last executing test programs: 3m0.520849748s ago: executing program 0 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0x94) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x7ffff088) 3m0.485254302s ago: executing program 0 (id=1555): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r2, 0x5) accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) 2m59.623888463s ago: executing program 0 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(0x0, 0x0, 0x400010, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x80000}, 0x18) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0xd, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @private0, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00086c"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 2m59.48880758s ago: executing program 0 (id=1570): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, 0x0, &(0x7f0000000400)=""/198}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000900)={'\x00', 0x6, 0x0, 0x2, 0x1, 0x1, 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = getpid() r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x5, 0x0, @tid=r8}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000500)=0xc) fcntl$getownex(r3, 0x10, &(0x7f0000000980)={0x0, 0x0}) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r11, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) syz_clone3(&(0x7f0000000a00)={0x148182000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x8}, &(0x7f0000000780)=""/251, 0xfb, &(0x7f0000000880)=""/84, &(0x7f00000009c0)=[r4, r5, r6, r7, r8, r9, r10], 0x7, {r11}}, 0x58) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/183, 0xb7) 2m59.147917653s ago: executing program 0 (id=1575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x7b2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 2m58.524500333s ago: executing program 0 (id=1586): r0 = socket(0x21, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x17, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='syzkaller\x00', 0x15, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x10, 0x806, &(0x7f0000001d80)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000d060102050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kexec_load(0x3e00, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187014, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x18) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 2m58.510813814s ago: executing program 32 (id=1586): r0 = socket(0x21, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x17, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='syzkaller\x00', 0x15, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x10, 0x806, &(0x7f0000001d80)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000d060102050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kexec_load(0x3e00, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187014, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x18) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 2m58.106684536s ago: executing program 3 (id=1594): r0 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 2m58.060114092s ago: executing program 3 (id=1595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000400)=""/144, 0x90, 0x0, &(0x7f0000000500)=""/149, 0x95}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x80040, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xd0000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000280)='GPL\x00', 0x1d, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x4, 0x2}, 0x10, r3, r0, 0x8, &(0x7f0000000740)=[r4, r5, r6], &(0x7f0000000780)=[{0x4, 0x2, 0x4, 0x8}, {0x1, 0x4, 0x5, 0x7}, {0x1, 0x3, 0xd, 0x6}, {0x1, 0x3, 0x1, 0xc}, {0x4, 0x2, 0x4}, {0x4, 0x4, 0x5, 0x4}, {0x2, 0x4, 0x8, 0x9}, {0x5, 0x2, 0x2}], 0x10, 0x3}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2a, 0x4, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}}, 0x20040054) 2m57.960486835s ago: executing program 3 (id=1596): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40002040, &(0x7f0000000440)={r1, r2+60000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfe}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040001}, 0x44000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x2, 0xa, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) accept4$inet(r9, 0x0, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000037000000", @ANYRES32=r10, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x300800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c00)={0x98, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x16}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0x48, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000800) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @loopback, @loopback}}}], 0x20}, 0x0) 2m57.92496857s ago: executing program 3 (id=1597): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53f, &(0x7f0000000480)="$eJzs3V9rZGcZAPDnzGay2d1sk6oXWmgttrJbdGc2jW2DF7WC6FVBrPdrTGZD2ElmSSbtJhSdfAJBRAWv9MYbwQ8gyIIgXoqwoNcKFUV0q6AX2iNn5kwSJ2eS2Tib2Ux+Pzh73vf8e553Nued848zAZxbz0fEGxHxQZqmL0XETD69lA/R6gzZcu8/fHcpG5JI07f+mkSST+tuK8nHV/LVpiLiK1+K+HpyOO7m9s6dxXq9tpHXq821u9XN7Z0bq2uLK7WV2vr8/NyrC68tvLJwcyjtvBoRr3/hj9/91o+/+PrPP/3OH279+fo3srSm8/kH2/GIJo6a2Wl6+eJUzwobJwz2JMraU+5WLg22zu5jzAcAgP6yY/wPRcQnIuKlmIkLRx/OAgAAAGdQ+rnp+HcSkRab7DMdAAAAOENK7Wdgk1IlfxZgOkqlSqXzDO9H4nKp3thsfup2Y2t9ufOs7GyUS7dX67Wb+bPCs1FOsvpcu7xff7mnPh8RT0fEd2YuteuVpUZ9edQXPwAAAOCcuNJz/v+Pmc75PwAAADBmZkedAAAAAPDYOf8HAACA8ef8HwAAAMbal998MxvS7u9fL7+9vXWn8faN5drmncra1lJlqbFxt7LSaKy039m3dtz26o3G3c/E+ta9arO22axe3d65tdbYWm/eWo2pU2kQAAAAcMjTH7//uyQiWp+91B4yk6NOCjgVE3ulJB8X7P2/f6ozfu+UkgJOxYUBlnnvYvF0xwlwtk30TuizrwPjp3zEPDfs4XxIjpnfty/4dWdUGnI+AADA8F37WPH9/+OP51sO+eGMsxPD+dVz/z+dGVUiwKlr3/8f9EEeBwswVsoDPQEIjLP/9/7/8dL0kRICAACGbro9JKVKfnlvOkqlSiXiavtnAcrJ7dV67WZEPBURv50pX8zqc+01k2PPGQAAAAAAAAAAAAAAAAAAAAAAAACAjjRNIgUAAADGWkTpT8kvOu/yvzbz4nTv9YHJ5F/tnwSejIh3fvDW9+4tNpsbc9n0v+1Nb34/n/7yKK5gAAAAAL265+nt8T9HnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4+b9h+8udYcBFr80rLh/+XxEzBbFn4ip9ngqyhFx+e9JTBxYL4mIC0OI39qNiI8WxU+ytPZCFsUfxofQ2k1aaVth/JjNP4Wi+FeGEB/Os/tZ//NG0f5fiufb4+L9byLif+on1b//i73+70Kf/f/qgDGeefDTat/4uxHPTBT3f934SZ/4LwwY/2tf3dnpNy/9YcS17vdPu8c7GGG/VG2u3a1ubu/cWF1bXKmt1Nbn5+deXXht4ZWFm9Xbq/Va/m9hjG8/+7MPjmr/5cLvvyTPpn/7XyzYXtF30n8e3Hv44W6ldTj+9RcK4v/qR/kSh+OX8jifzMvZ/GvdcqtTPui5n/zmuaPav7zf/vKj/P9f77fRXod2lGcH/dMBAB6Dze2dO4v1em1jbAvZWfoTkMZJCpPxRKQxvoVvZoUHw9pgmqZptk8VzLofEYNsJ4n+y/zyJImVivPZL/TtAUbdMwEAAMO2f9A/6kwAAAAAAAAAAAAAAAAAAADg/DqNt6z1xtx/BXIyjFdoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMxX8DAAD//w+V1+I=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="1e40fa1106e2b7faabe25404613119cbf44d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000958b050e01ffb8475c0a7cde2a838175ca52a15689e63eecae9b84eeeb77fd965c418b12eb3e84af244d47ec3913aba66740431624d22def71c50fa1c7c06a9060cad40a9dc52f3b93cf2e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32], 0x48) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/uts\x00') (async) bind$bt_hci(r2, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x50002, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, &(0x7f0000000300)=0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x8001}}, './file0\x00'}) (async) sync() 2m57.743524502s ago: executing program 3 (id=1598): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x7ffff088) 2m57.483693066s ago: executing program 3 (id=1600): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000180)={[{@discard}, {@jqfmt_vfsold}, {@usrjquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug}]}, 0x3, 0x441, &(0x7f00000006c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 2m57.438898671s ago: executing program 33 (id=1600): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000180)={[{@discard}, {@jqfmt_vfsold}, {@usrjquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug}]}, 0x3, 0x441, &(0x7f00000006c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 1m45.208562166s ago: executing program 6 (id=2940): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x40002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x2, 0x21e}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x114) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0x3ffc0002}, {0x6, 0x5, 0x7}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1m44.379916372s ago: executing program 6 (id=2947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.203773244s ago: executing program 6 (id=2950): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000100)) (fail_nth: 2) 1m43.836516781s ago: executing program 6 (id=2954): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080000000000600000018110000e98a6bde76e7c9bd3c5243f5fc046d4a11cfe1878726afde01de7e0713dac87b28a06678b392d6eb8cbdabcba28ad521b29a5071b19a2bd76b27ea638c60d27d0898f125e37fd88b61d463c0fb33a99dedad169f13eac95d471bbb5af46529fc80dc917809051da81da09bb684b52f9825", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='cachefiles_mark_inactive\x00', r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f00000000c0), 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r3, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sync() sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x11) semtimedop(0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) 1m43.37562948s ago: executing program 6 (id=2957): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000808385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") 1m42.920592368s ago: executing program 6 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) uname(&(0x7f0000000080)=""/47) 1m42.882350643s ago: executing program 34 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) uname(&(0x7f0000000080)=""/47) 7.51636008s ago: executing program 4 (id=4462): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, 0x0, 0x129242, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 6.569682901s ago: executing program 4 (id=4470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x10, 0x3, 0x10) 6.121412148s ago: executing program 4 (id=4473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x41) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.868993548s ago: executing program 4 (id=4481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/11], 0x48) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) 3.433460402s ago: executing program 2 (id=4489): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.648738692s ago: executing program 2 (id=4491): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) msgsnd(0x0, 0x0, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x2000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = io_uring_setup(0x530f, &(0x7f00000003c0)={0x0, 0xd0ed, 0x1000, 0x1, 0x36a}) io_uring_enter(r7, 0x548d, 0x37f, 0xf89c6ba8691986f5, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8) sendmmsg$inet(r6, &(0x7f0000000540)=[{{&(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="10dd14ffffffffffff00000007000000"], 0x10}}], 0x1, 0x20000054) 1.784585293s ago: executing program 2 (id=4502): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.025989429s ago: executing program 7 (id=4509): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r6 = dup(r5) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0xc00600000000fdfd) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r9, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 924.372803ms ago: executing program 2 (id=4510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x41) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 898.951336ms ago: executing program 4 (id=4511): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2000) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000297bc06a0e54e29fb122bdb9b898b90bb0e07f2be0ac4e1c3ce4232248a05fbb64a829b3f18724f248a406bab808f71e179b710e5a29a74b238ba3d1601592a331e57921bd79237cbff5a860f97f7a97606074202de826fc291f43c6aa9422da36b075d3ab915b82ed89c4c8817baf56f159ab07f0eef39207cd66a112f9d7fb731bebe60e1cec7bc3ec999080244dbc2222fb572a33ff374c833a14c6dd825633809411fd1b8260ec8c0689a321cd41febc074734699dde9947d2b387e089e536406940a2d1f5c4f4e094d399", @ANYRES16=r1, @ANYBLOB="000328bd7000fbdbdf250200000008004000050000000800620007000000"], 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x4081) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000002000000ff0f001ecfb249c4e0070007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) creat(&(0x7f0000000580)='./bus\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) setresgid(0xee00, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtclass={0x488, 0x28, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0xd}, {0xf, 0xb}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xf4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0xb4}}, @tclass_kind_options=@c_htb={{0x8}, {0x420, 0x2, [@TCA_HTB_RATE64={0xc}, @TCA_HTB_CTAB={0x404, 0x3, [0x5, 0x800, 0x3b0, 0x5c, 0x20f, 0x8, 0x3, 0x401, 0x9, 0x8, 0x50, 0xffffffff, 0x4, 0x1, 0x6, 0xc, 0x7, 0x8, 0x4, 0x4d0a, 0x9, 0xcd6e, 0x5, 0x8, 0x2, 0x7f, 0x9, 0xf2a, 0x10001, 0x9, 0x6, 0x0, 0x400, 0x62, 0x9, 0x400, 0x401, 0x3, 0x8, 0x9, 0x4, 0x56df, 0x200, 0x80000001, 0x30f, 0x91, 0x80000000, 0xe, 0x6, 0x0, 0xffffff00, 0x5, 0xfff, 0xea7, 0x4, 0x2, 0xfffffffb, 0x401, 0x2, 0x0, 0x5, 0x0, 0xffffff31, 0x0, 0x1, 0x0, 0x800, 0x2, 0xff, 0xfffffffa, 0x5, 0x8, 0x9, 0x100, 0x9, 0x0, 0x7, 0x2, 0x2, 0x3, 0x170, 0x10, 0x3, 0x8, 0x4, 0x1, 0x7, 0x4735, 0x101, 0xfffffff9, 0xa, 0x10001, 0x4, 0x0, 0x9, 0x0, 0x8, 0x2, 0x0, 0x88, 0x40, 0x2, 0x3, 0xf, 0x0, 0xffffffc2, 0x1, 0xfffffffb, 0x1, 0x8, 0x440, 0x5, 0x2, 0x7, 0x2, 0x1, 0x6, 0x0, 0x4, 0xd, 0x9, 0x10001, 0xae6, 0x0, 0x0, 0xfff, 0x1, 0x0, 0x4, 0x6, 0x4, 0x5, 0x8, 0x8, 0x9, 0x80000001, 0x7, 0x10000, 0x8, 0x1, 0x101, 0x5, 0x7, 0x5, 0x7ff, 0x1, 0x0, 0x2, 0x5, 0x11, 0x10, 0x7, 0x5, 0x4, 0x6a, 0x2, 0x9, 0x7ff, 0xffffffff, 0x6e, 0x0, 0x1, 0xfffffffc, 0x0, 0x5, 0x800, 0x7ff, 0x2, 0x586e, 0x0, 0x100, 0x4, 0x4, 0xfffffff8, 0x7f, 0x8, 0x0, 0x9, 0x9e4d, 0x7, 0x4, 0x9, 0x9, 0x5e9, 0x5, 0xfff, 0x3, 0x5, 0x4, 0x6, 0x7, 0xb, 0x2, 0x645, 0x7, 0x4, 0x1, 0x6, 0x14000000, 0x1, 0x7, 0xfffffffc, 0x64, 0x3, 0x20003, 0x80000001, 0xe, 0x38, 0x241, 0x2, 0x1c47, 0xf3, 0xc5340000, 0xffffffff, 0x5, 0x3, 0x1, 0x400, 0x8, 0xffffffff, 0xfffffffc, 0x7, 0x0, 0x2, 0x4, 0x34d1, 0x8, 0x1, 0x3, 0x91ef, 0x1b7, 0x9, 0x8, 0x4248, 0x1, 0x200, 0x6, 0x3, 0xb, 0x1000, 0xfffffffb, 0x4, 0x6, 0x927, 0x8, 0xff, 0x3, 0x7fff, 0x8, 0x9, 0xd12, 0x10000, 0x8, 0x5, 0xb, 0x4]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x46c}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000010400)="8000008000fac8fda2b58c8bb59b5700", 0x10, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000240)) (async) socket$inet6(0xa, 0x80002, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) 898.021486ms ago: executing program 5 (id=4512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x40, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x129, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0xffffffff, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x80000000, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x0, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x7f, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x8, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x180, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x89, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4004, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x6, 0x7, 0x7, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x7ff, 0x6, 0xf, 0xffffffff, 0xa, 0x723, 0x7e, 0x9, 0x9, 0x4, 0x8, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x40000000, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x6, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 820.298336ms ago: executing program 5 (id=4513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 819.976725ms ago: executing program 4 (id=4514): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fc060025020000000800090002"], 0x1c}, 0x1, 0x100000000000000}, 0x40) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c800001", @ANYRES16=r6, @ANYBLOB="100027bd7000fedbdf250700000008001800640101010600030000fe00000500070002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80f4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffddc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 806.398197ms ago: executing program 2 (id=4515): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") 805.992788ms ago: executing program 7 (id=4516): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40002040, &(0x7f0000000440)={r1, r2+60000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r8, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfe}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040001}, 0x44000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x2, 0xa, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) accept4$inet(r10, 0x0, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000037000000", @ANYRES32=r11, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x300800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c00)={0x8c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x16}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000800) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @loopback, @loopback}}}], 0x20}, 0x0) 532.071323ms ago: executing program 2 (id=4517): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'fowner<'}}, {@debug={'debug', 