] mapped_file 0 [ 455.922871][T14182] dirty 0 [ 455.926408][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.933700][T14182] writeback 0 [ 455.937363][T14178] bridge_slave_1: entered allmulticast mode [ 455.945451][T14182] workingset_refault_anon 290 [ 455.950919][T14178] bridge_slave_1: entered promiscuous mode [ 455.956943][T14182] workingset_refault_file 2447 [ 455.964140][T14182] swap 450560 [ 455.971945][T14182] swapcached 7856128 [ 455.980160][T14182] pgpgin 424037 [ 455.985867][T14182] pgpgout 424029 [ 455.993637][T14178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.006840][T14226] loop2: detected capacity change from 0 to 512 [ 456.014419][T14182] pgfault 397181 [ 456.018018][T14182] pgmajfault 146 [ 456.021735][T14182] inactive_anon 8192 [ 456.038308][T14226] EXT4-fs (loop2): 1 truncate cleaned up [ 456.047065][T14178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.161160][T14182] active_anon 0 [ 456.169636][T14226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.181890][T14182] inactive_file 20480 [ 456.187835][T14182] active_file 4096 [ 456.191878][T14178] team0: Port device team_slave_0 added [ 456.198224][T14182] unevictable 0 [ 456.198955][T14178] team0: Port device team_slave_1 added [ 456.206301][T14182] hierarchical_memory_limit 314572800 [ 456.218912][T14178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.220180][T14182] hierarchical_memsw_limit 9223372036854771712 [ 456.232272][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.236894][T14182] total_cache 24576 [ 456.263017][T14182] total_rss 4096 [ 456.266637][T14182] total_shmem 0 [ 456.270429][T14182] total_mapped_file 0 [ 456.274767][T14182] total_dirty 0 [ 456.278491][T14182] total_writeback 0 [ 456.286047][T12896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.286872][T14182] total_workingset_refault_anon 290 [ 456.301248][T14182] total_workingset_refault_file 2447 [ 456.303925][T14178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.306581][T14182] total_swap 450560 [ 456.321885][T14182] total_swapcached 7856128 [ 456.326463][T14182] total_pgpgin 424037 [ 456.330755][T14182] total_pgpgout 424029 [ 456.335093][T14182] total_pgfault 397181 [ 456.342968][T14182] total_pgmajfault 146 [ 456.350814][T14178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.357684][T14182] total_inactive_anon 8192 [ 456.366416][T14182] total_active_anon 0 [ 456.370108][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.373606][T14182] total_inactive_file 20480 [ 456.423431][T14182] total_active_file 4096 [ 456.431425][T14182] total_unevictable 0 [ 456.433385][T14178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.438073][T14234] loop2: detected capacity change from 0 to 8192 [ 456.453354][T14182] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3210,pid=14180,uid=0 [ 456.477814][T14182] Memory cgroup out of memory: Killed process 14180 (syz.5.3210) total-vm:96212kB, anon-rss:1232kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 456.539534][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.544746][T14178] hsr_slave_0: entered promiscuous mode [ 456.555768][T14178] hsr_slave_1: entered promiscuous mode [ 456.563857][T14178] debugfs: 'hsr0' already exists in 'hsr' [ 456.585638][T14178] Cannot create hsr debugfs directory [ 456.609266][ T28] audit: type=1400 audit(1776805799.741:669): avc: denied { mounton } for pid=14233 comm="syz.2.3223" path="/61/file2/bus" dev="loop2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 456.655803][T14239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.689184][T14238] loop2: detected capacity change from 8192 to 0 [ 456.709416][T14234] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 456.709488][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'. [ 456.763501][T14235] FAT-fs (loop2): FAT read failed (blocknr 1) [ 456.777645][T14235] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 456.797577][T14234] FAT-fs (loop2): FAT read failed (blocknr 1) [ 456.811563][T14235] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 456.832376][T14178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.836750][T14234] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 456.878258][T14234] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 456.892680][T14178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.906260][T14234] Buffer I/O error on dev loop2, logical block 137, lost async page write [ 456.924966][T14234] Buffer I/O error on dev loop2, logical block 139, lost async page write [ 456.951889][T14178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.959935][T14234] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 456.973305][T14234] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 457.009145][T14234] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 457.018619][T14234] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 457.031088][T14234] Buffer I/O error on dev loop2, logical block 149, lost async page write [ 457.062808][T14178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.074745][T12896] FAT-fs (loop2): Directory bread(block 65) failed [ 457.086915][T12896] FAT-fs (loop2): Directory bread(block 66) failed [ 457.093729][T14247] netlink: 'syz.3.3226': attribute type 10 has an invalid length. [ 457.101852][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'. [ 457.146850][T12896] FAT-fs (loop2): Directory bread(block 67) failed [ 457.153532][T12896] FAT-fs (loop2): Directory bread(block 68) failed [ 457.160317][T12896] FAT-fs (loop2): Directory bread(block 69) failed [ 457.168232][T14247] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 457.170501][ T28] audit: type=1400 audit(1776805800.301:670): avc: denied { getopt } for pid=14244 comm="syz.3.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 457.173132][T12896] FAT-fs (loop2): Directory bread(block 70) failed [ 457.290385][T12896] FAT-fs (loop2): Directory bread(block 71) failed [ 457.315789][T14178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.329739][T14178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.340143][ T9450] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 457.348467][ T9450] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 457.357670][T14178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 457.364810][ T9450] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 457.377458][T14178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.384952][T12896] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 457.393779][T12896] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 457.403373][T14178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 457.410668][T12896] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 457.425238][T14178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.441050][T14178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 457.449343][T12896] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 457.458209][T12896] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 457.471937][T14178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.482163][T12896] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 457.562498][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.597871][T14262] FAULT_INJECTION: forcing a failure. [ 457.597871][T14262] name failslab, interval 1, probability 0, space 0, times 0 [ 457.612497][T14178] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.625671][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.629035][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.5.3230 Tainted: G W syzkaller #0 PREEMPT(full) [ 457.629082][T14262] Tainted: [W]=WARN [ 457.629090][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.629103][T14262] Call Trace: [ 457.629109][T14262] [ 457.629118][T14262] __dump_stack+0x1d/0x30 [ 457.629148][T14262] dump_stack_lvl+0x95/0xd0 [ 457.629173][T14262] dump_stack+0x15/0x1b [ 457.629264][T14262] should_fail_ex+0x263/0x280 [ 457.629318][T14262] should_failslab+0x8c/0xb0 [ 457.629339][T14262] __kmalloc_cache_node_noprof+0x6b/0x470 [ 457.629364][T14262] ? avc_has_perm_noaudit+0xab/0x130 [ 457.629402][T14262] ? __get_vm_area_node+0x106/0x1d0 [ 457.629448][T14262] __get_vm_area_node+0x106/0x1d0 [ 457.629472][T14262] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 457.629499][T14262] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 457.629583][T14262] ? cred_has_capability+0x224/0x2a0 [ 457.629613][T14262] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 457.629673][T14262] __vmalloc_noprof+0xa4/0xf0 [ 457.629696][T14262] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 457.629724][T14262] bpf_prog_alloc_no_stats+0x47/0x390 [ 457.629797][T14262] ? bpf_prog_alloc+0x2a/0x150 [ 457.629824][T14262] bpf_prog_alloc+0x3c/0x150 [ 457.629851][T14262] bpf_prog_load+0x50d/0x1030 [ 457.630045][T14262] ? security_bpf+0x2b/0x90 [ 457.630070][T14262] __sys_bpf+0x505/0x7e0 [ 457.630104][T14262] __x64_sys_bpf+0x41/0x50 [ 457.630185][T14262] x64_sys_call+0x10cb/0x3020 [ 457.630213][T14262] do_syscall_64+0x12c/0x3b0 [ 457.630239][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.630298][T14262] RIP: 0033:0x7fdbb069c819 [ 457.630316][T14262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.630335][T14262] RSP: 002b:00007fdbaf0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.630403][T14262] RAX: ffffffffffffffda RBX: 00007fdbb0915fa0 RCX: 00007fdbb069c819 [ 457.630418][T14262] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 457.630432][T14262] RBP: 00007fdbaf0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 457.630510][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.630524][T14262] R13: 00007fdbb0916038 R14: 00007fdbb0915fa0 R15: 00007ffde1dc8368 [ 457.630543][T14262] [ 457.630647][T14262] syz.5.3230: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 457.632892][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.660038][T14262] ,cpuset= [ 457.663891][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.664719][T14262] / [ 457.668524][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.679019][T14262] ,mems_allowed=0 [ 457.693395][T14178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.720377][T14262] [ 457.729571][T14178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.739079][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.5.3230 Tainted: G W syzkaller #0 PREEMPT(full) [ 457.739113][T14262] Tainted: [W]=WARN [ 457.739135][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.739148][T14262] Call Trace: [ 457.739155][T14262] [ 457.739164][T14262] __dump_stack+0x1d/0x30 [ 457.739194][T14262] dump_stack_lvl+0x95/0xd0 [ 457.739248][T14262] dump_stack+0x15/0x1b [ 457.739271][T14262] warn_alloc+0x145/0x1c0 [ 457.739300][T14262] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 457.739375][T14262] ? cred_has_capability+0x224/0x2a0 [ 457.739406][T14262] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 457.739442][T14262] __vmalloc_noprof+0xa4/0xf0 [ 457.739507][T14262] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 457.739573][T14262] bpf_prog_alloc_no_stats+0x47/0x390 [ 457.739600][T14262] ? bpf_prog_alloc+0x2a/0x150 [ 457.739627][T14262] bpf_prog_alloc+0x3c/0x150 [ 457.739658][T14262] bpf_prog_load+0x50d/0x1030 [ 457.739696][T14262] ? security_bpf+0x2b/0x90 [ 457.739721][T14262] __sys_bpf+0x505/0x7e0 [ 457.739803][T14262] __x64_sys_bpf+0x41/0x50 [ 457.739829][T14262] x64_sys_call+0x10cb/0x3020 [ 457.739920][T14262] do_syscall_64+0x12c/0x3b0 [ 457.740027][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.740049][T14262] RIP: 