0x3d, 0x3}}, {@loose}]}}) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, 0x0, 0x0, &(0x7f0000000840)=[{0x88, 0x1, 0xe, "be0ab6c358bfcceb248472d3f21e3aa0ede93def474abc9f327868f9c76c22a2943f3bdd1858ca26102324b8fd917f8799a847f707fa13562018a44356ce679c0549ad7f8e1e6a5243fb7d180fb5521a4c9d7df80d4c6da374d7299dabc1940d476865347e9a5079b7f37f9b3652f4d836eae4fb15"}, {0xd8, 0x6, 0x6, "245e42a97a692fa4b3d3e4c91ef62a34e18feddc7f73633af86f7cf95743f2206791e1b033d78eea8545800326985f9c1dfd7e8a7a9a5591d3d6bc0d82fa127b0f0986e4632d93f237198d94b2e79b21dbef13f0682cf26737fc3a6c6f888ccf82dbde959f63bf2d8de4f9151e8ce2b88e52cad9a5cba1bcc918261aa6a62fac4f0775fc9381b38b593abe5dc5877f55ef94957a2bdff8d5d09cab807fcfd40ccc779473b4418ac7f00988d547f303a8b0b118fa6d90d7892a79a96d600ced81c7fe80b112ce26"}], 0x160}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') getdents64(r4, &(0x7f00000088c0)=""/42, 0x2a) getdents(r4, 0xffffffffffffffff, 0x5a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x89901) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x60000, {r7}}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f00000002c0)={0x2, &(0x7f0000000200)="aa852a6dd1fb0e1fd3019f835dbca963fba8ad8a09d23a22204cc12d1c9d0489e6f0df326f6ef953ab57102346d5531a90997bc08d144ef260d5f17a8473c1df1776ac0e84a3d8c9f39d82bfd4e79a099b5c4164bc7d72e12d6540a967bd2bedc6100a7037490158b67b754a8e6d5a25492f4b0c1d03d262d15036d13fcc9090c551a8aac5005bfbb201bf424fbbcd7c5adb630d1377ad"}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 528.786303ms ago: executing program 7 (id=4518): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 500.198167ms ago: executing program 7 (id=4519): r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r2, 0x0, 0x4}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, 0x0, 0x842, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x9c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x88, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x6, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000200)=""/4129, &(0x7f00000000c0)=0x1021) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 488.098688ms ago: executing program 5 (id=4520): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 463.504281ms ago: executing program 7 (id=4521): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 463.079211ms ago: executing program 5 (id=4522): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x48810) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x778) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='sched_kthread_stop_ret\x00', r3, 0x0, 0x5}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x7, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = memfd_secret(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r8, r7, 0x2e, 0x4608, @void}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, 0x0, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x10000000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) dup(r10) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[]) close_range(r8, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x1f, 0xf74c, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x68, 0x0, 0x81, 0x4, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfb}]}, @cipso={0x86, 0x24, 0x0, [{0x2, 0x5, "dca54b"}, {0x2, 0xb, "a3b7754f4991ae9bea"}, {0x2, 0x5, "f20444"}, {0x1, 0x9, "a44f3dd90cde32"}]}]}}}}}) 444.066804ms ago: executing program 7 (id=4523): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@noblock_validity}, {}, {@noauto_da_alloc}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) rename(&(0x7f0000000180)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xd, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) getrlimit(0x0, &(0x7f0000000200)) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa10000000000000701dffff8ffffffb702000008000000b703000000000083850000002d0c000000da854c2fec30b4552521ca9ec5065eb548d7e437c94494a884e450e80652cea50cbd1b4872ed36f170638ecd78439c43df41353cc7d336e0265743c9b11761b9cc"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 367.730144ms ago: executing program 5 (id=4524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x40, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x129, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0xffffffff, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x80000000, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x0, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x7f, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x8, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x180, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x89, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4004, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x6, 0x7, 0x7, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x7ff, 0x6, 0xf, 0xffffffff, 0xa, 0x723, 0x7e, 0x9, 0x9, 0x4, 0x8, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x40000000, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x6, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 344.840917ms ago: executing program 5 (id=4525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x41) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 258.451347ms ago: executing program 1 (id=4526): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x48810) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x778) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='sched_kthread_stop_ret\x00', r3, 0x0, 0x5}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x7, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = memfd_secret(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r8, r7, 0x2e, 0x4608, @void}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, 0x0, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x10000000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) dup(r10) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[]) close_range(r8, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (fail_nth: 1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x1f, 0xf74c, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x68, 0x0, 0x81, 0x4, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfb}]}, @cipso={0x86, 0x24, 0x0, [{0x2, 0x5, "dca54b"}, {0x2, 0xb, "a3b7754f4991ae9bea"}, {0x2, 0x5, "f20444"}, {0x1, 0x9, "a44f3dd90cde32"}]}]}}}}}) 166.23608ms ago: executing program 1 (id=4527): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'wg0\x00', 0x20}) syz_clone3(&(0x7f00000002c0)={0x4800, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0xb}, &(0x7f0000000100)=""/92, 0x5c, &(0x7f0000000180)=""/237, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x9, 0x7, 0x1, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101182, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000400)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000440)) rmdir(&(0x7f0000000480)='./file0\x00') read$ptp(0xffffffffffffffff, &(0x7f00000004c0)=""/202, 0xca) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) preadv2(r3, &(0x7f0000001bc0)=[{&(0x7f0000000680)=""/223, 0xdf}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/92, 0x5c}, {&(0x7f0000001800)=""/208, 0xd0}, {&(0x7f0000001900)=""/209, 0xd1}, {&(0x7f0000001a00)=""/204, 0xcc}, {&(0x7f0000001b00)=""/155, 0x9b}], 0x7, 0x22c, 0xd8, 0x8) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002) r4 = accept(0xffffffffffffffff, &(0x7f0000001c40)=@l2={0x1f, 0x0, @none}, &(0x7f0000001cc0)=0x80) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000001d00), &(0x7f0000001d40)=0x6) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000001d80), &(0x7f0000001dc0), 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) pipe2(&(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001e40)=0x2, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001ec0)={0x0, 0x80, 0x9, 0x3, 0xf2, 0x2e, 0x0, 0x6, 0xc0049, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001e80)}, 0x4, 0x68, 0x8, 0x7, 0x2, 0x80, 0xffff, 0x0, 0x6, 0x0, 0x1ff}) syz_emit_ethernet(0x92, &(0x7f0000001f40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@generic={0xd, "ef1469bf3081373f06ae608bfb58975f1a6dc48c2511961a810bba3c4dc000b1657fc50d3432e04f8d044418ffb3ea0b23c275fdcdcf24b166262316f215c8199412de8a3d9ec0f358213d52824e77b4ca70913236bce466435ceb5546ff8ec06c269c6a4fdf77bac532337b1dab302616ebe2cb7fe587bb1b9d3589fc8b57f72ca330a1"}}}, &(0x7f0000002000)={0x0, 0x1, [0x8ee, 0xb48, 0xc10, 0x482]}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000002040)=0x9, 0x4) nanosleep(&(0x7f0000002080)={0x0, 0x989680}, &(0x7f00000020c0)) splice(r6, &(0x7f0000002100)=0x73, r7, &(0x7f0000002140)=0x2, 0x8e68, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002180)={0xffffffffffffffff}) r9 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r9, &(0x7f0000ffd000/0x3000)=nil, 0x4000) openat$null(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000002240)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000002280)={0x0, r5, 0xa3e, 0xffffffffffffffff, 0x8, 0xffffffffffffffff}) 116.557265ms ago: executing program 1 (id=4528): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") 106.490117ms ago: executing program 1 (id=4529): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40002040, &(0x7f0000000440)={r1, r2+60000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r8, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfe}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040001}, 0x44000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x2, 0xa, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) accept4$inet(r10, 0x0, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000037000000", @ANYRES32=r11, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x300800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c00)={0x8c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x16}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000800) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @loopback, @loopback}}}], 0x20}, 0x0) 49.641255ms ago: executing program 1 (id=4530): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 0s ago: executing program 1 (id=4531): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): 12kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 263.345302][T21576] ucma_write: process 578 (syz.4.3962) changed security contexts after opening file descriptor, this is not allowed. [ 263.580449][T21586] set_capacity_and_notify: 3 callbacks suppressed [ 263.580472][T21586] loop2: detected capacity change from 0 to 8192 [ 263.640779][T21586] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.683377][T21589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3967'. [ 263.738752][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 263.748097][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 263.759037][T21595] loop4: detected capacity change from 0 to 512 [ 263.766371][T21595] EXT4-fs: Ignoring removed i_version option [ 263.772418][T21595] EXT4-fs: Ignoring removed bh option [ 263.821295][T21595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.863044][T21595] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.150686][T21629] netlink: 'syz.7.3982': attribute type 3 has an invalid length. [ 264.276775][T21639] loop2: detected capacity change from 0 to 1024 [ 264.283613][T21639] EXT4-fs: Ignoring removed orlov option [ 264.321872][T21639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.638096][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.017216][T21670] loop4: detected capacity change from 0 to 512 [ 265.032805][T21670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 265.142532][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.152655][T21670] EXT4-fs (loop4): 1 truncate cleaned up [ 265.166457][T21670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.219083][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3994'. [ 265.234461][T21680] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 265.424209][T21687] loop7: detected capacity change from 0 to 512 [ 265.430978][T21687] EXT4-fs: Ignoring removed i_version option [ 265.437161][T21687] EXT4-fs: Ignoring removed bh option [ 265.450324][T21687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.478829][T21687] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.651730][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.750252][T21701] loop4: detected capacity change from 0 to 512 [ 265.771775][T21701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.819873][T21701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 266.259246][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.397075][T21786] smc: net device bond0 applied user defined pnetid SYZ0 [ 266.456603][T21799] loop2: detected capacity change from 0 to 512 [ 266.475611][T21799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.490586][T21799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.561667][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.579592][T21818] loop7: detected capacity change from 0 to 512 [ 266.591806][T21818] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4012: bg 0: block 248: padding at end of block bitmap is not set [ 266.610543][T21818] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4012: Failed to acquire dquot type 1 [ 266.625373][T21818] EXT4-fs (loop7): 1 truncate cleaned up [ 266.631583][T21818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.644620][T21818] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.649306][T21830] team0: Port device dummy0 removed [ 266.663308][T21818] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.732413][T21813] loop2: detected capacity change from 0 to 1024 [ 266.765495][T21813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.795210][T21813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 266.840030][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4017'. [ 266.850498][T21813] System zones: 0-1, 3-36 [ 266.862741][T21813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.020963][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4017'. [ 267.115462][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.130687][T21891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=21891 comm=syz.5.4019 [ 267.143720][T21891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=21891 comm=syz.5.4019 [ 267.195512][T21893] loop2: detected capacity change from 0 to 8192 [ 267.204524][T21893] netlink: 8 bytes leftover after parsing attributes in process `ÿ'. [ 267.212816][T21893] netlink: 44 bytes leftover after parsing attributes in process `ÿ'. [ 267.224283][T21893] tipc: Enabling of bearer rejected, failed to enable media [ 267.225883][T21895] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 267.278461][ T29] kauditd_printk_skb: 1656 callbacks suppressed [ 267.278480][ T29] audit: type=1400 audit(1768270926.316:43303): avc: denied { write } for pid=21898 comm="syz.2.4023" path="socket:[43964]" dev="sockfs" ino=43964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.438493][ T29] audit: type=1326 audit(1768270926.476:43304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.462599][ T29] audit: type=1326 audit(1768270926.476:43305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.486651][ T29] audit: type=1326 audit(1768270926.476:43306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.510548][ T29] audit: type=1326 audit(1768270926.486:43307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.534609][ T29] audit: type=1326 audit(1768270926.486:43308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.558450][ T29] audit: type=1326 audit(1768270926.486:43309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.582325][ T29] audit: type=1326 audit(1768270926.486:43310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.606155][ T29] audit: type=1326 audit(1768270926.486:43311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.630178][ T29] audit: type=1326 audit(1768270926.486:43312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.1.