0033:0x7fdbb069c819 [ 457.740125][T14262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.740216][T14262] RSP: 002b:00007fdbaf0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.740239][T14262] RAX: ffffffffffffffda RBX: 00007fdbb0915fa0 RCX: 00007fdbb069c819 [ 457.740254][T14262] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 457.740268][T14262] RBP: 00007fdbaf0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 457.740288][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.740301][T14262] R13: 00007fdbb0916038 R14: 00007fdbb0915fa0 R15: 00007ffde1dc8368 [ 457.740320][T14262] [ 457.740340][T14262] Mem-Info: [ 457.797633][T14178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.816284][T14262] active_anon:14490 inactive_anon:11 isolated_anon:0 [ 457.816284][T14262] active_file:18519 inactive_file:3012 isolated_file:0 [ 457.816284][T14262] unevictable:0 dirty:132 writeback:0 [ 457.816284][T14262] slab_reclaimable:3498 slab_unreclaimable:20548 [ 457.816284][T14262] mapped:35443 shmem:6966 pagetables:3809 [ 457.816284][T14262] sec_pagetables:0 bounce:0 [ 457.816284][T14262] kernel_misc_reclaimable:0 [ 457.816284][T14262] free:1850801 free_pcp:24509 free_cma:0 [ 458.206554][T14262] Node 0 active_anon:53900kB inactive_anon:44kB active_file:74076kB inactive_file:12048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141772kB dirty:528kB writeback:0kB shmem:23804kB kernel_stack:4336kB pagetables:15816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 458.240499][ T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.259745][T14262] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.349127][ T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.360750][T14262] lowmem_reserve[]: 0 2878 7857 7857 [ 458.366727][T14262] Node 0 DMA32 free:2946980kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947344kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:0kB free_cma:0kB [ 458.407589][T14262] lowmem_reserve[]: 0 0 4978 4978 [ 458.420673][T14262] Node 0 Normal free:4451272kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42532kB inactive_anon:44kB active_file:74076kB inactive_file:12048kB unevictable:0kB writepending:528kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:102664kB local_pcp:64844kB free_cma:0kB [ 458.456389][T14262] lowmem_reserve[]: 0 0 0 0 [ 458.461199][T14262] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 458.461824][ T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.476335][T14262] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 4*16kB (M) 4*32kB (M) 5*64kB (M) 5*128kB (M) 3*256kB (M) 4*512kB (M) 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946980kB [ 458.502306][T14262] Node 0 Normal: 600*4kB (UME) 691*8kB (UME) 527*16kB (UME) 704*32kB (UME) 490*64kB (UME) 472*128kB (UME) 401*256kB (UME) 250*512kB (UME) 154*1024kB (UM) 112*2048kB (UM) 904*4096kB (UM) = 4451176kB [ 458.523665][T14262] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 458.549138][T14262] 24644 total pagecache pages [ 458.555416][T14262] 8 pages in swap cache [ 458.560685][T14262] Free swap = 120536kB [ 458.568449][T14262] Total swap = 124996kB [ 458.573426][T14262] 2097051 pages RAM [ 458.573613][ T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.577324][T14262] 0 pages HighMem/MovableOnly [ 458.593728][T14262] 81816 pages reserved [ 458.612383][T14178] veth0_vlan: entered promiscuous mode [ 458.623903][T14178] veth1_vlan: entered promiscuous mode [ 458.706418][T14272] chnl_net:caif_netlink_parms(): no params data found [ 458.730252][T14298] loop5: detected capacity change from 0 to 512 [ 458.737286][ T69] bridge_slave_1: left allmulticast mode [ 458.744377][ T69] bridge_slave_1: left promiscuous mode [ 458.770403][T14298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 458.784556][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.797421][ T69] bridge_slave_0: left allmulticast mode [ 458.816882][T14298] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.830300][ T69] bridge_slave_0: left promiscuous mode [ 458.847708][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.887218][ T28] audit: type=1326 audit(1776805802.011:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.3235" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbb069c819 code=0x0 [ 459.001884][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.011922][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.022020][ T69] bond0 (unregistering): Released all slaves [ 459.036131][T14178] veth0_macvtap: entered promiscuous mode [ 459.048866][ T3046] 8021q: adding VLAN 0 to HW filter on device eth5 [ 459.074373][ T69] hsr_slave_0: left promiscuous mode [ 459.082449][ T69] hsr_slave_1: left promiscuous mode [ 459.088063][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.095680][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.104536][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.112112][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.124860][ T69] veth1_macvtap: left promiscuous mode [ 459.130794][ T69] veth0_macvtap: left promiscuous mode [ 459.136384][ T69] veth1_vlan: left promiscuous mode [ 459.142272][ T69] veth0_vlan: left promiscuous mode [ 459.194061][T14317] 9p: Unknown Cache mode or invalid value l [ 459.254373][ T69] team0 (unregistering): Port device team_slave_1 removed [ 459.268180][ T69] team0 (unregistering): Port device team_slave_0 removed [ 459.354833][T14178] veth1_macvtap: entered promiscuous mode [ 459.366183][ T23] infiniband syz0: ib_query_port failed (-19) [ 459.414504][T14325] loop1: detected capacity change from 0 to 2048 [ 459.428092][T14272] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.438282][T14272] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.446224][T14272] bridge_slave_0: entered allmulticast mode [ 459.453060][T14272] bridge_slave_0: entered promiscuous mode [ 459.461791][T14178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.472151][T14272] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.479862][T14272] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.487109][T14272] bridge_slave_1: entered allmulticast mode [ 459.494372][T14272] bridge_slave_1: entered promiscuous mode [ 459.576130][T14272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.589800][T14272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.630448][T14272] team0: Port device team_slave_0 added [ 459.639845][T14272] team0: Port device team_slave_1 added [ 459.666954][T14272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.675163][T14272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.702436][T14272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.715549][T14272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.722623][T14272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.750070][T14272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.797493][T14272] hsr_slave_0: entered promiscuous mode [ 459.805217][T14272] hsr_slave_1: entered promiscuous mode [ 459.812958][T14272] debugfs: 'hsr0' already exists in 'hsr' [ 459.818823][T14272] Cannot create hsr debugfs directory [ 459.845377][T14178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.854552][T14325] loop1: p1 p2 p3 [ 459.902952][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 459.926850][ T9420] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.945968][ T9420] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.991268][ T9420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.015381][ T9420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.020082][T14347] loop5: detected capacity change from 0 to 2048 [ 460.087407][T14347] loop5: p1 p2 p3 [ 460.102925][ T69] IPVS: stop unused estimator thread 0... [ 460.129887][ T3046] 8021q: adding VLAN 0 to HW filter on device eth6 [ 460.244787][T14353] loop4: detected capacity change from 0 to 512 [ 460.261784][T14353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 460.296723][T14353] EXT4-fs (loop4): 1 orphan inode deleted [ 460.305344][T14365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.342845][T14353] EXT4-fs (loop4): 1 truncate cleaned up [ 460.358114][T14353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.411512][ T3046] 8021q: adding VLAN 0 to HW filter on device eth7 [ 460.431862][T14178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.459105][T14386] SELinux: policydb string SE Linu does not match my string SE Linux [ 460.467557][T14386] SELinux: failed to load policy [ 460.638461][T14399] loop5: detected capacity change from 0 to 512 [ 460.655595][T14399] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.679579][T14399] EXT4-fs (loop5): 1 orphan inode deleted [ 460.691572][T14399] EXT4-fs (loop5): 1 truncate cleaned up [ 460.700080][T14399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.738920][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.814679][T14409] loop5: detected capacity change from 0 to 1024 [ 460.879695][T14409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 460.898002][T14409] System zones: 0-1, 3-36 [ 460.915368][T14409] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3251: bad orphan inode 134217728 [ 460.945546][T14409] loop5: lost filesystem error report for type 5 error -117 [ 460.945932][T14409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.012875][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 461.024312][T14407] ip6gre1: entered promiscuous mode [ 461.029647][T14407] ip6gre1: entered allmulticast mode [ 461.036397][ T3679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.044340][ T3679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.070234][T10565] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.264093][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.335748][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.649104][T10565] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.230727][T14356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.242561][T14272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 463.276085][T14272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.292900][T14425] FAULT_INJECTION: forcing a failure. [ 463.292900][T14425] name failslab, interval 1, probability 0, space 0, times 0 [ 463.294604][T14272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.316692][T14272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.325523][T14272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.334453][T14272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.342351][T14272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 463.396511][T14272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.423792][T14425] CPU: 0 UID: 0 PID: 14425 Comm: syz.4.3256 Tainted: G W syzkaller #0 PREEMPT(full) [ 463.423837][T14425] Tainted: [W]=WARN [ 463.423845][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.423858][T14425] Call Trace: [ 463.423866][T14425] [ 463.423876][T14425] __dump_stack+0x1d/0x30 [ 463.423912][T14425] dump_stack_lvl+0x95/0xd0 [ 463.423941][T14425] dump_stack+0x15/0x1b [ 463.424001][T14425] should_fail_ex+0x263/0x280 [ 463.424084][T14425] should_failslab+0x8c/0xb0 [ 463.424108][T14425] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 463.424209][T14425] ? __alloc_skb+0x2d6/0x690 [ 463.424236][T14425] __alloc_skb+0x2d6/0x690 [ 463.424262][T14425] ? __alloc_skb+0x200/0x690 [ 463.424288][T14425] netlink_alloc_large_skb+0xbf/0xf0 [ 463.424348][T14425] netlink_sendmsg+0x40c/0x6f0 [ 463.424383][T14425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.424415][T14425] ____sys_sendmsg+0x563/0x5b0 [ 463.424486][T14425] ___sys_sendmsg+0x195/0x1e0 [ 463.424527][T14425] __x64_sys_sendmsg+0xd4/0x160 [ 463.424562][T14425] x64_sys_call+0x194c/0x3020 [ 463.424616][T14425] do_syscall_64+0x12c/0x3b0 [ 463.424651][T14425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.424676][T14425] RIP: 0033:0x7f55fb2bc819 [ 463.424695][T14425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.424732][T14425] RSP: 002b:00007f55f9d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.424757][T14425] RAX: ffffffffffffffda RBX: 00007f55fb535fa0 RCX: 00007f55fb2bc819 [ 463.424774][T14425] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 463.424803][T14425] RBP: 00007f55f9d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.424818][T14425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.424833][T14425] R13: 00007f55fb536038 R14: 00007f55fb535fa0 R15: 00007ffef1661678 [ 463.424854][T14425] [ 463.629450][T14431] loop3: detected capacity change from 0 to 1024 [ 463.636535][T14431] EXT4-fs: Ignoring removed bh option [ 463.641983][T14431] EXT4-fs: inline encryption not supported [ 463.648380][T14431] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 463.668495][T14431] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.3255: lblock 2 mapped to illegal pblock 2 (length 1) [ 463.682566][T14431] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 463.682709][T14431] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 463.691769][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 463.691787][ C1] EXT4-fs (loop3): initial error at time 1776805806: ext4_map_blocks:791: inode 3: block 2 [ 463.691821][ C1] EXT4-fs (loop3): last error at time 1776805806: ext4_map_blocks:791: inode 3: block 2 [ 463.726875][T14431] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.3255: Invalid inode table block 1 in block_group 0 [ 463.739634][T14431] loop3: lost filesystem error report for type 5 error -117 [ 463.739995][T14431] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 463.756864][T14431] loop3: lost filesystem error report for type 5 error -117 [ 463.757060][T14431] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.3255: mark_inode_dirty error [ 463.775799][T14431] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 463.780642][T14431] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 463.798781][T14431] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3255: Failed to acquire dquot type 0 [ 463.810261][T14431] loop3: lost filesystem error report for type 5 error -117 [ 463.811491][T14431] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 463.828406][T14431] loop3: lost filesystem error report for type 5 error -117 [ 463.830553][T14431] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.3255: mark_inode_dirty error [ 463.849397][T14431] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 463.852141][T14431] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 463.871739][T14431] EXT4-fs (loop3): 1 orphan inode deleted [ 463.878142][T14431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.918277][T14448] loop4: detected capacity change from 0 to 512 [ 463.953852][T14448] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 463.967794][T14272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.027292][T13114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.041869][T14448] EXT4-fs (loop4): 1 truncate cleaned up [ 464.047659][ T9420] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 464.068536][T14272] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.080263][T14448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: none. [ 464.088631][ T3046] 8021q: adding VLAN 0 to HW filter on device eth8 [ 464.092901][ T9420] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 464.101897][T14448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3259: bg 0: block 248: padding at end of block bitmap is not set [ 464.125722][ T9420] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 464.136239][ T9420] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:19: Failed to release dquot type 0 [ 464.148200][ T9420] loop3: lost filesystem error report for type 5 error -117 [ 464.153521][T13114] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 464.154036][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.163098][T13114] loop3: lost filesystem error report for type 5 error -117 [ 464.173952][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.198871][T13114] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 464.212920][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.220064][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.281876][T13114] loop3: lost filesystem error report for type 5 error -117 [ 464.282035][T13114] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 464.306588][T13114] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 464.377021][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3262'. [ 464.407230][T14478] loop1: detected capacity change from 0 to 512 [ 464.419761][ T28] audit: type=1400 audit(1776805807.541:672): avc: denied { bind } for pid=14474 comm="syz.3.