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 267.635159][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'. [ 267.698797][T21910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.711763][T21910] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.757521][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 267.930589][T21929] EXT4-fs: Ignoring removed i_version option [ 267.936789][T21929] EXT4-fs: Ignoring removed bh option [ 267.950307][T21929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.985317][T21929] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.149756][T21940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.159738][T21940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 268.168102][T21940] System zones: 0-1, 3-36 [ 268.173727][T21940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.277244][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.377002][T21960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.401196][T21960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.506605][T21969] netlink: 'syz.7.4052': attribute type 10 has an invalid length. [ 268.531595][T21969] netlink: 'syz.7.4052': attribute type 10 has an invalid length. [ 268.545000][T21969] team0: Failed to send options change via netlink (err -105) [ 268.552691][T21969] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 268.561877][T21969] team0: Port device dummy0 removed [ 268.585522][T21969] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.604161][T21974] set_capacity_and_notify: 4 callbacks suppressed [ 268.604181][T21974] loop5: detected capacity change from 0 to 1024 [ 268.618291][T21974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.637581][T21974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.765736][T21977] netlink: 'syz.5.4054': attribute type 10 has an invalid length. [ 268.775704][T21977] team0: Failed to send options change via netlink (err -105) [ 268.783220][T21977] team0: Port device dummy0 added [ 268.789560][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.896325][T21979] loop7: detected capacity change from 0 to 1024 [ 268.946526][T21979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.975159][T21979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 268.983372][T21979] System zones: 0-1, 3-36 [ 269.020341][T21979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.191060][T21987] __nla_validate_parse: 3 callbacks suppressed [ 269.191077][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4057'. [ 269.218766][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.270899][T21989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4058'. [ 269.482936][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4058'. [ 269.511780][T21974] syz.5.4054 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 269.525998][T21974] CPU: 0 UID: 0 PID: 21974 Comm: syz.5.4054 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.526112][T21974] Tainted: [W]=WARN [ 269.526119][T21974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.526132][T21974] Call Trace: [ 269.526139][T21974] [ 269.526146][T21974] __dump_stack+0x1d/0x30 [ 269.526177][T21974] dump_stack_lvl+0x95/0xd0 [ 269.526207][T21974] dump_stack+0x15/0x1b [ 269.526286][T21974] dump_header+0x81/0x240 [ 269.526312][T21974] oom_kill_process+0x295/0x350 [ 269.526337][T21974] out_of_memory+0x97b/0xb80 [ 269.526413][T21974] try_charge_memcg+0x610/0xa10 [ 269.526472][T21974] obj_cgroup_charge_pages+0xa6/0x150 [ 269.526558][T21974] __memcg_kmem_charge_page+0x9f/0x170 [ 269.526631][T21974] __alloc_frozen_pages_noprof+0x18f/0x360 [ 269.526669][T21974] alloc_pages_mpol+0xb3/0x260 [ 269.526709][T21974] alloc_pages_noprof+0x90/0x130 [ 269.526743][T21974] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 269.526929][T21974] __kvmalloc_node_noprof+0x492/0x6b0 [ 269.526962][T21974] ? ip_set_alloc+0x24/0x30 [ 269.526996][T21974] ? ip_set_alloc+0x24/0x30 [ 269.527057][T21974] ? __slab_alloc+0x25/0x50 [ 269.527091][T21974] ip_set_alloc+0x24/0x30 [ 269.527178][T21974] hash_netiface_create+0x282/0x740 [ 269.527222][T21974] ? __pfx_hash_netiface_create+0x10/0x10 [ 269.527264][T21974] ip_set_create+0x3cc/0x970 [ 269.527297][T21974] ? __nla_parse+0x40/0x60 [ 269.527399][T21974] nfnetlink_rcv_msg+0x4c6/0x590 [ 269.527456][T21974] netlink_rcv_skb+0x123/0x220 [ 269.527509][T21974] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 269.527558][T21974] nfnetlink_rcv+0x167/0x16c0 [ 269.527628][T21974] ? xas_load+0x405/0x430 [ 269.527663][T21974] ? xas_load+0x405/0x430 [ 269.527695][T21974] ? folio_mark_accessed+0x236/0x3a0 [ 269.527779][T21974] ? find_get_block_common+0x6de/0x8e0 [ 269.527809][T21974] ? bdev_getblk+0x35b/0x3f0 [ 269.527833][T21974] ? folio_mark_accessed+0x240/0x3a0 [ 269.527865][T21974] ? check_xattrs+0x27f/0x7f0 [ 269.527958][T21974] ? __ext4_sb_bread_gfp+0xd9/0x170 [ 269.528038][T21974] ? should_fail_ex+0x30/0x280 [ 269.528066][T21974] ? selinux_nlmsg_lookup+0x99/0x890 [ 269.528102][T21974] ? __rcu_read_unlock+0x34/0x70 [ 269.528134][T21974] ? __netlink_lookup+0x266/0x2a0 [ 269.528165][T21974] netlink_unicast+0x5c0/0x690 [ 269.528235][T21974] netlink_sendmsg+0x58b/0x6b0 [ 269.528276][T21974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.528328][T21974] __sock_sendmsg+0x145/0x180 [ 269.528398][T21974] ____sys_sendmsg+0x31e/0x4a0 [ 269.528438][T21974] ___sys_sendmsg+0x17b/0x1d0 [ 269.528527][T21974] __x64_sys_sendmsg+0xd4/0x160 [ 269.528577][T21974] x64_sys_call+0x17ba/0x3000 [ 269.528656][T21974] do_syscall_64+0xca/0x2b0 [ 269.528741][T21974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.528772][T21974] RIP: 0033:0x7f1a6f03f749 [ 269.528800][T21974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.528826][T21974] RSP: 002b:00007f1a6da9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.528853][T21974] RAX: ffffffffffffffda RBX: 00007f1a6f295fa0 RCX: 00007f1a6f03f749 [ 269.528940][T21974] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 269.528958][T21974] RBP: 00007f1a6f0c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 269.528975][T21974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.529042][T21974] R13: 00007f1a6f296038 R14: 00007f1a6f295fa0 R15: 00007ffee3e66208 [ 269.529130][T21974] [ 269.529139][T21974] memory: usage 307200kB, limit 307200kB, failcnt 575 [ 269.880980][T21974] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 269.888949][T21974] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 269.896426][T21974] Memory cgroup stats for /syz5: [ 269.903377][T21974] cache 8192 [ 269.911695][T21974] rss 0 [ 269.914737][T21974] shmem 0 [ 269.917720][T21974] mapped_file 0 [ 269.921388][T21974] dirty 0 [ 269.924356][T21974] writeback 0 [ 269.927715][T21974] workingset_refault_anon 450 [ 269.932438][T21974] workingset_refault_file 0 [ 269.937020][T21974] swap 733184 [ 269.940329][T21974] swapcached 0 [ 269.943827][T21974] pgpgin 150040 [ 269.947443][T21974] pgpgout 150029 [ 269.951079][T21974] pgfault 152347 [ 269.951263][T22001] loop2: detected capacity change from 0 to 512 [ 269.954668][T21974] pgmajfault 105 [ 269.954680][T21974] inactive_anon 0 [ 269.954691][T21974] active_anon 0 [ 269.971643][T21974] inactive_file 0 [ 269.975325][T21974] active_file 45056 [ 269.979240][T21974] unevictable 0 [ 269.982879][T21974] hierarchical_memory_limit 314572800 [ 269.988375][T21974] hierarchical_memsw_limit 9223372036854771712 [ 269.994889][T21974] total_cache 8192 [ 269.998695][T21974] total_rss 0 [ 270.002046][T21974] total_shmem 0 [ 270.005607][T21974] total_mapped_file 0 [ 270.009665][T21974] total_dirty 0 [ 270.013171][T21974] total_writeback 0 [ 270.017029][T21974] total_workingset_refault_anon 450 [ 270.022237][T21974] total_workingset_refault_file 0 [ 270.027303][T21974] total_swap 733184 [ 270.031134][T21974] total_swapcached 0 [ 270.035049][T21974] total_pgpgin 150040 [ 270.037074][T22001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.039110][T21974] total_pgpgout 150029 [ 270.039124][T21974] total_pgfault 152347 [ 270.052873][T22001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.055331][T21974] total_pgmajfault 105 [ 270.055341][T21974] total_inactive_anon 0 [ 270.055349][T21974] total_active_anon 0 [ 270.055357][T21974] total_inactive_file 0 [ 270.055365][T21974] total_active_file 45056 [ 270.055373][T21974] total_unevictable 0 [ 270.055382][T21974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4054,pid=21973,uid=0 [ 270.107994][T21974] Memory cgroup out of memory: Killed process 21973 (syz.5.4054) total-vm:96016kB, anon-rss:1136kB, file-rss:22708kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 270.180568][T22008] loop2: detected capacity change from 0 to 2048 [ 270.216898][T22008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.239579][T10963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.253989][T22008] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.4066: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 270.272269][T22008] EXT4-fs (loop2): Remounting filesystem read-only [ 270.296214][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4069'. [ 270.311886][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.356556][T22019] loop4: detected capacity change from 0 to 512 [ 270.386410][T22019] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4071: iget: bad extra_isize 90 (inode size 256) [ 270.410531][T22019] EXT4-fs (loop4): Remounting filesystem read-only [ 270.422417][T22019] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 270.431744][T22019] EXT4-fs (loop4): 1 orphan inode deleted [ 270.438142][T22019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.475208][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.600411][T22027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4074'. [ 270.849159][T22041] loop7: detected capacity change from 0 to 512 [ 270.892446][T22041] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4077: bg 0: block 248: padding at end of block bitmap is not set [ 270.997549][T22041] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4077: Failed to acquire dquot type 1 [ 271.086875][T22041] EXT4-fs (loop7): 1 truncate cleaned up [ 271.093037][T22041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.130058][T22066] loop5: detected capacity change from 0 to 1024 [ 271.156518][T22041] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.003974][T22066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.084131][T22063] loop2: detected capacity change from 0 to 2048 [ 272.092163][T22041] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.106624][T22066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 272.115304][T22063] loop2: p2 < > p4 [ 272.120277][T22066] System zones: 0-1, 3-36 [ 272.174888][T22066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.187953][T22063] loop2: p4 size 262144 extends beyond EOD, truncated [ 272.317851][T10963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.362559][T22093] loop5: detected capacity change from 0 to 512 [ 272.372395][T22093] EXT4-fs: Ignoring removed i_version option [ 272.378509][T22093] EXT4-fs: Ignoring removed bh option [ 272.438256][T22093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.488509][T22093] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.502588][ T29] kauditd_printk_skb: 2507 callbacks suppressed [ 272.502633][ T29] audit: type=1326 audit(1768270931.536:45818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 272.534442][ T29] audit: type=1326 audit(1768270931.576:45819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 272.558375][ T29] audit: type=1326 audit(1768270931.576:45820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a6f03df90 code=0x7ffc0000 [ 272.582434][ T29] audit: type=1326 audit(1768270931.576:45821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 272.606316][ T29] audit: type=1326 audit(1768270931.576:45822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 272.630163][ T29] audit: type=1326 audit(1768270931.576:45823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1a6f03e3aa code=0x7ffc0000 [ 272.654139][ T29] audit: type=1326 audit(1768270931.686:45824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a6f072005 code=0x7ffc0000 [ 272.820960][T22135] loop4: detected capacity change from 0 to 512 [ 272.837594][T22135] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4094: iget: bad extra_isize 90 (inode size 256) [ 272.854876][ T29] audit: type=1326 audit(1768270931.896:45825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 272.884123][T22135] EXT4-fs (loop4): Remounting filesystem read-only [ 272.891684][T22135] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 272.905440][T22135] EXT4-fs (loop4): 1 orphan inode deleted [ 272.914177][T22135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.933045][ T29] audit: type=1326 audit(1768270931.916:45826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 272.957096][ T29] audit: type=1326 audit(1768270931.916:45827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.5.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 272.998905][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.032293][T22155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.056836][T22155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.158061][T22165] netlink: 'syz.4.4096': attribute type 10 has an invalid length. [ 273.183708][T22165] team0: Failed to send options change via netlink (err -105) [ 273.191656][T22165] team0: Port device dummy0 added [ 273.430369][T10963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.702265][T22229] set_capacity_and_notify: 1 callbacks suppressed [ 273.702289][T22229] loop5: detected capacity change from 0 to 512 [ 273.744557][T22229] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4101: iget: bad extra_isize 90 (inode size 256) [ 273.765876][T22229] EXT4-fs (loop5): Remounting filesystem read-only [ 273.784604][T22229] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 273.807409][T22154] syz.4.4096 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 273.818485][T22154] CPU: 0 UID: 0 PID: 22154 Comm: syz.4.4096 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.818527][T22154] Tainted: [W]=WARN [ 273.818536][T22154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.818552][T22154] Call Trace: [ 273.818560][T22154] [ 273.818623][T22154] __dump_stack+0x1d/0x30 [ 273.818655][T22154] dump_stack_lvl+0x95/0xd0 [ 273.818684][T22154] dump_stack+0x15/0x1b [ 273.818711][T22154] dump_header+0x81/0x240 [ 273.818776][T22154] oom_kill_process+0x295/0x350 [ 273.818806][T22154] out_of_memory+0x97b/0xb80 [ 273.818836][T22154] try_charge_memcg+0x610/0xa10 [ 273.818882][T22154] charge_memcg+0x51/0xc0 [ 273.818948][T22154] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 273.819018][T22154] __read_swap_cache_async+0x17b/0x2d0 [ 273.819103][T22154] swap_cluster_readahead+0x262/0x3c0 [ 273.819141][T22154] swapin_readahead+0xde/0x820 [ 273.819324][T22154] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 273.819353][T22154] ? __dequeue_entity+0x22/0x3e0 [ 273.819383][T22154] ? __rcu_read_unlock+0x4f/0x70 [ 273.819446][T22154] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 273.819472][T22154] ? __list_add_valid_or_report+0x38/0xe0 [ 273.819549][T22154] ? __rcu_read_unlock+0x4f/0x70 [ 273.819574][T22154] ? swap_cache_get_folio+0x277/0x280 [ 273.819650][T22154] do_swap_page+0x2b4/0x21e0 [ 273.819682][T22154] ? _raw_spin_unlock+0x26/0x50 [ 273.819769][T22154] ? __schedule+0x85f/0xcd0 [ 273.819797][T22154] ? __pfx_default_wake_function+0x10/0x10 [ 273.819867][T22154] handle_mm_fault+0x9d8/0x2c60 [ 273.819915][T22154] do_user_addr_fault+0x630/0x1080 [ 273.819949][T22154] exc_page_fault+0x62/0xa0 [ 273.820020][T22154] asm_exc_page_fault+0x26/0x30 [ 273.820043][T22154] RIP: 0033:0x7ff2b13d59ec [ 273.820060][T22154] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 273.820083][T22154] RSP: 002b:00007ffccdadcc80 EFLAGS: 00010206 [ 273.820173][T22154] RAX: 0000000000000000 RBX: 00007ff2b1755fa0 RCX: 0000000000000000 [ 273.820191][T22154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556ea57808 [ 273.820268][T22154] RBP: 00007ff2b1757da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 273.820285][T22154] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000042da7 [ 273.820302][T22154] R13: 00007ff2b1756090 R14: ffffffffffffffff R15: 00007ffccdadcd90 [ 273.820327][T22154] [ 273.820334][T22154] memory: usage 307200kB, limit 307200kB, failcnt 1028 [ 273.932310][T22229] EXT4-fs (loop5): 1 orphan inode deleted [ 273.937638][T22154] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 273.937668][T22154] kmem: usage 231400kB, limit 9007199254740988kB, failcnt 0 [ 274.035805][T22229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.042447][T22154] Memory cgroup stats for /syz4: [ 274.106276][T22154] cache 77561856 [ 274.115039][T22154] rss 4096 [ 274.118084][T22154] shmem 0 [ 274.121036][T22154] mapped_file 0 [ 274.124556][T22154] dirty 0 [ 274.127523][T22154] writeback 20480 [ 274.131236][T22154] workingset_refault_anon 698 [ 274.135955][T22154] workingset_refault_file 5131 [ 274.140783][T22154] swap 704512 [ 274.144080][T22154] swapcached 28672 [ 274.148021][T22154] pgpgin 309695 [ 274.151502][T22154] pgpgout 290745 [ 274.155160][T22154] pgfault 215215 [ 274.158747][T22154] pgmajfault 318 [ 274.162329][T22154] inactive_anon 20480 [ 274.166414][T22154] active_anon 8192 [ 274.170161][T22154] inactive_file 0 [ 274.173910][T22154] active_file 36864 [ 274.177760][T22154] unevictable 77553664 [ 274.181842][T22154] hierarchical_memory_limit 314572800 [ 274.187345][T22154] hierarchical_memsw_limit 9223372036854771712 [ 274.193516][T22154] total_cache 77561856 [ 274.197633][T22154] total_rss 4096 [ 274.201291][T22154] total_shmem 0 [ 274.204830][T22154] total_mapped_file 0 [ 274.208843][T22154] total_dirty 0 [ 274.212332][T22154] total_writeback 20480 [ 274.216589][T22154] total_workingset_refault_anon 698 [ 274.221894][T22154] total_workingset_refault_file 5131 [ 274.227353][T22154] total_swap 704512 [ 274.231207][T22154] total_swapcached 28672 [ 274.235527][T22154] total_pgpgin 309695 [ 274.239533][T22154] total_pgpgout 290745 [ 274.243613][T22154] total_pgfault 215215 [ 274.247757][T22154] total_pgmajfault 318 [ 274.251850][T22154] total_inactive_anon 20480 [ 274.256395][T22154] total_active_anon 8192 [ 274.260725][T22154] total_inactive_file 0 [ 274.264932][T22154] total_active_file 36864 [ 274.269317][T22154] total_unevictable 77553664 [ 274.273919][T22154] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4096,pid=22154,uid=0 [ 274.288738][T22154] Memory cgroup out of memory: Killed process 22154 (syz.4.4096) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 274.318617][T10963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.366031][T22240] netlink: 276 bytes leftover after parsing attributes in process `syz.5.4105'. [ 274.400014][T22246] loop7: detected capacity change from 0 to 512 [ 