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 464.442403][T14272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.460967][T14478] EXT4-fs: Ignoring removed nobh option [ 464.467790][T14178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 464.511381][T14478] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 464.566643][T14478] EXT4-fs (loop1): 1 truncate cleaned up [ 464.577852][T14478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.728531][T14272] veth0_vlan: entered promiscuous mode [ 464.744239][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3253'. [ 464.755303][T14272] veth1_vlan: entered promiscuous mode [ 464.776613][T14272] veth0_macvtap: entered promiscuous mode [ 464.784345][T14272] veth1_macvtap: entered promiscuous mode [ 464.824608][T14272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.874635][T14272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.896630][ T9450] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.896681][ T9450] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.896726][ T9450] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.896805][ T9450] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.914091][T14503] loop5: detected capacity change from 0 to 512 [ 464.939185][T14503] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 464.953870][T14503] EXT4-fs (loop5): 1 orphan inode deleted [ 464.953908][T14503] EXT4-fs (loop5): 1 truncate cleaned up [ 464.955396][T14503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.012346][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.106545][T14515] loop5: detected capacity change from 0 to 164 [ 465.243165][T14515] iso9660: Unknown parameter ' [ 469.230621][T14588] __dump_stack+0x1d/0x30 [ 469.230653][T14588] dump_stack_lvl+0x95/0xd0 [ 469.230681][T14588] dump_stack+0x15/0x1b [ 469.230706][T14588] should_fail_ex+0x263/0x280 [ 469.230764][T14588] should_fail+0xb/0x20 [ 469.230867][T14588] should_fail_usercopy+0x1a/0x20 [ 469.230908][T14588] _copy_from_user+0x1c/0xb0 [ 469.230952][T14588] __copy_msghdr+0x244/0x300 [ 469.230985][T14588] ___sys_sendmsg+0x10c/0x1e0 [ 469.231045][T14588] __x64_sys_sendmsg+0xd4/0x160 [ 469.231193][T14588] x64_sys_call+0x194c/0x3020 [ 469.231295][T14588] do_syscall_64+0x12c/0x3b0 [ 469.231325][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.231408][T14588] RIP: 0033:0x7fdbb069c819 [ 469.231427][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.231448][T14588] RSP: 002b:00007fdbaf0ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.231472][T14588] RAX: ffffffffffffffda RBX: 00007fdbb0915fa0 RCX: 00007fdbb069c819 [ 469.231489][T14588] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 469.231545][T14588] RBP: 00007fdbaf0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 469.231559][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.231573][T14588] R13: 00007fdbb0916038 R14: 00007fdbb0915fa0 R15: 00007ffde1dc8368 [ 469.231593][T14588] [ 469.332177][T14535] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.408244][T14562] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 469.419106][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.442957][T14535] bridge_slave_1: entered allmulticast mode [ 469.450399][T14535] bridge_slave_1: entered promiscuous mode [ 469.505211][T14535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.526871][T14535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.538306][T14604] netlink: 'syz.4.3288': attribute type 33 has an invalid length. [ 469.556197][T14272] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.570192][T14604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3288'. [ 469.597096][T14610] loop3: detected capacity change from 0 to 512 [ 469.609076][T14602] syzkaller0: entered promiscuous mode [ 469.627976][T14602] syzkaller0: entered allmulticast mode [ 469.648935][T14610] EXT4-fs: Ignoring removed nobh option [ 469.664664][T14610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 469.670820][T14535] team0: Port device team_slave_0 added [ 469.692104][T14610] EXT4-fs (loop3): 1 truncate cleaned up [ 469.703188][T14610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.725667][T14615] FAULT_INJECTION: forcing a failure. [ 469.725667][T14615] name failslab, interval 1, probability 0, space 0, times 0 [ 469.750202][T14535] team0: Port device team_slave_1 added [ 469.784881][T14615] CPU: 1 UID: 0 PID: 14615 Comm: syz.4.3292 Tainted: G W syzkaller #0 PREEMPT(full) [ 469.784918][T14615] Tainted: [W]=WARN [ 469.784925][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.785009][T14615] Call Trace: [ 469.785015][T14615] [ 469.785023][T14615] __dump_stack+0x1d/0x30 [ 469.785052][T14615] dump_stack_lvl+0x95/0xd0 [ 469.785135][T14615] dump_stack+0x15/0x1b [ 469.785163][T14615] should_fail_ex+0x263/0x280 [ 469.785196][T14615] should_failslab+0x8c/0xb0 [ 469.785215][T14615] __kmalloc_noprof+0xb8/0x4d0 [ 469.785236][T14615] ? io_cache_alloc_new+0x2a/0xb0 [ 469.785301][T14615] io_cache_alloc_new+0x2a/0xb0 [ 469.785342][T14615] __io_prep_rw+0x116/0x710 [ 469.785366][T14615] ? __io_alloc_req_refill+0x141/0x1e0 [ 469.785412][T14615] io_prep_write+0x34/0xe0 [ 469.785449][T14615] ? blk_start_plug_nr_ios+0xc2/0xe0 [ 469.785480][T14615] io_submit_sqes+0x736/0x1170 [ 469.785507][T14615] __se_sys_io_uring_enter+0x255/0xfb0 [ 469.785530][T14615] ? mutex_lock+0x57/0x90 [ 469.785634][T14615] ? mutex_unlock+0x4e/0x90 [ 469.785762][T14615] ? fput+0x8f/0xc0 [ 469.785856][T14615] __x64_sys_io_uring_enter+0x78/0x90 [ 469.785879][T14615] x64_sys_call+0x1e16/0x3020 [ 469.785912][T14615] do_syscall_64+0x12c/0x3b0 [ 469.785961][T14615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.786052][T14615] RIP: 0033:0x7f55fb2bc819 [ 469.786072][T14615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.786249][T14615] RSP: 002b:00007f55f9d0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 469.786335][T14615] RAX: ffffffffffffffda RBX: 00007f55fb535fa0 RCX: 00007f55fb2bc819 [ 469.786349][T14615] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 469.786362][T14615] RBP: 00007f55f9d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 469.786375][T14615] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 469.786389][T14615] R13: 00007f55fb536038 R14: 00007f55fb535fa0 R15: 00007ffef1661678 [ 469.786410][T14615] [ 