274.447796][T22240] loop5: detected capacity change from 0 to 512 [ 274.465938][T22246] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 274.490426][T22240] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 274.525045][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.545895][T22246] EXT4-fs (loop7): orphan cleanup on readonly fs [ 274.555275][T22240] EXT4-fs (loop5): orphan cleanup on readonly fs [ 274.563746][T22240] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4105: Failed to acquire dquot type 1 [ 274.576687][T22246] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4107: Failed to acquire dquot type 1 [ 274.589837][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4109'. [ 274.608684][T22240] EXT4-fs (loop5): Remounting filesystem read-only [ 274.609040][T22246] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4107: bg 0: block 40: padding at end of block bitmap is not set [ 274.645592][T22240] EXT4-fs (loop5): 1 truncate cleaned up [ 274.659194][T22246] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 274.747538][T22246] EXT4-fs (loop7): 1 truncate cleaned up [ 274.817964][T22279] loop2: detected capacity change from 0 to 512 [ 274.833522][T22276] netlink: 'syz.7.4118': attribute type 10 has an invalid length. [ 274.853699][T22276] bond0: (slave dummy0): Releasing backup interface [ 274.867747][T22276] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 274.892208][T22276] team0: Failed to send options change via netlink (err -105) [ 274.898059][T22279] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4115: bg 0: block 248: padding at end of block bitmap is not set [ 274.900178][T22276] team0: Port device dummy0 added [ 274.924119][ T1039] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 274.939524][T22290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4120'. [ 274.949270][T22279] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4115: Failed to acquire dquot type 1 [ 274.952307][ T1039] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 274.971103][T22279] EXT4-fs (loop2): 1 truncate cleaned up [ 274.977443][T22279] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.105247][ T6873] tipc: Subscription rejected, illegal request [ 275.211525][T22328] netlink: 'syz.4.4128': attribute type 10 has an invalid length. [ 275.595381][T22391] loop4: detected capacity change from 0 to 512 [ 275.604617][T22391] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4132: iget: bad extra_isize 90 (inode size 256) [ 275.618737][T22391] EXT4-fs (loop4): Remounting filesystem read-only [ 275.625496][T22391] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 275.634688][T22391] EXT4-fs (loop4): 1 orphan inode deleted [ 275.720437][T22413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'. [ 275.980750][T22450] loop4: detected capacity change from 0 to 512 [ 275.995209][T22450] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4138: iget: bad extra_isize 90 (inode size 256) [ 276.008956][T22450] EXT4-fs (loop4): Remounting filesystem read-only [ 276.015622][T22450] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 276.024855][T22450] EXT4-fs (loop4): 1 orphan inode deleted [ 276.089347][T22463] loop4: detected capacity change from 0 to 4096 [ 276.119259][T22463] team0: Port device dummy0 removed [ 276.130953][T22463] bridge_slave_0: left allmulticast mode [ 276.136703][T22463] bridge_slave_0: left promiscuous mode [ 276.142394][T22463] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.152820][T22463] bridge_slave_1: left allmulticast mode [ 276.158686][T22463] bridge_slave_1: left promiscuous mode [ 276.164464][T22463] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.175491][T22463] bond0: (slave bond_slave_0): Releasing backup interface [ 276.187427][T22463] bond0: (slave bond_slave_1): Releasing backup interface [ 276.191806][T22467] loop7: detected capacity change from 0 to 512 [ 276.217402][T22467] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.4144: iget: bad extra_isize 90 (inode size 256) [ 276.231432][T22467] EXT4-fs (loop7): Remounting filesystem read-only [ 276.238134][T22467] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 276.244832][T22463] team0: Port device team_slave_0 removed [ 276.247585][T22467] EXT4-fs (loop7): 1 orphan inode deleted [ 276.261355][T22463] team0: Port device team_slave_1 removed [ 276.268274][T22463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.275774][T22463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.285232][T22463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.292656][T22463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.305178][T22463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 276.393061][T22472] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4147'. [ 276.416854][T22478] macsec1: entered allmulticast mode [ 276.422428][T22478] macvlan0: entered allmulticast mode [ 276.428007][T22478] veth1_vlan: entered allmulticast mode [ 276.435653][T22478] macvlan0: left allmulticast mode [ 276.440905][T22478] veth1_vlan: left allmulticast mode [ 276.533439][T22487] loop5: detected capacity change from 0 to 512 [ 276.554109][T22487] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4137: iget: bad extra_isize 90 (inode size 256) [ 276.591584][T22487] EXT4-fs (loop5): Remounting filesystem read-only [ 276.602639][T22487] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 276.615583][T22487] EXT4-fs (loop5): 1 orphan inode deleted [ 276.649494][T22497] loop2: detected capacity change from 0 to 512 [ 276.664662][T22497] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4156: iget: bad extra_isize 90 (inode size 256) [ 276.694869][T22497] EXT4-fs (loop2): Remounting filesystem read-only [ 276.707558][T22497] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 276.716695][T22497] EXT4-fs (loop2): 1 orphan inode deleted [ 276.842004][T22508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4160'. [ 276.871094][T22517] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4163'. [ 276.915788][T22521] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4162: bg 0: block 248: padding at end of block bitmap is not set [ 276.963186][T22521] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4162: Failed to acquire dquot type 1 [ 277.029591][T22521] EXT4-fs (loop4): 1 truncate cleaned up [ 277.038876][T22521] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.252331][T22573] netlink: 'syz.5.4174': attribute type 7 has an invalid length. [ 277.275002][T22573] ALSA: seq fatal error: cannot create timer (-19) [ 277.371095][T22588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.382810][T22593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4179'. [ 277.481323][T22604] netlink: 'syz.7.4178': attribute type 10 has an invalid length. [ 277.505701][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 277.505717][ T29] audit: type=1326 audit(1768270936.546:46380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.7.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba86af749 code=0x7ffc0000 [ 277.538865][ T29] audit: type=1326 audit(1768270936.556:46381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.7.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba86af749 code=0x7ffc0000 [ 277.673312][ T3480] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 277.693206][ T3480] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 277.745610][T22626] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4184: iget: bad extra_isize 90 (inode size 256) [ 277.771256][T22626] EXT4-fs (loop5): Remounting filesystem read-only [ 277.784563][T22626] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 277.793818][T22626] EXT4-fs (loop5): 1 orphan inode deleted [ 278.164159][T22675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4190'. [ 278.177985][T22588] syz.7.4178 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 278.192295][T22588] CPU: 0 UID: 0 PID: 22588 Comm: syz.7.4178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.192339][T22588] Tainted: [W]=WARN [ 278.192405][T22588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.192484][T22588] Call Trace: [ 278.192490][T22588] [ 278.192500][T22588] __dump_stack+0x1d/0x30 [ 278.192532][T22588] dump_stack_lvl+0x95/0xd0 [ 278.192565][T22588] dump_stack+0x15/0x1b [ 278.192592][T22588] dump_header+0x81/0x240 [ 278.192642][T22588] oom_kill_process+0x295/0x350 [ 278.192702][T22588] out_of_memory+0x97b/0xb80 [ 278.192742][T22588] try_charge_memcg+0x610/0xa10 [ 278.192786][T22588] obj_cgroup_charge_pages+0xa6/0x150 [ 278.192822][T22588] __memcg_kmem_charge_page+0x9f/0x170 [ 278.192978][T22588] __alloc_frozen_pages_noprof+0x18f/0x360 [ 278.193022][T22588] alloc_pages_mpol+0xb3/0x260 [ 278.193065][T22588] alloc_pages_noprof+0x90/0x130 [ 278.193179][T22588] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 278.193238][T22588] __kvmalloc_node_noprof+0x492/0x6b0 [ 278.193275][T22588] ? ip_set_alloc+0x24/0x30 [ 278.193316][T22588] ? ip_set_alloc+0x24/0x30 [ 278.193418][T22588] ? __slab_alloc+0x25/0x50 [ 278.193457][T22588] ip_set_alloc+0x24/0x30 [ 278.193499][T22588] hash_netiface_create+0x282/0x740 [ 278.193655][T22588] ? __pfx_hash_netiface_create+0x10/0x10 [ 278.193734][T22588] ip_set_create+0x3cc/0x970 [ 278.193774][T22588] ? __nla_parse+0x40/0x60 [ 278.193881][T22588] nfnetlink_rcv_msg+0x4c6/0x590 [ 278.193940][T22588] netlink_rcv_skb+0x123/0x220 [ 278.193990][T22588] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 278.194113][T22588] nfnetlink_rcv+0x167/0x16c0 [ 278.194148][T22588] ? kmem_cache_free+0xe3/0x3a0 [ 278.194183][T22588] ? __kfree_skb+0x109/0x150 [ 278.194218][T22588] ? nlmon_xmit+0x4f/0x60 [ 278.194280][T22588] ? consume_skb+0x49/0x150 [ 278.194314][T22588] ? nlmon_xmit+0x4f/0x60 [ 278.194365][T22588] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 278.194408][T22588] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 278.194448][T22588] ? __dev_queue_xmit+0x148/0x1ee0 [ 278.194555][T22588] ? ref_tracker_free+0x37d/0x3e0 [ 278.194594][T22588] ? __netlink_deliver_tap+0x4dc/0x500 [ 278.194645][T22588] netlink_unicast+0x5c0/0x690 [ 278.194740][T22588] netlink_sendmsg+0x58b/0x6b0 [ 278.194788][T22588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.194833][T22588] __sock_sendmsg+0x145/0x180 [ 278.194903][T22588] ____sys_sendmsg+0x31e/0x4a0 [ 278.194955][T22588] ___sys_sendmsg+0x17b/0x1d0 [ 278.195029][T22588] __x64_sys_sendmsg+0xd4/0x160 [ 278.195076][T22588] x64_sys_call+0x17ba/0x3000 [ 278.195164][T22588] do_syscall_64+0xca/0x2b0 [ 278.195214][T22588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.195305][T22588] RIP: 0033:0x7f9ba86af749 [ 278.195327][T22588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.195418][T22588] RSP: 002b:00007f9ba7117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.195499][T22588] RAX: ffffffffffffffda RBX: 00007f9ba8905fa0 RCX: 00007f9ba86af749 [ 278.195518][T22588] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 278.195536][T22588] RBP: 00007f9ba8733f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.195552][T22588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.195597][T22588] R13: 00007f9ba8906038 R14: 00007f9ba8905fa0 R15: 00007fff411866f8 [ 278.195624][T22588] [ 278.528230][T22588] memory: usage 307200kB, limit 307200kB, failcnt 268 [ 278.535149][T22588] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 278.543091][T22588] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 278.550520][T22588] Memory cgroup stats for /syz7: [ 278.550740][T22588] cache 8192 [ 278.558925][T22588] rss 0 [ 278.561709][T22588] shmem 0 [ 278.564705][T22588] mapped_file 0 [ 278.568352][T22588] dirty 0 [ 278.571578][T22588] writeback 0 [ 278.574957][T22588] workingset_refault_anon 2569 [ 278.579787][T22588] workingset_refault_file 0 [ 278.584438][T22588] swap 716800 [ 278.587756][T22588] swapcached 16384 [ 278.591513][T22588] pgpgin 92148 [ 278.594961][T22588] pgpgout 92136 [ 278.598489][T22588] pgfault 75309 [ 278.601961][T22588] pgmajfault 393 [ 278.605578][T22588] inactive_anon 16384 [ 278.609587][T22588] active_anon 0 [ 278.613074][T22588] inactive_file 0 [ 278.616791][T22588] active_file 28672 [ 278.620658][T22588] unevictable 0 [ 278.624138][T22588] hierarchical_memory_limit 314572800 [ 278.629551][T22588] hierarchical_memsw_limit 9223372036854771712 [ 278.635771][T22588] total_cache 8192 [ 278.639525][T22588] total_rss 0 [ 278.642903][T22588] total_shmem 0 [ 278.646411][T22588] total_mapped_file 0 [ 278.650455][T22588] total_dirty 0 [ 278.653936][T22588] total_writeback 0 [ 278.657985][T22588] total_workingset_refault_anon 2569 [ 278.663456][T22588] total_workingset_refault_file 0 [ 278.668570][T22588] total_swap 716800 [ 278.672415][T22588] total_swapcached 16384 [ 278.676735][T22588] total_pgpgin 92148 [ 278.680659][T22588] total_pgpgout 92136 [ 278.684704][T22588] total_pgfault 75309 [ 278.688714][T22588] total_pgmajfault 393 [ 278.692815][T22588] total_inactive_anon 16384 [ 278.697418][T22588] total_active_anon 0 [ 278.701526][T22588] total_inactive_file 0 [ 278.705790][T22588] total_active_file 28672 [ 278.710146][T22588] total_unevictable 0 [ 278.714163][T22588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4178,pid=22587,uid=0 [ 278.728959][T22588] Memory cgroup out of memory: Killed process 22587 (syz.7.4178) total-vm:93968kB, anon-rss:1216kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 278.818830][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 278.828699][ T1039] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 278.884985][ T29] audit: type=1400 audit(1768270937.916:46382): avc: denied { create } for pid=22697 comm="syz.5.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 278.921385][T22700] set_capacity_and_notify: 3 callbacks suppressed [ 278.921406][T22700] loop2: detected capacity change from 0 to 512 [ 278.941773][ T29] audit: type=1400 audit(1768270937.936:46383): avc: denied { write } for pid=22697 comm="syz.5.4195" path="socket:[46446]" dev="sockfs" ino=46446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 278.965285][ T29] audit: type=1326 audit(1768270937.976:46385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.7.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba86af749 code=0x7ffc0000 [ 278.989095][ T29] audit: type=1326 audit(1768270937.976:46384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.7.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9ba8666bdd code=0x7ffc0000 [ 278.995664][T22700] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4196: iget: bad extra_isize 90 (inode size 256) [ 279.012819][ T29] audit: type=1326 audit(1768270937.976:46386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.7.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba86af749 code=0x7ffc0000 [ 279.012857][ T29] audit: type=1326 audit(1768270937.976:46387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.7.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9ba86e3e89 code=0x7ffc0000 [ 279.060544][T22700] EXT4-fs (loop2): Remounting filesystem read-only [ 279.073867][ T29] audit: type=1326 audit(1768270937.976:46388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.7.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9ba8666c47 code=0x7ffc0000 [ 279.103659][ T29] audit: type=1326 audit(1768270937.976:46389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.7.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba86af749 code=0x7ffc0000 [ 279.155166][T22700] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 279.176767][T22700] EXT4-fs (loop2): 1 orphan inode deleted [ 279.242727][T22723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4200'. [ 279.455218][T22758] loop7: detected capacity change from 0 to 1024 [ 279.462079][T22758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.558052][T22763] netlink: 'syz.7.4206': attribute type 10 has an invalid length. [ 279.652705][T22765] loop2: detected capacity change from 0 to 512 [ 279.958407][T22775] loop2: detected capacity change from 0 to 512 [ 279.989113][T22775] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4211: iget: bad extra_isize 90 (inode size 256) [ 280.060515][T22758] syz.7.4206 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 280.074804][T22758] CPU: 1 UID: 0 PID: 22758 Comm: syz.7.4206 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.074847][T22758] Tainted: [W]=WARN [ 280.074862][T22758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.074953][T22758] Call Trace: [ 280.074961][T22758] [ 280.074972][T22758] __dump_stack+0x1d/0x30 [ 280.075068][T22758] dump_stack_lvl+0x95/0xd0 [ 280.075096][T22758] dump_stack+0x15/0x1b [ 280.075117][T22758] dump_header+0x81/0x240 [ 280.075146][T22758] oom_kill_process+0x295/0x350 [ 280.075178][T22758] out_of_memory+0x97b/0xb80 [ 280.075273][T22758] try_charge_memcg+0x610/0xa10 [ 280.075366][T22758] obj_cgroup_charge_pages+0xa6/0x150 [ 280.075407][T22758] __memcg_kmem_charge_page+0x9f/0x170 [ 280.075456][T22758] __alloc_frozen_pages_noprof+0x18f/0x360 [ 280.075506][T22758] alloc_pages_mpol+0xb3/0x260 [ 280.075597][T22758] alloc_pages_noprof+0x90/0x130 [ 280.075639][T22758] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 280.075791][T22758] __kvmalloc_node_noprof+0x492/0x6b0 [ 280.075828][T22758] ? ip_set_alloc+0x24/0x30 [ 280.075871][T22758] ? ip_set_alloc+0x24/0x30 [ 280.075914][T22758] ip_set_alloc+0x24/0x30 [ 280.075984][T22758] hash_netiface_create+0x282/0x740 [ 280.076043][T22758] ? __pfx_hash_netiface_create+0x10/0x10 [ 280.076084][T22758] ip_set_create+0x3cc/0x970 [ 280.076188][T22758] ? __nla_parse+0x40/0x60 [ 280.076223][T22758] nfnetlink_rcv_msg+0x4c6/0x590 [ 280.076283][T22758] netlink_rcv_skb+0x123/0x220 [ 280.076339][T22758] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 280.076384][T22758] nfnetlink_rcv+0x167/0x16c0 [ 280.076418][T22758] ? kmem_cache_free+0xe3/0x3a0 [ 280.076454][T22758] ? __kfree_skb+0x109/0x150 [ 280.076559][T22758] ? nlmon_xmit+0x4f/0x60 [ 280.076583][T22758] ? consume_skb+0x49/0x150 [ 280.076636][T22758] ? nlmon_xmit+0x4f/0x60 [ 280.076664][T22758] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 280.076707][T22758] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 280.076747][T22758] ? __dev_queue_xmit+0x148/0x1ee0 [ 280.076861][T22758] ? ref_tracker_free+0x37d/0x3e0 [ 280.076897][T22758] ? __netlink_deliver_tap+0x4dc/0x500 [ 280.077063][T22758] netlink_unicast+0x5c0/0x690 [ 280.077107][T22758] netlink_sendmsg+0x58b/0x6b0 [ 280.077166][T22758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.077212][T22758] __sock_sendmsg+0x145/0x180 [ 280.077240][T22758] ____sys_sendmsg+0x31e/0x4a0 [ 280.077301][T22758] ___sys_sendmsg+0x17b/0x1d0 [ 280.077338][T22758] ? __bpf_get_stackid+0x6f6/0x7d0 [ 280.077400][T22758] __x64_sys_sendmsg+0xd4/0x160 [ 280.077451][T22758] x64_sys_call+0x17ba/0x3000 [ 280.077483][T22758] do_syscall_64+0xca/0x2b0 [ 280.077532][T22758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.077587][T22758] RIP: 0033:0x7f9ba86af749 [ 280.077603][T22758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.077625][T22758] RSP: 002b:00007f9ba7117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.077652][T22758] RAX: ffffffffffffffda RBX: 00007f9ba8905fa0 RCX: 00007f9ba86af749 [ 280.077668][T22758] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 280.077717][T22758] RBP: 00007f9ba8733f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.077760][T22758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.077779][T22758] R13: 00007f9ba8906038 R14: 00007f9ba8905fa0 R15: 00007fff411866f8 [ 280.077807][T22758] [ 280.077814][T22758] memory: usage 307200kB, limit 307200kB, failcnt 590 [ 280.100577][T22775] EXT4-fs (loop2): Remounting filesystem read-only [ 280.103542][T22758] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 280.132703][T22775] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 280.137137][T22758] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 280.137161][T22758] Memory cgroup stats for /syz7: [ 280.229899][T22758] cache 8192 [ 280.229913][T22758] rss 4096 [ 280.229932][T22758] shmem 0 [ 280.262806][T22775] EXT4-fs (loop2): 1 orphan inode deleted [ 280.262928][T22758] mapped_file 0 [ 280.262940][T22758] dirty 0 [ 280.478368][T22758] writeback 0 [ 280.481678][T22758] workingset_refault_anon 2660 [ 280.486525][T22758] workingset_refault_file 0 [ 280.491054][T22758] swap 729088 [ 280.494447][T22758] swapcached 4096 [ 280.498111][T22758] pgpgin 92682 [ 280.501650][T22758] pgpgout 92673 [ 280.505255][T22758] pgfault 76028 [ 280.508887][T22758] pgmajfault 440 [ 280.512455][T22758] inactive_anon 4096 [ 280.516396][T22758] active_anon 0 [ 280.519903][T22758] inactive_file 32768 [ 280.523902][T22758] active_file 0 [ 280.527504][T22758] unevictable 0 [ 280.530996][T22758] hierarchical_memory_limit 314572800 [ 280.536423][T22758] hierarchical_memsw_limit 9223372036854771712 [ 280.542677][T22758] total_cache 8192 [ 280.546520][T22758] total_rss 4096 [ 280.550100][T22758] total_shmem 0 [ 280.553676][T22758] total_mapped_file 0 [ 280.557717][T22758] total_dirty 0 [ 280.561304][T22758] total_writeback 0 [ 280.565191][T22758] total_workingset_refault_anon 2660 [ 280.570505][T22758] total_workingset_refault_file 0 [ 280.575581][T22758] total_swap 729088 [ 280.579481][T22758] total_swapcached 4096 [ 280.583687][T22758] total_pgpgin 92682 [ 280.587655][T22758] total_pgpgout 92673 [ 280.591663][T22758] total_pgfault 76028 [ 280.595760][T22758] total_pgmajfault 440 [ 280.599879][T22758] total_inactive_anon 4096 [ 280.604335][T22758] total_active_anon 0 [ 280.608437][T22758] total_inactive_file 32768 [ 280.612970][T22758] total_active_file 0 [ 280.617016][T22758] total_unevictable 0 [ 280.621119][T22758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4206,pid=22757,uid=0 [ 280.635994][T22758] Memory cgroup out of memory: Killed process 22757 (syz.7.4206) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 280.890806][T22814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4219'. [ 281.061484][T22834] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.106492][T22834] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.176467][T22834] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.217803][T22834] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.296468][ T1624] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.318051][ T1624] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.335701][ T1624] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.351154][ T1624] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.490384][T22885] netlink: 'syz.1.4228': attribute type 10 has an invalid length. [ 281.624468][T22902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4230'. [ 282.153742][T22957] loop4: detected capacity change from 0 to 2048 [ 282.187038][T22957] EXT4-fs (loop4): failed to initialize system zone (-117) [ 282.209929][T22876] syz.1.4228 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 282.223909][T22876] CPU: 1 UID: 0 PID: 22876 Comm: syz.1.4228 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.223946][T22876] Tainted: [W]=WARN [ 282.223955][T22876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.223985][T22876] Call Trace: [ 282.223993][T22876] [ 282.224002][T22876] __dump_stack+0x1d/0x30 [ 282.224032][T22876] dump_stack_lvl+0x95/0xd0 [ 282.224062][T22876] dump_stack+0x15/0x1b [ 282.224088][T22876] dump_header+0x81/0x240 [ 282.224163][T22876] oom_kill_process+0x295/0x350 [ 282.224270][T22876] out_of_memory+0x97b/0xb80 [ 282.224301][T22876] try_charge_memcg+0x610/0xa10 [ 282.224366][T22876] obj_cgroup_charge_pages+0xa6/0x150 [ 282.224432][T22876] __memcg_kmem_charge_page+0x9f/0x170 [ 282.224471][T22876] __alloc_frozen_pages_noprof+0x18f/0x360 [ 282.224520][T22876] alloc_pages_mpol+0xb3/0x260 [ 282.224573][T22876] alloc_pages_noprof+0x90/0x130 [ 282.224647][T22876] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 282.224693][T22876] __kvmalloc_node_noprof+0x492/0x6b0 [ 282.224722][T22876] ? ip_set_alloc+0x24/0x30 [ 282.224760][T22876] ? ip_set_alloc+0x24/0x30 [ 282.224882][T22876] ip_set_alloc+0x24/0x30 [ 282.224920][T22876] hash_netiface_create+0x282/0x740 [ 282.224968][T22876] ? __pfx_hash_netiface_create+0x10/0x10 [ 282.225039][T22876] ip_set_create+0x3cc/0x970 [ 282.225074][T22876] ? __nla_parse+0x40/0x60 [ 282.225105][T22876] nfnetlink_rcv_msg+0x4c6/0x590 [ 282.225193][T22876] netlink_rcv_skb+0x123/0x220 [ 282.225232][T22876] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 282.225268][T22876] nfnetlink_rcv+0x167/0x16c0 [ 282.225369][T22876] ? kmem_cache_free+0xe3/0x3a0 [ 282.225436][T22876] ? __kfree_skb+0x109/0x150 [ 282.225472][T22876] ? nlmon_xmit+0x4f/0x60 [ 282.225498][T22876] ? consume_skb+0x49/0x150 [ 282.225528][T22876] ? nlmon_xmit+0x4f/0x60 [ 282.225612][T22876] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 282.225657][T22876] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 282.225689][T22876] ? __dev_queue_xmit+0x148/0x1ee0 [ 282.225718][T22876] ? __account_obj_stock+0x211/0x350 [ 282.225768][T22876] ? ref_tracker_free+0x37d/0x3e0 [ 282.225801][T22876] ? __netlink_deliver_tap+0x4dc/0x500 [ 282.225859][T22876] netlink_unicast+0x5c0/0x690 [ 282.225983][T22876] netlink_sendmsg+0x58b/0x6b0 [ 282.226031][T22876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.226118][T22876] __sock_sendmsg+0x145/0x180 [ 282.226146][T22876] ____sys_sendmsg+0x31e/0x4a0 [ 282.226192][T22876] ___sys_sendmsg+0x17b/0x1d0 [ 282.226246][T22876] __x64_sys_sendmsg+0xd4/0x160 [ 282.226334][T22876] x64_sys_call+0x17ba/0x3000 [ 282.226368][T22876] do_syscall_64+0xca/0x2b0 [ 282.226417][T22876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.226459][T22876] RIP: 0033:0x7f9485adf749 [ 282.226480][T22876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.226507][T22876] RSP: 002b:00007f9484547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.226535][T22876] RAX: ffffffffffffffda RBX: 00007f9485d35fa0 RCX: 00007f9485adf749 [ 282.226562][T22876] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 282.226579][T22876] RBP: 00007f9485b63f91 R08: 0000000000000000 R09: 0000000000000000 [ 282.226597][T22876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.226620][T22876] R13: 00007f9485d36038 R14: 00007f9485d35fa0 R15: 00007ffdb3c80ef8 [ 282.226649][T22876] [ 282.228043][T22957] EXT4-fs (loop4): mount failed [ 282.238301][T22876] memory: usage 307200kB, limit 307200kB, failcnt 2317 [ 282.572157][T22876] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 282.580125][T22876] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 282.587447][T22876] Memory cgroup stats for /syz1: [ 282.590694][T22876] cache 0 [ 282.598690][T22876] rss 0 [ 282.601514][T22876] shmem 0 [ 282.604664][T22876] mapped_file 0 [ 282.608221][T22876] dirty 0 [ 282.611153][T22876] writeback 0 [ 282.614507][T22876] workingset_refault_anon 282 [ 282.619190][T22876] workingset_refault_file 5747 [ 282.623948][T22876] swap 200704 [ 282.627381][T22876] swapcached 12288 [ 282.631141][T22876] pgpgin 248703 [ 282.634721][T22876] pgpgout 248697 [ 282.638297][T22876] pgfault 252692 [ 282.641874][T22876] pgmajfault 179 [ 282.645458][T22876] inactive_anon 12288 [ 282.649458][T22876] active_anon 0 [ 282.652976][T22876] inactive_file 12288 [ 282.657038][T22876] active_file 0 [ 282.660518][T22876] unevictable 0 [ 282.664001][T22876] hierarchical_memory_limit 314572800 [ 282.669447][T22876] hierarchical_memsw_limit 9223372036854771712 [ 282.675805][T22876] total_cache 0 [ 282.679367][T22876] total_rss 0 [ 282.682675][T22876] total_shmem 0 [ 282.686562][T22876] total_mapped_file 0 [ 282.690611][T22876] total_dirty 0 [ 282.694085][T22876] total_writeback 0 [ 282.698163][T22876] total_workingset_refault_anon 282 [ 282.703371][T22876] total_workingset_refault_file 5747 [ 282.708697][T22876] total_swap 200704 [ 282.712501][T22876] total_swapcached 12288 [ 282.716762][T22876] total_pgpgin 248703 [ 282.720757][T22876] total_pgpgout 248697 [ 282.725293][T22876] total_pgfault 252692 [ 282.729360][T22876] total_pgmajfault 179 [ 282.733426][T22876] total_inactive_anon 12288 [ 282.737942][T22876] total_active_anon 0 [ 282.741940][T22876] total_inactive_file 12288 [ 282.746497][T22876] total_active_file 0 [ 282.750475][T22876] total_unevictable 0 [ 282.754539][T22876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4228,pid=22875,uid=0 [ 282.769273][T22876] Memory cgroup out of memory: Killed process 22875 (syz.1.4228) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 282.787590][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 282.787668][ T29] audit: type=1400 audit(1768270941.826:46715): avc: denied { mount } for pid=22955 comm="syz.4.4234" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 282.830128][T22957] loop4: detected capacity change from 0 to 2048 [ 282.861233][T22957] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 282.876338][T22957] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 282.888803][T22957] EXT4-fs (loop4): This should not happen!! Data will be lost [ 282.888803][T22957] [ 282.898544][T22957] EXT4-fs (loop4): Total free blocks count 0 [ 282.904600][T22957] EXT4-fs (loop4): Free/Dirty block details [ 282.910528][T22957] EXT4-fs (loop4): free_blocks=2415919104 [ 282.916474][T22957] EXT4-fs (loop4): dirty_blocks=32 [ 282.921746][T22957] EXT4-fs (loop4): Block reservation details [ 282.928015][T22957] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 282.971743][T22973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4248'. [ 283.002501][ T29] audit: type=1400 audit(1768270942.036:46716): avc: denied { unmount } for pid=16156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 283.094745][ T29] audit: type=1326 audit(1768270942.086:46717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.118603][ T29] audit: type=1326 audit(1768270942.086:46718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.142285][ T29] audit: type=1326 audit(1768270942.086:46719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.166151][ T29] audit: type=1326 audit(1768270942.086:46720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.189864][ T29] audit: type=1326 audit(1768270942.086:46721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.213539][ T29] audit: type=1326 audit(1768270942.086:46722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.237080][ T29] audit: type=1326 audit(1768270942.086:46723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.260822][ T29] audit: type=1326 audit(1768270942.096:46724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22976 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 283.369749][T22986] loop2: detected capacity change from 0 to 128 [ 283.537479][T23005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4253'. [ 283.538024][T23003] loop2: detected capacity change from 0 to 1024 [ 283.555051][T23007] loop4: detected capacity change from 0 to 2048 [ 283.562951][T23003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.573127][T23007] EXT4-fs (loop4): failed to initialize system zone (-117) [ 283.580507][T23007] EXT4-fs (loop4): mount failed [ 283.669260][T23014] netlink: 'syz.2.4252': attribute type 10 has an invalid length. [ 283.681234][T23007] loop4: detected capacity change from 0 to 2048 [ 283.795686][T23022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4255: bg 0: block 248: padding at end of block bitmap is not set [ 283.824978][T23022] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4255: Failed to acquire dquot type 1 [ 283.837286][T23022] EXT4-fs (loop5): 1 truncate cleaned up [ 283.843590][T23022] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.388716][T23003] syz.2.4252 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 284.402930][T23003] CPU: 0 UID: 0 PID: 23003 Comm: syz.2.4252 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 284.402968][T23003] Tainted: [W]=WARN [ 284.402977][T23003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.402994][T23003] Call Trace: [ 284.403003][T23003] [ 284.403014][T23003] __dump_stack+0x1d/0x30 [ 284.403060][T23003] dump_stack_lvl+0x95/0xd0 [ 284.403089][T23003] dump_stack+0x15/0x1b [ 284.403117][T23003] dump_header+0x81/0x240 [ 284.403146][T23003] oom_kill_process+0x295/0x350 [ 284.403178][T23003] out_of_memory+0x97b/0xb80 [ 284.403245][T23003] try_charge_memcg+0x610/0xa10 [ 284.403292][T23003] obj_cgroup_charge_pages+0xa6/0x150 [ 284.403330][T23003] __memcg_kmem_charge_page+0x9f/0x170 [ 284.403449][T23003] __alloc_frozen_pages_noprof+0x18f/0x360 [ 284.403489][T23003] alloc_pages_mpol+0xb3/0x260 [ 284.403527][T23003] alloc_pages_noprof+0x90/0x130 [ 284.403596][T23003] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 284.403641][T23003] __kvmalloc_node_noprof+0x492/0x6b0 [ 284.403668][T23003] ? ip_set_alloc+0x24/0x30 [ 284.403791][T23003] ? ip_set_alloc+0x24/0x30 [ 284.403899][T23003] ? __slab_alloc+0x25/0x50 [ 284.403939][T23003] ip_set_alloc+0x24/0x30 [ 284.403992][T23003] hash_netiface_create+0x282/0x740 [ 284.404068][T23003] ? __pfx_hash_netiface_create+0x10/0x10 [ 284.404112][T23003] ip_set_create+0x3cc/0x970 [ 284.404247][T23003] ? __nla_parse+0x40/0x60 [ 284.404285][T23003] nfnetlink_rcv_msg+0x4c6/0x590 [ 284.404363][T23003] netlink_rcv_skb+0x123/0x220 [ 284.404405][T23003] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 284.404496][T23003] nfnetlink_rcv+0x167/0x16c0 [ 284.404525][T23003] ? kmem_cache_free+0xe3/0x3a0 [ 284.404566][T23003] ? __kfree_skb+0x109/0x150 [ 284.404678][T23003] ? nlmon_xmit+0x4f/0x60 [ 284.404705][T23003] ? consume_skb+0x49/0x150 [ 284.404740][T23003] ? nlmon_xmit+0x4f/0x60 [ 284.404767][T23003] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 284.404879][T23003] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 284.404918][T23003] ? __dev_queue_xmit+0x148/0x1ee0 [ 284.404960][T23003] ? ref_tracker_free+0x37d/0x3e0 [ 284.405098][T23003] ? __netlink_deliver_tap+0x4dc/0x500 [ 284.405137][T23003] netlink_unicast+0x5c0/0x690 [ 284.405173][T23003] netlink_sendmsg+0x58b/0x6b0 [ 284.405257][T23003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.405305][T23003] __sock_sendmsg+0x145/0x180 [ 284.405382][T23003] ____sys_sendmsg+0x31e/0x4a0 [ 284.405414][T23003] ___sys_sendmsg+0x17b/0x1d0 [ 284.405456][T23003] ? __bpf_get_stackid+0x6f6/0x7d0 [ 284.405573][T23003] __x64_sys_sendmsg+0xd4/0x160 [ 284.405648][T23003] x64_sys_call+0x17ba/0x3000 [ 284.405673][T23003] do_syscall_64+0xca/0x2b0 [ 284.405708][T23003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.405851][T23003] RIP: 0033:0x7fbb885cf749 [ 284.405866][T23003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.405916][T23003] RSP: 002b:00007fbb87037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.405973][T23003] RAX: ffffffffffffffda RBX: 00007fbb88825fa0 RCX: 00007fbb885cf749 [ 284.405991][T23003] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 284.406043][T23003] RBP: 00007fbb88653f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.406061][T23003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.406079][T23003] R13: 