470.055903][T14535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.073662][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.110084][T14535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.146993][T14535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.187286][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.321304][T14535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.349789][T14535] hsr_slave_0: entered promiscuous mode [ 470.356052][T14535] hsr_slave_1: entered promiscuous mode [ 470.373503][T14535] debugfs: 'hsr0' already exists in 'hsr' [ 470.379446][T14535] Cannot create hsr debugfs directory [ 470.388543][T14636] loop6: detected capacity change from 0 to 512 [ 470.397185][T14636] EXT4-fs: Ignoring removed nobh option [ 470.443337][T14637] loop4: detected capacity change from 0 to 512 [ 470.539101][T14606] ================================================================== [ 470.547376][T14606] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 470.557216][T14606] [ 470.559569][T14606] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 0: [ 470.567837][T14606] tick_do_update_jiffies64+0x113/0x1c0 [ 470.573419][T14606] tick_nohz_handler+0x8d/0x3d0 [ 470.578302][T14606] __hrtimer_run_queues+0x276/0x4f0 [ 470.583629][T14606] hrtimer_interrupt+0x261/0x850 [ 470.588592][T14606] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 470.594523][T14606] sysvec_apic_timer_interrupt+0x6f/0x80 [ 470.600366][T14606] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.606383][T14606] _raw_spin_unlock_irq+0x12/0x30 [ 470.611445][T14606] shmem_add_to_page_cache+0x3e6/0x5b0 [ 470.617026][T14606] shmem_get_folio_gfp+0x4f3/0xd60 [ 470.622188][T14606] shmem_write_begin+0xfc/0x1f0 [ 470.627070][T14606] generic_perform_write+0x183/0x490 [ 470.632478][T14606] shmem_file_write_iter+0xc5/0xf0 [ 470.637621][T14606] __kernel_write_iter+0x319/0x590 [ 470.642772][T14606] dump_user_range+0xa73/0xd00 [ 470.647575][T14606] elf_core_dump+0x21a2/0x2330 [ 470.652384][T14606] coredump_write+0xacc/0xdd0 [ 470.657091][T14606] vfs_coredump+0x26dd/0x31e0 [ 470.661803][T14606] get_signal+0xd5c/0xf20 [ 470.666521][T14606] arch_do_signal_or_restart+0x96/0x450 [ 470.672182][T14606] irqentry_exit+0x140/0x5b0 [ 470.676840][T14606] asm_exc_page_fault+0x26/0x30 [ 470.681730][T14606] [ 470.684169][T14606] read to 0xffffffff86e07a00 of 8 bytes by task 14606 on cpu 1: [ 470.691908][T14606] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 470.698187][T14606] count_shadow_nodes+0x6a/0x250 [ 470.703417][T14606] do_shrink_slab+0x63/0x660 [ 470.708038][T14606] shrink_slab+0x545/0x8f0 [ 470.712484][T14606] shrink_node+0x6d4/0x20a0 [ 470.717011][T14606] do_try_to_free_pages+0x408/0xc90 [ 470.722245][T14606] try_to_free_mem_cgroup_pages+0x201/0x420 [ 470.728190][T14606] try_charge_memcg+0x373/0xa10 [ 470.733090][T14606] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 470.738779][T14606] __alloc_frozen_pages_noprof+0x18a/0x350 [ 470.744795][T14606] alloc_pages_mpol+0xb3/0x260 [ 470.749599][T14606] alloc_pages_noprof+0x8f/0x140 [ 470.754566][T14606] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 470.760486][T14606] __kvmalloc_node_noprof+0x3d4/0x640 [ 470.765883][T14606] futex_hash_allocate+0x190/0x9a0 [ 470.771248][T14606] futex_hash_prctl+0xd8/0xf0 [ 470.775959][T14606] __se_sys_prctl+0x4f4/0x1400 [ 470.780762][T14606] __x64_sys_prctl+0x67/0x80 [ 470.785387][T14606] x64_sys_call+0x2533/0x3020 [ 470.790098][T14606] do_syscall_64+0x12c/0x3b0 [ 470.794739][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.800658][T14606] [ 470.802995][T14606] value changed: 0x000000010000425b -> 0x000000010000425c [ 470.810117][T14606] [ 470.812504][T14606] Reported by Kernel Concurrency Sanitizer on: [ 470.819123][T14606] CPU: 1 UID: 0 PID: 14606 Comm: syz.3.3290 Tainted: G W syzkaller #0 PREEMPT(full) [ 470.830102][T14606] Tainted: [W]=WARN [ 470.833922][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 470.844006][T14606] ================================================================== [ 470.998587][T14272] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 471.044835][T14272] CPU: 1 UID: 0 PID: 14272 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 471.044929][T14272] Tainted: [W]=WARN [ 471.044937][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 471.044949][T14272] Call Trace: [ 471.044957][T14272] [ 471.044965][T14272] __dump_stack+0x1d/0x30 [ 471.044993][T14272] dump_stack_lvl+0x95/0xd0 [ 471.045022][T14272] dump_stack+0x15/0x1b [ 471.045105][T14272] dump_header+0x80/0x240 [ 471.045205][T14272] oom_kill_process+0x295/0x350 [ 471.045244][T14272] out_of_memory+0x97d/0xb80 [ 471.045396][T14272] try_charge_memcg+0x62f/0xa10 [ 471.045437][T14272] charge_memcg+0x6d/0x120 [ 471.045526][T14272] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 471.045564][T14272] __swap_cache_prepare_and_add+0x69/0x4a0 [ 471.045608][T14272] ? alloc_pages_mpol+0x217/0x260 [ 471.045712][T14272] swap_cache_alloc_folio+0xa2/0x120 [ 471.045739][T14272] swap_cluster_readahead+0x25f/0x3c0 [ 471.045772][T14272] swapin_readahead+0xde/0x840 [ 471.045876][T14272] ? tick_program_event+0x79/0xc0 [ 471.045964][T14272] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 471.045993][T14272] ? __rcu_read_unlock+0x4e/0x70 [ 471.046070][T14272] ? swap_cache_get_folio+0x1e0/0x1f0 [ 471.046101][T14272] do_swap_page+0x31e/0x2180 [ 471.046143][T14272] ? __schedule+0x936/0xd20 [ 471.046177][T14272] ? __rcu_read_lock+0x36/0x50 [ 471.046203][T14272] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 471.046358][T14272] handle_mm_fault+0xb2e/0x2e70 [ 471.046388][T14272] ? vma_start_read+0x1c7/0x2c0 [ 471.046420][T14272] do_user_addr_fault+0x62f/0x1050 [ 471.046521][T14272] ? trace_page_fault_user+0x1f/0xa0 [ 471.046558][T14272] exc_page_fault+0x62/0xa0 [ 471.046594][T14272] asm_exc_page_fault+0x26/0x30 [ 471.046619][T14272] RIP: 0033:0x7fa3b2637997 [ 471.046677][T14272] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 471.046700][T14272] RSP: 002b:00007ffdfac81ad0 EFLAGS: 00010202 [ 471.046722][T14272] RAX: 0000000000000000 RBX: 0000555586d8b500 RCX: 00007fa3b2637997 [ 471.046739][T14272] RDX: 00007ffdfac81b10 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.046758][T14272] RBP: 00007ffdfac81b7c R08: 0000000000000000 R09: 0000000000000000 [ 471.046771][T14272] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 471.046784][T14272] R13: 00000000000927c0 R14: 0000000000072c53 R15: 00007ffdfac81bd0 [ 471.046858][T14272] [ 471.046867][T14272] memory: usage 307024kB, limit 307200kB, failcnt 100 [ 471.159689][T14636] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 471.198843][T14637] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3299: invalid indirect mapped block 256 (level 2) [ 471.238102][T14272] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 471.244371][T14637] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 471.248990][T14637] EXT4-fs (loop4): 2 truncates cleaned up [ 471.267735][T14272] kmem: usage 306988kB, limit 9007199254740988kB, failcnt 0 [ 471.275718][T14637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.382344][T14636] EXT4-fs (loop6): 1 truncate cleaned up [ 471.389168][T14636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.402246][T14272] Memory cgroup stats for /syz6: [ 471.402588][T14272] cache 53248 [ 471.412286][T14272] rss 0 [ 471.468346][T14178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.502297][T14272] shmem 40960 [ 471.522389][T14272] mapped_file 0 [ 471.534792][T14272] dirty 8192 [ 471.545442][T14272] writeback 0 [ 471.565966][T13114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.572809][T14272] workingset_refault_anon 13 [ 471.582438][T14535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.614018][T14272] workingset_refault_file 0 [ 471.629120][T14272] swap 339968 [ 471.640056][T14272] swapcached 397312 [ 471.645308][T14272] pgpgin 26500 [ 471.654647][T14272] pgpgout 26486 [ 471.678884][T14535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.691175][T14272] pgfault 8412 [ 471.709252][T14272] pgmajfault 4 [ 471.713615][T14272] inactive_anon 0 [ 471.730031][T14272] active_anon 32768 [ 471.733889][T14272] inactive_file 0 [ 471.737604][T14272] active_file 4096 [ 471.752844][T14535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.769063][T14272] unevictable 0 [ 471.772684][T14272] hierarchical_memory_limit 314572800 [ 471.779076][T14272] hierarchical_memsw_limit 9223372036854771712 [ 471.791896][T14272] total_cache 53248 [ 471.800343][T14272] total_rss 0 [ 471.828586][T14272] total_shmem 40960 [ 471.835107][T14535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.846178][T14272] total_mapped_file 0 [ 471.855318][T14272] total_dirty 8192 [ 471.863653][T14272] total_writeback 0 [ 471.871310][T14272] total_workingset_refault_anon 13 [ 471.877402][T14272] total_workingset_refault_file 0 [ 471.889936][T14272] total_swap 339968 [ 471.893943][T14272] total_swapcached 397312 [ 471.898414][T14272] total_pgpgin 26500 [ 471.902424][T14272] total_pgpgout 26486 [ 471.906693][T14272] total_pgfault 8412 [ 471.910897][T14272] total_pgmajfault 4 [ 471.914883][T14272] total_inactive_anon 0 [ 471.920548][T14272] total_active_anon 32768 [ 471.924983][T14272] total_inactive_file 0 [ 471.929288][T14272] total_active_file 4096 [ 471.933671][T14272] total_unevictable 0 [ 471.937703][T14272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3295,pid=14627,uid=0 [ 471.950995][T14535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.952581][T14272] Memory cgroup out of memory: OOM victim 14627 (syz.6.3295) is already exiting. Skip killing the task [ 471.973724][T14535] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.981911][T14535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.990174][T14272] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.004637][T14535] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.012579][T14535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.025096][T14535] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.033160][T14535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.043017][T14535] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.083108][T14535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.095877][T14535] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.106110][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.113254][ T9439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.124979][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.132081][ T9439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.152242][T14535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.162912][T14535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.233571][T14535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.303215][T14535] veth0_vlan: entered promiscuous mode [ 472.311290][T14535] veth1_vlan: entered promiscuous mode [ 472.327168][T14535] veth0_macvtap: entered promiscuous mode [ 472.335735][T14535] veth1_macvtap: entered promiscuous mode [ 472.347344][T14535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.360406][T14535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.372042][ T9434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.381152][ T9434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.392826][ T9434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.401959][ T9434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.099095][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!