00007fbb88826038 R14: 00007fbb88825fa0 R15: 00007ffe2dc8d078 [ 284.406106][T23003] [ 284.743769][T23003] memory: usage 307200kB, limit 307200kB, failcnt 1201 [ 284.751000][T23003] memory+swap: usage 308096kB, limit 9007199254740988kB, failcnt 0 [ 284.758966][T23003] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 284.766433][T23003] Memory cgroup stats for /syz2: [ 284.769432][T23003] cache 24576 [ 284.777879][T23003] rss 0 [ 284.780671][T23003] shmem 0 [ 284.783742][T23003] mapped_file 0 [ 284.787335][T23003] dirty 0 [ 284.790295][T23003] writeback 0 [ 284.793608][T23003] workingset_refault_anon 1743 [ 284.798463][T23003] workingset_refault_file 4136 [ 284.803266][T23003] swap 917504 [ 284.806659][T23003] swapcached 4096 [ 284.810399][T23003] pgpgin 319651 [ 284.813897][T23003] pgpgout 319637 [ 284.817549][T23003] pgfault 247943 [ 284.821117][T23003] pgmajfault 284 [ 284.824713][T23003] inactive_anon 0 [ 284.828385][T23003] active_anon 4096 [ 284.832135][T23003] inactive_file 0 [ 284.835826][T23003] active_file 53248 [ 284.839691][T23003] unevictable 0 [ 284.843196][T23003] hierarchical_memory_limit 314572800 [ 284.848689][T23003] hierarchical_memsw_limit 9223372036854771712 [ 284.854919][T23003] total_cache 24576 [ 284.858752][T23003] total_rss 0 [ 284.862093][T23003] total_shmem 0 [ 284.865599][T23003] total_mapped_file 0 [ 284.869635][T23003] total_dirty 0 [ 284.873121][T23003] total_writeback 0 [ 284.877073][T23003] total_workingset_refault_anon 1743 [ 284.882465][T23003] total_workingset_refault_file 4136 [ 284.887834][T23003] total_swap 917504 [ 284.891692][T23003] total_swapcached 4096 [ 284.895910][T23003] total_pgpgin 319651 [ 284.899919][T23003] total_pgpgout 319637 [ 284.904026][T23003] total_pgfault 247943 [ 284.908188][T23003] total_pgmajfault 284 [ 284.912291][T23003] total_inactive_anon 0 [ 284.916531][T23003] total_active_anon 4096 [ 284.920808][T23003] total_inactive_file 0 [ 284.925034][T23003] total_active_file 53248 [ 284.929398][T23003] total_unevictable 0 [ 284.933398][T23003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4252,pid=23002,uid=0 [ 284.948206][T23003] Memory cgroup out of memory: Killed process 23002 (syz.2.4252) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 285.036591][T23100] set_capacity_and_notify: 1 callbacks suppressed [ 285.036606][T23100] loop7: detected capacity change from 0 to 128 [ 285.251789][T23124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4270'. [ 285.907475][T23149] loop2: detected capacity change from 0 to 128 [ 286.121888][T23170] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4278'. [ 286.152502][T23170] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4278'. [ 286.221304][T23150] netlink: 'syz.1.4273': attribute type 10 has an invalid length. [ 286.263895][T23182] loop2: detected capacity change from 0 to 2048 [ 286.285274][T23182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 286.303138][T23190] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4281'. [ 286.437718][T23182] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 286.450048][T23182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 286.450048][T23182] [ 286.459738][T23182] EXT4-fs (loop2): Total free blocks count 0 [ 286.465776][T23182] EXT4-fs (loop2): Free/Dirty block details [ 286.471802][T23182] EXT4-fs (loop2): free_blocks=2415919104 [ 286.477579][T23182] EXT4-fs (loop2): dirty_blocks=16 [ 286.482717][T23182] EXT4-fs (loop2): Block reservation details [ 286.488738][T23182] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 286.791135][T23193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.809221][T23215] loop2: detected capacity change from 0 to 128 [ 286.826686][T23215] bio_check_eod: 28 callbacks suppressed [ 286.826711][T23215] syz.2.4285: attempt to access beyond end of device [ 286.826711][T23215] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 286.889246][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4285'. [ 286.935529][T23226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4291'. [ 286.990660][T23228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 287.071883][T23232] loop2: detected capacity change from 0 to 512 [ 287.135546][T23232] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4294: iget: bad extra_isize 90 (inode size 256) [ 287.157071][T23232] EXT4-fs (loop2): Remounting filesystem read-only [ 287.163802][T23232] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 287.174942][T23232] EXT4-fs (loop2): 1 orphan inode deleted [ 287.268887][T23247] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4299'. [ 287.281159][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4303'. [ 287.295512][T23247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4299'. [ 287.544663][T23294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4319'. [ 287.571420][T23296] loop2: detected capacity change from 0 to 512 [ 287.578233][T23296] EXT4-fs: Ignoring removed i_version option [ 287.584402][T23296] EXT4-fs: Ignoring removed bh option [ 287.598323][T23296] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.675275][T23303] loop4: detected capacity change from 0 to 512 [ 287.681986][T23303] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.688781][T23303] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 287.698066][T23303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 287.706072][T23303] System zones: 1-12 [ 287.710265][T23303] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.4322: corrupted in-inode xattr: e_value size too large [ 287.724543][T23303] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4322: couldn't read orphan inode 15 (err -117) [ 287.737369][T23303] EXT4-fs mount: 45 callbacks suppressed [ 287.737390][T23303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.764547][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.813542][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 287.813596][ T29] audit: type=1326 audit(1768270946.846:47029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 287.843736][ T29] audit: type=1326 audit(1768270946.846:47030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 287.867492][ T29] audit: type=1326 audit(1768270946.846:47031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 287.891112][ T29] audit: type=1326 audit(1768270946.856:47032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 287.914812][ T29] audit: type=1326 audit(1768270946.856:47033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 287.938527][ T29] audit: type=1326 audit(1768270946.856:47034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 287.962271][ T29] audit: type=1326 audit(1768270946.856:47035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 287.985936][ T29] audit: type=1326 audit(1768270946.856:47036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 288.009623][ T29] audit: type=1326 audit(1768270946.856:47037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb885cf749 code=0x7ffc0000 [ 288.112053][ T29] audit: type=1326 audit(1768270947.146:47038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23310 comm="syz.5.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f03f749 code=0x7ffc0000 [ 288.294634][T23315] bridge0: entered promiscuous mode [ 288.300187][T23315] bridge0: left promiscuous mode [ 288.387287][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.480959][ T4063] Bluetooth: hci0: command 0x1003 tx timeout [ 289.504348][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 289.734597][T23339] loop7: detected capacity change from 0 to 512 [ 290.204395][T23337] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 290.378141][T23342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=23342 comm=syz.4.4338 [ 290.404700][T23339] EXT4-fs: Ignoring removed i_version option [ 290.410789][T23339] EXT4-fs: Ignoring removed bh option [ 290.539153][T23339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.556170][T23339] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.680988][T23364] infiniband syz!: set active [ 290.685787][T23364] infiniband syz!: added team_slave_0 [ 290.711247][T23364] RDS/IB: syz!: added [ 290.724490][T23364] smc: adding ib device syz! with port count 1 [ 290.733145][T23364] smc: ib device syz! port 1 has no pnetid [ 290.928269][T23383] loop5: detected capacity change from 0 to 512 [ 290.947310][T23383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.989672][T23383] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.032334][T23390] loop5: detected capacity change from 0 to 512 [ 291.066187][T23390] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4357: bg 0: block 248: padding at end of block bitmap is not set [ 291.154444][T23390] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4357: Failed to acquire dquot type 1 [ 291.194989][T23390] EXT4-fs (loop5): 1 truncate cleaned up [ 291.201111][T23390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.239831][T23390] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.270861][T23390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.312533][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.354649][T23404] loop7: detected capacity change from 0 to 2048 [ 291.377056][T23404] EXT4-fs (loop7): failed to initialize system zone (-117) [ 291.385737][T23404] EXT4-fs (loop7): mount failed [ 291.463802][T23415] loop7: detected capacity change from 0 to 2048 [ 291.486044][T23415] EXT4-fs (loop7): failed to initialize system zone (-117) [ 291.495229][T23415] EXT4-fs (loop7): mount failed [ 291.562700][T23411] loop4: detected capacity change from 0 to 1024 [ 291.584974][T23411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.596483][T23411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 291.605103][T23411] System zones: 0-1, 3-36 [ 291.611243][T23411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.727694][T23434] loop2: detected capacity change from 0 to 512 [ 291.734331][T23434] EXT4-fs: Ignoring removed i_version option [ 291.740391][T23434] EXT4-fs: Ignoring removed bh option [ 291.751258][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.782500][T23434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.807345][T23434] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.900135][T23447] loop7: detected capacity change from 0 to 2048 [ 291.915657][T23447] EXT4-fs (loop7): failed to initialize system zone (-117) [ 291.923075][T23447] EXT4-fs (loop7): mount failed [ 291.951752][T23451] __nla_validate_parse: 5 callbacks suppressed [ 291.951767][T23451] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4379'. [ 291.967159][T23451] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4379'. [ 291.993692][T23453] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.4380'. [ 292.039211][T23457] loop7: detected capacity change from 0 to 512 [ 292.047908][T23457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.060647][T23457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.125773][T23462] loop7: detected capacity change from 0 to 1024 [ 292.134867][T23462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.146551][T23462] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 292.155815][T23462] System zones: 0-1, 3-36 [ 292.162387][T23462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.245882][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4387'. [ 292.261030][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.292970][T23475] loop5: detected capacity change from 0 to 512 [ 292.305296][T23475] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 292.313316][T23475] EXT4-fs (loop5): orphan cleanup on readonly fs [ 292.321435][T23475] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm )}Y": corrupted inode contents [ 292.333394][T23475] EXT4-fs (loop5): Remounting filesystem read-only [ 292.340102][T23475] EXT4-fs (loop5): 1 truncate cleaned up [ 292.344674][T23479] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4390'. [ 292.346323][ T1624] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 292.355257][T23479] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4390'. [ 292.365399][ T1624] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 292.385277][ T1624] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 292.406474][T23475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.556034][T10963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.565908][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.577568][T23494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4396'. [ 292.615238][T23496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.634361][T23496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.656408][T23496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.694791][T23496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.707297][T23496] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4398'. [ 292.734247][T23505] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4401: iget: bad extra_isize 90 (inode size 256) [ 292.778745][T23505] EXT4-fs (loop2): Remounting filesystem read-only [ 292.786544][T23499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.814529][ T29] kauditd_printk_skb: 2004 callbacks suppressed [ 292.814547][ T29] audit: type=1326 audit(1768270951.856:49035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2b14f65e7 code=0x7ffc0000 [ 292.829995][T23505] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 292.853915][T23505] EXT4-fs (loop2): 1 orphan inode deleted [ 292.860639][T23505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.872656][T23499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 292.872712][T23499] System zones: 0-1, 3-36 [ 292.875207][T23499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.898113][ T29] audit: type=1326 audit(1768270951.856:49036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2b149b829 code=0x7ffc0000 [ 292.921986][ T29] audit: type=1326 audit(1768270951.856:49037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2b14f65e7 code=0x7ffc0000 [ 292.945149][ T29] audit: type=1326 audit(1768270951.856:49038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2b149b829 code=0x7ffc0000 [ 292.968162][ T29] audit: type=1326 audit(1768270951.856:49039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2b14f65e7 code=0x7ffc0000 [ 292.991387][ T29] audit: type=1326 audit(1768270951.856:49040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2b149b829 code=0x7ffc0000 [ 293.014472][ T29] audit: type=1326 audit(1768270951.856:49041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2b14f65e7 code=0x7ffc0000 [ 293.037530][ T29] audit: type=1326 audit(1768270951.856:49042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2b149b829 code=0x7ffc0000 [ 293.060566][ T29] audit: type=1326 audit(1768270951.856:49043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2b14f65e7 code=0x7ffc0000 [ 293.083563][ T29] audit: type=1326 audit(1768270951.856:49044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2b149b829 code=0x7ffc0000 [ 293.107192][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.190002][T23521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.202667][T23521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.223882][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.263828][T23528] EXT4-fs: Ignoring removed i_version option [ 293.270047][T23528] EXT4-fs: Ignoring removed bh option [ 293.290364][T23530] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4411: iget: bad extra_isize 90 (inode size 256) [ 293.304700][T23530] EXT4-fs (loop2): Remounting filesystem read-only [ 293.311490][T23530] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 293.320995][T23530] EXT4-fs (loop2): 1 orphan inode deleted [ 293.328192][T23528] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.342339][T23530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.364990][T23539] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4414'. [ 293.374180][T23528] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.385136][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.498014][T23553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.508061][T23553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.513387][T23551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.535360][T23551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 293.543505][T23551] System zones: 0-1, 3-36 [ 293.549048][T23551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.601555][T23557] netlink: 'syz.5.4421': attribute type 10 has an invalid length. [ 293.650181][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.678881][T23559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.716746][T23559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.819538][T23562] netlink: 'syz.4.4422': attribute type 10 has an invalid length. [ 293.829998][T23562] team0: Failed to send options change via netlink (err -105) [ 293.837581][T23562] team0: Port device dummy0 added [ 294.111118][T23553] syz.5.4421 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 294.125371][T23553] CPU: 0 UID: 0 PID: 23553 Comm: syz.5.4421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.125414][T23553] Tainted: [W]=WARN [ 294.125424][T23553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.125442][T23553] Call Trace: [ 294.125451][T23553] [ 294.125463][T23553] __dump_stack+0x1d/0x30 [ 294.125514][T23553] dump_stack_lvl+0x95/0xd0 [ 294.125586][T23553] dump_stack+0x15/0x1b [ 294.125607][T23553] dump_header+0x81/0x240 [ 294.125632][T23553] oom_kill_process+0x295/0x350 [ 294.125736][T23553] out_of_memory+0x97b/0xb80 [ 294.125779][T23553] try_charge_memcg+0x610/0xa10 [ 294.125839][T23553] obj_cgroup_charge_pages+0xa6/0x150 [ 294.125919][T23553] __memcg_kmem_charge_page+0x9f/0x170 [ 294.125956][T23553] __alloc_frozen_pages_noprof+0x18f/0x360 [ 294.126071][T23553] alloc_pages_mpol+0xb3/0x260 [ 294.126104][T23553] alloc_pages_noprof+0x90/0x130 [ 294.126202][T23553] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 294.126258][T23553] __kvmalloc_node_noprof+0x492/0x6b0 [ 294.126295][T23553] ? ip_set_alloc+0x24/0x30 [ 294.126388][T23553] ? ip_set_alloc+0x24/0x30 [ 294.126516][T23553] ip_set_alloc+0x24/0x30 [ 294.126550][T23553] hash_netiface_create+0x282/0x740 [ 294.126591][T23553] ? __pfx_hash_netiface_create+0x10/0x10 [ 294.126648][T23553] ip_set_create+0x3cc/0x970 [ 294.126680][T23553] ? __nla_parse+0x40/0x60 [ 294.126715][T23553] nfnetlink_rcv_msg+0x4c6/0x590 [ 294.126821][T23553] netlink_rcv_skb+0x123/0x220 [ 294.126862][T23553] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.126902][T23553] nfnetlink_rcv+0x167/0x16c0 [ 294.126931][T23553] ? xas_load+0x405/0x430 [ 294.127019][T23553] ? xas_load+0x405/0x430 [ 294.127054][T23553] ? folio_mark_accessed+0x236/0x3a0 [ 294.127082][T23553] ? find_get_block_common+0x6de/0x8e0 [ 294.127130][T23553] ? native_apic_msr_write+0x3d/0x60 [ 294.127158][T23553] ? should_fail_ex+0x30/0x280 [ 294.127225][T23553] ? selinux_nlmsg_lookup+0x99/0x890 [ 294.127262][T23553] ? __rcu_read_unlock+0x34/0x70 [ 294.127291][T23553] ? __netlink_lookup+0x266/0x2a0 [ 294.127321][T23553] netlink_unicast+0x5c0/0x690 [ 294.127365][T23553] netlink_sendmsg+0x58b/0x6b0 [ 294.127402][T23553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.127446][T23553] __sock_sendmsg+0x145/0x180 [ 294.127523][T23553] ____sys_sendmsg+0x31e/0x4a0 [ 294.127558][T23553] ___sys_sendmsg+0x17b/0x1d0 [ 294.127651][T23553] ? __bpf_get_stackid+0x6f6/0x7d0 [ 294.127706][T23553] __x64_sys_sendmsg+0xd4/0x160 [ 294.127787][T23553] x64_sys_call+0x17ba/0x3000 [ 294.127814][T23553] do_syscall_64+0xca/0x2b0 [ 294.127860][T23553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.127883][T23553] RIP: 0033:0x7f1a6f03f749 [ 294.127926][T23553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.127951][T23553] RSP: 002b:00007f1a6da9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.127971][T23553] RAX: ffffffffffffffda RBX: 00007f1a6f295fa0 RCX: 00007f1a6f03f749 [ 294.127985][T23553] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 294.128055][T23553] RBP: 00007f1a6f0c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.128068][T23553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.128081][T23553] R13: 00007f1a6f296038 R14: 00007f1a6f295fa0 R15: 00007ffee3e66208 [ 294.128128][T23553] [ 294.128137][T23553] memory: usage 307200kB, limit 307200kB, failcnt 785 [ 294.466723][T23553] memory+swap: usage 308076kB, limit 9007199254740988kB, failcnt 0 [ 294.474762][T23553] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 294.482120][T23553] Memory cgroup stats for /syz5: [ 294.482714][T23553] cache 8192 [ 294.483224][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.487717][T23553] rss 0 [ 294.487728][T23553] shmem 0 [ 294.487738][T23553] mapped_file 0 [ 294.487749][T23553] dirty 0 [ 294.512357][T23553] writeback 8192 [ 294.516005][T23553] workingset_refault_anon 506 [ 294.520709][T23553] workingset_refault_file 0 [ 294.525285][T23553] swap 897024 [ 294.528601][T23553] swapcached 12288 [ 294.532342][T23553] pgpgin 154357 [ 294.535869][T23553] pgpgout 154340 [ 294.539460][T23553] pgfault 160722 [ 294.543031][T23553] pgmajfault 130 [ 294.547061][T23553] inactive_anon 12288 [ 294.551071][T23553] active_anon 0 [ 294.554634][T23553] inactive_file 49152 [ 294.558634][T23553] active_file 8192 [ 294.562371][T23553] unevictable 0 [ 294.565916][T23553] hierarchical_memory_limit 314572800 [ 294.571320][T23553] hierarchical_memsw_limit 9223372036854771712 [ 294.577542][T23553] total_cache 8192 [ 294.581316][T23553] total_rss 0 [ 294.584665][T23553] total_shmem 0 [ 294.588143][T23553] total_mapped_file 0 [ 294.592147][T23553] total_dirty 0 [ 294.595680][T23553] total_writeback 8192 [ 294.599751][T23553] total_workingset_refault_anon 506 [ 294.605055][T23553] total_workingset_refault_file 0 [ 294.610102][T23553] total_swap 897024 [ 294.613906][T23553] total_swapcached 12288 [ 294.618256][T23553] total_pgpgin 154357 [ 294.622400][T23553] total_pgpgout 154340 [ 294.626536][T23553] total_pgfault 160722 [ 294.630674][T23553] total_pgmajfault 130 [ 294.634874][T23553] total_inactive_anon 12288 [ 294.639414][T23553] total_active_anon 0 [ 294.643523][T23553] total_inactive_file 49152 [ 294.648141][T23553] total_active_file 8192 [ 294.652417][T23553] total_unevictable 0 [ 294.656595][T23553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4421,pid=23552,uid=0 [ 294.671438][T23553] Memory cgroup out of memory: Killed process 23553 (syz.5.4421) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 294.833797][T10963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.835491][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.873958][T23586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4432'. [ 294.907724][T23592] EXT4-fs: Ignoring removed i_version option [ 294.913827][T23592] EXT4-fs: Ignoring removed bh option [ 294.941529][T23594] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4434: iget: bad extra_isize 90 (inode size 256) [ 294.965163][T23594] EXT4-fs (loop4): Remounting filesystem read-only [ 294.973916][T23594] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 294.984206][T23592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.997479][T23594] EXT4-fs (loop4): 1 orphan inode deleted [ 295.003565][T23591] EXT4-fs (loop7): failed to initialize system zone (-117) [ 295.004198][T23594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.031333][T23591] EXT4-fs (loop7): mount failed [ 295.033628][T23592] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.094064][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.233541][T23609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.272853][T23609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.360142][T23617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.406544][T23617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.511796][T23628] netlink: 'syz.5.4444': attribute type 10 has an invalid length. [ 295.770332][T17864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.963412][T23655] set_capacity_and_notify: 15 callbacks suppressed [ 295.963433][T23655] loop2: detected capacity change from 0 to 512 [ 295.988040][T23655] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4457: bg 0: block 248: padding at end of block bitmap is not set [ 296.014668][T23655] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4457: Failed to acquire dquot type 1 [ 296.035755][T23655] EXT4-fs (loop2): 1 truncate cleaned up [ 296.041857][T23655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.055039][T23655] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.066961][T23655] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.151496][T23616] syz.5.4444 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 296.162652][T23616] CPU: 1 UID: 0 PID: 23616 Comm: syz.5.4444 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.162719][T23616] Tainted: [W]=WARN [ 296.162728][T23616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.162744][T23616] Call Trace: [ 296.162751][T23616] [ 296.162761][T23616] __dump_stack+0x1d/0x30 [ 296.162795][T23616] dump_stack_lvl+0x95/0xd0 [ 296.162825][T23616] dump_stack+0x15/0x1b [ 296.162919][T23616] dump_header+0x81/0x240 [ 296.163083][T23616] oom_kill_process+0x295/0x350 [ 296.163107][T23616] out_of_memory+0x97b/0xb80 [ 296.163131][T23616] try_charge_memcg+0x610/0xa10 [ 296.163239][T23616] charge_memcg+0x51/0xc0 [ 296.163339][T23616] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 296.163398][T23616] __read_swap_cache_async+0x17b/0x2d0 [ 296.163493][T23616] swap_cluster_readahead+0x262/0x3c0 [ 296.163542][T23616] swapin_readahead+0xde/0x820 [ 296.163603][T23616] ? __rcu_read_unlock+0x4f/0x70 [ 296.163631][T23616] ? swap_cache_get_folio+0x277/0x280 [ 296.163711][T23616] do_swap_page+0x2b4/0x21e0 [ 296.163756][T23616] ? __pfx_default_wake_function+0x10/0x10 [ 296.163808][T23616] handle_mm_fault+0x9d8/0x2c60 [ 296.163864][T23616] do_user_addr_fault+0x630/0x1080 [ 296.163928][T23616] exc_page_fault+0x62/0xa0 [ 296.163970][T23616] asm_exc_page_fault+0x26/0x30 [ 296.163990][T23616] RIP: 0033:0x7f1a6ef159ec [ 296.164050][T23616] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 296.164069][T23616] RSP: 002b:00007ffee3e66370 EFLAGS: 00010287 [ 296.164087][T23616] RAX: 0000000000000000 RBX: 00007f1a6f296090 RCX: 0000000000000000 [ 296.164104][T23616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557a1b6808 [ 296.164122][T23616] RBP: 00007f1a6f297da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 296.164139][T23616] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000484d7 [ 296.164155][T23616] R13: 00007f1a6f296090 R14: ffffffffffffffff R15: 00007ffee3e66480 [ 296.164199][T23616] [ 296.164208][T23616] memory: usage 307200kB, limit 307200kB, failcnt 1053 [ 296.374715][T23616] memory+swap: usage 308084kB, limit 9007199254740988kB, failcnt 0 [ 296.382587][T23666] loop4: detected capacity change from 0 to 512 [ 296.382678][T23616] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 296.382694][T23616] Memory cgroup stats for /syz5: [ 296.392156][T23616] cache 8192 [ 296.404675][T23616] rss 0 [ 296.405444][T23666] EXT4-fs: Ignoring removed i_version option [ 296.407462][T23616] shmem 0 [ 296.407473][T23616] mapped_file 0 [ 296.407483][T23616] dirty 0 [ 296.407490][T23616] writeback 0 [ 296.407499][T23616] workingset_refault_anon 583 [ 296.413498][T23666] EXT4-fs: Ignoring removed bh option [ 296.416468][T23616] workingset_refault_file 0 [ 296.416481][T23616] swap 905216 [ 296.416490][T23616] swapcached 4096 [ 296.416498][T23616] pgpgin 154830 [ 296.416505][T23616] pgpgout 154815 [ 296.416512][T23616] pgfault 161345 [ 296.416520][T23616] pgmajfault 160 [ 296.416527][T23616] inactive_anon 0 [ 296.416534][T23616] active_anon 4096 [ 296.458745][T23666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.459188][T23666] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.462376][T23616] inactive_file 0 [ 296.462389][T23616] active_file 57344 [ 296.462400][T23616] unevictable 0 [ 296.503417][T23616] hierarchical_memory_limit 314572800 [ 296.508870][T23616] hierarchical_memsw_limit 9223372036854771712 [ 296.515037][T23616] total_cache 8192 [ 296.518756][T23616] total_rss 0 [ 296.522037][T23616] total_shmem 0 [ 296.525512][T23616] total_mapped_file 0 [ 296.529492][T23616] total_dirty 0 [ 296.532979][T23616] total_writeback 0 [ 296.536813][T23616] total_workingset_refault_anon 583 [ 296.542059][T23616] total_workingset_refault_file 0 [ 296.547169][T23616] total_swap 905216 [ 296.551033][T23616] total_swapcached 4096 [ 296.555281][T23616] total_pgpgin 154830 [ 296.559261][T23616] total_pgpgout 154815 [ 296.563326][T23616] total_pgfault 161345 [ 296.567418][T23616] total_pgmajfault 160 [ 296.571484][T23616] total_inactive_anon 0 [ 296.575697][T23616] total_active_anon 4096 [ 296.579951][T23616] total_inactive_file 0 [ 296.584103][T23616] total_active_file 57344 [ 296.588453][T23616] total_unevictable 0 [ 296.592432][T23616] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4444,pid=23616,uid=0 [ 296.607166][T23616] Memory cgroup out of memory: Killed process 23616 (syz.5.4444) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 296.654914][T10963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.794051][T23681] loop7: detected capacity change from 0 to 512 [ 296.826877][T23681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.872359][T23681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.029287][ T1624] bridge_slave_0: left allmulticast mode [ 297.035086][ T1624] bridge_slave_0: left promiscuous mode [ 297.040742][ T1624] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.116213][ T1624] team0: Port device bridge1 removed [ 297.176877][ T1624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.186455][ T1624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.195948][ T1624] bond0 (unregistering): Released all slaves [ 297.212965][ T1624] bond1 (unregistering): Released all slaves [ 297.222028][ T1624] bond2 (unregistering): Released all slaves [ 297.348873][T16156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.359543][ T1624] hsr_slave_0: left promiscuous mode [ 297.366283][ T1624] hsr_slave_1: left promiscuous mode [ 297.425141][ T1624] team0 (unregistering): Port device team_slave_1 removed [ 297.437150][ T1624] team0 (unregistering): Port device team_slave_0 removed [ 297.467892][ T1624] team0 (unregistering): Port device dummy0 removed [ 297.489406][T23677] chnl_net:caif_netlink_parms(): no params data found [ 297.554912][T23677] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.562006][T23677] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.575170][T23677] bridge_slave_0: entered allmulticast mode [ 297.586944][T23677] bridge_slave_0: entered promiscuous mode [ 297.594210][T23677] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.601381][T23677] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.609231][T23677] bridge_slave_1: entered allmulticast mode [ 297.616059][T23677] bridge_slave_1: entered promiscuous mode [ 297.637808][T23677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.650546][T23677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.678674][T23677] team0: Port device team_slave_0 added [ 297.687001][ T1624] IPVS: stop unused estimator thread 0... [ 297.708769][T23677] team0: Port device team_slave_1 added [ 297.744175][T23677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.751306][T23677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.777283][T23677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.792835][T23677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.799992][T23677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.826113][T23677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.834589][T23715] __nla_validate_parse: 4 callbacks suppressed [ 297.834658][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4473'. [ 297.916029][T23677] hsr_slave_0: entered promiscuous mode [ 297.922495][T23677] hsr_slave_1: entered promiscuous mode [ 297.960468][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 297.960485][ T29] audit: type=1326 audit(1768270956.996:49657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.001922][T23720] netlink: 'syz.1.4474': attribute type 10 has an invalid length. [ 298.040881][ T29] audit: type=1326 audit(1768270957.026:49658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.064842][ T29] audit: type=1326 audit(1768270957.026:49659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.089429][ T29] audit: type=1326 audit(1768270957.026:49660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.113027][ T29] audit: type=1326 audit(1768270957.026:49661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.136812][ T29] audit: type=1326 audit(1768270957.026:49662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.160357][ T29] audit: type=1326 audit(1768270957.026:49663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.183945][ T29] audit: type=1326 audit(1768270957.036:49664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.207609][ T29] audit: type=1326 audit(1768270957.036:49665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.231235][ T29] audit: type=1326 audit(1768270957.036:49666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9485adf749 code=0x7ffc0000 [ 298.367843][T23731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23731 comm=syz.7.4476 [ 298.419065][T23732] bond2: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 298.445883][T23730] bond2: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 298.687995][T23677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.707038][T23677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.726697][T23677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.755503][T23677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.852086][T23677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.885193][T23677] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.906720][ T1624] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.913875][ T1624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.952918][ T1624] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.960224][ T1624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.998923][T23677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.009470][T23677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.230298][T23677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.689530][T23677] veth0_vlan: entered promiscuous mode [ 299.737890][T23677] veth1_vlan: entered promiscuous mode [ 299.847476][T23677] veth0_macvtap: entered promiscuous mode [ 299.884215][T23677] veth1_macvtap: entered promiscuous mode [ 299.903887][T23677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.931065][T23677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.021776][ T6875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.058140][T23827] loop7: detected capacity change from 0 to 1024 [ 300.075051][ T6875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.086137][ T6875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.096217][ T6875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.116213][T23827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.177306][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4463'. [ 300.222721][T23827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.405173][T23846] netlink: 'syz.7.4488': attribute type 10 has an invalid length. [ 300.518973][T23827] syz.7.4488 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 300.533177][T23827] CPU: 0 UID: 0 PID: 23827 Comm: syz.7.4488 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.533213][T23827] Tainted: [W]=WARN [ 300.533222][T23827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.533310][T23827] Call Trace: [ 300.533320][T23827] [ 300.533331][T23827] __dump_stack+0x1d/0x30 [ 300.533361][T23827] dump_stack_lvl+0x95/0xd0 [ 300.533384][T23827] dump_stack+0x15/0x1b [ 300.533408][T23827] dump_header+0x81/0x240 [ 300.533507][T23827] oom_kill_process+0x295/0x350 [ 300.533534][T23827] out_of_memory+0x97b/0xb80 [ 300.533622][T23827] try_charge_memcg+0x610/0xa10 [ 300.533765][T23827] obj_cgroup_charge_pages+0xa6/0x150 [ 300.533842][T23827] __memcg_kmem_charge_page+0x9f/0x170 [ 300.533933][T23827] __alloc_frozen_pages_noprof+0x18f/0x360 [ 300.534040][T23827] alloc_pages_mpol+0xb3/0x260 [ 300.534082][T23827] alloc_pages_noprof+0x90/0x130 [ 300.534122][T23827] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 300.534165][T23827] __kvmalloc_node_noprof+0x492/0x6b0 [ 300.534230][T23827] ? ip_set_alloc+0x24/0x30 [ 300.534273][T23827] ? ip_set_alloc+0x24/0x30 [ 300.534318][T23827] ip_set_alloc+0x24/0x30 [ 300.534414][T23827] hash_netiface_create+0x282/0x740 [ 300.534461][T23827] ? __pfx_hash_netiface_create+0x10/0x10 [ 300.534538][T23827] ip_set_create+0x3cc/0x970 [ 300.534639][T23827] ? __nla_parse+0x40/0x60 [ 300.534744][T23827] nfnetlink_rcv_msg+0x4c6/0x590 [ 300.534884][T23827] netlink_rcv_skb+0x123/0x220 [ 300.534917][T23827] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 300.535052][T23827] nfnetlink_rcv+0x167/0x16c0 [ 300.535082][T23827] ? kmem_cache_free+0xe3/0x3a0 [ 300.535114][T23827] ? __kfree_skb+0x109/0x150 [ 300.535141][T23827] ? nlmon_xmit+0x4f/0x60 [ 300.535212][T23827] ? consume_skb+0x49/0x150 [ 300.535238][T23827] ? nlmon_xmit+0x4f/0x60 [ 300.535262][T23827] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 300.535344][T23827] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 300.535388][T23827] ? __dev_queue_xmit+0x148/0x1ee0 [ 300.535419][T23827] ? ref_tracker_free+0x37d/0x3e0 [ 300.535448][T23827] ? __netlink_deliver_tap+0x4dc/0x500 [ 300.535644][T23827] netlink_unicast+0x5c0/0x690 [ 300.535717][T23827] netlink_sendmsg+0x58b/0x6b0 [ 300.535766][T23827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.535807][T23827] __sock_sendmsg+0x145/0x180 [ 300.535905][T23827] ____sys_sendmsg+0x31e/0x4a0 [ 300.535948][T23827] ___sys_sendmsg+0x17b/0x1d0 [ 300.536075][T23827] __x64_sys_sendmsg+0xd4/0x160 [ 300.536141][T23827] x64_sys_call+0x17ba/0x3000 [ 300.536173][T23827] do_syscall_64+0xca/0x2b0 [ 300.536231][T23827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.536261][T23827] RIP: 0033:0x7f9ba86af749 [ 300.536283][T23827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.536318][T23827] RSP: 002b:00007f9ba7117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.536341][T23827] RAX: ffffffffffffffda RBX: 00007f9ba8905fa0 RCX: 00007f9ba86af749 [ 300.536435][T23827] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 300.536449][T23827] RBP: 00007f9ba8733f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.536466][T23827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.536484][T23827] R13: 00007f9ba8906038 R14: 00007f9ba8905fa0 R15: 00007fff411866f8 [ 300.536525][T23827] [ 300.865065][T23827] memory: usage 307200kB, limit 307200kB, failcnt 716 [ 300.871897][T23827] memory+swap: usage 307820kB, limit 9007199254740988kB, failcnt 0 [ 300.879857][T23827] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0 [ 300.887213][T23827] Memory cgroup stats for /syz7: [ 300.904697][T23827] cache 28672 [ 300.913079][T23827] rss 118784 [ 300.916672][T23827] shmem 0 [ 300.919635][T23827] mapped_file 0 [ 300.923115][T23827] dirty 0 [ 300.926130][T23827] writeback 0 [ 300.929435][T23827] workingset_refault_anon 2725 [ 300.934210][T23827] workingset_refault_file 2 [ 300.938811][T23827] swap 565248 [ 300.942204][T23827] swapcached 139264 [ 300.946102][T23827] pgpgin 101025 [ 300.949652][T23827] pgpgout 100971 [ 300.953296][T23827] pgfault 87662 [ 300.956830][T23827] pgmajfault 465 [ 300.960459][T23827] inactive_anon 94208 [ 300.964478][T23827] active_anon 73728 [ 300.968331][T23827] inactive_file 53248 [ 300.972357][T23827] active_file 0 [ 300.975945][T23827] unevictable 0 [ 300.979448][T23827] hierarchical_memory_limit 314572800 [ 300.984870][T23827] hierarchical_memsw_limit 9223372036854771712 [ 300.991080][T23827] total_cache 28672 [ 300.994936][T23827] total_rss 118784 [ 300.998688][T23827] total_shmem 0 [ 301.002180][T23827] total_mapped_file 0 [ 301.006283][T23827] total_dirty 0 [ 301.010064][T23827] total_writeback 0 [ 301.013909][T23827] total_workingset_refault_anon 2725 [ 301.019300][T23827] total_workingset_refault_file 2 [ 301.024390][T23827] total_swap 565248 [ 301.028299][T23827] total_swapcached 139264 [ 301.032651][T23827] total_pgpgin 101025 [ 301.036677][T23827] total_pgpgout 100971 [ 301.040795][T23827] total_pgfault 87662 [ 301.044858][T23827] total_pgmajfault 465 [ 301.049079][T23827] total_inactive_anon 94208 [ 301.053650][T23827] total_active_anon 73728 [ 301.058144][T23827] total_inactive_file 53248 [ 301.062665][T23827] total_active_file 0 [ 301.066705][T23827] total_unevictable 0 [ 301.070791][T23827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4488,pid=23826,uid=0 [ 301.085610][T23827] Memory cgroup out of memory: Killed process 23827 (syz.7.4488) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 301.242669][T23870] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 301.277982][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.289220][T23874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4490'. [ 301.691161][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4496'. [ 301.782743][T23925] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4499'. [ 301.791934][T23925] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4499'. [ 302.242345][T23987] loop5: detected capacity change from 0 to 512 [ 302.251501][T23987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.264181][T23987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.897935][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4509'. [ 302.995992][T24095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4510'. [ 303.050755][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 303.050795][ T29] audit: type=1326 audit(1768270962.086:49883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.121782][ T29] audit: type=1326 audit(1768270962.086:49884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.123748][T24109] loop2: detected capacity change from 0 to 512 [ 303.145676][ T29] audit: type=1326 audit(1768270962.086:49885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.176416][ T29] audit: type=1326 audit(1768270962.086:49886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.200120][ T29] audit: type=1326 audit(1768270962.086:49887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.223769][ T29] audit: type=1326 audit(1768270962.086:49888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.227539][T24109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.247463][ T29] audit: type=1326 audit(1768270962.086:49889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.265578][T24109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.283225][ T29] audit: type=1326 audit(1768270962.086:49890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.315844][ T29] audit: type=1326 audit(1768270962.086:49891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.339706][ T29] audit: type=1326 audit(1768270962.086:49892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24099 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b14ff749 code=0x7ffc0000 [ 303.491220][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4517'. [ 303.506991][T24130] loop7: detected capacity change from 0 to 1024 [ 303.514077][T24130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.530071][T24130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.574644][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4525'. [ 303.609397][T24137] netlink: 'syz.7.4523': attribute type 10 has an invalid length. [ 304.024538][T24129] ================================================================== [ 304.032694][T24129] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 304.042555][T24129] [ 304.044903][T24129] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0: [ 304.052998][T24129] tick_do_update_jiffies64+0x113/0x1c0 [ 304.058594][T24129] tick_nohz_handler+0x8d/0x3d0 [ 304.063490][T24129] __hrtimer_run_queues+0x20f/0x5a0 [ 304.068731][T24129] hrtimer_interrupt+0x21a/0x460 [ 304.073715][T24129] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 304.079652][T24129] sysvec_apic_timer_interrupt+0x6f/0x80 [ 304.085335][T24129] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.091353][T24129] kcsan_setup_watchpoint+0x406/0x420 [ 304.096765][T24129] __tsan_memset+0x1da/0x1f0 [ 304.101399][T24129] mt_find+0x5f/0x330 [ 304.105419][T24129] find_vma+0x6c/0xa0 [ 304.109441][T24129] walk_page_range_mm_unsafe+0x2b7/0x4d0 [ 304.112919][T17158] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 304.115112][T24129] walk_page_range+0x56/0x70 [ 304.115142][T24129] try_to_inc_max_seq+0x79d/0xa60 [ 304.126848][T17158] CPU: 0 UID: 0 PID: 17158 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.126947][T17158] Tainted: [W]=WARN [ 304.126976][T17158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.127061][T17158] Call Trace: [ 304.127083][T17158] [ 304.127107][T17158] __dump_stack+0x1d/0x30 [ 304.127186][T17158] dump_stack_lvl+0x95/0xd0 [ 304.127262][T17158] dump_stack+0x15/0x1b [ 304.127413][T17158] dump_header+0x81/0x240 [ 304.127486][T17158] oom_kill_process+0x295/0x350 [ 304.127592][T17158] out_of_memory+0x97b/0xb80 [ 304.127690][T17158] try_charge_memcg+0x610/0xa10 [ 304.127921][T17158] charge_memcg+0x51/0xc0 [ 304.128020][T17158] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 304.128155][T17158] __read_swap_cache_async+0x17b/0x2d0 [ 304.128318][T17158] swap_cluster_readahead+0x262/0x3c0 [ 304.128438][T17158] swapin_readahead+0xde/0x820 [ 304.128627][T17158] ? __rcu_read_unlock+0x4f/0x70 [ 304.128693][T17158] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 304.128769][T17158] ? __rcu_read_unlock+0x4f/0x70 [ 304.128835][T17158] ? swap_cache_get_folio+0x277/0x280 [ 304.129024][T17158] do_swap_page+0x2b4/0x21e0 [ 304.129126][T17158] ? _raw_spin_unlock+0x26/0x50 [ 304.129279][T17158] ? __schedule+0x85f/0xcd0 [ 304.129371][T17158] ? __pfx_default_wake_function+0x10/0x10 [ 304.129533][T17158] handle_mm_fault+0x9d8/0x2c60 [ 304.129722][T17158] do_user_addr_fault+0x630/0x1080 [ 304.129841][T17158] exc_page_fault+0x62/0xa0 [ 304.129932][T17158] asm_exc_page_fault+0x26/0x30 [ 304.130069][T17158] RIP: 0033:0x7f9ba86e1fc5 [ 304.130132][T17158] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 304.130271][T17158] RSP: 002b:00007fff41186a38 EFLAGS: 00010246 [ 304.130343][T17158] RAX: 0000000000000000 RBX: 00000000000002c3 RCX: 00007f9ba86e1fc3 [ 304.130387][T17158] RDX: 00007fff41186a50 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.130462][T17158] RBP: 00007fff41186abc R08: 000000003a6f76bf R09: 0000000000000000 [ 304.130575][T17158] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 304.130611][T17158] R13: 00000000000927c0 R14: 000000000004a1f3 R15: 00007fff41186b10 [ 304.130772][T17158] [ 304.130815][T17158] memory: usage 307200kB, limit 307200kB, failcnt 853 [ 304.135674][T24129] try_to_shrink_lruvec+0x930/0x950 [ 304.135703][T24129] shrink_lruvec+0x22e/0x1b50 [ 304.135735][T24129] shrink_node+0x66c/0x2010 [ 304.135754][T24129] do_try_to_free_pages+0x3f6/0xcd0 [ 304.135786][T24129] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 304.135823][T24129] try_charge_memcg+0x383/0xa10 [ 304.147501][T17158] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 304.151232][T24129] obj_cgroup_charge_pages+0xa6/0x150 [ 304.161436][T17158] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 304.164667][T24129] __memcg_kmem_charge_page+0x9f/0x170 [ 304.167631][T17158] Memory cgroup stats for [ 304.171964][T24129] __alloc_frozen_pages_noprof+0x18f/0x360 [ 304.176556][T17158] /syz7 [ 304.180632][T24129] alloc_pages_mpol+0xb3/0x260 [ 304.185376][T17158] : [ 304.190175][T24129] alloc_pages_noprof+0x90/0x130 [ 304.208994][T17158] cache 28672 [ 304.210077][T24129] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 304.215757][T17158] rss 4096 [ 304.220942][T24129] __kvmalloc_node_noprof+0x492/0x6b0 [ 304.225773][T17158] shmem 0 [ 304.230672][T24129] ip_set_alloc+0x24/0x30 [ 304.236678][T17158] mapped_file 0 [ 304.241524][T24129] hash_netiface_create+0x282/0x740 [ 304.246940][T17158] dirty 0 [ 304.251495][T24129] ip_set_create+0x3cc/0x970 [ 304.256461][T17158] writeback 4096 [ 304.260871][T24129] nfnetlink_rcv_msg+0x4c6/0x590 [ 304.266744][T17158] workingset_refault_anon 2752 [ 304.271537][T24129] netlink_rcv_skb+0x123/0x220 [ 304.276725][T17158] workingset_refault_file 2 [ 304.281188][T24129] nfnetlink_rcv+0x167/0x16c0 [ 304.286103][T17158] swap 729088 [ 304.290476][T24129] netlink_unicast+0x5c0/0x690 [ 304.310237][T17158] swapcached 4096 [ 304.316258][T24129] netlink_sendmsg+0x58b/0x6b0 [ 304.324271][T17158] pgpgin 104671 [ 304.324283][T17158] pgpgout 104657 [ 304.332283][T24129] __sock_sendmsg+0x145/0x180 [ 304.332311][T24129] ____sys_sendmsg+0x31e/0x4a0 [ 304.340380][T17158] pgfault 90376 [ 304.348305][T24129] ___sys_sendmsg+0x17b/0x1d0 [ 304.348342][T24129] __x64_sys_sendmsg+0xd4/0x160 [ 304.356454][T17158] pgmajfault 471 [ 304.359406][T24129] x64_sys_call+0x17ba/0x3000 [ 304.366299][T17158] inactive_anon 4096 [ 304.371401][T24129] do_syscall_64+0xca/0x2b0 [ 304.376154][T17158] active_anon 0 [ 304.380595][T24129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.385939][T17158] inactive_file 45056 [ 304.391778][T24129] [ 304.391788][T24129] read to 0xffffffff86809a00 of 8 bytes by task 24129 on cpu 1: [ 304.396691][T17158] active_file 8192 [ 304.404529][T24129] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 304.404566][T24129] count_shadow_nodes+0x6a/0x230 [ 304.409940][T17158] unevictable 0 [ 304.417223][T24129] do_shrink_slab+0x63/0x680 [ 304.417250][T24129] shrink_slab+0x4f5/0x840 [ 304.422732][T17158] hierarchical_memory_limit 314572800 [ 304.427185][T24129] shrink_node+0x6a9/0x2010 [ 304.427211][T24129] do_try_to_free_pages+0x3f6/0xcd0 [ 304.433040][T17158] hierarchical_memsw_limit 9223372036854771712 [ 304.435821][T24129] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 304.440624][T17158] total_cache 28672 [ 304.443048][T24129] try_charge_memcg+0x383/0xa10 [ 304.448075][T17158] total_rss 4096 [ 304.451296][T24129] charge_memcg+0x51/0xc0 [ 304.457268][T17158] total_shmem 0 [ 304.460255][T24129] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 304.465740][T17158] total_mapped_file 0 [ 304.468585][T24129] __read_swap_cache_async+0x17b/0x2d0 [ 304.473023][T17158] total_dirty 0 [ 304.476598][T24129] swap_cluster_readahead+0x262/0x3c0 [ 304.476637][T24129] swapin_readahead+0xde/0x820 [ 304.481834][T17158] total_writeback 4096 [ 304.484789][T24129] do_swap_page+0x2b4/0x21e0 [ 304.489407][T17158] total_workingset_refault_anon 2752 [ 304.492963][T24129] handle_mm_fault+0x9d8/0x2c60 [ 304.498070][T17158] total_workingset_refault_file 2 [ 304.502697][T24129] do_user_addr_fault+0x630/0x1080 [ 304.507879][T17158] total_swap 729088 [ 304.512270][T24129] exc_page_fault+0x62/0xa0 [ 304.517031][T17158] total_swapcached 4096 [ 304.520253][T24129] asm_exc_page_fault+0x26/0x30 [ 304.525328][T17158] total_pgpgin 104671 [ 304.528673][T24129] [ 304.528680][T24129] value changed: 0x0000000100000155 -> 0x0000000100000156 [ 304.533442][T17158] total_pgpgout 104657 [ 304.536910][T24129] [ 304.536917][T24129] Reported by Kernel Concurrency Sanitizer on: [ 304.536935][T24129] CPU: 1 UID: 0 PID: 24129 Comm: syz.7.4523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.536972][T24129] Tainted: [W]=WARN [ 304.536981][T24129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.536997][T24129] ================================================================== [ 304.813511][T17158] total_pgfault 90376 [ 304.817587][T17158] total_pgmajfault 471 [ 304.821696][T17158] total_inactive_anon 4096 [ 304.826178][T17158] total_active_anon 0 [ 304.830157][T17158] total_inactive_file 45056 [ 304.834713][T17158] total_active_file 8192 [ 304.838952][T17158] total_unevictable 0 [ 304.842982][T17158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4523,pid=24129,uid=0 [ 304.857869][T17158] Memory cgroup out of memory: Killed process 24129 (syz.7.4523) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 304.931523][T17158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.